Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Published Feb 27, 2020 EPSS 78.8%
Known exploited vulnerabilities
Vulnerabilities CISA has confirmed are being exploited in the wild. These carry remediation deadlines for US federal agencies, and are a reasonable priority order for everyone else.
1533 in the catalogue · showing 1451–1500
A flaw in Microsoft Exchange email servers lets attackers who already have limited access take over the entire system, risking exposure of all company email…
Published Feb 11, 2020 EPSS 100.0% Act now
A flaw in Windows installation software can let someone already on a computer take over the entire machine with full administrative rights
Published Feb 11, 2020 EPSS 7.6% Act now
A flaw in older versions of Internet Explorer lets attackers take control of a computer if someone visits a malicious website
Published Feb 11, 2020 EPSS 86.9% Act now
Certain home routers can be fully taken over by someone who already has the password to the device's settings page
Published Feb 7, 2020 EPSS 28.1% Act now
A widely used remote-access program stored passwords in a way that let anyone who knew a single secret key read them, potentially allowing outsiders to take…
Published Feb 7, 2020 EPSS 4.7% Act now
A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary…
Published Feb 5, 2020 EPSS 11.7%
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without…
Published Feb 1, 2020 EPSS 100.0%
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are…
Published Jan 15, 2020 EPSS 97.1%
A flaw in widely used software lets attackers take complete control of computers over the internet without needing any user action or passwords
Published Jan 14, 2020 EPSS 99.2% Act now
Attackers can read private files stored on certain older surveillance systems by sending specially crafted web requests
Published Dec 30, 2019 EPSS 96.1% Act now
Attackers can break into certain Citrix network devices and take full control, letting them steal data or lock up company systems with ransomware
Published Dec 27, 2019 EPSS 100.0% Act now
Attackers can break into the planning analytics system without a password, take full control as an administrator, and run any commands they want on the server
Published Dec 18, 2019 EPSS 86.4% Act now
Attackers can reach into certain SonicWall network devices and view private information without logging in first
Published Dec 17, 2019 EPSS 99.9% Act now
A web component used by many applications can let attackers take over servers and run ransomware if secret keys are known
Published Dec 11, 2019 EPSS 99.7% Act now
A serious flaw in a network discovery service used by virtual-machine platforms lets attackers seize control of servers without any credentials, and criminals…
Published Dec 6, 2019 EPSS 98.1% Act now
A flaw in an old web browser component lets attackers take over computers simply by getting someone to visit a malicious website
Published Nov 12, 2019 EPSS 77.3% Act now
A flaw in an older security-management product lets attackers who already have login access place files in unexpected locations on the server, which could let…
Published Oct 28, 2019 EPSS 25.1% Act now
A flaw in the core communication layer of many phones and servers lets an already-installed malicious app take complete control of the device without any user…
Published Oct 11, 2019 EPSS 72.1% Act now
Attackers can silently take complete control of websites running older vBulletin forum software, allowing them to steal information or misuse the server…
Published Sep 24, 2019 EPSS 99.7% Act now
A flaw in an old web browser component lets attackers take over computers when people visit harmful websites, and criminals have already used it to lock up…
Published Sep 23, 2019 EPSS 52.4% Act now
Certain older Samsung phones can be secretly controlled or tracked by attackers who simply send a specially crafted text message
Published Sep 12, 2019 EPSS 4.9% Act now
A Windows bug lets someone who already has access to a computer take complete control of it. CVE-2019-1214 is rated high (CVSS 7.8) and is listed in CISA KEV.
Published Sep 11, 2019 EPSS 1.4% Act now
A flaw in Windows lets attackers who already have some access on a computer take full control, which criminals have used to lock up systems with ransomware
Published Sep 11, 2019 EPSS 19.3% Act now
A monitoring tool can be tricked into running attacker-chosen commands with the highest system privileges, letting intruders take over the server if they…
Published Sep 5, 2019 EPSS 77.0% Act now
A flaw in older versions of Citrix StoreFront lets attackers read internal files from the server without logging in, which criminals have already used to steal…
Published Aug 29, 2019 EPSS 30.0% Act now
A flaw in older Docker Desktop on Windows lets someone with ordinary access trick the software into running attacker code that gives them full control of the…
Published Aug 28, 2019 EPSS 48.6% Act now
Attackers can steal important files from certain Fortinet network devices without logging in, which has been used by ransomware gangs
Published Jun 4, 2019 EPSS 100.0% Act now
A settings mistake in Atlassian identity software let outsiders install harmful add-ons and take over the system without passwords
Published Jun 3, 2019 EPSS 95.4% Act now
A flaw in older Citrix remote-access software lets attackers take over computers without any username or password
Published May 22, 2019 EPSS 8.1% Act now
A problem in how Windows records and handles error reports could let someone who already has access to a computer take complete control of it
Published May 16, 2019 EPSS 5.2% Act now
A flaw in how computers handle remote desktop connections lets outsiders take complete control without any password, and criminals have already used it to lock…
Published May 16, 2019 EPSS 100.0% Act now
Attackers could read any file on certain VPN servers without needing a password, and criminals have already used this to break into company networks and…
Published May 8, 2019 EPSS 100.0% Act now
A flaw in the management website of certain remote access products lets attackers who already have admin passwords run any commands they want on the device…
Published Apr 26, 2019 EPSS 98.5% Act now
A flaw in Confluence lets certain users upload files that can run harmful code on the server, potentially giving attackers full control of the system
Published Apr 18, 2019 EPSS 97.0% Act now
A bug in Windows lets attackers who already have some access take full control of the computer and has been used to spread ransomware that locks up systems
Published Apr 9, 2019 EPSS 4.2% Act now
A Windows flaw lets someone who already has limited access on a computer take complete control of it, which criminals have used to install ransomware
Published Apr 9, 2019 EPSS 45.2% Act now
A bug in older Windows versions lets someone who already has limited access on a computer gain complete control of that machine
Published Apr 9, 2019 EPSS 53.0% Act now
A bug in Windows lets someone who already has limited access to a computer take full control of it. CVE-2019-0797 is rated high (CVSS 7.8) and is listed in…
Published Apr 9, 2019 EPSS 1.9% Act now
A flaw in Confluence lets outside attackers take full control of the server without any login, putting company documents and systems at risk of theft or…
Published Mar 25, 2019 EPSS 99.9% Act now
A flaw lets attackers run harmful programs on servers from afar without needing passwords or user clicks, potentially leading to major data theft or ransomware
Published Mar 5, 2019 EPSS 99.9% Act now
A problem in video calling software could let someone start a video call with you and see or hear you without you agreeing to answer
Published Mar 5, 2019 EPSS 2.6% Act now
Attackers can slip harmful files into a service desk tool through its login settings page, potentially allowing them to take over the system or steal private…
Published Feb 17, 2019 EPSS 63.3% Act now
Certain older Cisco routers can leak their entire setup details to anyone who knows the right web addresses, letting outsiders see sensitive network…
Published Jan 24, 2019 EPSS 99.9% Act now
A flaw in older Microsoft web and document software lets attackers run their own programs on a computer simply by getting a user to open a specially made file…
Published Jan 8, 2019 EPSS 53.2% Act now
A flaw in older web browsers can let attackers take over a computer just by getting someone to visit a bad webpage, which is why organizations must stop using…
Published Dec 20, 2018 EPSS 29.6% Act now
Certain older Tenda home and small-office routers can be completely taken over by attackers sending a single specially crafted web request, giving them control…
Published Oct 30, 2018 EPSS 8.5% Act now
A flaw in Adobe ColdFusion lets attackers upload and run any code they want on the server, giving them full control unless the software is updated
Published Sep 25, 2018 EPSS 100.0% Act now
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device…
Published Jun 7, 2018 EPSS 99.9%
Attackers can take over vulnerable ColdFusion web servers over the internet and run any code they want. CVE-2018-4939 is rated critical (CVSS 9.8), is listed…
Published May 19, 2018 EPSS 61.8% Act now