Known exploited vulnerabilities

A logged-in attacker could use a Windows file-handling flaw to turn a low-privilege account into full control of the computer

A flaw in Windows can let someone who already gets limited access to a computer turn that access into full control of the machine

A flaw in email server software can let a logged-in attacker take control of the server, steal email data, and potentially help launch ransomware

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free…

A long-known flaw lets attackers trick older Microsoft Office programs into running malicious code simply by placing a fake file in the same folder as a…

A flaw in a management service can let attackers break in remotely without a password and take control of the system unless it is patched

A widely attacked flaw in a central endpoint-management product can let outsiders run commands on that server and then tamper with company computers, so any…

A flaw in the TrueConf app update process can let an attacker replace a software update with malicious code and take over affected computers

A malicious web page can let attackers take control of an outdated Chrome browser, so affected browsers should be updated and restarted immediately

A common sign-on gateway can be tricked into leaking secret in-memory data without a password, and attackers are already using that leak to break in and, in…

A flaw in F5 remote access systems can let outsiders take control of affected devices unless they are updated or protected

A popular security scanner and its GitHub automation were replaced with malware that steals passwords and keys from software build systems, so anyone who ran…

A widely attacked flaw in a popular AI workflow tool lets anyone on the network run their own programs on the server, so you should update it right away and…

Apple devices need updating because a malicious app could crash them and may help an attacker gain deeper control of the device

Apple devices that have not been updated could be abused by a malicious app to tamper with device memory and potentially expose or alter sensitive information

Attackers can compromise unpatched Apple devices by getting someone to open specially crafted web content, so affected devices should be updated promptly

Attackers can break into certain Laravel websites running vulnerable Livewire versions without logging in and take control of the server

Attackers can take over vulnerable Craft-powered websites remotely, so affected sites should be upgraded and checked for compromise immediately

Attackers can take complete control of the firewall management system over the network if its management website is exposed and not fixed

Attackers can take control of vulnerable SharePoint servers over the network without needing a password, putting company files and connected systems at risk

A malicious email can compromise users when viewed in Zimbra’s older webmail interface, potentially exposing their email and allowing attackers to act as them

A flaw in older Wing FTP Server versions can reveal where the software is installed on the server, helping attackers plan further attacks

A malicious website can use this browser flaw to run harmful code when someone visits it, so Chrome should be updated and restarted immediately

A malicious web page can abuse an outdated Chrome browser to compromise a user’s device, so Chrome should be updated and restarted promptly

An attacker with a valid n8n account could take over the automation server and use its stored connections to access or disrupt other business systems

Attackers can break into vulnerable endpoint management servers without a password and steal stored credentials that may let them access other systems

Attackers can break into vulnerable SolarWinds help desk servers without a password and use them to steal data, disrupt service, or launch ransomware

Attackers can make a vulnerable device-management server fetch private internal information without logging in, which could expose sensitive data and help them…

Attackers can compromise unpatched Apple devices by getting someone to open a malicious web page, so affected devices should be updated promptly

A malicious app or exploit chain could take full control of an affected device, so impacted systems should be updated promptly

A malicious webpage can take control of an unpatched device, so affected Apple and WebKit-based systems should be updated promptly

A weakness in widely used industrial control software can let an unauthenticated attacker connect to factory controllers and potentially change or disrupt…

Certain older Hikvision security cameras can be taken over by outsiders without any login, allowing unauthorized viewing or control of the video system

Some Qualcomm-powered devices can be taken over by an attacker who already gets a foothold on the device, so affected devices need vendor firmware updates or…

A flaw in VMware’s operations monitoring platform can let an outside attacker take control of the system during certain migration activities, so exposed…

Attackers can take control of vulnerable Cisco SD-WAN control systems without a password and change how company network traffic is routed or disrupted

A logged-in user on affected Cisco SD-WAN systems could take full control of the device, so impacted systems should be updated and closely reviewed for misuse

A flaw in FileZen can let a logged-in attacker run commands on the server and potentially steal files or take over the system

A malicious email can make vulnerable Roundcube webmail run attacker-controlled code in a user’s browser, potentially exposing their mailbox and allowing…

Attackers with a valid webmail login can take over vulnerable Roundcube servers and steal or alter email and server data

Attackers can use a built-in password to remotely take over affected recovery systems and potentially disrupt the organization’s ability to restore operations

An attacker could trick a vulnerable GitLab server into reaching private internal systems and exposing sensitive information

A malicious website can take control of an outdated Chrome browser, so affected browsers should be updated and restarted immediately

A flaw in a security management product can let someone with administrator access upload a malicious file and take control of the server

Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled

Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control…

Attackers can break into vulnerable BeyondTrust remote-access systems without a password and use them as a launch point to take over other systems

Attackers have reportedly used this flaw in targeted attacks to take control of unpatched devices, so affected systems should be updated promptly

Older Notepad++ installations can be tricked into installing a fake update, letting an attacker run programs on a user’s computer

Attackers can break into protected parts of the help desk system without logging in, potentially exposing sensitive support data and enabling unauthorized…