Actively exploited vulnerabilities (CISA KEV)

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

HIGH 7.0

7-Zip

2025-01-25

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installat…

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Task Scheduler Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

CRITICAL 9.8

2024-10-09

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner…

Windows MSHTML Platform Spoofing Vulnerability

Microsoft Management Console Remote Code Execution Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

HIGH 7.3

2024-09-10

Microsoft Publisher Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Installer Elevation of Privilege Vulnerability

CRITICAL 9.6

2024-08-21

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security s…

HIGH 8.8

2024-08-21

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Scripting Engine Memory Corruption Vulnerability

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 9.6

2024-05-28

Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch…

CRITICAL 9.6

2024-05-15

Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chr…

HIGH 8.8

2024-05-14

Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. …

CRITICAL 9.6

2024-05-14

Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a …

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

SmartScreen Prompt Security Feature Bypass Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

CRITICAL 9.8

2024-02-13

Microsoft Outlook Remote Code Execution Vulnerability

Internet Shortcut Files Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

HIGH 8.8

2024-01-16

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …

HIGH 8.8

2023-12-21

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…

CRITICAL 9.6

2023-11-29

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a s…

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability