Actively exploited vulnerabilities (CISA KEV)

Indexed via Android Security Bulletin; full NVD metadata pending.

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

HIGH 8.3

2025-03-26

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandb…

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Windows NTFS Information Disclosure Vulnerability

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

Windows NTFS Information Disclosure Vulnerability

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

Windows Storage Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

HIGH 7.0

7-Zip

2025-01-25

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installat…

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 1…

Windows Task Scheduler Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

Microsoft Management Console Remote Code Execution Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

HIGH 7.3

2024-09-10

Microsoft Publisher Security Feature Bypass Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

HIGH 8.8

2024-08-21

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Scripting Engine Memory Corruption Vulnerability

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

Windows MSHTML Platform Spoofing Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

HIGH 8.8

2024-05-14

Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. …

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

SmartScreen Prompt Security Feature Bypass Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey…

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey…

Internet Shortcut Files Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability