Actively exploited vulnerabilities (CISA KEV)

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the w…

Windows Mark of the Web Security Feature Bypass Vulnerability

Microsoft WordPad Information Disclosure Vulnerability

HIGH 8.8

+2

2023-09-28

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap…

HIGH 7.8

2023-09-13

Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerabil…

MEDIUM 6.5

2023-09-12

Microsoft Word Information Disclosure Vulnerability

HIGH 8.8

Android

2023-09-12

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write v…

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

HIGH 8.8

2023-09-05

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s…

HIGH 7.8

WinRAR

2023-08-23

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because …

Windows Search Remote Code Execution Vulnerability

HIGH 8.8

2023-07-11

Microsoft Outlook Security Feature Bypass Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows MSHTML Platform Elevation of Privilege Vulnerability

Microsoft Streaming Service Elevation of Privilege Vulnerability

HIGH 8.8

2023-06-05

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…

Win32k Elevation of Privilege Vulnerability

CRITICAL 9.6

Android

2023-04-19

Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a s…

HIGH 8.8

2023-04-14

Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CRITICAL 9.8

2023-03-14

Microsoft Outlook Elevation of Privilege Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

HIGH 7.8

2023-01-18

Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerabil…

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

HIGH 8.8

2022-12-02

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…

CRITICAL 9.6

2022-11-25

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform …

Windows Scripting Languages Remote Code Execution Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

HIGH 8.8

2022-11-01

Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 9.6

2022-09-26

Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially…

HIGH 8.8

2022-09-26

Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

MEDIUM 6.5

2022-09-26

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a …

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

HIGH 8.8

2022-07-28

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…

HIGH 8.8

2022-07-26

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2022-07-23

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully e…

Windows LSA Spoofing Vulnerability