Actively exploited vulnerabilities (CISA KEV)

Windows Kernel Information Disclosure Vulnerability

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

HIGH 8.8

2021-04-26

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

HIGH 8.8

2021-04-26

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a…

HIGH 8.8

2021-04-26

Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Win32k Elevation of Privilege Vulnerability

HIGH 8.8

2021-03-16

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 7.6

2021-03-11

Microsoft Office Remote Code Execution Vulnerability

HIGH 8.8

Microsoft Edge

2021-03-11

Internet Explorer Memory Corruption Vulnerability

HIGH 8.8

2021-03-09

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Windows Win32k Elevation of Privilege Vulnerability

HIGH 8.8

2021-02-09

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Indexed via Android Security Bulletin; full NVD metadata pending.

Windows Kernel Local Elevation of Privilege Vulnerability

Windows Spoofing Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who succe…

HIGH 8.1

2020-04-24

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing thi…

HIGH 8.1

2020-04-24

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abu…

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows …

HIGH 8.8

2020-03-02

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild a…

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Windows Installer Elevation of Privilege Vulnerability

HIGH 8.2

WhatsApp

2020-01-21

A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and l…

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first …

Windows CryptoAPI Spoofing Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP…

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to sys…

Windows Certificate Dialog Elevation of Privilege Vulnerability

Microsoft Windows Elevation of Privilege Vulnerability

Windows Error Reporting Manager Elevation of Privilege Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

HIGH 8.8

2019-09-11

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem…

Windows Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

HIGH 8.8

2019-07-23

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware…

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…

Windows Elevation of Privilege Vulnerability

Microsoft splwow64 Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited …

Windows Elevation of Privilege Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability