Actively exploited vulnerabilities (CISA KEV)

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfull…

HIGH 8.8

2021-07-02

Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 8.8

2021-06-15

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Windows Print Spooler Remote Code Execution Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

MEDIUM 6.5

2021-06-07

Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafte…

HTTP Protocol Stack Remote Code Execution Vulnerability

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

HIGH 8.8

2021-04-26

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

HIGH 8.8

2021-04-26

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a…

HIGH 8.8

2021-04-26

Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Win32k Elevation of Privilege Vulnerability

HIGH 8.8

2021-03-16

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 7.6

2021-03-11

Microsoft Office Remote Code Execution Vulnerability

HIGH 8.8

Microsoft Edge

2021-03-11

Internet Explorer Memory Corruption Vulnerability

HIGH 8.8

2021-03-09

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Windows Win32k Elevation of Privilege Vulnerability

HIGH 8.8

2021-02-09

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Indexed via Android Security Bulletin; full NVD metadata pending.

Windows Kernel Local Elevation of Privilege Vulnerability

CRITICAL 9.6

Android

2020-11-03

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…

MEDIUM 4.2

Microsoft Edge

2020-09-11

<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way th…

Netlogon Elevation of Privilege Vulnerability

Windows Spoofing Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who succe…

HIGH 8.1

2020-04-24

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing thi…

HIGH 8.1

2020-04-24

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abu…

Windows Kernel Elevation of Privilege Vulnerability

Adobe Font Manager Library Remote Code Execution Vulnerability

Adobe Font Manager Library Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S…

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows …

HIGH 8.8

2020-03-02

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild a…

Indexed via Android Security Bulletin; full NVD metadata pending.

Indexed via Android Security Bulletin; full NVD metadata pending.

Windows Installer Elevation of Privilege Vulnerability

HIGH 8.2

WhatsApp

2020-01-21

A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and l…

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first …

Windows CryptoAPI Spoofing Vulnerability