Actively exploited vulnerabilities (CISA KEV)

HIGH 7.0

7-Zip

2025-01-25

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installat…

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Task Scheduler Elevation of Privilege Vulnerability

NTLM Hash Disclosure Spoofing Vulnerability

Microsoft Management Console Remote Code Execution Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

HIGH 7.3

2024-09-10

Microsoft Publisher Security Feature Bypass Vulnerability

Windows Installer Elevation of Privilege Vulnerability

HIGH 8.8

2024-08-21

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Scripting Engine Memory Corruption Vulnerability

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

HIGH 8.8

2024-05-14

Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. …

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

SmartScreen Prompt Security Feature Bypass Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

Internet Shortcut Files Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

HIGH 8.8

2024-01-16

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML …

HIGH 8.8

2023-12-21

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the w…

Windows Mark of the Web Security Feature Bypass Vulnerability

Microsoft WordPad Information Disclosure Vulnerability

HIGH 8.8

+2

2023-09-28

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap…

HIGH 7.8

2023-09-13

Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerabil…

HIGH 8.8

Android

2023-09-12

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write v…

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

HIGH 8.8

2023-09-05

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s…

HIGH 7.8

WinRAR

2023-08-23

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because …

Windows Search Remote Code Execution Vulnerability

HIGH 8.8

2023-07-11

Microsoft Outlook Security Feature Bypass Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows MSHTML Platform Elevation of Privilege Vulnerability

Microsoft Streaming Service Elevation of Privilege Vulnerability

HIGH 8.8

2023-06-05

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…