Actively exploited vulnerabilities (CISA KEV)

HIGH 8.8

2021-04-26

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a…

HIGH 8.8

2021-04-26

Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Win32k Elevation of Privilege Vulnerability

HIGH 8.8

2021-03-16

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

HIGH 7.6

2021-03-11

Microsoft Office Remote Code Execution Vulnerability

HIGH 8.8

Microsoft Edge

2021-03-11

Internet Explorer Memory Corruption Vulnerability

HIGH 8.8

2021-03-09

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Windows Win32k Elevation of Privilege Vulnerability

HIGH 8.8

2021-02-09

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Windows Kernel Local Elevation of Privilege Vulnerability

CRITICAL 9.6

Android

2020-11-03

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…

MEDIUM 4.2

Microsoft Edge

2020-09-11

<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way th…

Netlogon Elevation of Privilege Vulnerability

Windows Spoofing Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who succe…

HIGH 8.1

2020-04-24

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing thi…

HIGH 8.1

2020-04-24

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abu…

Windows Kernel Elevation of Privilege Vulnerability

Adobe Font Manager Library Remote Code Execution Vulnerability

Adobe Font Manager Library Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S…

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows …

HIGH 8.8

2020-03-02

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild a…

Windows Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first …

Windows CryptoAPI Spoofing Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP…

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to sys…

Windows Certificate Dialog Elevation of Privilege Vulnerability

Microsoft Windows Elevation of Privilege Vulnerability

Windows Error Reporting Manager Elevation of Privilege Vulnerability

HIGH 8.8

2019-09-11

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem…

Windows Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 10.0

2019-07-23

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op…

HIGH 8.8

2019-07-23

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware…

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…

Windows Elevation of Privilege Vulnerability

Microsoft splwow64 Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited …

Windows Elevation of Privilege Vulnerability

GDI+ Remote Code Execution Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Windows Elevation of Privilege Vulnerability