59.223 CVE tracked
803 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
59.223 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2025-27736 | MED 5.5 | microsoft windows_10_1607 Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an authorized attacker to disclose information locally. | 0.9% | — |
| CVE-2024-42284 | CRIT 9.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can oc | 0.9% | — |
| CVE-2024-3382 | HIGH 7.5 | paloaltonetworks pan-os A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall from processing traffic. This issue applies only to PA-5400 Series devices that ar | 0.9% | — |
| CVE-2024-30326 | HIGH 7.8 | foxit pdf_editor Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in th | 0.9% | — |
| CVE-2023-29344 | HIGH 7.8 | microsoft 365_apps Microsoft Office Remote Code Execution Vulnerability | 0.9% | — |
| CVE-2022-35832 | MED 5.5 | microsoft windows_10 Windows Event Tracing Denial of Service Vulnerability | 0.9% | — |
| CVE-2021-33624 | MED 4.7 | debian debian_linux In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db. | 0.9% | — |
| CVE-2020-0783 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0781. | 0.9% | — |
| CVE-2020-0781 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0783. | 0.9% | — |
| CVE-2020-0641 | HIGH 7.8 | microsoft windows_10 An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerabi | 0.9% | — |
| CVE-2018-15451 | MED 5.4 | cisco prime_service_catalog A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to | 0.9% | — |
| CVE-2018-15423 | MED 4.7 | cisco hyperflex_hx_data_platform A vulnerability in the web UI of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests t | 0.9% | — |
| CVE-2026-72950 | HIGH 8.8 | microsoft windows_10_1607 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 0.9% | — |
| CVE-2026-24307 | CRIT 9.3 | microsoft 365_copilot Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network. | 0.9% | — |
| CVE-2025-20358 | CRIT 9.4 | cisco unified_contact_center_express A vulnerability in the Contact Center Express (CCX) Editor application of Cisco Unified CCX could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative permissions pertaining to script creation and execution. This vuln | 0.9% | — |
| CVE-2024-38216 | HIGH 8.2 | microsoft azure_stack_hub Azure Stack Hub Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2024-36896 | CRIT 9.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in port.c:disable_store(): usb_hub_to_struct_hub() can return NULL if the hub that | 0.9% | — |
| CVE-2023-28507 | CRIT 9.8 | rocketsoftware unidata Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a memory-exhaustion issue, where a decompression routine will allocate increasing amounts of memory until all system me | 0.9% | — |
| CVE-2022-41103 | MED 5.5 | microsoft 365_apps Microsoft Word Information Disclosure Vulnerability | 0.9% | — |
| CVE-2021-43247 | HIGH 7.8 | microsoft windows_10 Windows TCP/IP Driver Elevation of Privilege Vulnerability | 0.9% | — |
| CVE-2020-16876 | HIGH 7.1 | microsoft windows_10 <p>An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.</p> <p>To exploit the | 0.9% | — |
| CVE-2019-6595 | MED 6.1 | f5 big-ip_access_policy_manager Cross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6.x Admin Web UI. | 0.9% | — |
| CVE-2019-5695 | MED 6.5 | nvidia geforce_experience NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs wit | 0.9% | — |
| CVE-2018-15315 | MED 6.1 | f5 big-ip_access_policy_manager On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS) vulnerability in an undisclosed Configuration Utility page. | 0.9% | — |
| CVE-2018-1356 | MED 6.1 | fortinet fortisandbox A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code or commands via the back_url parameter in the file scan component. | 0.9% | — |