58.254 CVE tracked
789 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
58.254 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sorted ascending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2023-36724 | MED 5.5 | microsoft windows_10_1507 Windows Power Management Service Information Disclosure Vulnerability | 0.5% | — |
| CVE-2023-36713 | MED 5.5 | microsoft windows_10_1507 Windows Common Log File System Driver Information Disclosure Vulnerability | 8.2% | — |
| CVE-2023-36576 | MED 5.5 | microsoft windows_10_1507 Windows Kernel Information Disclosure Vulnerability | 1.0% | — |
| CVE-2023-36428 | MED 5.5 | microsoft windows_10_1507 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability | 0.8% | — |
| CVE-2023-36406 | MED 5.5 | microsoft windows_11_21h2 Windows Hyper-V Information Disclosure Vulnerability | 0.8% | — |
| CVE-2023-36404 | MED 5.5 | microsoft windows_10_1607 Windows Kernel Information Disclosure Vulnerability | 0.8% | — |
| CVE-2023-36009 | MED 5.5 | microsoft 365_apps Microsoft Word Information Disclosure Vulnerability | 1.2% | — |
| CVE-2023-35635 | MED 5.5 | microsoft windows_11_22h2 Windows Kernel Denial of Service Vulnerability | 1.0% | — |
| CVE-2023-35326 | MED 5.5 | microsoft windows_10_1809 Windows CDP User Components Information Disclosure Vulnerability | 0.5% | — |
| CVE-2023-35324 | MED 5.5 | microsoft windows_10_1507 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 0.5% | — |
| CVE-2023-35306 | MED 5.5 | microsoft windows_10_1507 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 0.5% | — |
| CVE-2023-34256 | MED 5.5 | debian debian_linux An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because th | 0.2% | — |
| CVE-2023-33693 | MED 5.5 | tsingsee easyplayerpro A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service (DoS) via a crafted XML file. | 0.4% | — |
| CVE-2023-3359 | MED 5.5 | linux linux_kernel An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzalloc() can cause the NULL Pointer Dereference. | 0.2% | — |
| CVE-2023-3358 | MED 5.5 | linux linux_kernel A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system. | 0.2% | — |
| CVE-2023-3357 | MED 5.5 | linux linux_kernel A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system. | 0.2% | — |
| CVE-2023-33174 | MED 5.5 | microsoft windows_10_1507 Windows Cryptographic Information Disclosure Vulnerability | 0.7% | — |
| CVE-2023-33162 | MED 5.5 | microsoft 365_apps Microsoft Excel Information Disclosure Vulnerability | 0.8% | — |
| CVE-2023-33139 | MED 5.5 | microsoft visual_studio Visual Studio Information Disclosure Vulnerability | 0.8% | — |
| CVE-2023-3280 | MED 5.5 | paloaltonetworks cortex_xdr_agent A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent. | 0.3% | — |
| CVE-2023-32556 | MED 5.5 | trendmicro apex_one A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitive information. Please note: an attacker must first obtain the ability to execute low-privileged code on the target sy | 0.3% | — |
| CVE-2023-32246 | MED 5.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ksmbd: call rcu_barrier() in ksmbd_server_exit() racy issue is triggered the bug by racing between closing a connection and rmmod. In ksmbd, rcu_barrier() is not called at module unload time | 0.2% | — |
| CVE-2023-3220 | MED 5.5 | linux linux_kernel An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference. | 0.2% | — |
| CVE-2023-32085 | MED 5.5 | microsoft windows_10_1507 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | 0.5% | — |
| CVE-2023-32041 | MED 5.5 | microsoft windows_10_1607 Windows Update Orchestrator Service Information Disclosure Vulnerability | 0.6% | — |