Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.5

MEDIUM

CVE-2021-28687

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initiali...

Affected Products : xen
EPSS Score: %0.04

Published: Jun. 11, 2021

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-28618

Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of t...

Affected Products : windows animate
EPSS Score: %0.30

Published: Aug. 24, 2021

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-28600

Adobe After Effects version 18.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context ...

Affected Products : windows after_effects
EPSS Score: %0.87

Published: Aug. 24, 2021

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-28438

Windows Console Driver Denial of Service Vulnerability...

Affected Products : windows_10 windows_server_2016 windows_server_2019 windows_10_1809 windows_10_20h2 windows_10_1803 windows_10_1909 windows_server_20h2 windows_server_1909 windows_server_2004
EPSS Score: %0.84

Published: Apr. 13, 2021

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-26372

Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service....

Affected Products : epyc_7f72_firmware epyc_7f52_firmware epyc_7f32_firmware epyc_7742_firmware epyc_7702p_firmware epyc_7702_firmware epyc_7662_firmware epyc_7642_firmware epyc_7552_firmware epyc_7542_firmware +78 more products
EPSS Score: %0.07

Published: May. 11, 2022

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-23210

A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash....

Affected Products : sound_exchange sox
EPSS Score: %0.03

Published: Aug. 25, 2022

Modified: Jun. 27, 2025
5.5

MEDIUM

CVE-2021-22020

The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker to create a denial-of-service condition on vCenter Server....

Affected Products : vcenter_server cloud_foundation
EPSS Score: %0.08

Published: Sep. 23, 2021

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-21218

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file....

Affected Products : fedora debian_linux chrome
EPSS Score: %0.60

Published: Apr. 26, 2021

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-0170

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information d...

Affected Products : killer_ac_1550_firmware killer_wi-fi_6_ax1650_firmware killer_wi-fi_6e_ax1675_firmware proset_ac_3165_firmware proset_ac_3168_firmware proset_ac_8260_firmware proset_ac_8265_firmware proset_ac_9260_firmware proset_ac_9461_firmware proset_ac_9462_firmware +34 more products
EPSS Score: %0.06

Published: Feb. 09, 2022

Modified: May. 05, 2025
5.5

MEDIUM

CVE-2021-0072

Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable information disclosure via local access....

Affected Products : windows killer_ac_1550_firmware killer_wi-fi_6_ax1650_firmware killer_wi-fi_6e_ax1675_firmware proset_ac_3165_firmware proset_ac_3168_firmware proset_ac_8260_firmware proset_ac_8265_firmware proset_ac_9260_firmware proset_ac_9461_firmware +35 more products
EPSS Score: %0.06

Published: Feb. 09, 2022

Modified: May. 05, 2025
5.5

MEDIUM

CVE-2020-9968

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.0 and iPadOS 14.0, macOS Catalina 10.15.7, tvOS 14.0, watchOS 7.0. A malicious application may be able to access restricted files....

Affected Products : macos mac_os_x iphone_os tvos watchos ipados
EPSS Score: %0.20

Published: Oct. 16, 2020

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2020-9934

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information....

Affected Products : macos mac_os_x iphone_os ipados
Actively Exploited

EPSS Score: %1.53

Published: Oct. 16, 2020

Modified: Feb. 28, 2025
5.5

MEDIUM

CVE-2020-9608

Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.30166 and earlier, and 2015.006.30518 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure....

Affected Products : acrobat_dc acrobat_reader_dc macos windows
EPSS Score: %1.91

Published: Jun. 25, 2020

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and Imag...

Affected Products : primavera_unifier webcenter_portal flexcube_private_banking communications_messaging_server tika
EPSS Score: %0.41

Published: Apr. 27, 2020

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2022-38026

Windows DHCP Client Information Disclosure Vulnerability...

Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +11 more products
EPSS Score: %0.20

Published: Oct. 11, 2022

Modified: Jan. 02, 2025
5.5

MEDIUM

CVE-2022-38025

Windows Distributed File System (DFS) Information Disclosure Vulnerability...

Affected Products : windows_server_2022 windows_11_21h2 windows_11_22h2 windows_11
EPSS Score: %0.40

Published: Oct. 11, 2022

Modified: Jan. 02, 2025
5.5

MEDIUM

CVE-2020-3914

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. An application may be able to read restricted memory....

Affected Products : macos mac_os_x iphone_os tvos watchos ipados
EPSS Score: %0.30

Published: Apr. 01, 2020

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2020-27946

An information disclosure issue was addressed with improved state management. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a mal...

Affected Products : macos mac_os_x iphone_os tvos watchos ipados
EPSS Score: %0.32

Published: Apr. 02, 2021

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2020-27898

A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1. An attacker may be able to bypass Managed Frame Protection....

Affected Products : macos
EPSS Score: %0.16

Published: Dec. 08, 2020

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2020-27819

An issue was discovered in libxls before and including 1.6.1 when reading Microsoft Excel files. A NULL pointer dereference vulnerability exists when parsing XLS cells in libxls/xls2csv.c:199. It could allow a remote attacker to cause a denial of service ...

Affected Products : libxls
EPSS Score: %0.27

Published: Feb. 23, 2021

Modified: Nov. 21, 2024

Showing 20 of 291617 Results

Latest CVE Feed

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

5.5

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable