Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

9.8

CRITICAL

CVE-2021-24078

Windows DNS Server Remote Code Execution Vulnerability...

Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_server_20h2 windows_server_1909 windows_server_2004 windows_server_2012_r2 windows_server_2008_r2 windows_server_2008_sp2
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-24077

Windows Fax Service Remote Code Execution Vulnerability...

Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +10 more products
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-24076

Microsoft Windows VMSwitch Information Disclosure Vulnerability...

Affected Products : windows_10 windows_8.1 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_1507 windows_10_1803 windows_10_1909 +4 more products
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
6.8

MEDIUM

CVE-2021-24075

Microsoft Windows VMSwitch Denial of Service Vulnerability...

Affected Products : windows_10 windows_server_2016 windows_10_1809 windows_10_20h2 windows_server_20h2 windows_server_2004
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-24074

Windows TCP/IP Remote Code Execution Vulnerability...

Affected Products : windows_10 windows_7 windows_8.1 windows_rt_8.1 windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 +10 more products
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
7.1

HIGH

CVE-2021-24073

Skype for Business and Lync Spoofing Vulnerability...

Affected Products : lync_server skype_for_business_server
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-24072

Microsoft SharePoint Server Remote Code Execution Vulnerability...

Affected Products : sharepoint_enterprise_server sharepoint_foundation sharepoint_server
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-24071

Microsoft SharePoint Information Disclosure Vulnerability...

Affected Products : sharepoint_enterprise_server sharepoint_foundation sharepoint_server
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-24070

Microsoft Excel Remote Code Execution Vulnerability...

Affected Products : office 365_apps office_web_apps excel office_online_server office_web_apps_server
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-24069

Microsoft Excel Remote Code Execution Vulnerability...

Affected Products : office 365_apps office_web_apps excel office_online_server office_web_apps_server
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-24068

Microsoft Excel Remote Code Execution Vulnerability...

Affected Products : office_web_apps excel office_web_apps_server
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-24067

Microsoft Excel Remote Code Execution Vulnerability...

Affected Products : office 365_apps office_web_apps excel office_online_server office_web_apps_server
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-24066

Microsoft SharePoint Remote Code Execution Vulnerability...

Affected Products : sharepoint_enterprise_server sharepoint_foundation sharepoint_server
Published: Feb. 25, 2021

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2021-24046

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0....

Affected Products : stories_rw4003_65582v_48-23_firmware stories_rw4002_601\/71_50-22_firmware stories_rw4005_656013_51-20_firmware stories_rw4005_6563m3_51-20_firmware stories_rw4003_65582v_48-23 stories_rw4002_601\/71_50-22 stories_rw4005_656013_51-20 stories_rw4005_6563m3_51-20
Published: Jan. 14, 2022

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-24045

A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior to v0.10.0. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most Re...

Affected Products : hermes
Published: Dec. 13, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-24044

By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault ...

Affected Products : hermes
Published: Jan. 15, 2022

Modified: Nov. 21, 2024
9.1

CRITICAL

CVE-2021-24043

A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp for iOS v2.21.230.6, WhatsApp Business for iOS 2.21.230.7, and WhatsApp Desktop v2.2145.0 could have allowed an ou...

Affected Products : whatsapp whatsapp_business
Published: Feb. 02, 2022

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-24041

A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image....

Affected Products : whatsapp whatsapp_business
Published: Dec. 07, 2021

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-24040

Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0....

Affected Products : parlai
Published: Sep. 10, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-24038

Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation. This issue affects Oculus Desktop versions after 1.39 and prior to 3...

Affected Products : desktop
Published: Aug. 19, 2021

Modified: Nov. 21, 2024

Showing 20 of 293261 Results

Browse by Apps

Latest CVE Feed

9.8

9.8

5.5

6.8

9.8

7.1

8.8

6.5

7.8

7.8

7.8

7.8

8.8

5.3

9.8

9.8

9.1

9.8

9.8

7.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable