Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Endpoints, servers and mobile

Endpoints, servers and mobile

Operating systems

Windows, Linux, macOS and their system components, on workstations and servers alike.

For example: Windows, noyau Linux, macOS, Red Hat.

Category RSS feed

Pace of additions

Number of “Operating systems” vulnerabilities added to CISA’s KEV catalog, per 30-day period (the last one, still in progress, ends on September 28, 2026). Source: CISA KEV catalog.
Catalog additions per 30-day period
PeriodVulnerabilities added
Sep 4, 2025 to Oct 3, 20253
Oct 4, 2025 to Nov 2, 20259
Nov 3, 2025 to Dec 2, 20251
Dec 3, 2025 to Jan 1, 20261
Jan 2, 2026 to Jan 31, 20263
Feb 1, 2026 to Mar 2, 20266
Mar 3, 2026 to Apr 1, 20260
Apr 2, 2026 to May 1, 20264
May 2, 2026 to May 31, 20262
Jun 1, 2026 to Jun 30, 20261
Jul 1, 2026 to Jul 30, 20260
Jul 31, 2026 to Aug 29, 20267
Aug 30, 2026 to Sep 28, 2026 (in progress)5

Affected brands

In alphabetical order, with their number of vulnerabilities in this category.

  • Apple 8 vulnerabilities · 1 in the last 12 months
  • GNU 5 vulnerabilities · 2 in the last 12 months
  • IGEL 1 vulnerability · 1 in the last 12 months
  • Linux 31 vulnerabilities · 9 in the last 12 months
  • Microsoft 232 vulnerabilities · 25 in the last 12 months
  • Oracle 2 vulnerabilities
  • Red Hat 4 vulnerabilities · 2 in the last 12 months
  • Samba 1 vulnerability
  • Sudo 2 vulnerabilities · 1 in the last 12 months

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

See also

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this category.

  1. Rank 1Linux Kernel

    CVE-2025-39682

    Recently addedHunt for compromise (CISA)

    Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 18, 2026
    CISA deadline
    3 days
    CVSS severity
    9.8 (critical)

  2. Rank 2Linux Kernel

    CVE-2026-53266

    Recently addedHunt for compromise (CISA)

    Linux Kernel Out-of-Bounds Write Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 18, 2026
    CISA deadline
    3 days
    CVSS severity
    8.8 (high)

  3. Rank 3Linux Kernel

    CVE-2025-39964

    Recently addedHunt for compromise (CISA)

    Linux Kernel Race Condition Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 18, 2026
    CISA deadline
    3 days
    CVSS severity
    5.5 (medium)

  4. Rank 4Microsoft Windows

    CVE-2026-81963

    Recently added

    Microsoft Windows Link Following Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 8, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  5. Rank 5Microsoft Windows

    CVE-2026-85880

    Recently added

    Microsoft Windows Heap-Based Buffer Overflow Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 8, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  6. Rank 6Microsoft Windows

    CVE-2026-33824

    Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 18, 2026
    CISA deadline
    3 days
    CVSS severity
    9.8 (critical)

  7. Rank 7Apple macOS (OS X)

    CVE-2026-65400

    Hunt for compromise (CISA)

    Apple macOS Improper Authentication Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 18, 2026
    CISA deadline
    3 days
    CVSS severity
    9.8 (critical)

  8. Rank 8Microsoft Windows

    CVE-2008-4250

    CVE from 2008, added in 2026

    Microsoft Windows Buffer Overflow Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    May 20, 2026
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  9. Rank 9GNU InetUtils

    CVE-2026-24061

    GNU InetUtils Argument Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jan 26, 2026
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  10. Rank 10Microsoft Windows

    CVE-2025-59287

    Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 24, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)
Show 274 more vulnerabilities

  1. Rank 11Microsoft Windows

    CVE-2009-1537

    CVE from 2009, added in 2026

    Microsoft DirectX NULL Byte Overwrite Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    May 20, 2026
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  2. Rank 12Microsoft Windows

    CVE-2008-0015

    CVE from 2008, added in 2026

    Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 17, 2026
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  3. Rank 13Microsoft Windows

    CVE-2026-21510

    Microsoft Windows Shell Protection Mechanism Failure Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 10, 2026
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  4. Rank 14Microsoft Windows

    CVE-2026-21513

    Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 10, 2026
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  5. Rank 15Microsoft Windows

    CVE-2025-33073

    Microsoft Windows SMB Client Improper Access Control Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 20, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  6. Rank 16Microsoft Windows

    CVE-2011-3402

    CVE from 2011, added in 2025

    Microsoft Windows Remote Code Execution Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 6, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  7. Rank 17Microsoft Windows

    CVE-2013-3918

    CVE from 2013, added in 2025

    Microsoft Windows Out-of-Bounds Write Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 6, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  8. Rank 18GNU Bash

    CVE-2014-6278

    CVE from 2014, added in 2025

    GNU Bash OS Command Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 2, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  9. Rank 19Linux Kernel

    CVE-2026-53362

    Hunt for compromise (CISA)

    Linux Kernel Unspecified Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 27, 2026
    CISA deadline
    3 days
    CVSS severity
    7.8 (high)

  10. Rank 20Red Hat ABRT (Automatic Bug Reporting Tool)

    CVE-2015-5287

    CVE from 2015, added in 2026

    Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 26, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  11. Rank 21Linux Kernel

    CVE-2022-0995

    CVE from 2022, added in 2026

    Linux Kernel Out-of-Bounds Write Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 26, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  12. Rank 22Linux Kernel

    CVE-2022-0492

    CVE from 2022, added in 2026

    Linux Kernel Improper Authentication Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jun 2, 2026
    CISA deadline
    3 days
    CVSS severity
    7.8 (high)

  13. Rank 23Linux Kernel

    CVE-2026-31431

    Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    May 1, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  14. Rank 24Microsoft Windows

    CVE-2023-36424

    CVE from 2023, added in 2026

    Microsoft Windows Out-of-Bounds Read Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Apr 13, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  15. Rank 25Microsoft Windows

    CVE-2025-60710

    Ransomware

    Microsoft Windows Link Following Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Apr 13, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  16. Rank 26Microsoft Windows

    CVE-2026-21519

    Microsoft Windows Type Confusion Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 10, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  17. Rank 27Microsoft Windows

    CVE-2026-21533

    Microsoft Windows Improper Privilege Management Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 10, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  18. Rank 28Linux Kernel

    CVE-2018-14634

    CVE from 2018, added in 2026

    Linux Kernel Integer Overflow Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jan 26, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  19. Rank 29Microsoft Windows

    CVE-2025-62221

    Microsoft Windows Use After Free Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Dec 9, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  20. Rank 30Microsoft Windows

    CVE-2025-24990

    Microsoft Windows Untrusted Pointer Dereference Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 14, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  21. Rank 31Microsoft Windows

    CVE-2025-59230

    Microsoft Windows Improper Access Control Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 14, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  22. Rank 32Linux Kernel

    CVE-2021-22555

    CVE from 2021, added in 2025

    Linux Kernel Heap Out-of-Bounds Write Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 6, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  23. Rank 33Microsoft Windows

    CVE-2021-43226

    RansomwareCVE from 2021, added in 2025

    Microsoft Windows Privilege Escalation Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 6, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  24. Rank 34Sudo

    CVE-2025-32463

    Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Sep 29, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  25. Rank 35Microsoft Windows

    CVE-2026-68820

    Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 11, 2026
    CISA deadline
    14 days
    CVSS severity
    7.0 (high)

  26. Rank 36Microsoft Windows

    CVE-2025-62215

    Microsoft Windows Race Condition Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Nov 12, 2025
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  27. Rank 37Microsoft Windows

    CVE-2026-21525

    Microsoft Windows NULL Pointer Dereference Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 10, 2026
    CISA deadline
    21 days
    CVSS severity
    6.2 (medium)

  28. Rank 38Microsoft Windows

    CVE-2026-20805

    Microsoft Windows Information Disclosure Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jan 13, 2026
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  29. Rank 39Red Hat libuser

    CVE-2015-3246

    CVE from 2015, added in 2026

    Red Hat Libuser Race Condition Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 26, 2026
    CISA deadline
    14 days
    CVSS severity
    5.1 (medium)

  30. Rank 40IGEL OS

    CVE-2025-47827

    IGEL OS Use of a Key Past its Expiration Date Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 14, 2025
    CISA deadline
    21 days
    CVSS severity
    4.6 (medium)

  31. Rank 41Microsoft Windows

    CVE-2026-32202

    Microsoft Windows Protection Mechanism Failure Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Apr 28, 2026
    CISA deadline
    14 days
    CVSS severity
    4.3 (medium)

  32. Rank 42Microsoft Windows

    CVE-2020-0796

    RansomwareCVE from 2020, added in 2022

    Microsoft SMBv3 Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 10, 2022
    CISA deadline
    181 days
    CVSS severity
    10.0 (critical)

  33. Rank 43Microsoft Windows

    CVE-2020-1350

    Microsoft Windows DNS Server Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    10.0 (critical)

  34. Rank 44Oracle Solaris

    CVE-2020-14871

    Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    10.0 (critical)

  35. Rank 45Samba

    CVE-2017-7494

    RansomwareCVE from 2017, added in 2023

    Samba Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 30, 2023
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  36. Rank 46Microsoft Windows

    CVE-2017-8543

    CVE from 2017, added in 2022

    Microsoft Windows Search Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  37. Rank 47Microsoft Windows

    CVE-2021-31166

    Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 6, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  38. Rank 48Microsoft Windows

    CVE-2015-1635

    CVE from 2015, added in 2022

    Microsoft HTTP.sys Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 10, 2022
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  39. Rank 49GNU Bash

    CVE-2014-6271

    CVE from 2014, added in 2022

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 28, 2022
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  40. Rank 50GNU Bash

    CVE-2014-7169

    CVE from 2014, added in 2022

    GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 28, 2022
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  41. Rank 51Microsoft Windows

    CVE-2019-0708

    RansomwareCVE from 2019, added in 2021

    Microsoft Remote Desktop Services Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  42. Rank 52Microsoft Windows

    CVE-2025-33053

    Microsoft Windows External Control of File Name or Path Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 10, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  43. Rank 53Microsoft Windows

    CVE-2024-49039

    Ransomware

    Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 12, 2024
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  44. Rank 54Microsoft Windows

    CVE-2024-43461

    Microsoft Windows MSHTML Platform Spoofing Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 16, 2024
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  45. Rank 55Microsoft Windows

    CVE-2018-0824

    CVE from 2018, added in 2024

    Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 5, 2024
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  46. Rank 56Microsoft Windows

    CVE-2024-30040

    Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 14, 2024
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  47. Rank 57Microsoft Windows

    CVE-2024-29988

    Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 30, 2024
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  48. Rank 58Microsoft Windows

    CVE-2023-36025

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 14, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  49. Rank 59Microsoft Windows

    CVE-2023-32049

    Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 11, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  50. Rank 60Microsoft Windows

    CVE-2023-21674

    Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 10, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  51. Rank 61Microsoft Windows

    CVE-2022-41128

    Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 8, 2022
    CISA deadline
    31 days
    CVSS severity
    8.8 (high)

  52. Rank 62Linux Kernel

    CVE-2013-6282

    CVE from 2013, added in 2022

    Linux Kernel Improper Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 15, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  53. Rank 63Microsoft Windows

    CVE-2012-1889

    CVE from 2012, added in 2022

    Microsoft XML Core Services Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  54. Rank 64Microsoft Windows

    CVE-2014-4148

    CVE from 2014, added in 2022

    Microsoft Windows Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  55. Rank 65Microsoft Windows

    CVE-2015-2360

    CVE from 2015, added in 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  56. Rank 66Microsoft Windows

    CVE-2016-7256

    CVE from 2016, added in 2022

    Microsoft Windows Open Type Font Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  57. Rank 67Oracle Solaris

    CVE-2019-3010

    CVE from 2019, added in 2022

    Oracle Solaris Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  58. Rank 68Microsoft Windows

    CVE-2015-2426

    CVE from 2015, added in 2022

    Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  59. Rank 69Microsoft Windows

    CVE-2014-6332

    CVE from 2014, added in 2022

    Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  60. Rank 70Microsoft Windows

    CVE-2017-0146

    RansomwareCVE from 2017, added in 2022

    Microsoft Windows SMB Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  61. Rank 71Microsoft Windows

    CVE-2018-8414

    CVE from 2018, added in 2022

    Microsoft Windows Shell Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  62. Rank 72Microsoft Windows

    CVE-2019-0903

    CVE from 2019, added in 2022

    Microsoft GDI Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  63. Rank 73Microsoft Windows

    CVE-2017-0144

    RansomwareCVE from 2017, added in 2022

    Microsoft SMBv1 Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 10, 2022
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  64. Rank 74Microsoft Windows

    CVE-2017-0145

    RansomwareCVE from 2017, added in 2022

    Microsoft SMBv1 Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 10, 2022
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  65. Rank 75Microsoft Windows

    CVE-2017-8464

    CVE from 2017, added in 2022

    Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 10, 2022
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  66. Rank 76Microsoft Windows

    CVE-2013-3900

    CVE from 2013, added in 2022

    Microsoft WinVerifyTrust function Remote Code Execution

    Added more than a year ago: ranked by severity.

    Added
    Jan 10, 2022
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  67. Rank 77Microsoft Windows

    CVE-2014-1812

    RansomwareCVE from 2014, added in 2021

    Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  68. Rank 78Microsoft Windows

    CVE-2017-0143

    RansomwareCVE from 2017, added in 2021

    Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  69. Rank 79Microsoft Windows

    CVE-2020-1020

    Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  70. Rank 80Microsoft Windows

    CVE-2021-33742

    Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  71. Rank 81Microsoft Windows

    CVE-2021-34448

    Microsoft Windows Scripting Engine Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  72. Rank 82Microsoft Windows

    CVE-2021-34527

    Ransomware

    Microsoft Windows Print Spooler Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  73. Rank 83Linux Kernel

    CVE-2022-0185

    CVE from 2022, added in 2024

    Linux Kernel Heap-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 21, 2024
    CISA deadline
    21 days
    CVSS severity
    8.4 (high)

  74. Rank 84Microsoft Windows

    CVE-2023-29360

    Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 29, 2024
    CISA deadline
    21 days
    CVSS severity
    8.4 (high)

  75. Rank 85Linux Kernel

    CVE-2013-2094

    CVE from 2013, added in 2022

    Linux Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 15, 2022
    CISA deadline
    21 days
    CVSS severity
    8.4 (high)

  76. Rank 86Microsoft Windows

    CVE-2015-2546

    RansomwareCVE from 2015, added in 2022

    Microsoft Win32k Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    8.2 (high)

  77. Rank 87Microsoft Windows

    CVE-2024-43573

    Microsoft Windows MSHTML Platform Spoofing Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 8, 2024
    CISA deadline
    21 days
    CVSS severity
    8.1 (high)

  78. Rank 88Microsoft Windows

    CVE-2024-21412

    Ransomware

    Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 13, 2024
    CISA deadline
    21 days
    CVSS severity
    8.1 (high)

  79. Rank 89Microsoft Windows

    CVE-2017-0148

    RansomwareCVE from 2017, added in 2022

    Microsoft SMBv1 Server Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 6, 2022
    CISA deadline
    21 days
    CVSS severity
    8.1 (high)

  80. Rank 90Microsoft Windows

    CVE-2020-0601

    Microsoft Windows CryptoAPI Spoofing Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.1 (high)

  81. Rank 91Linux Kernel

    CVE-2025-38352

    Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 4, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  82. Rank 92Linux Kernel

    CVE-2023-0386

    CVE from 2023, added in 2025

    Linux Kernel Improper Ownership Management Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 17, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  83. Rank 93Microsoft Windows

    CVE-2025-30400

    Microsoft Windows DWM Core Library Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 13, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  84. Rank 94Microsoft Windows

    CVE-2025-32701

    Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 13, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  85. Rank 95Microsoft Windows

    CVE-2025-32706

    Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 13, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  86. Rank 96Microsoft Windows

    CVE-2025-32709

    Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 13, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  87. Rank 97Linux Kernel

    CVE-2024-53197

    Linux Kernel Out-of-Bounds Access Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 9, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  88. Rank 98Microsoft Windows

    CVE-2025-29824

    Ransomware

    Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 8, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  89. Rank 99Microsoft Windows

    CVE-2025-24985

    Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 11, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  90. Rank 100Microsoft Windows

    CVE-2025-24993

    Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 11, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  91. Rank 101Microsoft Windows

    CVE-2018-8639

    RansomwareCVE from 2018, added in 2025

    Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  92. Rank 102Microsoft Windows

    CVE-2025-21418

    Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 11, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  93. Rank 103Linux Kernel

    CVE-2024-53104

    Linux Kernel Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 5, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  94. Rank 104Microsoft Windows

    CVE-2025-21333

    Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 14, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  95. Rank 105Microsoft Windows

    CVE-2025-21334

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 14, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  96. Rank 106Microsoft Windows

    CVE-2025-21335

    Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 14, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  97. Rank 107Microsoft Windows

    CVE-2024-35250

    Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 16, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  98. Rank 108Microsoft Windows

    CVE-2024-49138

    Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 10, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  99. Rank 109Microsoft Windows

    CVE-2024-43572

    Microsoft Windows Management Console Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 8, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  100. Rank 110Microsoft Windows

    CVE-2024-38014

    Microsoft Windows Installer Improper Privilege Management Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 10, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  101. Rank 111Linux Kernel

    CVE-2017-1000253

    RansomwareCVE from 2017, added in 2024

    Linux Kernel PIE Stack Buffer Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 9, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  102. Rank 112Microsoft Windows

    CVE-2024-38107

    Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 13, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  103. Rank 113Microsoft Windows

    CVE-2024-38193

    Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 13, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  104. Rank 114Microsoft Windows

    CVE-2024-38080

    Microsoft Windows Hyper-V Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 9, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  105. Rank 115Linux Kernel

    CVE-2022-2586

    CVE from 2022, added in 2024

    Linux Kernel Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 26, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  106. Rank 116Microsoft Windows

    CVE-2024-26169

    Ransomware

    Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 13, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  107. Rank 117Linux Kernel

    CVE-2024-1086

    Ransomware

    Linux Kernel Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 30, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  108. Rank 118Microsoft Windows

    CVE-2024-30051

    Ransomware

    Microsoft DWM Core Library Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 14, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  109. Rank 119Microsoft Windows

    CVE-2022-38028

    CVE from 2022, added in 2024

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 23, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  110. Rank 120Microsoft Windows

    CVE-2024-21338

    Ransomware

    Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 4, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  111. Rank 121GNU C Library (glibc)

    CVE-2023-4911

    GNU C Library Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 21, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  112. Rank 122Microsoft Windows

    CVE-2023-36033

    Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 14, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  113. Rank 123Microsoft Windows

    CVE-2023-36036

    Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 14, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  114. Rank 124Microsoft Windows

    CVE-2023-36802

    Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 12, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  115. Rank 125Microsoft Windows

    CVE-2023-32046

    Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 11, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  116. Rank 126Microsoft Windows

    CVE-2023-36874

    Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 11, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  117. Rank 127Microsoft Windows

    CVE-2016-0165

    CVE from 2016, added in 2023

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 22, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  118. Rank 128Red Hat Polkit

    CVE-2021-3560

    CVE from 2021, added in 2023

    Red Hat Polkit Incorrect Authorization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 12, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  119. Rank 129Microsoft Windows

    CVE-2023-29336

    Microsoft Win32K Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 9, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  120. Rank 130Apple macOS (OS X)

    CVE-2019-8526

    CVE from 2019, added in 2023

    Apple macOS Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 17, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  121. Rank 131Microsoft Windows

    CVE-2023-28252

    Ransomware

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 11, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  122. Rank 132Microsoft Windows

    CVE-2019-1388

    RansomwareCVE from 2019, added in 2023

    Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 7, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  123. Rank 133Microsoft Windows

    CVE-2023-21823

    Microsoft Windows Graphic Component Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 14, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  124. Rank 134Microsoft Windows

    CVE-2023-23376

    Ransomware

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 14, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  125. Rank 135Microsoft Windows

    CVE-2022-41073

    Ransomware

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 8, 2022
    CISA deadline
    31 days
    CVSS severity
    7.8 (high)

  126. Rank 136Microsoft Windows

    CVE-2022-41125

    Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 8, 2022
    CISA deadline
    31 days
    CVSS severity
    7.8 (high)

  127. Rank 137Linux Kernel

    CVE-2021-3493

    Linux Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 20, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  128. Rank 138Microsoft Windows

    CVE-2022-41033

    Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 11, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  129. Rank 139Microsoft Windows

    CVE-2010-2568

    CVE from 2010, added in 2022

    Microsoft Windows Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  130. Rank 140Linux Kernel

    CVE-2013-2596

    CVE from 2013, added in 2022

    Linux Kernel Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  131. Rank 141Microsoft Windows

    CVE-2022-37969

    Ransomware

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 14, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  132. Rank 142Microsoft Windows

    CVE-2022-21971

    Microsoft Windows Runtime Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 18, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  133. Rank 143Microsoft Windows

    CVE-2022-34713

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 9, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  134. Rank 144Microsoft Windows

    CVE-2022-22047

    Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 12, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  135. Rank 145Red Hat Polkit

    CVE-2021-4034

    Ransomware

    Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 27, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  136. Rank 146Microsoft Windows

    CVE-2022-30190

    Ransomware

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 14, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  137. Rank 147Microsoft Windows

    CVE-2012-0151

    CVE from 2012, added in 2022

    Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  138. Rank 148Linux Kernel

    CVE-2014-3153

    CVE from 2014, added in 2022

    Linux Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  139. Rank 149Microsoft Windows

    CVE-2014-4077

    CVE from 2014, added in 2022

    Microsoft IME Japanese Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  140. Rank 150Microsoft Windows

    CVE-2015-0016

    CVE from 2015, added in 2022

    Microsoft Windows TS WebProxy Directory Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  141. Rank 151Microsoft Windows

    CVE-2015-1671

    CVE from 2015, added in 2022

    Microsoft Windows Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  142. Rank 152Microsoft Windows

    CVE-2015-6175

    CVE from 2015, added in 2022

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  143. Rank 153Microsoft Windows

    CVE-2016-3393

    CVE from 2016, added in 2022

    Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  144. Rank 154Microsoft Windows

    CVE-2017-0005

    CVE from 2017, added in 2022

    Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  145. Rank 155Microsoft Windows

    CVE-2018-8611

    CVE from 2018, added in 2022

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  146. Rank 156Microsoft Windows

    CVE-2018-8589

    CVE from 2018, added in 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  147. Rank 157Microsoft Windows

    CVE-2019-0880

    CVE from 2019, added in 2022

    Microsoft Windows Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  148. Rank 158Microsoft Windows

    CVE-2019-1130

    RansomwareCVE from 2019, added in 2022

    Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  149. Rank 159Microsoft Windows

    CVE-2019-1385

    RansomwareCVE from 2019, added in 2022

    Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  150. Rank 160Microsoft Windows

    CVE-2020-0638

    RansomwareCVE from 2020, added in 2022

    Microsoft Update Notification Manager Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  151. Rank 161Microsoft Windows

    CVE-2020-1027

    CVE from 2020, added in 2022

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  152. Rank 162Microsoft Windows

    CVE-2014-4113

    CVE from 2014, added in 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 4, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  153. Rank 163Microsoft Windows

    CVE-2021-40450

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  154. Rank 164Microsoft Windows

    CVE-2021-41357

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  155. Rank 165Linux Kernel

    CVE-2022-0847

    Linux Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  156. Rank 166Microsoft Windows

    CVE-2022-22718

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 19, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  157. Rank 167Microsoft Windows

    CVE-2022-24521

    Ransomware

    Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 13, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  158. Rank 168Sudo

    CVE-2021-3156

    Sudo Heap-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 6, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  159. Rank 169Apple macOS (OS X)

    CVE-2022-22675

    Apple macOS Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 4, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  160. Rank 170Microsoft Windows

    CVE-2021-34484

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 31, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  161. Rank 171Microsoft Windows

    CVE-2010-4398

    CVE from 2010, added in 2022

    Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    24 days
    CVSS severity
    7.8 (high)

  162. Rank 172Microsoft Windows

    CVE-2011-2005

    CVE from 2011, added in 2022

    Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  163. Rank 173Microsoft Windows

    CVE-2013-3660

    CVE from 2013, added in 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  164. Rank 174Microsoft Windows

    CVE-2016-0040

    CVE from 2016, added in 2022

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  165. Rank 175Microsoft Windows

    CVE-2016-0151

    RansomwareCVE from 2016, added in 2022

    Microsoft Windows CSRSS Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  166. Rank 176Microsoft Windows

    CVE-2018-8405

    RansomwareCVE from 2018, added in 2022

    Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  167. Rank 177Microsoft Windows

    CVE-2018-8406

    RansomwareCVE from 2018, added in 2022

    Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  168. Rank 178Microsoft Windows

    CVE-2018-8440

    RansomwareCVE from 2018, added in 2022

    Microsoft Windows Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  169. Rank 179Microsoft Windows

    CVE-2021-34486

    Microsoft Windows Event Tracing Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  170. Rank 180Microsoft Windows

    CVE-2022-21999

    Ransomware

    Microsoft Windows Print Spooler Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  171. Rank 181Microsoft Windows

    CVE-2016-3309

    RansomwareCVE from 2016, added in 2022

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  172. Rank 182Microsoft Windows

    CVE-2017-0101

    RansomwareCVE from 2017, added in 2022

    Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  173. Rank 183Microsoft Windows

    CVE-2019-0543

    RansomwareCVE from 2019, added in 2022

    Microsoft Windows Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  174. Rank 184Microsoft Windows

    CVE-2019-0841

    RansomwareCVE from 2019, added in 2022

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  175. Rank 185Microsoft Windows

    CVE-2019-1064

    RansomwareCVE from 2019, added in 2022

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  176. Rank 186Microsoft Windows

    CVE-2019-1069

    RansomwareCVE from 2019, added in 2022

    Microsoft Task Scheduler Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  177. Rank 187Microsoft Windows

    CVE-2019-1129

    RansomwareCVE from 2019, added in 2022

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  178. Rank 188Microsoft Windows

    CVE-2019-1132

    CVE from 2019, added in 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  179. Rank 189Microsoft Windows

    CVE-2019-1253

    RansomwareCVE from 2019, added in 2022

    Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  180. Rank 190Microsoft Windows

    CVE-2019-1315

    RansomwareCVE from 2019, added in 2022

    Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  181. Rank 191Microsoft Windows

    CVE-2019-1322

    RansomwareCVE from 2019, added in 2022

    Microsoft Windows Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  182. Rank 192Microsoft Windows

    CVE-2019-1405

    RansomwareCVE from 2019, added in 2022

    Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  183. Rank 193Microsoft Windows

    CVE-2002-0367

    CVE from 2002, added in 2022

    Microsoft Windows Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  184. Rank 194Microsoft Windows

    CVE-2004-0210

    CVE from 2004, added in 2022

    Microsoft Windows Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  185. Rank 195Microsoft Windows

    CVE-2009-1123

    CVE from 2009, added in 2022

    Microsoft Windows Improper Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  186. Rank 196Microsoft Windows

    CVE-2010-0232

    CVE from 2010, added in 2022

    Microsoft Windows Kernel Exception Handler Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  187. Rank 197Microsoft Windows

    CVE-2013-5065

    CVE from 2013, added in 2022

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  188. Rank 198Microsoft Windows

    CVE-2014-4114

    CVE from 2014, added in 2022

    Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  189. Rank 199Microsoft Windows

    CVE-2015-1701

    RansomwareCVE from 2015, added in 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  190. Rank 200Microsoft Windows

    CVE-2015-2387

    CVE from 2015, added in 2022

    Microsoft ATM Font Driver Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  191. Rank 201Microsoft Windows

    CVE-2016-0099

    RansomwareCVE from 2016, added in 2022

    Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  192. Rank 202Microsoft Windows

    CVE-2017-0001

    CVE from 2017, added in 2022

    Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  193. Rank 203Microsoft Windows

    CVE-2021-41379

    Ransomware

    Microsoft Windows Installer Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  194. Rank 204Microsoft Windows

    CVE-2014-6352

    CVE from 2014, added in 2022

    Microsoft Windows Code Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 25, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  195. Rank 205Microsoft Windows

    CVE-2013-3906

    CVE from 2013, added in 2022

    Microsoft Graphics Component Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 15, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  196. Rank 206Apple macOS (OS X)

    CVE-2014-4404

    CVE from 2014, added in 2022

    Apple OS X Heap-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 10, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  197. Rank 207Apple macOS (OS X)

    CVE-2015-1130

    CVE from 2015, added in 2022

    Apple OS X Authentication Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 10, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  198. Rank 208Microsoft Windows

    CVE-2017-0263

    CVE from 2017, added in 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 10, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  199. Rank 209Microsoft Windows

    CVE-2021-36934

    Microsoft Windows SAM Local Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 10, 2022
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  200. Rank 210Microsoft Windows

    CVE-2022-21882

    Ransomware

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 4, 2022
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  201. Rank 211Microsoft Windows

    CVE-2020-0787

    RansomwareCVE from 2020, added in 2022

    Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 28, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  202. Rank 212Microsoft Windows

    CVE-2018-8453

    RansomwareCVE from 2018, added in 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 21, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  203. Rank 213Microsoft Windows

    CVE-2019-1458

    RansomwareCVE from 2019, added in 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 10, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  204. Rank 214Linux Kernel

    CVE-2019-13272

    CVE from 2019, added in 2021

    Linux Kernel Improper Privilege Management Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 10, 2021
    CISA deadline
    182 days
    CVSS severity
    7.8 (high)

  205. Rank 215Microsoft Windows

    CVE-2021-40449

    Ransomware

    Microsoft Windows Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 17, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  206. Rank 216Microsoft Windows

    CVE-2016-0167

    RansomwareCVE from 2016, added in 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  207. Rank 217Microsoft Windows

    CVE-2016-0185

    CVE from 2016, added in 2021

    Microsoft Windows Media Center Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  208. Rank 218Microsoft Windows

    CVE-2016-7255

    RansomwareCVE from 2016, added in 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  209. Rank 219Microsoft Windows

    CVE-2019-0797

    CVE from 2019, added in 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  210. Rank 220Microsoft Windows

    CVE-2019-0803

    RansomwareCVE from 2019, added in 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  211. Rank 221Microsoft Windows

    CVE-2019-0808

    CVE from 2019, added in 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  212. Rank 222Microsoft Windows

    CVE-2019-0859

    RansomwareCVE from 2019, added in 2021

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  213. Rank 223Microsoft Windows

    CVE-2019-0863

    CVE from 2019, added in 2021

    Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  214. Rank 224Microsoft Windows

    CVE-2019-1214

    CVE from 2019, added in 2021

    Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  215. Rank 225Microsoft Windows

    CVE-2019-1215

    RansomwareCVE from 2019, added in 2021

    Microsoft Windows Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  216. Rank 226Microsoft Windows

    CVE-2020-0683

    Microsoft Windows Installer Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  217. Rank 227Microsoft Windows

    CVE-2020-0938

    Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  218. Rank 228Microsoft Windows

    CVE-2020-0986

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  219. Rank 229Microsoft Windows

    CVE-2020-1054

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  220. Rank 230Microsoft Windows

    CVE-2020-17087

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  221. Rank 231Microsoft Windows

    CVE-2021-1675

    Ransomware

    Microsoft Windows Print Spooler Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  222. Rank 232Microsoft Windows

    CVE-2021-1732

    Ransomware

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  223. Rank 233Microsoft Windows

    CVE-2021-28310

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  224. Rank 234Apple macOS (OS X)

    CVE-2021-30713

    Apple macOS Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  225. Rank 235Microsoft Windows

    CVE-2021-31199

    Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  226. Rank 236Microsoft Windows

    CVE-2021-31201

    Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  227. Rank 237Microsoft Windows

    CVE-2021-31956

    Microsoft Windows NTFS Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  228. Rank 238Microsoft Windows

    CVE-2021-31979

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  229. Rank 239Microsoft Windows

    CVE-2021-33739

    Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  230. Rank 240Microsoft Windows

    CVE-2021-33771

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  231. Rank 241Microsoft Windows

    CVE-2021-36948

    Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  232. Rank 242Microsoft Windows

    CVE-2021-36955

    Ransomware

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  233. Rank 243Microsoft Windows

    CVE-2024-21351

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 13, 2024
    CISA deadline
    21 days
    CVSS severity
    7.6 (high)

  234. Rank 244Microsoft Windows

    CVE-2025-30397

    Microsoft Windows Scripting Engine Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 13, 2025
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  235. Rank 245Microsoft Windows

    CVE-2024-38178

    Microsoft Windows Scripting Engine Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 13, 2024
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  236. Rank 246Microsoft Windows

    CVE-2024-38112

    Microsoft Windows MSHTML Platform Spoofing Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 9, 2024
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  237. Rank 247Microsoft Windows

    CVE-2023-36884

    Ransomware

    Microsoft Windows Search Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 17, 2023
    CISA deadline
    43 days
    CVSS severity
    7.5 (high)

  238. Rank 248Microsoft Windows

    CVE-2017-0147

    RansomwareCVE from 2017, added in 2022

    Microsoft Windows SMBv1 Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  239. Rank 249Microsoft Windows

    CVE-2018-8174

    RansomwareCVE from 2018, added in 2022

    Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 15, 2022
    CISA deadline
    181 days
    CVSS severity
    7.5 (high)

  240. Rank 250Microsoft Windows

    CVE-2021-36942

    Ransomware

    Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.5 (high)

  241. Rank 251Microsoft Windows

    CVE-2017-0213

    RansomwareCVE from 2017, added in 2022

    Microsoft Windows Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.3 (high)

  242. Rank 252Linux Kernel

    CVE-2024-53150

    Linux Kernel Out-of-Bounds Read Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 9, 2025
    CISA deadline
    21 days
    CVSS severity
    7.1 (high)

  243. Rank 253Microsoft Windows

    CVE-2025-21391

    Microsoft Windows Storage Link Following Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 11, 2025
    CISA deadline
    21 days
    CVSS severity
    7.1 (high)

  244. Rank 254Microsoft Windows

    CVE-2021-43890

    Ransomware

    Microsoft Windows AppX Installer Spoofing Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 15, 2021
    CISA deadline
    14 days
    CVSS severity
    7.1 (high)

  245. Rank 255Microsoft Windows

    CVE-2025-24983

    Microsoft Windows Win32k Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 11, 2025
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  246. Rank 256Microsoft Windows

    CVE-2025-26633

    Ransomware

    Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 11, 2025
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  247. Rank 257Microsoft Windows

    CVE-2024-30088

    Ransomware

    Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 15, 2024
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  248. Rank 258Microsoft Windows

    CVE-2024-38106

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 13, 2024
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  249. Rank 259Microsoft Windows

    CVE-2023-28229

    Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 4, 2023
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  250. Rank 260Linux Kernel

    CVE-2023-0266

    Linux Kernel Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 30, 2023
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  251. Rank 261Microsoft Windows

    CVE-2022-21919

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  252. Rank 262Microsoft Windows

    CVE-2022-26904

    Microsoft Windows User Profile Service Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  253. Rank 263Linux Kernel

    CVE-2021-22600

    Linux Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 11, 2022
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  254. Rank 264Microsoft Windows

    CVE-2018-8120

    RansomwareCVE from 2018, added in 2022

    Microsoft Win32k Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 15, 2022
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  255. Rank 265Linux Kernel

    CVE-2016-5195

    CVE from 2016, added in 2022

    Linux Kernel Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  256. Rank 266Microsoft Windows

    CVE-2015-1769

    CVE from 2015, added in 2022

    Microsoft Windows Mount Manager Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    6.6 (medium)

  257. Rank 267Microsoft Windows

    CVE-2024-43451

    Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 12, 2024
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  258. Rank 268Microsoft Windows

    CVE-2024-38213

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 13, 2024
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  259. Rank 269Microsoft Windows

    CVE-2017-0022

    CVE from 2017, added in 2022

    Microsoft XML Core Services Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  260. Rank 270Microsoft Windows

    CVE-2019-0703

    CVE from 2019, added in 2022

    Microsoft Windows SMB Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  261. Rank 271Microsoft Windows

    CVE-2022-26925

    Microsoft Windows LSA Spoofing Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 1, 2022
    CISA deadline
    21 days
    CVSS severity
    5.9 (medium)

  262. Rank 272Microsoft Windows

    CVE-2025-24991

    Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 11, 2025
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  263. Rank 273Linux Kernel

    CVE-2024-50302

    Linux Kernel Use of Uninitialized Resource Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 4, 2025
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  264. Rank 274Apple macOS (OS X)

    CVE-2022-22674

    Apple macOS Out-of-Bounds Read Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 4, 2022
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  265. Rank 275Microsoft Windows

    CVE-2020-1464

    Microsoft Windows Spoofing Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    5.5 (medium)

  266. Rank 276Apple macOS (OS X)

    CVE-2021-30657

    Apple macOS Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    5.5 (medium)

  267. Rank 277Microsoft Windows

    CVE-2021-31955

    Microsoft Windows Kernel Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    5.5 (medium)

  268. Rank 278Microsoft Windows

    CVE-2025-24054

    Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 17, 2025
    CISA deadline
    21 days
    CVSS severity
    5.4 (medium)

  269. Rank 279Microsoft Windows

    CVE-2024-38217

    Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 10, 2024
    CISA deadline
    21 days
    CVSS severity
    5.4 (medium)

  270. Rank 280Microsoft Windows

    CVE-2023-36584

    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 16, 2023
    CISA deadline
    21 days
    CVSS severity
    5.4 (medium)

  271. Rank 281Microsoft Windows

    CVE-2022-41049

    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 14, 2022
    CISA deadline
    25 days
    CVSS severity
    5.4 (medium)

  272. Rank 282Microsoft Windows

    CVE-2022-41091

    Ransomware

    Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 8, 2022
    CISA deadline
    31 days
    CVSS severity
    5.4 (medium)

  273. Rank 283Microsoft Windows

    CVE-2025-24984

    Microsoft Windows NTFS Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 11, 2025
    CISA deadline
    21 days
    CVSS severity
    4.6 (medium)

  274. Rank 284Microsoft Windows

    CVE-2023-24880

    Ransomware

    Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 14, 2023
    CISA deadline
    21 days
    CVSS severity
    4.4 (medium)

Filed under another category

These 120 vulnerabilities also concern this type of product, but are counted in their main category. My radar finds them when you follow this category.

  1. Microsoft Internet Explorer / Edge (legacy)

    CVE-2010-0249

    CVE from 2010, added in 2026

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    May 20, 2026
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  2. Microsoft Internet Explorer / Edge (legacy)

    CVE-2010-0806

    CVE from 2010, added in 2026

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    May 20, 2026
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  3. Apple Safari / WebKit

    CVE-2025-31277

    Apple Multiple Products Buffer Overflow Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 20, 2026
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  4. Apple Safari / WebKit

    CVE-2023-43000

    CVE from 2023, added in 2026

    Apple Multiple products Use-After-Free Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 5, 2026
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  5. Apple Safari / WebKit

    CVE-2025-43529

    Apple Multiple Products Use-After-Free WebKit Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Dec 15, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)
Show 115 more vulnerabilities

  1. Apple Safari / WebKit

    CVE-2022-48503

    CVE from 2022, added in 2025

    Apple Multiple Products Unspecified Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 20, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  2. Microsoft Internet Explorer / Edge (legacy)

    CVE-2010-3962

    CVE from 2010, added in 2025

    Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Oct 6, 2025
    CISA deadline
    21 days
    CVSS severity
    8.1 (high)

  3. Microsoft AD FS

    CVE-2026-56155

    Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jul 14, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  4. Apple iOS / iPadOS / macOS

    CVE-2025-43510

    Apple Multiple Products Improper Locking Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 20, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  5. Apple Safari / WebKit

    CVE-2021-30952

    CVE from 2021, added in 2026

    Apple Multiple Products Integer Overflow or Wraparound Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 5, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  6. Apple iOS / iPadOS / macOS

    CVE-2026-20700

    Apple Multiple Buffer Overflow Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 12, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  7. Apple iOS / iPadOS / macOS

    CVE-2025-43520

    Apple Multiple Products Classic Buffer Overflow Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Mar 20, 2026
    CISA deadline
    14 days
    CVSS severity
    5.5 (medium)

  8. Apple iOS / iPadOS / macOS

    CVE-2025-43300

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 21, 2025
    CISA deadline
    21 days
    CVSS severity
    10.0 (critical)

  9. Apple Safari / WebKit

    CVE-2025-24201

    Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 13, 2025
    CISA deadline
    21 days
    CVSS severity
    10.0 (critical)

  10. Apple iOS / iPadOS / macOS

    CVE-2025-24085

    Apple Multiple Products Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 29, 2025
    CISA deadline
    21 days
    CVSS severity
    10.0 (critical)

  11. Microsoft Active Directory

    CVE-2020-1472

    Ransomware

    Microsoft Netlogon Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    10.0 (critical)

  12. Apple iOS / iPadOS / macOS

    CVE-2025-31200

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 17, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  13. Apple iOS / iPadOS / macOS

    CVE-2025-31201

    Apple Multiple Products Arbitrary Read and Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 17, 2025
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  14. Microsoft Internet Explorer / Edge (legacy)

    CVE-2014-1776

    CVE from 2014, added in 2022

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 28, 2022
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  15. Apple iOS / iPadOS / macOS

    CVE-2022-22587

    Apple Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 28, 2022
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  16. Microsoft IIS

    CVE-2017-7269

    CVE from 2017, added in 2021

    Microsoft Windows Server Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  17. Apple Safari / WebKit

    CVE-2021-1870

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  18. Apple Safari / WebKit

    CVE-2021-1871

    Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  19. Microsoft Hyper-V

    CVE-2020-1040

    Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.0 (critical)

  20. Apple iOS / iPadOS / macOS

    CVE-2026-86950

    Hunt for compromise (CISA)

    Apple Multiple Products Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 29, 2026
    CISA deadline
    3 days
    CVSS severity
    8.8 (high)

  21. Microsoft Internet Explorer / Edge (legacy)

    CVE-2013-3893

    CVE from 2013, added in 2025

    Microsoft Internet Explorer Resource Management Errors Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 12, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  22. Apple Safari / WebKit

    CVE-2024-44308

    Apple Multiple Products Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 21, 2024
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  23. Apple Safari / WebKit

    CVE-2024-23222

    Apple Multiple Products WebKit Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 23, 2024
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  24. Apple Safari / WebKit

    CVE-2023-42917

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 4, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  25. Apple Safari / WebKit

    CVE-2023-41993

    Apple Multiple Products WebKit Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 25, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  26. Apple Safari / WebKit

    CVE-2023-37450

    Apple Multiple Products WebKit Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 13, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  27. Apple Safari / WebKit

    CVE-2023-32435

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 23, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  28. Apple Safari / WebKit

    CVE-2023-32439

    Apple Multiple Products WebKit Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 23, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  29. Apple Safari / WebKit

    CVE-2023-32373

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 22, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  30. Apple Safari / WebKit

    CVE-2023-28205

    Apple Multiple Products WebKit Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 10, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  31. Apple Safari / WebKit

    CVE-2023-23529

    Apple Multiple Products WebKit Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 14, 2023
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  32. Microsoft Active Directory

    CVE-2022-26923

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 18, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  33. Apple Safari / WebKit

    CVE-2022-32893

    Apple iOS and macOS Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 18, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  34. Microsoft Internet Explorer / Edge (legacy)

    CVE-2014-2817

    CVE from 2014, added in 2022

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  35. Microsoft Internet Explorer / Edge (legacy)

    CVE-2014-4123

    CVE from 2014, added in 2022

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  36. Microsoft Internet Explorer / Edge (legacy)

    CVE-2015-2425

    CVE from 2015, added in 2022

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  37. Microsoft Internet Explorer / Edge (legacy)

    CVE-2017-0149

    CVE from 2017, added in 2022

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  38. Microsoft Internet Explorer / Edge (legacy)

    CVE-2017-0210

    CVE from 2017, added in 2022

    Microsoft Internet Explorer Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  39. Microsoft Internet Explorer / Edge (legacy)

    CVE-2014-0322

    CVE from 2014, added in 2022

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 4, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  40. Apple Safari / WebKit

    CVE-2019-8506

    CVE from 2019, added in 2022

    Apple Multiple Products Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 4, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  41. Apple Safari / WebKit

    CVE-2021-1789

    Apple Multiple Products Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 4, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  42. Microsoft Internet Explorer / Edge (legacy)

    CVE-2015-2502

    CVE from 2015, added in 2022

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 13, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  43. Microsoft Active Directory

    CVE-2021-42287

    Ransomware

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 11, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  44. Microsoft Internet Explorer / Edge (legacy)

    CVE-2013-2551

    RansomwareCVE from 2013, added in 2022

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  45. Microsoft Internet Explorer / Edge (legacy)

    CVE-2015-2419

    CVE from 2015, added in 2022

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  46. Microsoft Internet Explorer / Edge (legacy)

    CVE-2016-7200

    CVE from 2016, added in 2022

    Microsoft Edge Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  47. Microsoft Internet Explorer / Edge (legacy)

    CVE-2016-7201

    CVE from 2016, added in 2022

    Microsoft Edge Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  48. Microsoft Active Directory

    CVE-2014-6324

    CVE from 2014, added in 2022

    Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  49. Microsoft Internet Explorer / Edge (legacy)

    CVE-2013-1347

    CVE from 2013, added in 2022

    Microsoft Internet Explorer Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  50. Microsoft Internet Explorer / Edge (legacy)

    CVE-2013-3897

    CVE from 2013, added in 2022

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  51. Microsoft Internet Explorer / Edge (legacy)

    CVE-2017-0222

    CVE from 2017, added in 2022

    Microsoft Internet Explorer Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 25, 2022
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  52. Apple Safari / WebKit

    CVE-2022-22620

    Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 11, 2022
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  53. Microsoft Internet Explorer / Edge (legacy)

    CVE-2019-0541

    CVE from 2019, added in 2021

    Microsoft MSHTML Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  54. Microsoft Internet Explorer / Edge (legacy)

    CVE-2020-1380

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  55. Microsoft Internet Explorer / Edge (legacy)

    CVE-2021-26411

    Ransomware

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  56. Microsoft Internet Explorer / Edge (legacy)

    CVE-2021-27085

    Microsoft Internet Explorer Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  57. Apple Safari / WebKit

    CVE-2021-30661

    Apple Multiple Products WebKit Storage Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  58. Apple Safari / WebKit

    CVE-2021-30663

    Apple Multiple Products WebKit Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  59. Apple Safari / WebKit

    CVE-2021-30665

    Apple Multiple Products WebKit Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  60. Apple Safari / WebKit

    CVE-2021-30858

    Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  61. Apple Safari / WebKit

    CVE-2023-32409

    Apple Multiple Products WebKit Sandbox Escape Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 22, 2023
    CISA deadline
    21 days
    CVSS severity
    8.6 (high)

  62. Apple iOS / iPadOS / macOS

    CVE-2023-28206

    Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 10, 2023
    CISA deadline
    21 days
    CVSS severity
    8.6 (high)

  63. Microsoft Internet Explorer / Edge (legacy)

    CVE-2012-4969

    CVE from 2012, added in 2022

    Microsoft Internet Explorer Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    8.1 (high)

  64. Microsoft Internet Explorer / Edge (legacy)

    CVE-2017-0037

    CVE from 2017, added in 2022

    Microsoft Edge and Internet Explorer Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    8.1 (high)

  65. Apple iOS / iPadOS / macOS

    CVE-2024-23225

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 6, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  66. Apple iOS / iPadOS / macOS

    CVE-2024-23296

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 6, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  67. Apple iOS / iPadOS / macOS

    CVE-2023-41990

    Apple Multiple Products Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 8, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  68. Apple iOS / iPadOS / macOS

    CVE-2023-41992

    Apple Multiple Products Kernel Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 25, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  69. Apple iOS / iPadOS / macOS

    CVE-2023-41064

    Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 11, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  70. Apple iOS / iPadOS / macOS

    CVE-2023-32434

    Apple Multiple Products Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 23, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  71. Apple iOS / iPadOS / macOS

    CVE-2021-30900

    CVE from 2021, added in 2023

    Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 30, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  72. Apple iOS / iPadOS / macOS

    CVE-2022-32917

    Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 14, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  73. Apple iOS / iPadOS / macOS

    CVE-2022-32894

    Apple iOS and macOS Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 18, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  74. Apple iOS / iPadOS / macOS

    CVE-2018-4344

    CVE from 2018, added in 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 27, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  75. Apple iOS / iPadOS / macOS

    CVE-2019-8605

    CVE from 2019, added in 2022

    Apple Multiple Products Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 27, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  76. Apple iOS / iPadOS / macOS

    CVE-2020-3837

    CVE from 2020, added in 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 27, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  77. Apple iOS / iPadOS / macOS

    CVE-2019-7286

    CVE from 2019, added in 2022

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  78. Apple iOS / iPadOS / macOS

    CVE-2021-30883

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  79. Apple iOS / iPadOS / macOS

    CVE-2020-27930

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  80. Apple iOS / iPadOS / macOS

    CVE-2020-27932

    Apple Multiple Products Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  81. Apple iOS / iPadOS / macOS

    CVE-2020-9859

    Apple Multiple Products Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  82. Apple iOS / iPadOS / macOS

    CVE-2021-30807

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  83. Apple iOS / iPadOS / macOS

    CVE-2021-30860

    Apple Multiple Products Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  84. Apple iOS / iPadOS / macOS

    CVE-2021-30869

    Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  85. Microsoft Internet Explorer / Edge (legacy)

    CVE-2021-40444

    Ransomware

    Microsoft MSHTML Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  86. Apple iOS / iPadOS / macOS

    CVE-2021-31010

    Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  87. Microsoft Active Directory

    CVE-2021-42278

    Ransomware

    Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 11, 2022
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  88. Microsoft Internet Explorer / Edge (legacy)

    CVE-2016-0189

    RansomwareCVE from 2016, added in 2022

    Microsoft Internet Explorer Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  89. Microsoft Internet Explorer / Edge (legacy)

    CVE-2018-8373

    CVE from 2018, added in 2022

    Microsoft Scripting Engine Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  90. Microsoft Internet Explorer / Edge (legacy)

    CVE-2019-0752

    RansomwareCVE from 2019, added in 2022

    Microsoft Internet Explorer Type Confusion Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 15, 2022
    CISA deadline
    181 days
    CVSS severity
    7.5 (high)

  91. Microsoft Internet Explorer / Edge (legacy)

    CVE-2018-8653

    CVE from 2018, added in 2021

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.5 (high)

  92. Microsoft Internet Explorer / Edge (legacy)

    CVE-2019-1367

    RansomwareCVE from 2019, added in 2021

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.5 (high)

  93. Microsoft Internet Explorer / Edge (legacy)

    CVE-2019-1429

    CVE from 2019, added in 2021

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.5 (high)

  94. Apple iOS / iPadOS / macOS

    CVE-2019-6223

    CVE from 2019, added in 2021

    Apple iOS and macOS Group Facetime Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.5 (high)

  95. Microsoft Internet Explorer / Edge (legacy)

    CVE-2020-0674

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.5 (high)

  96. Microsoft Internet Explorer / Edge (legacy)

    CVE-2020-0878

    Ransomware

    Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.5 (high)

  97. Microsoft Internet Explorer / Edge (legacy)

    CVE-2020-0968

    Ransomware

    Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.5 (high)

  98. Apple iOS / iPadOS / macOS

    CVE-2022-48618

    CVE from 2022, added in 2024

    Apple Multiple Products Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jan 31, 2024
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  99. Apple iOS / iPadOS / macOS

    CVE-2021-1782

    Apple Multiple Products Race Condition Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.0 (high)

  100. Apple Safari / WebKit

    CVE-2023-42916

    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Dec 4, 2023
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  101. Apple Safari / WebKit

    CVE-2023-28204

    Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 22, 2023
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  102. Microsoft Internet Explorer / Edge (legacy)

    CVE-2013-7331

    CVE from 2013, added in 2022

    Microsoft Internet Explorer Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  103. Microsoft Internet Explorer / Edge (legacy)

    CVE-2015-0071

    CVE from 2015, added in 2022

    Microsoft Internet Explorer ASLR Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  104. Microsoft Internet Explorer / Edge (legacy)

    CVE-2016-3298

    CVE from 2016, added in 2022

    Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  105. Microsoft Internet Explorer / Edge (legacy)

    CVE-2016-3351

    RansomwareCVE from 2016, added in 2022

    Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  106. Microsoft Internet Explorer / Edge (legacy)

    CVE-2019-0676

    CVE from 2019, added in 2022

    Microsoft Internet Explorer Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 23, 2022
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  107. Apple Safari / WebKit

    CVE-2024-44309

    Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 21, 2024
    CISA deadline
    21 days
    CVSS severity
    6.3 (medium)

  108. Microsoft WordPad

    CVE-2023-36563

    Microsoft WordPad Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 10, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  109. Apple iOS / iPadOS / macOS

    CVE-2023-41991

    Apple Multiple Products Improper Certificate Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 25, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  110. Apple iOS / iPadOS / macOS

    CVE-2023-38606

    Apple Multiple Products Kernel Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 26, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  111. Apple iOS / iPadOS / macOS

    CVE-2020-9934

    CVE from 2020, added in 2022

    Apple iOS, iPadOS, and macOS Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 8, 2022
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

  112. Apple iOS / iPadOS / macOS

    CVE-2020-27950

    Apple Multiple Products Memory Initialization Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    5.5 (medium)

  113. Microsoft Internet Explorer / Edge (legacy)

    CVE-2016-0162

    CVE from 2016, added in 2022

    Microsoft Internet Explorer Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 24, 2022
    CISA deadline
    21 days
    CVSS severity
    4.3 (medium)

  114. Microsoft Internet Explorer / Edge (legacy)

    CVE-2017-0059

    CVE from 2017, added in 2022

    Microsoft Internet Explorer Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    4.3 (medium)

  115. Apple iOS / iPadOS / macOS

    CVE-2025-43200

    Apple Multiple Products Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 16, 2025
    CISA deadline
    21 days
    CVSS severity
    4.2 (medium)

End of life: remove

These products are no longer supported: no patch is coming. Remove them or isolate them from the network.

  1. Linux Kernel

    CVE-2010-3904

    End of lifeCVE from 2010, added in 2023

    Linux Kernel Improper Input Validation Vulnerability

    End-of-life product: no patch is coming; remove or isolate it.

    Added
    May 12, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  2. Linux Kernel

    CVE-2014-0196

    End of lifeCVE from 2014, added in 2023

    Linux Kernel Race Condition Vulnerability

    End-of-life product: no patch is coming; remove or isolate it.

    Added
    May 12, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

Follow and verify

Get new vulnerabilities in this category: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.