Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 2 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list
35added in the last 30 days
472new WordPress flaws this week
390,714entries in the database

807 results · page 13 of 17

  • Feb 14, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-21684 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2023Windows Installer Elevation of Privilege VulnerabilityCVE-2023-21542 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7

    Windows Installer Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Scripting Languages Remote Code Execution VulnerabilityCVE-2022-41118 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5

    Windows Scripting Languages Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Win32k Elevation of Privilege VulnerabilityCVE-2022-41109 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Win32k Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Overlay Filter Elevation of Privilege VulnerabilityCVE-2022-41102 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Overlay Filter Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Overlay Filter Elevation of Privilege VulnerabilityCVE-2022-41101 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Overlay Filter Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityCVE-2022-41100 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022BitLocker Security Feature Bypass VulnerabilityCVE-2022-41099 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 4.6

    BitLocker Security Feature Bypass Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows GDI+ Information Disclosure VulnerabilityCVE-2022-41098 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5

    Windows GDI+ Information Disclosure Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Network Policy Server (NPS) RADIUS Protocol Information Disclosure VulnerabilityCVE-2022-41097 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5

    Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Digital Media Receiver Elevation of Privilege VulnerabilityCVE-2022-41095 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Digital Media Receiver Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityCVE-2022-41093 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Point-to-Point Tunneling Protocol Denial of Service VulnerabilityCVE-2022-41090 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.9

    Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-41088 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.1

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Group Policy Elevation of Privilege VulnerabilityCVE-2022-41086 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.4

    Windows Group Policy Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Network Address Translation (NAT) Denial of Service VulnerabilityCVE-2022-41058 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows HTTP.sys Elevation of Privilege VulnerabilityCVE-2022-41057 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows HTTP.sys Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Network Policy Server (NPS) RADIUS Protocol Denial of Service VulnerabilityCVE-2022-41056 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5

    Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Kerberos Denial of Service VulnerabilityCVE-2022-41053 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5

    Windows Kerberos Denial of Service Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Graphics Component Remote Code Execution VulnerabilityCVE-2022-41052 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Graphics Component Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Extensible File Allocation Table Elevation of Privilege VulnerabilityCVE-2022-41050 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Extensible File Allocation Table Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-41048 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft ODBC Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-41047 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft ODBC Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityCVE-2022-41045 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-41039 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.1

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Hyper-V Denial of Service VulnerabilityCVE-2022-38015 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5

    Windows Hyper-V Denial of Service Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2022Windows Group Policy Elevation of Privilege VulnerabilityCVE-2022-37992 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Group Policy Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 11, 2022Windows Extensible Firmware Interface Security Feature Bypass VulnerabilityCVE-2022-21899 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5

    Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021Windows Kernel Elevation of Privilege VulnerabilityCVE-2021-42285 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Kernel Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021Windows Hyper-V Denial of Service VulnerabilityCVE-2021-42284 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.8

    Windows Hyper-V Denial of Service Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021NTFS Elevation of Privilege VulnerabilityCVE-2021-42283 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    NTFS Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2021-42276 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Microsoft Windows Media Foundation Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021Microsoft COM for Windows Remote Code Execution VulnerabilityCVE-2021-42275 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft COM for Windows Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021Windows Fast FAT File System Driver Elevation of Privilege VulnerabilityCVE-2021-41377 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityCVE-2021-41371 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 4.4

    Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021NTFS Elevation of Privilege VulnerabilityCVE-2021-41370 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    NTFS Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021NTFS Elevation of Privilege VulnerabilityCVE-2021-41367 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    NTFS Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege VulnerabilityCVE-2021-41366 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021Windows Denial of Service VulnerabilityCVE-2021-41356 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5

    Windows Denial of Service Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 2021Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityCVE-2021-38631 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 4.4

    Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 15, 2021Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-40447 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Print Spooler Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 15, 2021Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-38671 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Print Spooler Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 15, 2021Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-38667 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Print Spooler Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 15, 2021Win32k Elevation of Privilege VulnerabilityCVE-2021-38639 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Win32k Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 15, 2021Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2021-38638 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 15, 2021Windows Redirected Drive Buffering SubSystem Driver Information Disclosure VulnerabilityCVE-2021-38636 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5

    Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 15, 2021Windows Redirected Drive Buffering SubSystem Driver Information Disclosure VulnerabilityCVE-2021-38635 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5

    Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 15, 2021Microsoft Windows Update Client Elevation of Privilege VulnerabilityCVE-2021-38634 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.1

    Microsoft Windows Update Client Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 15, 2021Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2021-38633 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 15, 2021Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-38630 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Windows Event Tracing Elevation of Privilege Vulnerability

    Product
    Windows 10 Version 1507
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.