Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
807 results · page 15 of 17
Jul 14, 2021Windows Storage Spaces Controller Elevation of Privilege VulnerabilityCVE-2021-34512 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Installer Elevation of Privilege VulnerabilityCVE-2021-34511 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Installer Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Remote Assistance Information Disclosure VulnerabilityCVE-2021-34507 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Remote Assistance Information Disclosure Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Address Book Remote Code Execution VulnerabilityCVE-2021-34504 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Address Book Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Kernel Memory Information Disclosure VulnerabilityCVE-2021-34500 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.3
Windows Kernel Memory Information Disclosure Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows GDI Elevation of Privilege VulnerabilityCVE-2021-34498 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows GDI Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows MSHTML Platform Remote Code Execution VulnerabilityCVE-2021-34497 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.8
Windows MSHTML Platform Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows GDI Information Disclosure VulnerabilityCVE-2021-34496 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows GDI Information Disclosure Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Partition Management Driver Elevation of Privilege VulnerabilityCVE-2021-34493 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.7
Windows Partition Management Driver Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Certificate Spoofing VulnerabilityCVE-2021-34492 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.1
Windows Certificate Spoofing Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Win32k Information Disclosure VulnerabilityCVE-2021-34491 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Win32k Information Disclosure Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Bowser.sys Denial of Service VulnerabilityCVE-2021-34476 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Bowser.sys Denial of Service Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows LSA Denial of Service VulnerabilityCVE-2021-33788 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows LSA Denial of Service Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows SMB Information Disclosure VulnerabilityCVE-2021-33783 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows SMB Information Disclosure Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Authenticode Spoofing VulnerabilityCVE-2021-33782 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Authenticode Spoofing Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2021-33773 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Installer Spoofing VulnerabilityCVE-2021-33765 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.2
Windows Installer Spoofing Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2021-33763 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2021-33761 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Security Account Manager Remote Protocol Security Feature Bypass VulnerabilityCVE-2021-33757 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.3
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows DNS Snap-in Remote Code Execution VulnerabilityCVE-2021-33756 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows DNS Snap-in Remote Code Execution VulnerabilityCVE-2021-33752 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows DNS Snap-in Remote Code Execution VulnerabilityCVE-2021-33750 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows DNS Snap-in Remote Code Execution VulnerabilityCVE-2021-33749 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Windows DNS Snap-in Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows Media Remote Code Execution VulnerabilityCVE-2021-33740 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Media Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jul 14, 2021Windows TCP/IP Driver Denial of Service VulnerabilityCVE-2021-31183 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows TCP/IP Driver Denial of Service Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Win32k Elevation of Privilege VulnerabilityCVE-2021-27077 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Win32k Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26901 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Event Tracing Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows UPnP Device Host Elevation of Privilege VulnerabilityCVE-2021-26899 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows UPnP Device Host Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26898 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Event Tracing Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy.CVE-2021-26887 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder. To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data. This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the FAQ section of this CVE for configuration guidance.
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021User Profile Service Denial of Service VulnerabilityCVE-2021-26886 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.1
User Profile Service Denial of Service Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows WalletService Elevation of Privilege VulnerabilityCVE-2021-26885 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows WalletService Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Media Photo Codec Information Disclosure VulnerabilityCVE-2021-26884 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Media Photo Codec Information Disclosure Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Remote Access API Elevation of Privilege VulnerabilityCVE-2021-26882 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Remote Access API Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Microsoft Windows Media Foundation Remote Code Execution VulnerabilityCVE-2021-26881 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Network Address Translation (NAT) Denial of Service VulnerabilityCVE-2021-26879 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-26878 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Print Spooler Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Win32k Elevation of Privilege VulnerabilityCVE-2021-26875 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Win32k Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2021-26873 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7
Windows User Profile Service Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-26872 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Event Tracing Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows WalletService Elevation of Privilege VulnerabilityCVE-2021-26871 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows WalletService Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows ActiveX Installer Service Information Disclosure VulnerabilityCVE-2021-26869 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows ActiveX Installer Service Information Disclosure Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2021-26868 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Update Service Elevation of Privilege VulnerabilityCVE-2021-26866 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.1
Windows Update Service Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Installer Elevation of Privilege VulnerabilityCVE-2021-26862 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7
Windows Installer Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Graphics Component Remote Code Execution VulnerabilityCVE-2021-26861 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Graphics Component Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Event Tracing Information Disclosure VulnerabilityCVE-2021-24107 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Event Tracing Information Disclosure Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2021-1640 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Print Spooler Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Dec 9, 2020Windows SMB Information Disclosure VulnerabilityCVE-2020-17140 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.1
Windows SMB Information Disclosure Vulnerability
- Product
- Windows 10 Version 1507
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.