Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,756 results · page 28 of 36
Mar 3, 2022Adobe Flash Player Arbitrary Code Execution VulnerabilityCVE-2012-1535 · Other software · AdobeExploited
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.
- Product
- Flash Player
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityCVE-2012-0507 · Other software · OracleExploitedRansomware
An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
- Product
- Java SE
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Oracle’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityCVE-2011-3544 · Other software · OracleExploited
An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.
- Product
- Java SE JDK and JRE
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Oracle’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Forefront TMG Remote Code Execution VulnerabilityCVE-2011-1889 · Computers, phones & browsers · MicrosoftExploited
A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could allow code execution in the security context of the client application.
- Product
- Forefront Threat Management Gateway (TMG)
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Adobe Flash Player Remote Code Execution VulnerabilityCVE-2011-0611 · Other software · AdobeExploited
Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.
- Product
- Flash Player
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Office Stack-based Buffer Overflow VulnerabilityCVE-2010-3333 · Email & office · MicrosoftExploited
A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.
- Product
- Office
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Windows Kernel Exception Handler VulnerabilityCVE-2010-0232 · Computers, phones & browsers · MicrosoftExploited
The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges.
- Product
- Windows
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Adobe Reader and Acrobat Arbitrary Code Execution VulnerabilityCVE-2010-0188 · Email & office · AdobeExploitedRansomware
Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.
- Product
- Reader and Acrobat
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Excel Featheader Record Memory Corruption VulnerabilityCVE-2009-3129 · Email & office · MicrosoftExploited
Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.
- Product
- Excel
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Oracle VirtualBox Insufficient Input Validation VulnerabilityCVE-2008-3431 · Other software · OracleExploited
An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.
- Product
- VirtualBox
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Oracle’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Adobe Reader and Acrobat Input Validation VulnerabilityCVE-2008-2992 · Email & office · AdobeExploitedRansomware
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.
- Product
- Acrobat and Reader
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Windows Privilege Escalation VulnerabilityCVE-2002-0367 · Computers, phones & browsers · MicrosoftExploited
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.
- Product
- Windows
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Adobe Flash Player Arbitrary Code Execution VulnerabilityCVE-2016-1019 · Other software · AdobeExploitedRansomware
Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.
- Product
- Flash Player
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Adobe Flash Player Arbitrary Code Execution VulnerabilityCVE-2015-7645 · Other software · AdobeExploitedRansomware
Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.
- Product
- Flash Player
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Oracle Java SE Integrity Check VulnerabilityCVE-2015-4902 · Other software · OracleExploited
Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.
- Product
- Java SE
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Oracle’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityCVE-2018-0172 · Network & remote access · CiscoExploited
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).
- Product
- IOS and IOS XE Software
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Office Memory Corruption VulnerabilityCVE-2016-7193 · Email & office · MicrosoftExploited
Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.
- Product
- Office
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Oracle Java SE and Java SE Embedded Remote Code Execution VulnerabilityCVE-2015-2590 · Other software · OracleExploited
An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.
- Product
- Java SE
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Oracle’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Office Malformed EPS File VulnerabilityCVE-2015-2545 · Email & office · MicrosoftExploited
Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.
- Product
- Office
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Adobe Reader and Acrobat Memory Corruption VulnerabilityCVE-2013-0640 · Email & office · AdobeExploited
An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.
- Product
- Reader and Acrobat
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Windows Privilege Escalation VulnerabilityCVE-2004-0210 · Computers, phones & browsers · MicrosoftExploited
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.
- Product
- Windows
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Microsoft Windows Improper Input Validation VulnerabilityCVE-2009-1123 · Computers, phones & browsers · MicrosoftExploited
The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.
- Product
- Windows
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 24, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Mar 3, 2022Treck TCP/IP stack Out-of-Bounds Read VulnerabilityCVE-2020-11899 · Other software · Treck TCP/IP stackExploited
The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability.
- Product
- IPv6
- On CISA’s list since
- Mar 3, 2022 (federal fix deadline Mar 17, 2022)
- What to do
- Attackers are using this now. Install Treck TCP/IP stack’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 25, 2022Microsoft Internet Explorer Remote Code Execution VulnerabilityCVE-2017-0222 · Computers, phones & browsers · MicrosoftExploited
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.
- Product
- Internet Explorer
- On CISA’s list since
- Feb 25, 2022 (federal fix deadline Aug 25, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 25, 2022Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityCVE-2022-24682 · Email & office · SynacorExploitedRansomware
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.
- Product
- Zimbra Collaborate Suite (ZCS)
- On CISA’s list since
- Feb 25, 2022 (federal fix deadline Mar 11, 2022)
- What to do
- Attackers are using this now. Install Synacor’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 25, 2022Microsoft Office Remote Code Execution VulnerabilityCVE-2017-8570 · Email & office · MicrosoftExploited
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.
- Product
- Office
- On CISA’s list since
- Feb 25, 2022 (federal fix deadline Aug 25, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 25, 2022Microsoft Windows Code Injection VulnerabilityCVE-2014-6352 · Computers, phones & browsers · MicrosoftExploited
Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.
- Product
- Windows
- On CISA’s list since
- Feb 25, 2022 (federal fix deadline Aug 25, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 22, 2022Zabbix Frontend Authentication Bypass VulnerabilityCVE-2022-23131 · Other software · ZabbixExploited
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.
- Product
- Frontend
- On CISA’s list since
- Feb 22, 2022 (federal fix deadline Mar 8, 2022)
- What to do
- Attackers are using this now. Install Zabbix’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 22, 2022Zabbix Frontend Improper Access Control VulnerabilityCVE-2022-23134 · Other software · ZabbixExploited
Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.
- Product
- Frontend
- On CISA’s list since
- Feb 22, 2022 (federal fix deadline Mar 8, 2022)
- What to do
- Attackers are using this now. Install Zabbix’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 15, 2022Microsoft Word Memory Corruption VulnerabilityCVE-2014-1761 · Email & office · MicrosoftExploited
Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.
- Product
- Word
- On CISA’s list since
- Feb 15, 2022 (federal fix deadline Aug 15, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 15, 2022Adobe Commerce and Magento Open Source Improper Input Validation VulnerabilityCVE-2022-24086 · Websites & servers · AdobeExploited
Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.
- Product
- Commerce and Magento Open Source
- On CISA’s list since
- Feb 15, 2022 (federal fix deadline Mar 1, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 15, 2022Google Chromium Animation Use-After-Free VulnerabilityCVE-2022-0609 · Computers, phones & browsers · GoogleExploited
Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- Product
- Chromium Animation
- On CISA’s list since
- Feb 15, 2022 (federal fix deadline Mar 1, 2022)
- What to do
- Attackers are using this now. Install Google’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 15, 2022Microsoft Internet Explorer Type Confusion VulnerabilityCVE-2019-0752 · Computers, phones & browsers · MicrosoftExploitedRansomware
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer
- Product
- Internet Explorer
- On CISA’s list since
- Feb 15, 2022 (federal fix deadline Aug 15, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 15, 2022Microsoft Windows VBScript Engine Out-of-Bounds Write VulnerabilityCVE-2018-8174 · Computers, phones & browsers · MicrosoftExploitedRansomware
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"
- Product
- Windows
- On CISA’s list since
- Feb 15, 2022 (federal fix deadline Aug 15, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 15, 2022WinRAR Absolute Path Traversal VulnerabilityCVE-2018-20250 · Other software · RARLABExploitedRansomware
WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
- Product
- WinRAR
- On CISA’s list since
- Feb 15, 2022 (federal fix deadline Aug 15, 2022)
- What to do
- Attackers are using this now. Install RARLAB’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 15, 2022Adobe Flash Player Use-After-Free VulnerabilityCVE-2018-15982 · Other software · AdobeExploitedRansomware
Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability
- Product
- Flash Player
- On CISA’s list since
- Feb 15, 2022 (federal fix deadline Aug 15, 2022)
- What to do
- Attackers are using this now. Install Adobe’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 15, 2022PHPUnit Command Injection VulnerabilityCVE-2017-9841 · Websites & servers · PHPUnitExploited
PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI.
- Product
- PHPUnit
- On CISA’s list since
- Feb 15, 2022 (federal fix deadline Aug 15, 2022)
- What to do
- Attackers are using this now. Install PHPUnit’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 15, 2022Microsoft Graphics Component Memory Corruption VulnerabilityCVE-2013-3906 · Computers, phones & browsers · MicrosoftExploited
Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.
- Product
- Graphics Component
- On CISA’s list since
- Feb 15, 2022 (federal fix deadline Aug 15, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 11, 2022Apple iOS, iPadOS, and macOS Webkit Use-After-Free VulnerabilityCVE-2022-22620 · Computers, phones & browsers · AppleExploited
Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
- Product
- iOS, iPadOS, and macOS
- On CISA’s list since
- Feb 11, 2022 (federal fix deadline Feb 25, 2022)
- What to do
- Attackers are using this now. Install Apple’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 10, 2022Jenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityCVE-2018-1000861 · Websites & servers · JenkinsExploited
A code execution vulnerability exists in the Stapler web framework used by Jenkins
- Product
- Jenkins Stapler Web Framework
- On CISA’s list since
- Feb 10, 2022 (federal fix deadline Aug 10, 2022)
- What to do
- Attackers are using this now. Install Jenkins’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 10, 2022Microsoft Windows SAM Local Privilege Escalation VulnerabilityCVE-2021-36934 · Computers, phones & browsers · MicrosoftExploited
If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.
- Product
- Windows
- On CISA’s list since
- Feb 10, 2022 (federal fix deadline Feb 24, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 10, 2022Microsoft SMBv3 Remote Code Execution VulnerabilityCVE-2020-0796 · Computers, phones & browsers · MicrosoftExploitedRansomware
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.
- Product
- SMBv3
- On CISA’s list since
- Feb 10, 2022 (federal fix deadline Aug 10, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 10, 2022Apache Struts 1 Improper Input Validation VulnerabilityCVE-2017-9791 · Websites & servers · ApacheExploited
The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
- Product
- Struts 1
- On CISA’s list since
- Feb 10, 2022 (federal fix deadline Aug 10, 2022)
- What to do
- Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 10, 2022Microsoft Windows Shell (.lnk) Remote Code Execution VulnerabilityCVE-2017-8464 · Computers, phones & browsers · MicrosoftExploited
Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file
- Product
- Windows
- On CISA’s list since
- Feb 10, 2022 (federal fix deadline Aug 10, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 10, 2022Microsoft Win32k Privilege Escalation VulnerabilityCVE-2017-0263 · Computers, phones & browsers · MicrosoftExploited
Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.
- Product
- Win32k
- On CISA’s list since
- Feb 10, 2022 (federal fix deadline Aug 10, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 10, 2022Microsoft Office Remote Code Execution VulnerabilityCVE-2017-0262 · Email & office · MicrosoftExploited
A remote code execution vulnerability exists in Microsoft Office.
- Product
- Office
- On CISA’s list since
- Feb 10, 2022 (federal fix deadline Aug 10, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 10, 2022Microsoft SMBv1 Remote Code Execution VulnerabilityCVE-2017-0145 · Computers, phones & browsers · MicrosoftExploitedRansomware
The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.
- Product
- SMBv1
- On CISA’s list since
- Feb 10, 2022 (federal fix deadline Aug 10, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 10, 2022Microsoft SMBv1 Remote Code Execution VulnerabilityCVE-2017-0144 · Computers, phones & browsers · MicrosoftExploitedRansomware
The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.
- Product
- SMBv1
- On CISA’s list since
- Feb 10, 2022 (federal fix deadline Aug 10, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 10, 2022Apache ActiveMQ Improper Input Validation VulnerabilityCVE-2016-3088 · Websites & servers · ApacheExploited
The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request
- Product
- ActiveMQ
- On CISA’s list since
- Feb 10, 2022 (federal fix deadline Aug 10, 2022)
- What to do
- Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Feb 10, 2022Microsoft HTTP.sys Remote Code Execution VulnerabilityCVE-2015-1635 · Computers, phones & browsers · MicrosoftExploited
Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution.
- Product
- HTTP.sys
- On CISA’s list since
- Feb 10, 2022 (federal fix deadline Aug 10, 2022)
- What to do
- Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. The WordPress, CMS and hosting-panel entries come from the National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan and others); we show who. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, a booking system, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.