Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
31 results
Sep 8, 2026Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.CVE-2026-69627 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.
- Product
- Windows 10 Version 1607
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 8, 2026Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.CVE-2026-68893 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.1
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.
- Product
- Windows 10 Version 1607
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 14, 2026Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.CVE-2026-26160 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
- Product
- Windows 10 Version 1607
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 14, 2026Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.CVE-2026-26159 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.
- Product
- Windows 10 Version 1607
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 24, 2026NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue.CVE-2026-24241 · Other software · NVIDIA · reported by psirt@nvidia.comMedium 4.3
NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue. A successful exploit of this vulnerability might lead to information disclosure.
- Product
- DLS component of NVIDIA License System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordnvd.nist.govnvidia.custhelp.com
Sep 30, 2025NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action.CVE-2025-23293 · Other software · NVIDIA · reported by psirt@nvidia.comHigh 8.7
NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to information disclosure.
- Product
- DLS component of NVIDIA License System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordnvd.nist.govnvidia.custhelp.com
Sep 30, 2025NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an authorized action.CVE-2025-23292 · Other software · NVIDIA · reported by psirt@nvidia.comMedium 4.6
NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to partial denial of service (UI component).
- Product
- DLS component of NVIDIA License System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordnvd.nist.govnvidia.custhelp.com
Sep 30, 2025NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action.CVE-2025-23291 · Other software · NVIDIA · reported by psirt@nvidia.comLow 2.4
NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to information disclosure.
- Product
- DLS component of NVIDIA License System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordnvd.nist.govnvidia.custhelp.com
Jul 8, 2025Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an unauthorized attacker to bypass a security feature over a netCVE-2025-48814 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an unauthorized attacker to bypass a security feature over a network.
- Product
- Windows 10 Version 1607
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 22, 2024NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker may cause an unauthorized action.CVE-2024-0122 · Other software · NVIDIA · reported by psirt@nvidia.comHigh 7.6
NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker may cause an unauthorized action. A successful exploit of this vulnerability may lead to partial denial of service and confidential information disclosure.
- Product
- DLS component of NVIDIA License System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2024Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-38262 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Product
- Windows Server 2008 Service Pack 2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-43467 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Product
- Windows Server 2008 Service Pack 2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Windows Remote Desktop Licensing Service Spoofing VulnerabilityCVE-2024-43455 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Windows Remote Desktop Licensing Service Spoofing Vulnerability
- Product
- Windows Server 2008 Service Pack 2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-43454 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.1
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Product
- Windows Server 2008 Service Pack 2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-38263 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Product
- Windows Server 2008 Service Pack 2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-38260 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Product
- Windows Server 2008 R2 Service Pack 1
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Windows Remote Desktop Licensing Service Information Disclosure VulnerabilityCVE-2024-38258 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
- Product
- Windows Server 2008 Service Pack 2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2024Windows Remote Desktop Licensing Service Denial of Service VulnerabilityCVE-2024-38231 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Product
- Windows Server 2008 Service Pack 2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024Windows Remote Desktop Licensing Service Denial of Service VulnerabilityCVE-2024-38099 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.9
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Product
- Windows Server 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-38077 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Product
- Windows Server 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-38076 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Product
- Windows Server 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-38074 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Product
- Windows Server 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024Windows Remote Desktop Licensing Service Denial of Service VulnerabilityCVE-2024-38073 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Product
- Windows Server 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024Windows Remote Desktop Licensing Service Denial of Service VulnerabilityCVE-2024-38072 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Product
- Windows Server 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024Windows Remote Desktop Licensing Service Denial of Service VulnerabilityCVE-2024-38071 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Product
- Windows Server 2019
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
May 28, 2021Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues.CVE-2021-27032 · Other software · Autodesk · reported by psirt@autodesk.comHigh 7.8
Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissions could allow all users on the operating system to modify the service configuration and take ownership of the service.
- Product
- Licensing Services
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordknowledge.autodesk.comautodesk.com
Oct 21, 2020A vulnerability in the licensing service of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause a denial oCVE-2020-3499 · Network & remote access · Cisco · reported by psirt@cisco.comHigh 8.6
A vulnerability in the licensing service of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.The vulnerability is due to improper handling of system resource values by the affected system. An attacker could exploit this vulnerability by sending malicious requests to the targeted system. A successful exploit could allow the attacker to cause the affected system to become unresponsive, resulting in a DoS condition and preventing the management of dependent devices.
- Product
- Cisco Firepower Management Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtools.cisco.comtools.cisco.com
Dec 17, 2019NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \\.\mailslot\nlsX86ccMailsCVE-2019-19315 · Other software · Nalpeiron · reported by MITREHigh 7.1
NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \\.\mailslot\nlsX86ccMailslot mailslot.
- Product
- Licensing Service
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 14, 2019Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privilegesCVE-2018-12200 · Other software · Intel Corporation · reported by secure@intel.comMedium 6.7
Insufficient access control in Intel(R) Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privileges via local access.
- Product
- Intel(R) CSME, Server Platform Services, Trusted Execution Engine and Intel(R) Active Management Technology
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.netapp.comintel.com
Jun 15, 2017In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named CVE-2016-10395 · Other software · Flexera Software LLC · reported by PSIRT-CNA@flexerasoftware.comHigh 7.8
In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named pipe within the FlexNet Publisher Licensing Service can be exploited to cause an out-of-bounds memory read access and subsequently execute arbitrary code with SYSTEM privileges.
- Product
- FlexNet Publisher
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordics-cert.us-cert.govsecuniaresearch.flexerasoftware.com
Dec 31, 2005Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group peCVE-2005-4708 · Other software · Adobe · reported by MITREHigh 7.2
Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System.
- Product
- Captivate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecunia.comsecuritytracker.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.