Updated 12 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list

34added in the last 30 days

343new WordPress flaws this week

390,080entries in the database

92 results · page 2 of 2

Dec 15, 2021Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/ACVE-2021-39645 · Computers, phones & browsers · Google · reported by security@android.comCritical 9.8
Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Dec 15, 2021Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/ACVE-2021-39644 · Computers, phones & browsers · Google · reported by security@android.comCritical 9.8
Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Dec 15, 2021Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/ACVE-2021-39641 · Computers, phones & browsers · Google · reported by security@android.comCritical 9.8
Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Dec 15, 2021Android Kernel Use-After-Free VulnerabilityCVE-2021-1048 · Computers, phones & browsers · Android · reported by security@android.comExploitedHigh 7.8
Android kernel contains a use-after-free vulnerability that allows for privilege escalation.
Product
Kernel
On CISA’s list since
May 23, 2022 (federal fix deadline Jun 13, 2022)
What to do
Attackers are using this now. Install Android’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD record CISA catalog source.android.com source.android.com
Dec 15, 2021Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/ACVE-2021-1045 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.5
Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Dec 15, 2021Android Kernel Race Condition VulnerabilityCVE-2021-0920 · Computers, phones & browsers · Android · reported by security@android.comExploitedMedium 6.4
Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.
Product
Kernel
On CISA’s list since
May 23, 2022 (federal fix deadline Jun 13, 2022)
What to do
Attackers are using this now. Install Android’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD record CISA catalog lists.debian.org source.android.com
Dec 15, 2020Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernelCVE-2020-27068 · Computers, phones & browsers · Google · reported by security@android.comCritical 9.8
Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Jun 16, 2020This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Android kernelAndroid ID: A-135130450CVE-2020-0223 · Computers, phones & browsers · Google · reported by security@android.comCritical 9.8
This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Android kernelAndroid ID: A-135130450
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Mar 10, 2020Android Kernel Out-of-Bounds Write VulnerabilityCVE-2020-0041 · Computers, phones & browsers · Android · reported by security@android.comExploitedHigh 7.8
Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain "AbstractEmu."
Product
Android Kernel
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Android’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD record CISA catalog source.android.com source.android.com
Oct 11, 2019Android Kernel Use-After-Free VulnerabilityCVE-2019-2215 · Computers, phones & browsers · Android · reported by security@android.comExploitedHigh 7.8
Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."
Product
Android Kernel
On CISA’s list since
Nov 3, 2021 (federal fix deadline May 3, 2022)
What to do
Attackers are using this now. Install Android’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD record CISA catalog packetstormsecurity.com packetstormsecurity.com
Sep 6, 2019In the Android kernel in VPN routing there is a possible information disclosure.CVE-2019-9461 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.5
In the Android kernel in VPN routing there is a possible information disclosure. This could lead to remote information disclosure by an adjacent network attacker with no additional execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record openwall.com openwall.com
Sep 6, 2019In the Android kernel in the video driver there is a use after free due to a race condition.CVE-2019-9458 · Computers, phones & browsers · Google · reported by security@android.comHigh 7
In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record lists.opensuse.org source.android.com
Sep 6, 2019In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check.CVE-2019-9456 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record lists.opensuse.org lists.opensuse.org
Sep 6, 2019In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement.CVE-2019-9455 · Computers, phones & browsers · Google · reported by security@android.comLow 2.3
In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record lists.opensuse.org source.android.com
Sep 6, 2019In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption.CVE-2019-9454 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in i2c driver there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation.CVE-2019-9453 · Computers, phones & browsers · Google · reported by security@android.comMedium 4.4
In the Android kernel in F2FS touch driver there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com usn.ubuntu.com
Sep 6, 2019In the Android kernel in SEC_TS touch driver there is a possible out of bounds read due to a missing bounds check.CVE-2019-9452 · Computers, phones & browsers · Google · reported by security@android.comMedium 4.4
In the Android kernel in SEC_TS touch driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the touchscreen driver there is a possible out of bounds write due to a missing bounds check.CVE-2019-9451 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race condition.CVE-2019-9450 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.4
In the Android kernel in the FingerTipS touchscreen driver there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in FingerTipS touchscreen driver there is a possible out of bounds read due to a missing bounds check.CVE-2019-9449 · Computers, phones & browsers · Google · reported by security@android.comMedium 4.4
In the Android kernel in FingerTipS touchscreen driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check.CVE-2019-9448 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking.CVE-2019-9447 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper input validation.CVE-2019-9446 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check.CVE-2019-9445 · Computers, phones & browsers · Google · reported by security@android.comMedium 4.4
In the Android kernel in F2FS driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record lists.debian.org lists.debian.org
Sep 6, 2019In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p.CVE-2019-9444 · Computers, phones & browsers · Google · reported by security@android.comMedium 4.4
In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass.CVE-2019-9443 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege due to a set_fs() call without restoring the previous limit with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the mnh driver there is possible memory corruption due to a use after free.CVE-2019-9442 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the mnh driver there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System privileges required. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the mnh driver there is a possible out of bounds write due to improper input validation.CVE-2019-9441 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the mnh driver there is a possible out of bounds write due to improper input validation. This could lead to escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the bootloader there is a possible secure boot bypass.CVE-2019-9436 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the bootloader there is a possible secure boot bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check.CVE-2019-9426 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in Bluetooth there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files.CVE-2019-9345 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free.CVE-2019-9276 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the mnh driver there is a use after free due to improper locking.CVE-2019-9275 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the mnh driver there is a use after free due to improper locking. This could lead to escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check.CVE-2019-9274 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the mnh driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking.CVE-2019-9273 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the mnh driver there is a race condition due to insufficient locking.CVE-2019-9271 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.4
In the Android kernel in the mnh driver there is a race condition due to insufficient locking. This could lead to a use-after-free which could lead to escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check.CVE-2019-9270 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check.CVE-2019-9248 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check.CVE-2019-9245 · Computers, phones & browsers · Google · reported by security@android.comMedium 4.4
In the Android kernel in the f2fs driver there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Sep 6, 2019In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable.CVE-2019-2182 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record lists.debian.org source.android.com
Sep 5, 2019In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow.CVE-2019-2181 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In binder_transaction of binder.c in the Android kernel, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record packetstormsecurity.com source.android.com
Apr 12, 2017Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CVECVE-2016-5856 · Computers, phones & browsers · Linux · reported by MITREHigh 7
Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vulnerability than CVE-2016-5857.
Product
Linux Kernel
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securitytracker.com source.android.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.