Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
265 results · page 2 of 6
Apr 13, 2021Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2021-28329 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows DNS Information Disclosure VulnerabilityCVE-2021-28328 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows DNS Information Disclosure Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2021-28327 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows AppX Deployment Server Denial of Service VulnerabilityCVE-2021-28326 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows AppX Deployment Server Denial of Service Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comzerodayinitiative.com
Apr 13, 2021Windows SMB Information Disclosure VulnerabilityCVE-2021-28325 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows SMB Information Disclosure Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows DNS Information Disclosure VulnerabilityCVE-2021-28323 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows DNS Information Disclosure Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Apr 13, 2021Diagnostics Hub Standard Collector Service Elevation of Privilege VulnerabilityCVE-2021-28322 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Apr 13, 2021Diagnostics Hub Standard Collector Service Elevation of Privilege VulnerabilityCVE-2021-28321 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Apr 13, 2021Windows Resource Manager PSM Service Extension Elevation of Privilege VulnerabilityCVE-2021-28320 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows TCP/IP Driver Denial of Service VulnerabilityCVE-2021-28319 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows TCP/IP Driver Denial of Service Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows GDI+ Information Disclosure VulnerabilityCVE-2021-28318 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows GDI+ Information Disclosure Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Microsoft Windows Codecs Library Information Disclosure VulnerabilityCVE-2021-28317 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Microsoft Windows Codecs Library Information Disclosure Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows WLAN AutoConfig Service Security Feature Bypass VulnerabilityCVE-2021-28316 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 4.2
Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows Media Video Decoder Remote Code Execution VulnerabilityCVE-2021-28315 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Media Video Decoder Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Diagnostics Hub Standard Collector Service Elevation of Privilege VulnerabilityCVE-2021-28313 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Apr 13, 2021Windows Application Compatibility Cache Denial of Service VulnerabilityCVE-2021-28311 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5
Windows Application Compatibility Cache Denial of Service Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows Kernel Information Disclosure VulnerabilityCVE-2021-28309 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Kernel Information Disclosure Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021NTFS Elevation of Privilege VulnerabilityCVE-2021-27096 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
NTFS Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows Media Video Decoder Remote Code Execution VulnerabilityCVE-2021-27095 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Media Video Decoder Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows Early Launch Antimalware Driver Security Feature Bypass VulnerabilityCVE-2021-27094 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 4.4
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbi-zone.medium.comportal.msrc.microsoft.com
Apr 13, 2021Windows Kernel Information Disclosure VulnerabilityCVE-2021-27093 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Kernel Information Disclosure Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Microsoft Internet Messaging API Remote Code Execution VulnerabilityCVE-2021-27089 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Microsoft Internet Messaging API Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-27088 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Event Tracing Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows Services and Controller App Elevation of Privilege VulnerabilityCVE-2021-27086 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Services and Controller App Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comportal.msrc.microsoft.com
Apr 13, 2021Windows Media Photo Codec Information Disclosure VulnerabilityCVE-2021-27079 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.7
Windows Media Photo Codec Information Disclosure Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Win32k Elevation of Privilege VulnerabilityCVE-2021-27072 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7
Win32k Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Apr 13, 2021Windows Installer Elevation of Privilege VulnerabilityCVE-2021-26415 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Installer Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comzerodayinitiative.com
Apr 13, 2021Windows Installer Spoofing VulnerabilityCVE-2021-26413 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.2
Windows Installer Spoofing Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Update Stack Elevation of Privilege VulnerabilityCVE-2021-26889 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Update Stack Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021OpenType Font Parsing Remote Code Execution VulnerabilityCVE-2021-26876 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
OpenType Font Parsing Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Projected File System Elevation of Privilege VulnerabilityCVE-2021-26870 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Projected File System Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Win32k Elevation of Privilege VulnerabilityCVE-2021-26863 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7
Windows Win32k Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.compacketstormsecurity.com
Mar 11, 2021DirectX Elevation of Privilege VulnerabilityCVE-2021-24095 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7
DirectX Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Mar 11, 2021Windows Update Stack Setup Elevation of Privilege VulnerabilityCVE-2021-1729 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.1
Windows Update Stack Setup Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Feb 25, 2021Windows DirectX Information Disclosure VulnerabilityCVE-2021-24106 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows DirectX Information Disclosure Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Feb 25, 2021Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-24103 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Event Tracing Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Feb 25, 2021Windows Event Tracing Elevation of Privilege VulnerabilityCVE-2021-24102 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Event Tracing Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Feb 25, 2021Windows TCP/IP Remote Code Execution VulnerabilityCVE-2021-24094 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Windows TCP/IP Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Feb 25, 2021Windows Graphics Component Remote Code Execution VulnerabilityCVE-2021-24093 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Windows Graphics Component Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comportal.msrc.microsoft.com
Feb 25, 2021Windows TCP/IP Denial of Service VulnerabilityCVE-2021-24086 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows TCP/IP Denial of Service Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comportal.msrc.microsoft.com
Feb 25, 2021Windows Address Book Remote Code Execution VulnerabilityCVE-2021-24083 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Address Book Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Feb 25, 2021Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass VulnerabilityCVE-2021-24082 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 4.3
Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Feb 25, 2021Microsoft Windows VMSwitch Information Disclosure VulnerabilityCVE-2021-24076 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Microsoft Windows VMSwitch Information Disclosure Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Feb 25, 2021Windows TCP/IP Remote Code Execution VulnerabilityCVE-2021-24074 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Windows TCP/IP Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Feb 25, 2021Windows Installer Elevation of Privilege VulnerabilityCVE-2021-1727 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Installer Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Feb 25, 2021Windows Fax Service Remote Code Execution VulnerabilityCVE-2021-1722 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.1
Windows Fax Service Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Feb 25, 2021Microsoft Windows Security Feature Bypass VulnerabilityCVE-2020-17162 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Microsoft Windows Security Feature Bypass Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordportal.msrc.microsoft.comportal.msrc.microsoft.com
Jan 12, 2021Windows LUAFV Elevation of Privilege VulnerabilityCVE-2021-1706 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.3
Windows LUAFV Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jan 12, 2021Windows Update Stack Elevation of Privilege VulnerabilityCVE-2021-1694 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Update Stack Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Jan 12, 2021Windows AppX Deployment Extensions Elevation of Privilege VulnerabilityCVE-2021-1685 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.3
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1803
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.comportal.msrc.microsoft.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.