← Back to Radar

Vulnerability archive

The complete catalogue of actively exploited vulnerabilities (CISA KEV and EUVD/ENISA) tracked by Radar — search by CVE, vendor, or product.

50 of 1856 vulnerabilities

• CVE: CVE-2021-1732[watched vendor]

  Vendor / product: Microsoft · Win32k

  Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]

• CVE: CVE-2020-17144[watched vendor]

  Vendor / product: Microsoft · Exchange Server

  Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-0938[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-0878[watched vendor]

  Vendor / product: Microsoft · Edge and Internet Explorer

  Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]

• CVE: CVE-2016-0167[watched vendor]

  Vendor / product: Microsoft · Win32k

  Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]

• CVE: CVE-2021-38647[watched vendor]

  Vendor / product: Microsoft · Open Management Infrastructure (OMI)

  Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]

• CVE: CVE-2014-1812[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the vulnerability could decrypt the passwords and use them to elevate privileges on the domain.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]

• CVE: CVE-2021-22502

  Vendor / product: Micro Focus · Operation Bridge Reporter (OBR)

  Micro Focus Operation Bridge Report (OBR) contains an unspecified vulnerability that allows for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-22506

  Vendor / product: Micro Focus · Micro Focus Access Manager

  Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-23874

  Vendor / product: McAfee · McAfee Total Protection (MTP)

  McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-7961

  Vendor / product: Liferay · Liferay Portal

  Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web services.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-30116

  Vendor / product: Kaseya · Virtual System/Server Administrator (VSA)

  Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]

• CVE: CVE-2020-15505

  Vendor / product: Ivanti · MobileIron Multiple Products

  Ivanti MobileIron's Core & Connector, Sentry, and Monitor and Reporting Database (RDB) products contain an unspecified vulnerability that allows for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2016-3715

  Vendor / product: ImageMagick · ImageMagick

  ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2019-4716

  Vendor / product: IBM · Planning Analytics

  IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-31199[watched vendor]

  Vendor / product: Microsoft · Enhanced Cryptographic Provider

  Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-33742[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-17087[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-0683[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2016-0185[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows Media Center contains a remote code execution vulnerability when Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-33739[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-1647[watched vendor]

  Vendor / product: Microsoft · Defender

  Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-31955[watched vendor]

  Vendor / product: Microsoft · Windows

  Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2016-3718

  Vendor / product: ImageMagick · ImageMagick

  ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-38003

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-38000

  Vendor / product: Google · Chromium Intents

  Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-21206

  Vendor / product: Google · Chromium Blink

  Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-30554

  Vendor / product: Google · Chromium WebGL

  Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-6418

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-37975

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-37973

  Vendor / product: Google · Chromium Portals

  Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-21148

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-4427

  Vendor / product: IBM · Data Risk Manager

  IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-4430

  Vendor / product: IBM · Data Risk Manager

  IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-30563

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-21220

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-21193

  Vendor / product: Google · Chromium Blink

  Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-21224

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-30551

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-8657

  Vendor / product: EyesOfNetwork · EyesOfNetwork

  EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an attacker to calculate or guess the admin access token.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-6789

  Vendor / product: Exim · Exim

  Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]

• CVE: CVE-2020-16013

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-30632

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-16009

  Vendor / product: Google · Chromium V8

  Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-37976

  Vendor / product: Google · Chromium

  Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-16017

  Vendor / product: Google · Chrome

  Google Chrome contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2021-21166

  Vendor / product: Google · Chromium

  Google Chromium contains a race condition vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-15999

  Vendor / product: Google · Chrome FreeType

  Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2020-16010

  Vendor / product: Google · Chrome for Android UI

  Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Confirmed active exploitation]

• CVE: CVE-2018-13379[watched vendor]

  Vendor / product: Fortinet · FortiOS

  Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.

  View source ↗

  Source: CISA KEV

  Added: 11/3/21

  Severity: [Known ransomware use]