BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 13:54 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 33 of 71

  1. Added to KEVJul 11, 2023
    CVE-2023-353118.8 HIGH⚡ Known ExploitedMicrosoft Outlook
    Microsoft Outlook Security Feature Bypass VulnerabilityMicrosoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
  2. Added to KEVJul 11, 2023
    CVE-2023-320498.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows Defender SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  3. Added to KEVJul 11, 2023
    CVE-2023-320467.8 HIGH⚡ Known ExploitedMicrosoft Windows
    Microsoft Windows MSHTML Platform Privilege Escalation VulnerabilityMicrosoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  4. Added to KEVJul 11, 2023
    CVE-2022-311999.8 CRITICAL⚡ Known ExploitedNetwrix Auditor
    Netwrix Auditor Insecure Object Deserialization VulnerabilityNetwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthenticated, remote attacker to execute code as the NT AUTHORITY\SYSTEM user. Successful exploitation requires that the attacker is able to reach port 9004/TCP, which is commonly blocked by standard enterprise firewalling.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  5. Added to KEVJul 7, 2023
    CVE-2021-292568.8 HIGH⚡ Known ExploitedArm Mali Graphics Processing Unit (GPU)
    Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityArm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  6. Added to KEVJun 29, 2023
    CVE-2021-254895.5 MEDIUM⚡ Known ExploitedSamsung Mobile Devices
    Samsung Mobile Devices Improper Input Validation VulnerabilitySamsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.
    ScoreSeverityVersionVector String
    5.5MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    3.3LOW3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
    4.9MEDIUM2.0NVDAV:L/AC:L/Au:N/C:N/I:N/A:C
  7. Added to KEVJun 29, 2023
    CVE-2021-254877.8 HIGH⚡ Known ExploitedSamsung Mobile Devices
    Samsung Mobile Devices Out-of-Bounds Read VulnerabilitySamsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.3HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  8. Added to KEVJun 29, 2023
    CVE-2021-253956.4 MEDIUM⚡ Known ExploitedSamsung Mobile Devices
    Samsung Mobile Devices Race Condition VulnerabilitySamsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
    ScoreSeverityVersionVector String
    6.4MEDIUM3.1CNACVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
    4.4MEDIUM2.0NVDAV:L/AC:M/Au:N/C:P/I:P/A:P
  9. Added to KEVJun 29, 2023
    CVE-2021-253946.4 MEDIUM⚡ Known ExploitedSamsung Mobile Devices
    Samsung Mobile Devices Race Condition VulnerabilitySamsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
    ScoreSeverityVersionVector String
    6.4MEDIUM3.1CNACVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
    4.4MEDIUM2.0NVDAV:L/AC:M/Au:N/C:P/I:P/A:P
  10. Added to KEVJun 29, 2023
    CVE-2021-253726.7 MEDIUM⚡ Known ExploitedSamsung Mobile Devices
    Samsung Mobile Devices Improper Boundary Check VulnerabilitySamsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.
    ScoreSeverityVersionVector String
    6.7MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    6.1MEDIUM3.1CNACVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  11. Added to KEVJun 29, 2023
    CVE-2021-253716.7 MEDIUM⚡ Known ExploitedSamsung Mobile Devices
    Samsung Mobile Devices Unspecified VulnerabilitySamsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.
    ScoreSeverityVersionVector String
    6.7MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    6.1MEDIUM3.1CNACVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  12. Added to KEVJun 29, 2023
    CVE-2019-205007.8 HIGH⚡ Known ExploitedD-Link DWL-2600AP Access Point
    D-Link DWL-2600AP Access Point Command Injection VulnerabilityD-Link DWL-2600AP access point contains an authenticated command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  13. Added to KEVJun 29, 2023
    CVE-2019-176219.8 CRITICAL⚡ Known ExploitedD-Link DIR-859 Router
    D-Link DIR-859 Router Command Execution VulnerabilityD-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  14. Added to KEVJun 23, 2023
    CVE-2023-324398.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products WebKit Type Confusion VulnerabilityApple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  15. Added to KEVJun 23, 2023
    CVE-2023-324358.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products WebKit Memory Corruption VulnerabilityApple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  16. Added to KEVJun 23, 2023
    CVE-2023-324347.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products Integer Overflow VulnerabilityApple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  17. Added to KEVJun 23, 2023
    CVE-2023-279929.8 CRITICAL⚡ Known ExploitedZyxel Multiple Network-Attached Storage (NAS) Devices
    Zyxel Multiple NAS Devices Command Injection VulnerabilityMultiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  18. Added to KEVJun 23, 2023
    CVE-2023-208673.9 LOW⚡ Known ExploitedVMware Tools
    VMware Tools Authentication Bypass VulnerabilityVMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.
    ScoreSeverityVersionVector String
    3.9LOW3.1CNACVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
  19. Added to KEVJun 22, 2023
    CVE-2023-208879.8 CRITICAL⚡ Known ExploitedVMware Aria Operations for Networks
    Vmware Aria Operations for Networks Command Injection VulnerabilityVMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  20. Added to KEVJun 22, 2023
    CVE-2021-440269.8 CRITICAL⚡ Known ExploitedRoundcube Roundcube Webmail
    Roundcube Webmail SQL Injection VulnerabilityRoundcube Webmail is vulnerable to SQL injection via search or search_params.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  21. Added to KEVJun 22, 2023
    CVE-2020-357306.1 MEDIUM⚡ Known ExploitedRoundcube Roundcube Webmail
    Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityRoundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with Javascript in a link reference element that is mishandled by linkref_addinindex in rcube_string_replacer.php.
    ScoreSeverityVersionVector String
    6.1MEDIUM3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  22. Added to KEVJun 22, 2023
    CVE-2020-126419.8 CRITICAL⚡ Known ExploitedRoundcube Roundcube Webmail
    Roundcube Webmail Remote Code Execution VulnerabilityRoundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  23. Added to KEVJun 22, 2023
    CVE-2016-90797.5 HIGH⚡ Known ExploitedMozilla Firefox, Firefox ESR, and Thunderbird
    Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free VulnerabilityMozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.
    ScoreSeverityVersionVector String
    7.5HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    5.0MEDIUM2.0NVDAV:N/AC:L/Au:N/C:P/I:N/A:N
  24. Added to KEVJun 22, 2023
    CVE-2016-01657.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  25. Added to KEVJun 13, 2023
    CVE-2023-279979.8 CRITICAL⚡ Known ExploitedFortinet FortiOS and FortiProxy SSL-VPN
    Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityFortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:32 UTC.