BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more

CVE Radar:Know what’s exposed. Fix what matters.

Every published CVE with its CVSS severity, CISA known-exploited status and EPSS exploit probability — pulled from NVD, CVE.org, CISA KEV and FIRST, and refreshed hourly.

  1. Published this week2,94693% have a severity scoreCVE.org · NVDAll new CVEs
  2. Likely to be exploited1New this week with EPSS ≥ 10%FIRST EPSSEPSS explained
  3. Known exploited1,768+34 in last 30 daysCISA KEVKEV tracker

7 days to Nov 5, 2026 · updated 10:08 UTC

1,768 CVEs in the CISA Known Exploited Vulnerabilities catalog (added up to Nov 5, 2026) · page 62 of 71

  1. Added to KEVNov 3, 2021
    CVE-2021-306658.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products WebKit Memory Corruption VulnerabilityApple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  2. Added to KEVNov 3, 2021
    CVE-2021-306638.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products WebKit Integer Overflow VulnerabilityApple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.8HIGH3.1CISA-ADPCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  3. Added to KEVNov 3, 2021
    CVE-2021-306618.8 HIGH⚡ Known ExploitedApple Multiple Products
    Apple Multiple Products WebKit Storage Use-After-Free VulnerabilityApple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  4. Added to KEVNov 3, 2021
    CVE-2021-306575.5 MEDIUM⚡ Known ExploitedApple macOS
    Apple macOS Unspecified VulnerabilityApple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks.
    ScoreSeverityVersionVector String
    5.5MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
    4.3MEDIUM2.0NVDAV:N/AC:M/Au:N/C:N/I:P/A:N
  5. Added to KEVNov 3, 2021
    CVE-2021-306339.6 CRITICAL⚡ Known ExploitedGoogle Chromium Indexed DB API
    Google Chromium Indexed DB API Use-After-Free VulnerabilityGoogle Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    9.6CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  6. Added to KEVNov 3, 2021
    CVE-2021-306328.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Out-of-Bounds Write VulnerabilityGoogle Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  7. Added to KEVNov 3, 2021
    CVE-2021-305638.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Type Confusion VulnerabilityGoogle Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  8. Added to KEVNov 3, 2021
    CVE-2021-305548.8 HIGH⚡ Known ExploitedGoogle Chromium WebGL
    Google Chromium WebGL Use-After-Free VulnerabilityGoogle Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  9. Added to KEVNov 3, 2021
    CVE-2021-305518.8 HIGH⚡ Known ExploitedGoogle Chromium V8
    Google Chromium V8 Type Confusion VulnerabilityGoogle Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  10. Added to KEVNov 3, 2021
    CVE-2021-3011610.0 CRITICAL⚡ Known ExploitedKaseya Virtual System/Server Administrator (VSA)
    Kaseya Virtual System/Server Administrator (VSA) Information Disclosure VulnerabilityKaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.
    ScoreSeverityVersionVector String
    10.0CRITICAL3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  11. Added to KEVNov 3, 2021
    CVE-2021-286648.8 HIGH⚡ Known ExploitedArm Mali Graphics Processing Unit (GPU)
    Arm Mali Graphics Processing Unit (GPU) Unspecified VulnerabilityArm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  12. Added to KEVNov 3, 2021
    CVE-2021-286638.8 HIGH⚡ Known ExploitedArm Mali Graphics Processing Unit (GPU)
    Arm Mali Graphics Processing Unit (GPU) Use-After-Free VulnerabilityArm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    9.0HIGH2.0NVDAV:N/AC:L/Au:S/C:C/I:C/A:C
  13. Added to KEVNov 3, 2021
    CVE-2021-285508.8 HIGH⚡ Known ExploitedAdobe Acrobat and Reader
    Adobe Acrobat and Reader Use-After-Free VulnerabilityAdobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.
    ScoreSeverityVersionVector String
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    9.6CRITICAL3.0CNACVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  14. Added to KEVNov 3, 2021
    CVE-2021-283107.8 HIGH⚡ Known ExploitedMicrosoft Win32k
    Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    4.6MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:P
  15. Added to KEVNov 3, 2021
    CVE-2021-275625.5 MEDIUM⚡ Known ExploitedArm Trusted Firmware
    Arm Trusted Firmware Out-of-Bounds Write VulnerabilityArm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers.
    ScoreSeverityVersionVector String
    5.5MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    4.9MEDIUM2.0NVDAV:L/AC:L/Au:N/C:N/I:N/A:C
  16. Added to KEVNov 3, 2021
    CVE-2021-275619.8 CRITICAL⚡ Known ExploitedYealink Device Management
    Yealink Device Management Server-Side Request Forgery (SSRF) VulnerabilityYealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  17. Added to KEVNov 3, 2021
    CVE-2021-271049.8 CRITICAL⚡ Known ExploitedAccellion FTA
    Accellion FTA OS Command Injection VulnerabilityAccellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C
  18. Added to KEVNov 3, 2021
    CVE-2021-271039.8 CRITICAL⚡ Known ExploitedAccellion FTA
    Accellion FTA Server-Side Request Forgery (SSRF) VulnerabilityAccellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  19. Added to KEVNov 3, 2021
    CVE-2021-271027.8 HIGH⚡ Known ExploitedAccellion FTA
    Accellion FTA OS Command Injection VulnerabilityAccellion FTA contains an OS command injection vulnerability exploited via a local web service call.
    ScoreSeverityVersionVector String
    7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    7.2HIGH2.0NVDAV:L/AC:L/Au:N/C:C/I:C/A:C
  20. Added to KEVNov 3, 2021
    CVE-2021-271019.8 CRITICAL⚡ Known ExploitedAccellion FTA
    Accellion FTA SQL Injection VulnerabilityAccellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.
    ScoreSeverityVersionVector String
    9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    7.5HIGH2.0NVDAV:N/AC:L/Au:N/C:P/I:P/A:P
  21. Added to KEVNov 3, 2021
    CVE-2021-270858.8 HIGH⚡ Known ExploitedMicrosoft Internet Explorer
    Microsoft Internet Explorer Remote Code Execution VulnerabilityMicrosoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    8.8HIGH3.1CNACVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
    8.8HIGH3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    7.6HIGH2.0NVDAV:N/AC:H/Au:N/C:C/I:C/A:C
  22. Added to KEVNov 3, 2021
    CVE-2021-270657.8 HIGH⚡ Known ExploitedMicrosoft Exchange Server
    Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  23. Added to KEVNov 3, 2021
    CVE-2021-270597.6 HIGH⚡ Known ExploitedMicrosoft Office
    Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office contains an unspecified vulnerability that allows for remote code execution.
    ScoreSeverityVersionVector String
    7.6HIGH3.1CNACVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
    6.5MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
    8.5HIGH2.0NVDAV:N/AC:M/Au:S/C:C/I:C/A:C
  24. Added to KEVNov 3, 2021
    CVE-2021-268587.8 HIGH⚡ Known ExploitedMicrosoft Exchange Server
    Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P
  25. Added to KEVNov 3, 2021
    CVE-2021-268577.8 HIGH⚡ Known ExploitedMicrosoft Exchange Server
    Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
    ScoreSeverityVersionVector String
    7.8HIGH3.1CNACVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    6.8MEDIUM2.0NVDAV:N/AC:M/Au:N/C:P/I:P/A:P

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 10:22 UTC.

CVE Database: Latest Vulnerabilities | Secure.com