60.267 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
CVE Tracker
60.267 CVE
Ten vendors followed by CPE identifier, not by keyword: a CVE appears here once NVD says which products it affects — usually a few days after it is published.
| Identifier | Severity, sort descending | Product and flaw | EPSS, sorted ascending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2024-36484 | MED 5.5 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time. Christoph reported the following splat: WARNING: CPU: 1 PID: 772 at net/ipv4/af_inet.c:761 __inet_accept+0x1f4/0x4a0 Modules linked in: CPU: 1 | 0.3% | — |
| CVE-2024-34133 | HIGH 7.8 | adobe illustrator Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open | 0.3% | — |
| CVE-2024-33504 | MED 4.1 | fortinet fortimanager A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9, 7.0 all versions, 6.4 all versions may allow an attacker with JSON API access permissions to | 0.3% | — |
| CVE-2024-26652 | MED 4.1 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: pds_core: Fix possible double free in error handling path When auxiliary_device_add() returns error and then calls auxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release c | 0.3% | — |
| CVE-2023-22998 | MED 5.5 | linux linux_kernel In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer). | 0.3% | — |
| CVE-2022-48803 | HIGH 7.3 | linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: phy: ti: Fix missing sentinel for clk_div_table _get_table_maxdiv() tries to access "clk_div_table" array out of bound defined in phy-j721e-wiz.c. Add a sentinel entry to prevent the followi | 0.3% | — |
| CVE-2022-22216 | MED 4.3 | juniper junos An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the PFE of Juniper Networks Junos OS on PTX Series and QFX10k Series allows an adjacent unauthenticated attacker to gain access to sensitive information. PTX1000 and PTX10000 Series | 0.3% | — |
| CVE-2021-36177 | MED 4.2 | fortinet fortiauthenticator An improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database. | 0.3% | — |
| CVE-2021-34728 | HIGH 7.8 | cisco ios_xr Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details section of th | 0.3% | — |
| CVE-2021-3428 | MED 5.5 | linux linux_kernel A flaw was found in the Linux kernel. A denial of service problem is identified if an extent tree is corrupted in a crafted ext4 filesystem in fs/ext4/extents.c in ext4_es_cache_extent. Fabricating an integer overflow, A local attacker with a special user priv | 0.3% | — |
| CVE-2021-32460 | HIGH 7.8 | trendmicro maximum_security_2021 The Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access control vulnerability in the installer which could allow a local attacker to escalate privileges on a target machine. Please note than an attacker must already hav | 0.3% | — |
| CVE-2020-3988 | MED 6.1 | vmware horizon_client VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser). A malicious actor with normal access to a virtual machine may be able to exploit these iss | 0.3% | — |
| CVE-2020-3987 | MED 6.1 | vmware horizon_client VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit | 0.3% | — |
| CVE-2020-3986 | MED 6.1 | vmware horizon_client VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues t | 0.3% | — |
| CVE-2020-1987 | LOW 3.9 | paloaltonetworks globalprotect An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie information when the troubleshooting logging level is set to "Dump". This issue affects Palo Alto Net | 0.3% | — |
| CVE-2016-10044 | HIGH 7.8 | google android The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system ca | 0.3% | — |
| CVE-2007-2491 | HIGH 7.2 | vmware server The PIIX4 power management subsystem in EMC VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996 allows local users to write to arbitrary memory locations via a crafted poke to I/O port 0x1004, triggering a denial of service (virtual machine crash) or | 0.3% | — |
| CVE-2026-83991 | MED 5.5 | microsoft windows_10_1809 Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-77105 | HIGH 8.8 | commvault commvault CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server. | 0.3% | — |
| CVE-2026-7345 | HIGH 8.3 | google chrome Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Hig | 0.3% | — |
| CVE-2026-73004 | MED 5.5 | microsoft windows_10_21h2 Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-72966 | MED 5.5 | microsoft windows_10_1607 Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-72964 | MED 5.5 | microsoft windows_10_1607 Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-69905 | MED 5.5 | microsoft windows_10_1809 Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally. | 0.3% | — |
| CVE-2026-69674 | MED 5.5 | microsoft windows_10_1809 Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally. | 0.3% | — |