Google Chrome for Android UI Heap Buffer Overflow Vulnerability
Google · exploited, added to CISA KEV
CVE-2020-16010
Assessment context
CISA lists it as exploited
Weekly briefing
Week 44 · 1 Nov – 7 Nov 2021 UTC · assess the changes, then plan the next dates.
All dated changes in this period
160 source records · 35 groupsSecurityAndroid2 source records
Android · exploited, added to CISA KEV · 2 entries
- Android Kernel Out-of-Bounds Write Vulnerability
Android · exploited, added to CISA KEV
CVE-2020-0041
Assessment context
CISA lists it as exploited
- Android Kernel Use-After-Free Vulnerability
Android · exploited, added to CISA KEV
CVE-2019-2215
Assessment context
CISA lists it as exploited
SecurityAtlassian Jira and Confluence4 source records
Atlassian · exploited, added to CISA KEV · 4 entries
- Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
Atlassian · exploited, added to CISA KEV
CVE-2021-26084
Assessment context
CISA lists it as exploited, including by ransomware
- Atlassian Confluence Server and Data Center Path Traversal Vulnerability
Atlassian · exploited, added to CISA KEV
CVE-2019-3398
Assessment context
CISA lists it as exploited
- Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability
Atlassian · exploited, added to CISA KEV
CVE-2019-3396
Assessment context
CISA lists it as exploited, including by ransomware
Show the other 1 entries
- Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
Atlassian · exploited, added to CISA KEV
CVE-2019-11580
Assessment context
CISA lists it as exploited, including by ransomware
SecurityCisco11 source records
Cisco · exploited, added to CISA KEV · 11 entries
- Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2020-3580
Assessment context
CISA lists it as exploited, including by ransomware
- Cisco ASA and FTD Read-Only Path Traversal Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2020-3452
Assessment context
CISA lists it as exploited
- Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0296
Assessment context
CISA lists it as exploited
Show the other 8 entries
- Cisco HyperFlex HX Data Platform Command Injection Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2021-1498
Assessment context
CISA lists it as exploited
- Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2021-1497
Assessment context
CISA lists it as exploited
- Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2020-3566
Assessment context
CISA lists it as exploited
- Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2020-3569
Assessment context
CISA lists it as exploited
- Cisco IOS XR Software Discovery Protocol Format String Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2020-3118
Assessment context
CISA lists it as exploited
- Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0171
Assessment context
CISA lists it as exploited
- Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2020-3161
Assessment context
CISA lists it as exploited
- Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2019-1653
Assessment context
CISA lists it as exploited
SecurityFortinet3 source records
Fortinet · exploited, added to CISA KEV · 3 entries
- Fortinet FortiOS Default Configuration Vulnerability
Fortinet · exploited, added to CISA KEV
CVE-2019-5591
Assessment context
CISA lists it as exploited, including by ransomware
- Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
Fortinet · exploited, added to CISA KEV
CVE-2020-12812
Assessment context
CISA lists it as exploited, including by ransomware
- Fortinet FortiOS SSL VPN Path Traversal Vulnerability
Fortinet · exploited, added to CISA KEV
CVE-2018-13379
Assessment context
CISA lists it as exploited, including by ransomware
SecurityGitLab
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
GitLab · exploited, added to CISA KEV
CVE-2021-22205
Assessment context
CISA lists it as exploited, including by ransomware
SecurityGoogle Chrome21 source records
Google · exploited, added to CISA KEV · 21 entries
- Google Chrome FreeType Heap Buffer Overflow Vulnerability
Google · exploited, added to CISA KEV
CVE-2020-15999
Assessment context
CISA lists it as exploited
- Google Chrome Use-After-Free Vulnerability
Google · exploited, added to CISA KEV
CVE-2020-16017
Assessment context
CISA lists it as exploited
- Google Chromium Blink Use-After-Free Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-21193
Assessment context
CISA lists it as exploited
Show the other 18 entries
- Google Chromium Blink Use-After-Free Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-21206
Assessment context
CISA lists it as exploited
- Google Chromium Indexed DB API Use-After-Free Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-30633
Assessment context
CISA lists it as exploited
- Google Chromium Information Disclosure Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-37976
Assessment context
CISA lists it as exploited
- Google Chromium Intents Improper Input Validation Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-38000
Assessment context
CISA lists it as exploited
- Google Chromium Portals Use-After-Free Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-37973
Assessment context
CISA lists it as exploited
- Google Chromium Race Condition Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-21166
Assessment context
CISA lists it as exploited
- Google Chromium V8 Heap Buffer Overflow Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-21148
Assessment context
CISA lists it as exploited
- Google Chromium V8 Improper Input Validation Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-21220
Assessment context
CISA lists it as exploited
- Google Chromium V8 Incorrect Implementation Vulnerabililty
Google · exploited, added to CISA KEV
CVE-2020-16013
Assessment context
CISA lists it as exploited
- Google Chromium V8 Memory Corruption Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-38003
Assessment context
CISA lists it as exploited
- Google Chromium V8 Out-of-Bounds Write Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-30632
Assessment context
CISA lists it as exploited
- Google Chromium V8 Type Confusion Vulnerability
Google · exploited, added to CISA KEV
CVE-2020-16009
Assessment context
CISA lists it as exploited
- Google Chromium V8 Type Confusion Vulnerability
Google · exploited, added to CISA KEV
CVE-2020-6418
Assessment context
CISA lists it as exploited
- Google Chromium V8 Type Confusion Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-21224
Assessment context
CISA lists it as exploited
- Google Chromium V8 Type Confusion Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-30551
Assessment context
CISA lists it as exploited
- Google Chromium V8 Type Confusion Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-30563
Assessment context
CISA lists it as exploited
- Google Chromium V8 Use-After-Free Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-37975
Assessment context
CISA lists it as exploited
- Google Chromium WebGL Use-After-Free Vulnerability
Google · exploited, added to CISA KEV
CVE-2021-30554
Assessment context
CISA lists it as exploited
SecurityMozilla Firefox3 source records
Mozilla · exploited, added to CISA KEV · 3 entries
- Mozilla Firefox And Thunderbird Type Confusion Vulnerability
Mozilla · exploited, added to CISA KEV
CVE-2019-17026
Assessment context
CISA lists it as exploited
- Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
Mozilla · exploited, added to CISA KEV
CVE-2020-6819
Assessment context
CISA lists it as exploited
- Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
Mozilla · exploited, added to CISA KEV
CVE-2020-6820
Assessment context
CISA lists it as exploited
SecurityOracle WebLogic Server4 source records
Oracle · exploited, added to CISA KEV · 4 entries
- Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2015-4852
Assessment context
CISA lists it as exploited
- Oracle WebLogic Server Remote Code Execution Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2020-14750
Assessment context
CISA lists it as exploited
- Oracle WebLogic Server Remote Code Execution Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2020-14882
Assessment context
CISA lists it as exploited
Show the other 1 entries
- Oracle WebLogic Server Unspecified Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2020-14883
Assessment context
CISA lists it as exploited
SecurityVMware ESXi / VMware vCenter Server2 source records
VMware · exploited, added to CISA KEV · 2 entries
- Multiple VMware Products Command Injection Vulnerability
VMware · exploited, added to CISA KEV
CVE-2020-4006
Assessment context
CISA lists it as exploited
- VMware Multiple Products Privilege Escalation Vulnerability
VMware · exploited, added to CISA KEV
CVE-2020-3950
Assessment context
CISA lists it as exploited
SecurityVMware ESXi2 source records
VMware · exploited, added to CISA KEV · 2 entries
- VMware ESXi OpenSLP Use-After-Free Vulnerability
VMware · exploited, added to CISA KEV
CVE-2020-3992
Assessment context
CISA lists it as exploited, including by ransomware
- VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
VMware · exploited, added to CISA KEV
CVE-2019-5544
Assessment context
CISA lists it as exploited, including by ransomware
SecurityVMware vCenter Server4 source records
VMware · exploited, added to CISA KEV · 4 entries
- VMware vCenter Server File Upload Vulnerability
VMware · exploited, added to CISA KEV
CVE-2021-22005
Assessment context
CISA lists it as exploited, including by ransomware
- VMware vCenter Server Improper Input Validation Vulnerability
VMware · exploited, added to CISA KEV
CVE-2021-21985
Assessment context
CISA lists it as exploited, including by ransomware
- VMware vCenter Server Information Disclosure Vulnerability
VMware · exploited, added to CISA KEV
CVE-2020-3952
Assessment context
CISA lists it as exploited
Show the other 1 entries
- VMware vCenter Server Remote Code Execution Vulnerability
VMware · exploited, added to CISA KEV
CVE-2021-21972
Assessment context
CISA lists it as exploited, including by ransomware
SecurityiOS and iPadOS / macOS15 source records
Apple · exploited, added to CISA KEV · 15 entries
- Apple Multiple Products Code Execution Vulnerability
Apple · exploited, added to CISA KEV
CVE-2020-9859
Assessment context
CISA lists it as exploited
- Apple Multiple Products Integer Overflow Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30860
Assessment context
CISA lists it as exploited
- Apple Multiple Products Memory Corruption Vulnerability
Apple · exploited, added to CISA KEV
CVE-2020-27930
Assessment context
CISA lists it as exploited
Show the other 12 entries
- Apple Multiple Products Memory Corruption Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30807
Assessment context
CISA lists it as exploited
- Apple Multiple Products Memory Initialization Vulnerability
Apple · exploited, added to CISA KEV
CVE-2020-27950
Assessment context
CISA lists it as exploited
- Apple Multiple Products Race Condition Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-1782
Assessment context
CISA lists it as exploited
- Apple Multiple Products Type Confusion Vulnerability
Apple · exploited, added to CISA KEV
CVE-2020-27932
Assessment context
CISA lists it as exploited
- Apple Multiple Products WebKit Integer Overflow Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30663
Assessment context
CISA lists it as exploited
- Apple Multiple Products WebKit Memory Corruption Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30665
Assessment context
CISA lists it as exploited
- Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30661
Assessment context
CISA lists it as exploited
- Apple iOS and macOS Group Facetime Vulnerability
Apple · exploited, added to CISA KEV
CVE-2019-6223
Assessment context
CISA lists it as exploited
- Apple iOS, iPadOS, and macOS Type Confusion Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30869
Assessment context
CISA lists it as exploited
- Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-1870
Assessment context
CISA lists it as exploited
- Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-1871
Assessment context
CISA lists it as exploited
- Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30858
Assessment context
CISA lists it as exploited
SecurityiOS and iPadOS6 source records
Apple · exploited, added to CISA KEV · 6 entries
- Apple iOS WebKit Buffer Overflow Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30666
Assessment context
CISA lists it as exploited
- Apple iOS WebKit Memory Corruption Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30761
Assessment context
CISA lists it as exploited
- Apple iOS WebKit Use-After-Free Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30762
Assessment context
CISA lists it as exploited
Show the other 3 entries
- Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
Apple · exploited, added to CISA KEV
CVE-2020-9819
Assessment context
CISA lists it as exploited
- Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
Apple · exploited, added to CISA KEV
CVE-2020-9818
Assessment context
CISA lists it as exploited
- Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-1879
Assessment context
CISA lists it as exploited
SecuritymacOS2 source records
Apple · exploited, added to CISA KEV · 2 entries
- Apple macOS Unspecified Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30657
Assessment context
CISA lists it as exploited
- Apple macOS Unspecified Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30713
Assessment context
CISA lists it as exploited
Security.NET3 source records
Added to CISA KEV · 3 entries
- Microsoft .NET Framework Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2017-8759
Assessment context
CISA lists it as exploited
- Microsoft .NET Framework Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2020-0646
Assessment context
CISA lists it as exploited
- Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2020-1147
Assessment context
CISA lists it as exploited
SecurityDefender
Microsoft Defender Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2021-1647
Assessment context
CISA lists it as exploited
SecurityExchange9 source records
Added to CISA KEV · 9 entries
- Microsoft Exchange Server Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2021-34523
Assessment context
CISA lists it as exploited
- Microsoft Exchange Server Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2020-17144
Assessment context
CISA lists it as exploited
- Microsoft Exchange Server Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2021-26855
Assessment context
CISA lists it as exploited
Show the other 6 entries
- Microsoft Exchange Server Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2021-26857
Assessment context
CISA lists it as exploited
- Microsoft Exchange Server Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2021-26858
Assessment context
CISA lists it as exploited
- Microsoft Exchange Server Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2021-27065
Assessment context
CISA lists it as exploited
- Microsoft Exchange Server Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2021-34473
Assessment context
CISA lists it as exploited
- Microsoft Exchange Server Security Feature Bypass Vulnerability
Added to CISA KEV
CVE-2021-31207
Assessment context
CISA lists it as exploited
- Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2020-0688
Assessment context
CISA lists it as exploited
SecurityHyper-V
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2020-1040
Assessment context
CISA lists it as exploited
SecurityMicrosoft 365 Apps8 source records
Added to CISA KEV · 8 entries
- Microsoft Office Memory Corruption Vulnerability
Added to CISA KEV
CVE-2015-1641
Assessment context
CISA lists it as exploited
- Microsoft Office Memory Corruption Vulnerability
Added to CISA KEV
CVE-2017-11882
Assessment context
CISA lists it as exploited
- Microsoft Office Memory Corruption Vulnerability
Added to CISA KEV
CVE-2018-0798
Assessment context
CISA lists it as exploited
Show the other 5 entries
- Microsoft Office Memory Corruption Vulnerability
Added to CISA KEV
CVE-2018-0802
Assessment context
CISA lists it as exploited
- Microsoft Office OLE DLL Side Loading Vulnerability
Added to CISA KEV
CVE-2016-3235
Assessment context
CISA lists it as exploited
- Microsoft Office Outlook Security Feature Bypass Vulnerability
Added to CISA KEV
CVE-2017-11774
Assessment context
CISA lists it as exploited
- Microsoft Office Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2021-27059
Assessment context
CISA lists it as exploited
- Microsoft Office and WordPad Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2017-0199
Assessment context
CISA lists it as exploited
SecurityMicrosoft Edge
Microsoft Edge and Internet Explorer Memory Corruption Vulnerability
Added to CISA KEV
CVE-2020-0878
Assessment context
CISA lists it as exploited
SecurityMicrosoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability2 source records
Added to CISA KEV · 2 entries
- Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2021-31199
Assessment context
CISA lists it as exploited
- Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2021-31201
Assessment context
CISA lists it as exploited
SecurityMicrosoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer Memory Corruption Vulnerability
Added to CISA KEV
CVE-2021-26411
Assessment context
CISA lists it as exploited
SecurityMicrosoft Internet Explorer Remote Code Execution Vulnerability
Microsoft Internet Explorer Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2021-27085
Assessment context
CISA lists it as exploited
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.