Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-27 12:52Z
2021-08-12
2021-08-12 18:15Z
HIGH

CVE-2021-34524 — Microsoft Dynamics_365: Dynamics 365 On-Premises Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34524

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 87th percentile

VNDMicrosoftTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2021-08-12
2021-08-12 18:15Z
HIGH

CVE-2021-34486 — Microsoft Windows_10_1809: Windows Event Tracing Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34486in the wild

Windows Event Tracing Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 94th percentile

CWECWE 416VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
91
Edit Score
2021-08-12
2021-08-12 18:15Z
HIGH

CVE-2021-34484 — Microsoft Windows_10_1507: Windows User Profile Service Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34484in the wild

Windows User Profile Service Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 97th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
94
Edit Score
2021-08-12
2021-08-12 18:15Z
MED

CVE-2021-34480 — Microsoft Windows_10: Scripting Engine Memory Corruption Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34480

Scripting Engine Memory Corruption Vulnerability CVSSv3.1 6.8 (MEDIUM) · EPSS 98th percentile

CWECWE 787VNDMicrosoftVNDScriptingTYPVulnerability
6.8
CVSS v3.1
94
Edit Score
2021-08-12
2021-08-12 18:15Z
HIGH

CVE-2021-34478 — Microsoft 365_apps: Office Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34478

Microsoft Office Remote Code Execution Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 99th percentile

VNDMicrosoftTYPVulnerability
7.8
CVSS v3.1
100
Edit Score
2021-08-12
2021-08-12 18:15Z
CRIT

CVE-2021-26432 — Microsoft Windows_10: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26432

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 95th percentile

VNDMicrosoftTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2021-08-12
2021-08-12 18:15Z
CRIT

CVE-2021-26424 — Microsoft Windows_10: Windows TCP/IP Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-26424

Windows TCP/IP Remote Code Execution Vulnerability CVSSv3.1 9.9 (CRITICAL) · EPSS 99th percentile

VNDMicrosoftTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
728 × 90 / responsive · programmatic ad slot
2021-08-11
2021-08-11 15:15Z
CRIT

CVE-2019-25052 — Trustedfirmware Op-tee: In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2019-25052

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information. CVSSv3.1 9.1 (CRITICAL) · EPSS 42th percentile

CWECWE 327VNDTrustedfirmwareVNDLinaroTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2021-08-05
2021-08-05 21:15Z
HIGH

CVE-2021-22926 — Haxx Curl: libcurl-using applications can ask for a specific client certificate to be used in a

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-22926

libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is built to use the macOS native TLS library Secure Transport, an application can ask for the client certificate by name or with a file name - using the same option. If the name exists as a file, it will be used instead of by name.If the appliction runs with a current working directory CVSSv3.1 7.5 (HIGH) · EPSS 95th percentile

CWECWE 295CWECWE 840VNDNetappVNDHaxxTYPVulnerability
7.5
CVSS v3.1
90
Edit Score
2021-08-03
2021-08-03 16:15Z
CRIT

CVE-2021-33485 — Codesys Control: Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33485

CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. CVSSv3.1 9.8 (CRITICAL) · EPSS 60th percentile

CWECWE 787CWECWE 122VNDCodesysTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2021-07-26
2021-07-26 20:15Z
HIGH

CVE-2020-18171 — Techsmith Snagit: 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2020-18171

TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details. CVSSv3.1 8.8 (HIGH) · EPSS 12th percentile

CWECWE 269VNDTechsmithTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2021-07-22
2021-07-22 18:15Z
HIGH

CVE-2021-36222 — Mit Kerberos_5: ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-36222

ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation. CVSSv3.1 7.5 (HIGH) · EPSS 96th percentile

CWECWE 476VNDNetappVNDMitTYPVulnerability
7.5
CVSS v3.1
91
Edit Score
2021-07-22
2021-07-22 18:15Z
CRIT

CVE-2021-35942 — Gnu Glibc: The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-35942

The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations. CVSSv3.1 9.1 (CRITICAL)

CWECWE 190CWECWE 704VNDGnuVNDNetappTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2021-07-22
2021-07-22 07:15Z
HIGH

CVE-2021-36934 — Microsoft Windows_10_1809: An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-36934in the wild

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. An attacker must have the ability to execute code on a victim system t CVSSv3.1 7.8 (HIGH) · EPSS 99th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
7.8
CVSS v3.1
100
Edit Score
2021-07-21
2021-07-21 15:15Z
HIGH

CVE-2021-2351 — Oracle Advanced_networking_option: Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-2351

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact addi CVSSv3.1 8.3 (HIGH) · EPSS 83th percentile

CWECWE 327CWECWE 384VNDOracleVNDVulnerabilityTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
2021-07-20
2021-07-20 19:15Z
MED

CVE-2021-33910 — Systemd_project Systemd: basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-33910

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash. CVSSv3.1 5.5 (MEDIUM) · EPSS 95th percentile

CWECWE 770VNDFedoraprojectVNDSystemd ProjectTYPVulnerability
5.5
CVSS v3.1
80
Edit Score
2021-07-16
2021-07-16 21:15Z
HIGH

CVE-2021-34481 — Microsoft Windows_10: A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34481

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDATE August 10, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerab CVSSv3.1 8.8 (HIGH) · EPSS 99th percentile

CWECWE 269VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
100
Edit Score
2021-07-16
2021-07-16 21:15Z
CRIT

CVE-2021-34458 — Microsoft Windows_server_2016: Windows Kernel Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34458

Windows Kernel Remote Code Execution Vulnerability CVSSv3.1 9.9 (CRITICAL) · EPSS 83th percentile

VNDMicrosoftTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2021-07-16
2021-07-16 21:15Z
HIGH

CVE-2021-34450 — Microsoft Windows_10: Windows Hyper-V Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34450

Windows Hyper-V Remote Code Execution Vulnerability CVSSv3.1 8.5 (HIGH) · EPSS 81th percentile

VNDMicrosoftTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2021-07-16
2021-07-16 21:15Z
MED

CVE-2021-34448 — Microsoft Windows_10_1507: Scripting Engine Memory Corruption Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34448in the wild

Scripting Engine Memory Corruption Vulnerability CVSSv3.1 6.8 (MEDIUM) · EPSS 98th percentile

CWECWE 787VNDMicrosoftVNDScriptingTYPVulnerabilitySTAitw exploited
6.8
CVSS v3.1
93
Edit Score
2021-07-16
2021-07-16 21:15Z
HIGH

CVE-2021-34446 — Microsoft Windows_10: Windows HTML Platforms Security Feature Bypass Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34446

Windows HTML Platforms Security Feature Bypass Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 76th percentile

VNDMicrosoftTYPVulnerability
8.0
CVSS v3.1
91
Edit Score
2021-07-16
2021-07-16 21:15Z
HIGH

CVE-2021-34442 — Microsoft Windows_server_2008: Windows DNS Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34442

Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 86th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-34525 — Microsoft Windows_server_2012: Windows DNS Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34525

Windows DNS Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 80th percentile

VNDMicrosoftTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2021-07-14
2021-07-14 18:15Z
CRIT

CVE-2021-34523 — Microsoft Exchange_server: Exchange Server Elevation of Privilege Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34523in the wild

Microsoft Exchange Server Elevation of Privilege Vulnerability CVSSv3.1 9.0 (CRITICAL) · EPSS 100th percentile

VNDMicrosoftTYPVulnerabilitySTAitw exploited
9.0
CVSS v3.1
100
Edit Score
2021-07-14
2021-07-14 18:15Z
HIGH

CVE-2021-34520 — Microsoft Sharepoint_foundation: SharePoint Server Remote Code Execution Vulnerability

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-34520

Microsoft SharePoint Server Remote Code Execution Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 87th percentile

CWECWE 502VNDMicrosoftTYPVulnerability
8.1
CVSS v3.1
91
Edit Score