Category

CVE Database

70 articles · Page 1 of 6
All News Malware Ransomware Breaches Vulnerabilities Nation-State CVEs
CVE
CVE-2026-34197 — Apache ActiveMQ Improper Input Validation Vulnerability
Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection. Required action: Apply mitigat…
CISA KEV · Apr 16, 2026 · CRITICAL
CVE
CVE-2009-0238 — Microsoft Office Remote Code Execution
Microsoft Office Excel contains a remote code execution vulnerability that could allow an attacker to take complete control of an …
CISA KEV · Apr 14, 2026 · CRITICAL
CVE
CVE-2026-32201 — Microsoft SharePoint Server Improper Input Validation Vulnerability
Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker to perform sp…
CISA KEV · Apr 14, 2026 · CRITICAL
CVE
CVE-2012-1854 — Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code …
CISA KEV · Apr 13, 2026 · CRITICAL
CVE
CVE-2025-60710 — Microsoft Windows Link Following Vulnerability
Microsoft Windows contains a link following vulnerability that allows for privilege escalation Required action: Apply mitigations …
CISA KEV · Apr 13, 2026 · CRITICAL
CVE
CVE-2023-21529 — Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote cod…
CISA KEV · Apr 13, 2026 · CRITICAL
CVE
CVE-2023-36424 — Microsoft Windows Out-of-Bounds Read Vulnerability
Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for p…
CISA KEV · Apr 13, 2026 · CRITICAL
CVE
CVE-2020-9715 — Adobe Acrobat Use-After-Free Vulnerability
Adobe Acrobat contains a use-after-free vulnerability that allows for code execution Required action: Apply mitigations per vendor…
CISA KEV · Apr 13, 2026 · CRITICAL
CVE
CVE-2026-21643 — Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized…
CISA KEV · Apr 13, 2026 · CRITICAL
CVE
CVE-2026-34621 — Adobe Acrobat and Reader Prototype Pollution Vulnerability
Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution. Required action: Ap…
CISA KEV · Apr 13, 2026 · CRITICAL
CVE
CVE-2026-1340 — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability that could allow attackers to achieve unauthenticate…
CISA KEV · Apr 8, 2026 · CRITICAL
CVE
Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure
Advisory at a Glance Title Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastruc…
CISA Advisories · Apr 6, 2026 · CRITICAL