Update now: flaws under attack
Security flaws that attackers are already using in phones, computers, browsers and home routers. If you use one of these, install the update.
- Added in the last 30 days
- 7
- Tracked this year
- 63
November 20263
- Microsoft Office: Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
ExploitedCVE-2026-124194What to do: Update Microsoft Office or Microsoft 365, then restart the apps.
- Google Chromium: Use-After-Free Vulnerability
ExploitedCVE-2026-125350What to do: Update Chrome, and other Chromium browsers such as Edge, Brave and Opera. Restart the browser to finish.
- Apple Multiple Products: Improper Authentication Vulnerability
ExploitedCVE-2024-27834What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
October 20265
- Plex Media Server: External Control of File Name or Path Vulnerability
ExploitedCVE-2026-96656What to do: Update Plex Media Server to the latest version.
- Plex Media Server: Server-Side Request Forgery (SSRF) Vulnerability
ExploitedCVE-2026-96655What to do: Update Plex Media Server to the latest version.
- Plex Media Server: Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
ExploitedCVE-2026-96654What to do: Update Plex Media Server to the latest version.
- Plex Media Server: Server-Side Request Forgery (SSRF) Vulnerability
ExploitedCVE-2026-96652What to do: Update Plex Media Server to the latest version.
- Microsoft Windows: Command Injection Vulnerability
ExploitedCVE-2026-96951What to do: Run Windows Update and restart the PC.
September 20266
- Apple Multiple Products: Out-of-Bounds Write Vulnerability
ExploitedCVE-2026-86950What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
- Google Pixel: Improper Authorization Vulnerability
ExploitedCVE-2026-58704What to do: Install the latest Android security update in Settings, then restart the phone.
- Google Chromium V8: Out of Bounds Write Vulnerability
ExploitedCVE-2026-87491What to do: Update Chrome, and other Chromium browsers such as Edge, Brave and Opera. Restart the browser to finish.
- Microsoft Windows: Link Following Vulnerability
ExploitedCVE-2026-81963What to do: Run Windows Update and restart the PC.
- Microsoft Windows: Heap-Based Buffer Overflow Vulnerability
ExploitedCVE-2026-85880What to do: Run Windows Update and restart the PC.
- Google Chromium V8: Type Confusion Vulnerability
ExploitedCVE-2026-85046What to do: Update Chrome, and other Chromium browsers such as Edge, Brave and Opera. Restart the browser to finish.
August 20262
- Apple macOS: Improper Authentication Vulnerability
ExploitedCVE-2026-65400What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
- Microsoft Windows Ancillary Function Driver for WinSock: Use-After-Free Vulnerability
ExploitedCVE-2026-68820What to do: Run Windows Update and restart the PC.
June 20261
- Google Chromium V8: Out-of-Bounds Read and Write Vulnerability
ExploitedCVE-2026-11645What to do: Update Chrome, and other Chromium browsers such as Edge, Brave and Opera. Restart the browser to finish.
May 20266
- Microsoft Windows: Buffer Overflow Vulnerability
ExploitedCVE-2008-4250What to do: Run Windows Update and restart the PC.
- Adobe Acrobat and Reader: Heap-Based Buffer Overflow Vulnerability
ExploitedCVE-2009-3459What to do: Update Adobe Acrobat or Reader from Help, Check for updates.
- Microsoft Internet Explorer: Use-After-Free Vulnerability
ExploitedCVE-2010-0249What to do: Run Windows Update and restart the PC.
- Microsoft Internet Explorer: Use-After-Free Vulnerability
ExploitedCVE-2010-0806What to do: Run Windows Update and restart the PC.
- Microsoft Defender: Link Following Vulnerability
ExploitedCVE-2026-41091What to do: Run Windows Update and restart the PC.
- Microsoft Defender: Denial of Service Vulnerability
ExploitedCVE-2026-45498What to do: Run Windows Update and restart the PC.
April 20267
- Microsoft Windows: Protection Mechanism Failure Vulnerability
ExploitedCVE-2026-32202What to do: Run Windows Update and restart the PC.
- Microsoft Defender: Insufficient Granularity of Access Control Vulnerability
ExploitedRansomwareCVE-2026-33825What to do: Run Windows Update and restart the PC.
- Microsoft Office: Remote Code Execution
ExploitedCVE-2009-0238What to do: Update Microsoft Office or Microsoft 365, then restart the apps.
- Microsoft Windows: Link Following Vulnerability
ExploitedRansomwareCVE-2025-60710What to do: Run Windows Update and restart the PC.
- Microsoft Windows: Out-of-Bounds Read Vulnerability
ExploitedCVE-2023-36424What to do: Run Windows Update and restart the PC.
- Adobe Acrobat: Use-After-Free Vulnerability
ExploitedCVE-2020-9715What to do: Update Adobe Acrobat or Reader from Help, Check for updates.
- Adobe Acrobat and Reader: Prototype Pollution Vulnerability
ExploitedCVE-2026-34621What to do: Update Adobe Acrobat or Reader from Help, Check for updates.
March 20268
- Apple Multiple Products: Improper Locking Vulnerability
ExploitedCVE-2025-43510What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
- Apple Multiple Products: Classic Buffer Overflow Vulnerability
ExploitedCVE-2025-43520What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
- Apple Multiple Products: Buffer Overflow Vulnerability
ExploitedCVE-2025-31277What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
- Google Chromium V8: Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
ExploitedCVE-2026-3910What to do: Update Chrome, and other Chromium browsers such as Edge, Brave and Opera. Restart the browser to finish.
- Apple Multiple Products: Use-After-Free Vulnerability
ExploitedCVE-2023-43000What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
- Apple Multiple Products: Integer Overflow or Wraparound Vulnerability
ExploitedCVE-2021-30952What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
- Apple iOS and iPadOS: Use-After-Free Vulnerability
ExploitedCVE-2023-41974What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
- Qualcomm Multiple Chipsets: Memory Corruption Vulnerability
ExploitedCVE-2026-21385What to do: Install the latest Android security update in Settings, then restart the phone.
February 20269
- Microsoft Windows: Video ActiveX Control Remote Code Execution Vulnerability
ExploitedCVE-2008-0015What to do: Run Windows Update and restart the PC.
- Google Chromium: CSS Use-After-Free Vulnerability
ExploitedCVE-2026-2441What to do: Update Chrome, and other Chromium browsers such as Edge, Brave and Opera. Restart the browser to finish.
- Apple Multiple Products: Multiple Buffer Overflow Vulnerability
ExploitedCVE-2026-20700What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
- Microsoft Windows: MSHTML Framework Protection Mechanism Failure Vulnerability
ExploitedCVE-2026-21513What to do: Run Windows Update and restart the PC.
- Microsoft Windows: NULL Pointer Dereference Vulnerability
ExploitedCVE-2026-21525What to do: Run Windows Update and restart the PC.
- Microsoft Windows: Shell Protection Mechanism Failure Vulnerability
ExploitedCVE-2026-21510What to do: Run Windows Update and restart the PC.
- Microsoft Windows: Improper Privilege Management Vulnerability
ExploitedCVE-2026-21533What to do: Run Windows Update and restart the PC.
- Microsoft Windows: Type Confusion Vulnerability
ExploitedCVE-2026-21519What to do: Run Windows Update and restart the PC.
- Microsoft Office: Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
ExploitedCVE-2026-21514What to do: Update Microsoft Office or Microsoft 365, then restart the apps.
January 20263
- Microsoft Office: Security Feature Bypass Vulnerability
ExploitedCVE-2026-21509What to do: Update Microsoft Office or Microsoft 365, then restart the apps.
- Microsoft Windows: Information Disclosure Vulnerability
ExploitedCVE-2026-20805What to do: Run Windows Update and restart the PC.
- Microsoft Office: PowerPoint Code Injection Vulnerability
ExploitedCVE-2009-0556What to do: Update Microsoft Office or Microsoft 365, then restart the apps.
December 20255
- Apple Multiple Products: Use-After-Free WebKit Vulnerability
ExploitedCVE-2025-43529What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
- Google Chromium: Out of Bounds Memory Access Vulnerability
ExploitedCVE-2025-14174What to do: Update Chrome, and other Chromium browsers such as Edge, Brave and Opera. Restart the browser to finish.
- RARLAB WinRAR: Path Traversal Vulnerability
ExploitedCVE-2025-6218What to do: Install the latest version of the app from its official site.
- Microsoft Windows: Use After Free Vulnerability
ExploitedCVE-2025-62221What to do: Run Windows Update and restart the PC.
- D-Link Routers: Buffer Overflow Vulnerability
ExploitedCVE-2022-37055What to do: Update the device firmware from its admin page or app. If it no longer gets updates, replace it.
November 20253
- Google Chromium V8: Type Confusion Vulnerability
ExploitedCVE-2025-13223What to do: Update Chrome, and other Chromium browsers such as Edge, Brave and Opera. Restart the browser to finish.
- Microsoft Windows: Race Condition Vulnerability
ExploitedCVE-2025-62215What to do: Run Windows Update and restart the PC.
- Samsung Mobile Devices: Out-of-Bounds Write Vulnerability
ExploitedCVE-2025-21042What to do: Install the latest Android security update in Settings, then restart the phone.
October 20255
- Microsoft Windows: Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
ExploitedCVE-2025-59287What to do: Run Windows Update and restart the PC.
- Apple Multiple Products: Unspecified Vulnerability
ExploitedCVE-2022-48503What to do: Install the latest iOS, iPadOS or macOS update from Settings or System Settings.
- Microsoft Windows: SMB Client Improper Access Control Vulnerability
ExploitedCVE-2025-33073What to do: Run Windows Update and restart the PC.
- Microsoft Windows: Untrusted Pointer Dereference Vulnerability
ExploitedCVE-2025-24990What to do: Run Windows Update and restart the PC.
- Microsoft Windows: Improper Access Control Vulnerability
ExploitedCVE-2025-59230What to do: Run Windows Update and restart the PC.