Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 14 of 30. 100 incidents from 30 March 2023 to 25 July 2023.
25 July 2023
- BookCrossing data breach: 1.6M accounts exposed High · Breach · Closed
24 July 2023
- Tigo data breach: 700K accounts exposed Medium · Breach · Closed
23 July 2023
- Roblox data breach: 52K accounts exposed Medium · Breach · Closed
20 July 2023
- Adobe ColdFusion Improper Access Control Vulnerability (CVE-2023-29298) High · Patch now · Closed
- Adobe ColdFusion Improper Access Control Vulnerability (CVE-2023-38205) High · Patch now · Closed
19 July 2023
- Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability (CVE-2023-3519) Critical · Patch now · Closed
18 July 2023
- Roblox Developer Conference (2023) data breach: 3943 accounts exposed Low · Breach · Closed
17 July 2023
- Microsoft Windows Search Remote Code Execution Vulnerability (CVE-2023-36884) High · Patch now · Closed
13 July 2023
- SolarView Compact Command Injection Vulnerability (CVE-2022-29303) Critical · Patch now · Closed
- Apple Multiple Products WebKit Code Execution Vulnerability (CVE-2023-37450) High · Patch now · Closed
11 July 2023
- Netwrix Auditor Insecure Object Deserialization Vulnerability (CVE-2022-31199) Critical · Patch now · Closed
- Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability (CVE-2023-32046) High · Patch now · Closed
- Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability (CVE-2023-32049) High · Patch now · Closed
- Microsoft Outlook Security Feature Bypass Vulnerability (CVE-2023-35311) High · Patch now · Closed
- Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability (CVE-2023-36874) High · Patch now · Closed
- Vermillion data breach: 8106 accounts exposed High · Breach · Closed
10 July 2023
- Locally data breach: 362K accounts exposed High · Breach · Closed
7 July 2023
- Arm Mali GPU Kernel Driver Use-After-Free Vulnerability (CVE-2021-29256) High · Patch now · Closed
29 June 2023
- D-Link DIR-859 Router Command Execution Vulnerability (CVE-2019-17621) Critical · Patch now · Closed
- D-Link DWL-2600AP Access Point Command Injection Vulnerability (CVE-2019-20500) High · Patch now · Closed
- Samsung Mobile Devices Out-of-Bounds Read Vulnerability (CVE-2021-25487) High · Patch now · Closed
- Samsung Mobile Devices Improper Input Validation Vulnerability (CVE-2021-25489) Medium · Patch now · Closed
- Samsung Mobile Devices Race Condition Vulnerability (CVE-2021-25394) Medium · Patch now · Closed
- Samsung Mobile Devices Race Condition Vulnerability (CVE-2021-25395) Medium · Patch now · Closed
- Samsung Mobile Devices Unspecified Vulnerability (CVE-2021-25371) Medium · Patch now · Closed
- Samsung Mobile Devices Improper Boundary Check Vulnerability (CVE-2021-25372) Medium · Patch now · Closed
25 June 2023
- BreachForums Clone data breach: 4204 accounts exposed High · Breach · Closed
23 June 2023
- Zyxel Multiple NAS Devices Command Injection Vulnerability (CVE-2023-27992) Critical · Patch now · Closed
- Apple Multiple Products Integer Overflow Vulnerability (CVE-2023-32434) High · Patch now · Closed
- Apple Multiple Products WebKit Memory Corruption Vulnerability (CVE-2023-32435) High · Patch now · Closed
- Apple Multiple Products WebKit Type Confusion Vulnerability (CVE-2023-32439) High · Patch now · Closed
- VMware Tools Authentication Bypass Vulnerability (CVE-2023-20867) Low · Patch now · Closed
22 June 2023
- Vmware Aria Operations for Networks Command Injection Vulnerability (CVE-2023-20887) Critical · Patch now · Closed
- Roundcube Webmail Remote Code Execution Vulnerability (CVE-2020-12641) Critical · Patch now · Closed
- Roundcube Webmail SQL Injection Vulnerability (CVE-2021-44026) Critical · Patch now · Closed
- Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability (CVE-2016-9079) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2016-0165) High · Patch now · Closed
- Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability (CVE-2020-35730) Medium · Patch now · Closed
13 June 2023
- Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability (CVE-2023-27997) Critical · Patch now · Closed
10 June 2023
- Zacks data breach: 8.9M accounts exposed High · Breach · Closed
7 June 2023
- Google Chromium V8 Type Confusion Vulnerability (CVE-2023-3079) High · Patch now · Closed
5 June 2023
- Zyxel Multiple Firewalls Buffer Overflow Vulnerability (CVE-2023-33009) Critical · Patch now · Closed
- Zyxel Multiple Firewalls Buffer Overflow Vulnerability (CVE-2023-33010) Critical · Patch now · Closed
- JD Group data breach: 521K accounts exposed Medium · Breach · Closed
2 June 2023
- Progress MOVEit Transfer SQL Injection Vulnerability (CVE-2023-34362) Critical · Patch now · Closed
31 May 2023
- Zyxel Multiple Firewalls OS Command Injection Vulnerability (CVE-2023-28771) Critical · Patch now · Closed
- RaidForums data breach: 478K accounts exposed High · Breach · Closed
30 May 2023
- Polish Credentials data breach: 1.2M accounts exposed High · Breach · Closed
26 May 2023
- Barracuda Networks ESG Appliance Improper Input Validation Vulnerability (CVE-2023-2868) Critical · Patch now · Closed
22 May 2023
- Apple Multiple Products WebKit Sandbox Escape Vulnerability (CVE-2023-32409) High · Patch now · Closed
- Apple Multiple Products WebKit Use-After-Free Vulnerability (CVE-2023-32373) High · Patch now · Closed
- Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability (CVE-2023-28204) Medium · Patch now · Closed
19 May 2023
- Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability (CVE-2016-6415) High · Patch now · Closed
- Luxottica data breach: 77.1M accounts exposed High · Breach · Closed
- Cisco IOS Denial-of-Service Vulnerability (CVE-2004-1464) Medium · Patch now · Closed
- Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability (CVE-2023-21492) Medium · Patch now · Closed
12 May 2023
- Multiple Ruckus Wireless Products CSRF and RCE Vulnerability (CVE-2023-25717) Critical · Patch now · Closed
- Oracle Java SE and JRockit Unspecified Vulnerability (CVE-2016-3427) Critical · Patch now · Closed
- Apache Tomcat Remote Code Execution Vulnerability (CVE-2016-8735) Critical · Patch now · Closed
- Red Hat Polkit Incorrect Authorization Vulnerability (CVE-2021-3560) High · Patch now · Closed
- Linux Kernel Improper Input Validation Vulnerability (CVE-2010-3904) High · Patch now · Closed
- Jenkins User Interface (UI) Information Disclosure Vulnerability (CVE-2015-5317) High · Patch now · Closed
- Linux Kernel Race Condition Vulnerability (CVE-2014-0196) Medium · Patch now · Closed
10 May 2023
- RentoMojo data breach: 2.2M accounts exposed High · Breach · Closed
9 May 2023
- Microsoft Win32K Privilege Escalation Vulnerability (CVE-2023-29336) High · Patch now · Closed
1 May 2023
- Apache Log4j2 Deserialization of Untrusted Data Vulnerability (CVE-2021-45046) Critical · Patch now · Closed
- TP-Link Archer AX-21 Command Injection Vulnerability (CVE-2023-1389) High · Patch now · Closed
- Oracle WebLogic Server Unspecified Vulnerability (CVE-2023-21839) High · Patch now · Closed
27 April 2023
- CityJerks data breach: 177K accounts exposed High · Breach · Closed
24 April 2023
- MEO data breach: 8227 accounts exposed High · Breach · Closed
23 April 2023
- Terravision data breach: 2.1M accounts exposed High · Breach · Closed
21 April 2023
- PaperCut MF/NG Improper Access Control Vulnerability (CVE-2023-27350) Critical · Patch now · Closed
- Google Chrome Skia Integer Overflow Vulnerability (CVE-2023-2136) Critical · Patch now · Closed
- MinIO Information Disclosure Vulnerability (CVE-2023-28432) High · Patch now · Closed
19 April 2023
- Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability (CVE-2017-6742) High · Patch now · Closed
17 April 2023
- Apple macOS Use-After-Free Vulnerability (CVE-2019-8526) High · Patch now · Closed
- Google Chromium V8 Type Confusion Vulnerability (CVE-2023-2033) High · Patch now · Closed
14 April 2023
- OGUsers (2022 breach) data breach: 529K accounts exposed High · Breach · Closed
13 April 2023
- Novi Survey Insecure Deserialization Vulnerability (CVE-2023-29492) Critical · Patch now · Closed
- Android Framework Privilege Escalation Vulnerability (CVE-2023-20963) High · Patch now · Closed
- The Kodi Foundation data breach: 400K accounts exposed High · Breach · Closed
11 April 2023
10 April 2023
- Apple Multiple Products WebKit Use-After-Free Vulnerability (CVE-2023-28205) High · Patch now · Closed
- Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability (CVE-2023-28206) High · Patch now · Closed
7 April 2023
- Veritas Backup Exec Agent Improper Authentication Vulnerability (CVE-2021-27877) Critical · Patch now · Closed
- Veritas Backup Exec Agent File Access Vulnerability (CVE-2021-27876) High · Patch now · Closed
- Veritas Backup Exec Agent Command Execution Vulnerability (CVE-2021-27878) High · Patch now · Closed
- Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability (CVE-2019-1388) High · Patch now · Closed
- Arm Mali GPU Kernel Driver Information Disclosure Vulnerability (CVE-2023-26083) Low · Patch now · Closed
5 April 2023
- Genesis Market data breach: 8.0M accounts exposed High · Breach · Closed
3 April 2023
- Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability (CVE-2022-27926) Medium · Patch now · Closed
31 March 2023
- Leaked Reality data breach: 114K accounts exposed High · Breach · Closed
- Sundry Files data breach: 274K accounts exposed High · Breach · Closed
30 March 2023
- Samba Remote Code Execution Vulnerability (CVE-2017-7494) Critical · Patch now · Closed
- Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability (CVE-2022-42948) Critical · Patch now · Closed
- Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2013-3163) High · Patch now · Closed
- Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability (CVE-2021-30900) High · Patch now · Closed
- Arm Mali GPU Kernel Driver Use-After-Free Vulnerability (CVE-2022-38181) High · Patch now · Closed
- Linux Kernel Use-After-Free Vulnerability (CVE-2023-0266) High · Patch now · Closed
- Google Chromium Network Service Use-After-Free Vulnerability (CVE-2022-3038) High · Patch now · Closed