Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 15 of 30. 100 incidents from 22 September 2022 to 30 March 2023.
30 March 2023
- Arm Mali GPU Kernel Driver Unspecified Vulnerability (CVE-2022-22706) High · Patch now · Closed
- Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability (CVE-2022-39197) Medium · Patch now · Closed
24 March 2023
- TheGradCafe data breach: 310K accounts exposed High · Breach · Closed
15 March 2023
- Adobe ColdFusion Deserialization of Untrusted Data Vulnerability (CVE-2023-26360) High · Patch now · Closed
14 March 2023
- Microsoft Office Outlook Privilege Escalation Vulnerability (CVE-2023-23397) Critical · Patch now · Closed
- Fortinet FortiOS Path Traversal Vulnerability (CVE-2022-41328) High · Patch now · Closed
- Microsoft Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2023-24880) Medium · Patch now · Closed
11 March 2023
- HDB Financial Services data breach: 1.7M accounts exposed Medium · Breach · Closed
- Shopper+ data breach: 878K accounts exposed Medium · Breach · Closed
10 March 2023
- XStream Remote Code Execution Vulnerability (CVE-2021-39144) High · Patch now · Closed
- Plex Media Server Remote Code Execution Vulnerability (CVE-2020-5741) High · Patch now · Closed
7 March 2023
- Teclib GLPI Remote Code Execution Vulnerability (CVE-2022-35914) Critical · Patch now · Closed
- Apache Spark Command Injection Vulnerability (CVE-2022-33891) High · Patch now · Closed
- Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability (CVE-2022-28810) Medium · Patch now · Closed
6 March 2023
- iD Tech data breach: 415K accounts exposed High · Breach · Closed
- Eye4Fraud data breach: 16.0M accounts exposed High · Breach · Closed
5 March 2023
- LBB data breach: 39K accounts exposed Medium · Breach · Closed
2 March 2023
- GunAuction.com data breach: 565K accounts exposed High · Breach · Closed
27 February 2023
- ZK Framework AuUploader Unspecified Vulnerability (CVE-2022-36537) High · Patch now · Closed
26 February 2023
- Convex data breach: 150K accounts exposed Medium · Breach · Closed
21 February 2023
- IBM Aspera Faspex Code Execution Vulnerability (CVE-2022-47986) Critical · Patch now · Closed
- Mitel MiVoice Connect Code Injection Vulnerability (CVE-2022-41223) Medium · Patch now · Closed
- Mitel MiVoice Connect Command Injection Vulnerability (CVE-2022-40765) Medium · Patch now · Closed
19 February 2023
- RealDudesInc data breach: 101K accounts exposed High · Breach · Closed
16 February 2023
- Cacti Command Injection Vulnerability (CVE-2022-46169) Critical · Patch now · Closed
14 February 2023
- Microsoft Office Publisher Security Feature Bypass Vulnerability (CVE-2023-21715) High · Patch now · Closed
- Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (CVE-2023-23376) High · Patch now · Closed
- Apple Multiple Products WebKit Type Confusion Vulnerability (CVE-2023-23529) High · Patch now · Closed
- Microsoft Windows Graphic Component Privilege Escalation Vulnerability (CVE-2023-21823) High · Patch now · Closed
10 February 2023
- Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability (CVE-2015-2291) High · Patch now · Closed
- TerraMaster OS Remote Command Execution Vulnerability (CVE-2022-24990) High · Patch now · Closed
- Fortra GoAnywhere MFT Remote Code Execution Vulnerability (CVE-2023-0669) High · Patch now · Closed
8 February 2023
- Weee data breach: 1.1M accounts exposed Medium · Breach · Closed
6 February 2023
- LimeVPN data breach: 23K accounts exposed High · Breach · Closed
4 February 2023
- Instant Checkmate data breach: 11.9M accounts exposed High · Breach · Closed
- Truth Finder data breach: 8.2M accounts exposed High · Breach · Closed
2 February 2023
- Oracle E-Business Suite Unspecified Vulnerability (CVE-2022-21587) Critical · Patch now · Closed
- Multiple SugarCRM Products Remote Code Execution Vulnerability (CVE-2023-22952) High · Patch now · Closed
- School District 42 data breach: 18K accounts exposed Medium · Breach · Closed
31 January 2023
- Planet Ice data breach: 240K accounts exposed High · Breach · Closed
26 January 2023
- Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability (CVE-2017-11357) Critical · Patch now · Closed
23 January 2023
- Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability (CVE-2022-47966) Critical · Patch now · Closed
- KomplettFritid data breach: 139K accounts exposed High · Breach · Closed
- Autotrader data breach: 20K accounts exposed Medium · Breach · Closed
22 January 2023
- Zurich data breach: 756K accounts exposed Medium · Breach · Closed
17 January 2023
- CWP Control Web Panel OS Command Injection Vulnerability (CVE-2022-44877) Critical · Patch now · Closed
10 January 2023
- Microsoft Exchange Server Privilege Escalation Vulnerability (CVE-2022-41080) High · Patch now · Closed
- Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability (CVE-2023-21674) High · Patch now · Closed
7 January 2023
- SlideTeam data breach: 1.5M accounts exposed High · Breach · Closed
- DoorDash data breach: 367K accounts exposed High · Breach · Closed
5 January 2023
- Twitter (200M) data breach: 211.5M accounts exposed High · Breach · Closed
2 January 2023
- Deezer data breach: 229.0M accounts exposed High · Breach · Closed
1 January 2023
- Benchmark data breach: 93K accounts exposed High · Breach · Closed
29 December 2022
- TIBCO JasperReports Server Information Disclosure Vulnerability (CVE-2018-5430) High · Patch now · Closed
- TIBCO JasperReports Library Directory Traversal Vulnerability (CVE-2018-18809) Medium · Patch now · Closed
16 December 2022
- Gemini data breach: 5.3M accounts exposed Medium · Breach · Closed
14 December 2022
- Apple iOS Type Confusion Vulnerability (CVE-2022-42856) High · Patch now · Closed
13 December 2022
- Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability (CVE-2022-42475) Critical · Patch now · Closed
- Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability (CVE-2022-27518) Critical · Patch now · Closed
- Veeam Backup & Replication Remote Code Execution Vulnerability (CVE-2022-26501) Critical · Patch now · Closed
- Veeam Backup & Replication Remote Code Execution Vulnerability (CVE-2022-26500) High · Patch now · Closed
- Microsoft Defender SmartScreen Security Feature Bypass Vulnerability (CVE-2022-44698) Medium · Patch now · Closed
12 December 2022
- CoinTracker data breach: 1.6M accounts exposed Medium · Breach · Closed
7 December 2022
- Abandonia (2022) data breach: 919K accounts exposed High · Breach · Closed
5 December 2022
- Google Chromium V8 Type Confusion Vulnerability (CVE-2022-4262) High · Patch now · Closed
28 November 2022
- Oracle Fusion Middleware Unspecified Vulnerability (CVE-2021-35587) Critical · Patch now · Closed
- Google Chromium GPU Heap Buffer Overflow Vulnerability (CVE-2022-4135) Critical · Patch now · Closed
15 November 2022
- Get Revenge On Your Ex data breach: 79K accounts exposed High · Breach · Closed
14 November 2022
- Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability (CVE-2022-41049) Medium · Patch now · Closed
8 November 2022
- Microsoft Windows Print Spooler Privilege Escalation Vulnerability (CVE-2022-41073) High · Patch now · Closed
- Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability (CVE-2022-41125) High · Patch now · Closed
- Microsoft Windows Scripting Languages Remote Code Execution Vulnerability (CVE-2022-41128) High · Patch now · Closed
- Samsung Mobile Devices Improper Access Control Vulnerability (CVE-2021-25337) High · Patch now · Closed
- GGCorp data breach: 2.4M accounts exposed High · Breach · Closed
- Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability (CVE-2022-41091) Medium · Patch now · Closed
- Samsung Mobile Devices Improper Access Control Vulnerability (CVE-2021-25369) Medium · Patch now · Closed
- Samsung Mobile Devices Memory Corruption Vulnerability (CVE-2021-25370) Medium · Patch now · Closed
6 November 2022
- Lolzteam data breach: 398K accounts exposed Medium · Breach · Closed
28 October 2022
- Google Chromium V8 Type Confusion Vulnerability (CVE-2022-3723) High · Patch now · Closed
25 October 2022
- Apple iOS and iPadOS Out-of-Bounds Write Vulnerability (CVE-2022-42827) High · Patch now · Closed
24 October 2022
- GIGABYTE Multiple Products Privilege Escalation Vulnerability (CVE-2018-19323) Critical · Patch now · Closed
- Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability (CVE-2020-3433) High · Patch now · Closed
- GIGABYTE Multiple Products Code Execution Vulnerability (CVE-2018-19322) High · Patch now · Closed
- GIGABYTE Multiple Products Privilege Escalation Vulnerability (CVE-2018-19321) High · Patch now · Closed
- GIGABYTE Multiple Products Unspecified Vulnerability (CVE-2018-19320) High · Patch now · Closed
- Doomworld data breach: 34K accounts exposed High · Breach · Closed
- Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability (CVE-2020-3153) Medium · Patch now · Closed
- E-Pal data breach: 108K accounts exposed Medium · Breach · Closed
20 October 2022
- Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability (CVE-2022-41352) Critical · Patch now · Closed
- Linux Kernel Privilege Escalation Vulnerability (CVE-2021-3493) High · Patch now · Closed
11 October 2022
- Fortinet Multiple Products Authentication Bypass Vulnerability (CVE-2022-40684) Critical · Patch now · Closed
- Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability (CVE-2022-41033) High · Patch now · Closed
6 October 2022
- Bhinneka data breach: 1.3M accounts exposed High · Breach · Closed
- Wakanim data breach: 6.7M accounts exposed Medium · Breach · Closed
30 September 2022
- Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2022-41082) High · Patch now · Closed
- Microsoft Exchange Server Server-Side Request Forgery Vulnerability (CVE-2022-41040) High · Patch now · Closed
- Atlassian Bitbucket Server and Data Center Command Injection Vulnerability (CVE-2022-36804) High · Patch now · Closed
23 September 2022
- Sophos Firewall Code Injection Vulnerability (CVE-2022-3236) Critical · Patch now · Closed
- TAP Air Portugal data breach: 6.1M accounts exposed Medium · Breach · Closed
22 September 2022
- Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability (CVE-2022-35405) Critical · Patch now · Closed