Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 16 of 30. 100 incidents from 8 June 2022 to 15 September 2022.
15 September 2022
- Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability (CVE-2022-40139) High · Patch now · Closed
- Linux Kernel Improper Input Validation Vulnerability (CVE-2013-6282) High · Patch now · Closed
- Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability (CVE-2013-2597) High · Patch now · Closed
- Linux Kernel Integer Overflow Vulnerability (CVE-2013-2596) High · Patch now · Closed
- Linux Kernel Privilege Escalation Vulnerability (CVE-2013-2094) High · Patch now · Closed
- Microsoft Windows Remote Code Execution Vulnerability (CVE-2010-2568) High · Patch now · Closed
14 September 2022
- Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (CVE-2022-37969) High · Patch now · Closed
- Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability (CVE-2022-32917) High · Patch now · Closed
8 September 2022
- Google Chromium Mojo Insufficient Data Validation Vulnerability (CVE-2022-3075) Critical · Patch now · Closed
- QNAP Photo Station Externally Controlled Reference Vulnerability (CVE-2022-27593) Critical · Patch now · Closed
- D-Link DIR-820L Remote Code Execution Vulnerability (CVE-2022-26258) Critical · Patch now · Closed
- MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability (CVE-2018-7445) Critical · Patch now · Closed
- D-Link Multiple Routers OS Command Injection Vulnerability (CVE-2018-6530) Critical · Patch now · Closed
- Oracle WebLogic Server Unspecified Vulnerability (CVE-2018-2628) Critical · Patch now · Closed
- NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability (CVE-2017-5521) High · Patch now · Closed
- Android OS Privilege Escalation Vulnerability (CVE-2011-1823) High · Patch now · Closed
- Brand New Tube data breach: 349K accounts exposed High · Breach · Closed
- Apple iOS, iPadOS, and macOS Input Validation Vulnerability (CVE-2020-9934) Medium · Patch now · Closed
- Fortinet FortiOS and FortiADC Improper Access Control Vulnerability (CVE-2018-13374) Medium · Patch now · Closed
- D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability (CVE-2011-4723) Medium · Patch now · Closed
31 August 2022
- Stripchat data breach: 10.0M accounts exposed High · Breach · Closed
30 August 2022
- START data breach: 7.5M accounts exposed High · Breach · Closed
25 August 2022
- dotCMS Unrestricted Upload of File Vulnerability (CVE-2022-26352) Critical · Patch now · Closed
- Apache CouchDB Insecure Default Initialization of Resource Vulnerability (CVE-2022-24706) Critical · Patch now · Closed
- Apache APISIX Authentication Bypass Vulnerability (CVE-2022-24112) Critical · Patch now · Closed
- VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability (CVE-2022-22963) Critical · Patch now · Closed
- WebRTC Heap Buffer Overflow Vulnerability (CVE-2022-2294) High · Patch now · Closed
- Grafana Authentication Bypass Vulnerability (CVE-2021-39226) High · Patch now · Closed
- Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability (CVE-2021-38406) High · Patch now · Closed
- Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability (CVE-2021-31010) High · Patch now · Closed
- PEAR Archive_Tar Improper Link Resolution Vulnerability (CVE-2020-36193) High · Patch now · Closed
- PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability (CVE-2020-28949) High · Patch now · Closed
22 August 2022
- Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability (CVE-2022-0028) High · Patch now · Closed
18 August 2022
- SAP Multiple Products HTTP Request Smuggling Vulnerability (CVE-2022-22536) Critical · Patch now · Closed
- Palo Alto Networks PAN-OS Remote Code Execution Vulnerability (CVE-2017-15944) Critical · Patch now · Closed
- Apple iOS and macOS Out-of-Bounds Write Vulnerability (CVE-2022-32894) High · Patch now · Closed
- Apple iOS and macOS Out-of-Bounds Write Vulnerability (CVE-2022-32893) High · Patch now · Closed
- Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2022-26923) High · Patch now · Closed
- Microsoft Windows Runtime Remote Code Execution Vulnerability (CVE-2022-21971) High · Patch now · Closed
- Google Chromium Intents Insufficient Input Validation Vulnerability (CVE-2022-2856) Medium · Patch now · Closed
- Banorte data breach: 2.1M accounts exposed Medium · Breach · Closed
17 August 2022
- SitePoint data breach: 1.0M accounts exposed High · Breach · Closed
16 August 2022
- Shitexpress data breach: 23K accounts exposed High · Breach · Closed
13 August 2022
- Twitter data breach: 6.7M accounts exposed Medium · Breach · Closed
11 August 2022
- Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability (CVE-2022-37042) Critical · Patch now · Closed
- Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability (CVE-2022-27925) High · Patch now · Closed
9 August 2022
- Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability (CVE-2022-34713) High · Patch now · Closed
- RARLAB UnRAR Directory Traversal Vulnerability (CVE-2022-30333) High · Patch now · Closed
5 August 2022
- QuestionPro data breach: 22.2M accounts exposed Medium · Breach · Closed
4 August 2022
- Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability (CVE-2022-27924) High · Patch now · Closed
3 August 2022
- Tuned Global data breach: 985K accounts exposed High · Breach · Closed
2 August 2022
- Mecho Download data breach: 437K accounts exposed High · Breach · Closed
29 July 2022
- Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability (CVE-2022-26138) Critical · Patch now · Closed
- Battlefy data breach: 83K accounts exposed High · Breach · Closed
20 July 2022
- Shadi.com data breach: 2.0M accounts exposed High · Breach · Closed
18 July 2022
- PPCGeeks data breach: 492K accounts exposed High · Breach · Closed
17 July 2022
- JukinMedia data breach: 314K accounts exposed High · Breach · Closed
16 July 2022
- Eskimi data breach: 1.2M accounts exposed High · Breach · Closed
- Famm data breach: 535K accounts exposed High · Breach · Closed
14 July 2022
- La Poste Mobile data breach: 533K accounts exposed High · Breach · Closed
12 July 2022
6 July 2022
- Mangatoon data breach: 23.0M accounts exposed High · Breach · Closed
4 July 2022
- Capital Economics data breach: 263K accounts exposed Medium · Breach · Closed
3 July 2022
- Bookchor data breach: 498K accounts exposed High · Breach · Closed
- Bourse des Vols data breach: 1.5M accounts exposed Medium · Breach · Closed
1 July 2022
- Microsoft Windows LSA Spoofing Vulnerability (CVE-2022-26925) Medium · Patch now · Closed
27 June 2022
- Mitel MiVoice Connect Data Validation Vulnerability (CVE-2022-29499) Critical · Patch now · Closed
- Red Hat Polkit Out-of-Bounds Read and Write Vulnerability (CVE-2021-4034) High · Patch now · Closed
- Apple iOS and iPadOS Buffer Overflow Vulnerability (CVE-2021-30983) High · Patch now · Closed
- Apple Multiple Products Memory Corruption Vulnerability (CVE-2020-3837) High · Patch now · Closed
- Apple Multiple Products Memory Corruption Vulnerability (CVE-2020-9907) High · Patch now · Closed
- Apple Multiple Products Use-After-Free Vulnerability (CVE-2019-8605) High · Patch now · Closed
- Apple Multiple Products Memory Corruption Vulnerability (CVE-2018-4344) High · Patch now · Closed
- Google Chromium PopupBlocker Security Bypass Vulnerability (CVE-2021-30533) Medium · Patch now · Closed
14 June 2022
- Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability (CVE-2022-30190) High · Patch now · Closed
- DivX SubTitles data breach: 783K accounts exposed High · Breach · Closed
9 June 2022
- SAP NetWeaver SQL Injection Vulnerability (CVE-2016-2386) Critical · Patch now · Closed
- SAP NetWeaver Unrestricted File Upload Vulnerability (CVE-2021-38163) High · Patch now · Closed
- SAP NetWeaver Information Disclosure Vulnerability (CVE-2016-2388) Medium · Patch now · Closed
8 June 2022
- QNAP Photo Station Path Traversal Vulnerability (CVE-2019-7195) Critical · Patch now · Closed
- QNAP Photo Station Path Traversal Vulnerability (CVE-2019-7194) Critical · Patch now · Closed
- QNAP QTS Improper Input Validation Vulnerability (CVE-2019-7193) Critical · Patch now · Closed
- QNAP Photo Station Improper Access Control Vulnerability (CVE-2019-7192) Critical · Patch now · Closed
- NETGEAR Multiple Devices Buffer Overflow Vulnerability (CVE-2017-6862) Critical · Patch now · Closed
- Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability (CVE-2011-2462) Critical · Patch now · Closed
- Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability (CVE-2019-15271) High · Patch now · Closed
- Google Chromium V8 Integer Overflow Vulnerability (CVE-2018-6065) High · Patch now · Closed
- Adobe Acrobat and Reader Double Free Vulnerability (CVE-2018-4990) High · Patch now · Closed
- Google Chromium V8 Out-of-Bounds Write Vulnerability (CVE-2018-17480) High · Patch now · Closed
- Google Chromium V8 Remote Code Execution Vulnerability (CVE-2018-17463) High · Patch now · Closed
- Google Chromium V8 Type Confusion Vulnerability (CVE-2017-5070) High · Patch now · Closed
- Google Chromium V8 Memory Corruption Vulnerability (CVE-2017-5030) High · Patch now · Closed
- Google Chromium V8 Out-of-Bounds Memory Vulnerability (CVE-2016-5198) High · Patch now · Closed
- Google Chromium V8 Out-of-Bounds Read Vulnerability (CVE-2016-1646) High · Patch now · Closed
- Microsoft Office Buffer Overflow Vulnerability (CVE-2013-1331) High · Patch now · Closed
- Adobe Flash Player Integer Overflow Vulnerability (CVE-2012-5054) High · Patch now · Closed
- Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2012-4969) High · Patch now · Closed
- Microsoft XML Core Services Memory Corruption Vulnerability (CVE-2012-1889) High · Patch now · Closed
- Adobe Flash Player Memory Corruption Vulnerability (CVE-2012-0754) High · Patch now · Closed
- Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability (CVE-2012-0151) High · Patch now · Closed