Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 17 of 30. 100 incidents from 16 May 2022 to 8 June 2022.
8 June 2022
- Adobe Flash Player Unspecified Vulnerability (CVE-2011-0609) High · Patch now · Closed
- Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability (CVE-2010-2883) High · Patch now · Closed
- Microsoft PowerPoint Buffer Overflow Vulnerability (CVE-2010-2572) High · Patch now · Closed
- Adobe Flash Player Memory Corruption Vulnerability (CVE-2010-1297) High · Patch now · Closed
- Adobe Acrobat and Reader Use-After-Free Vulnerability (CVE-2009-4324) High · Patch now · Closed
- Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability (CVE-2009-3953) High · Patch now · Closed
- Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability (CVE-2009-1862) High · Patch now · Closed
- Microsoft Office Buffer Overflow Vulnerability (CVE-2009-0563) High · Patch now · Closed
- Microsoft Office Object Record Corruption Vulnerability (CVE-2009-0557) High · Patch now · Closed
- Adobe Acrobat and Reader Unspecified Vulnerability (CVE-2008-0655) High · Patch now · Closed
- Adobe Acrobat and Reader Buffer Overflow Vulnerability (CVE-2007-5659) High · Patch now · Closed
- Microsoft Word Malformed Object Pointer Vulnerability (CVE-2006-2492) High · Patch now · Closed
- Google Chromium V8 Out-of-Bounds Write Vulnerability (CVE-2019-5825) Medium · Patch now · Closed
- Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability (CVE-2012-0767) Medium · Patch now · Closed
2 June 2022
- Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability (CVE-2022-26134) Critical · Patch now · Closed
31 May 2022
- Adecco data breach: 4.3M accounts exposed High · Breach · Closed
- CTARS data breach: 12K accounts exposed High · Breach · Closed
29 May 2022
- MGM Resorts (2022 Update) data breach: 24.8M accounts exposed Medium · Breach · Closed
26 May 2022
- Preen.Me data breach: 236K accounts exposed Medium · Breach · Closed
25 May 2022
- Adobe Reader and Acrobat Sandbox Bypass Vulnerability (CVE-2014-0546) Critical · Patch now · Closed
- Oracle JRE Remote Code Execution Vulnerability (CVE-2013-0422) Critical · Patch now · Closed
- Oracle Fusion Middleware Unspecified Vulnerability (CVE-2012-1710) Critical · Patch now · Closed
- Oracle JRE Unspecified Vulnerability (CVE-2010-0840) Critical · Patch now · Closed
- Oracle Solaris Privilege Escalation Vulnerability (CVE-2019-3010) High · Patch now · Closed
- Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability (CVE-2016-3393) High · Patch now · Closed
- Microsoft Windows Open Type Font Remote Code Execution Vulnerability (CVE-2016-7256) High · Patch now · Closed
- Adobe Flash Player and AIR Integer Overflow Vulnerability (CVE-2016-1010) High · Patch now · Closed
- Adobe Flash Player and AIR Use-After-Free Vulnerability (CVE-2016-0984) High · Patch now · Closed
- Microsoft Silverlight Runtime Remote Code Execution Vulnerability (CVE-2016-0034) High · Patch now · Closed
- Adobe Flash Player ASLR Bypass Vulnerability (CVE-2015-0310) High · Patch now · Closed
- Microsoft Windows TS WebProxy Directory Traversal Vulnerability (CVE-2015-0016) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2015-2360) High · Patch now · Closed
- Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2425) High · Patch now · Closed
- Mozilla Firefox Security Feature Bypass Vulnerability (CVE-2015-4495) High · Patch now · Closed
- Adobe Flash Player Integer Overflow Vulnerability (CVE-2015-8651) High · Patch now · Closed
- Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2015-6175) High · Patch now · Closed
- Microsoft Windows Remote Code Execution Vulnerability (CVE-2015-1671) High · Patch now · Closed
- Microsoft Windows Remote Code Execution Vulnerability (CVE-2014-4148) High · Patch now · Closed
- Adobe Flash Player Dereferenced Pointer Vulnerability (CVE-2014-8439) High · Patch now · Closed
- Microsoft Internet Explorer Privilege Escalation Vulnerability (CVE-2014-4123) High · Patch now · Closed
- Microsoft Internet Explorer Privilege Escalation Vulnerability (CVE-2014-2817) High · Patch now · Closed
- Microsoft IME Japanese Privilege Escalation Vulnerability (CVE-2014-4077) High · Patch now · Closed
- Linux Kernel Privilege Escalation Vulnerability (CVE-2014-3153) High · Patch now · Closed
- Microsoft Silverlight Double Dereference Vulnerability (CVE-2013-0074) High · Patch now · Closed
- Red Hat JBoss Information Disclosure Vulnerability (CVE-2010-1428) High · Patch now · Closed
- Amart Furniture data breach: 108K accounts exposed High · Breach · Closed
- Microsoft Internet Explorer ASLR Bypass Vulnerability (CVE-2015-0071) Medium · Patch now · Closed
- Microsoft Windows Mount Manager Privilege Escalation Vulnerability (CVE-2015-1769) Medium · Patch now · Closed
- Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2013-7331) Medium · Patch now · Closed
- IBM InfoSphere BigInsights Invalid Input Vulnerability (CVE-2013-3993) Medium · Patch now · Closed
- Microsoft Silverlight Information Disclosure Vulnerability (CVE-2013-3896) Medium · Patch now · Closed
- Red Hat JBoss Authentication Bypass Vulnerability (CVE-2010-0738) Medium · Patch now · Closed
- Oracle JRE Unspecified Vulnerability (CVE-2013-2423) Low · Patch now · Closed
- Oracle JRE Sandbox Bypass Vulnerability (CVE-2013-0431) Low · Patch now · Closed
24 May 2022
- QNAP NAS File Station Command Injection Vulnerability (CVE-2018-19949) Critical · Patch now · Closed
- Microsoft Windows Search Remote Code Execution Vulnerability (CVE-2017-8543) Critical · Patch now · Closed
- Kaseya VSA SQL Injection Vulnerability (CVE-2017-18362) Critical · Patch now · Closed
- Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2018-8611) High · Patch now · Closed
- Microsoft Windows SMBv1 Information Disclosure Vulnerability (CVE-2017-0147) High · Patch now · Closed
- Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability (CVE-2017-0005) High · Patch now · Closed
- Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2017-0149) High · Patch now · Closed
- Microsoft Internet Explorer Privilege Escalation Vulnerability (CVE-2017-0210) High · Patch now · Closed
- Artifex Ghostscript Type Confusion Vulnerability (CVE-2017-8291) High · Patch now · Closed
- Apple iOS Memory Corruption Vulnerability (CVE-2016-4656) High · Patch now · Closed
- Apple iOS Webkit Memory Corruption Vulnerability (CVE-2016-4657) High · Patch now · Closed
- Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability (CVE-2016-6366) High · Patch now · Closed
- Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability (CVE-2016-6367) High · Patch now · Closed
- Fanpass data breach: 112K accounts exposed High · Breach · Closed
- SirHurt data breach: 90K accounts exposed High · Breach · Closed
- Wendy's data breach: 52K accounts exposed High · Breach · Closed
- QNAP NAS File Station Cross-Site Scripting Vulnerability (CVE-2018-19953) Medium · Patch now · Closed
- QNAP NAS File Station Cross-Site Scripting Vulnerability (CVE-2018-19943) Medium · Patch now · Closed
- Microsoft XML Core Services Information Disclosure Vulnerability (CVE-2017-0022) Medium · Patch now · Closed
- Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2016-0162) Medium · Patch now · Closed
- Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CVE-2016-3351) Medium · Patch now · Closed
- Apple iOS Information Disclosure Vulnerability (CVE-2016-4655) Medium · Patch now · Closed
- Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability (CVE-2016-3298) Medium · Patch now · Closed
23 May 2022
- Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability (CVE-2019-11708) Critical · Patch now · Closed
- Android Kernel Use-After-Free Vulnerability (CVE-2021-1048) High · Patch now · Closed
- Apple Multiple Products Memory Corruption Vulnerability (CVE-2021-30883) High · Patch now · Closed
- Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2020-1027) High · Patch now · Closed
- Microsoft Update Notification Manager Privilege Escalation Vulnerability (CVE-2020-0638) High · Patch now · Closed
- Apple Multiple Products Memory Corruption Vulnerability (CVE-2019-7286) High · Patch now · Closed
- Apple iOS Memory Corruption Vulnerability (CVE-2019-7287) High · Patch now · Closed
- Microsoft Windows Privilege Escalation Vulnerability (CVE-2019-0880) High · Patch now · Closed
- Google Chrome WebAudio Use-After-Free Vulnerability (CVE-2019-13720) High · Patch now · Closed
- Mozilla Firefox and Thunderbird Type Confusion Vulnerability (CVE-2019-11707) High · Patch now · Closed
- WebKitGTK Memory Corruption Vulnerability (CVE-2019-8720) High · Patch now · Closed
- WhatsApp Cross-Site Scripting Vulnerability (CVE-2019-18426) High · Patch now · Closed
- Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability (CVE-2019-1385) High · Patch now · Closed
- Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability (CVE-2019-1130) High · Patch now · Closed
- Adobe Flash Player Stack-based Buffer Overflow Vulnerability (CVE-2018-5002) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2018-8589) High · Patch now · Closed
- Cisco IOS XR Open Port Vulnerability (CVE-2022-20821) Medium · Patch now · Closed
- Android Kernel Race Condition Vulnerability (CVE-2021-0920) Medium · Patch now · Closed
- Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2019-0676) Medium · Patch now · Closed
- Google Chrome Blink Use-After-Free Vulnerability (CVE-2019-5786) Medium · Patch now · Closed
- Microsoft Windows SMB Information Disclosure Vulnerability (CVE-2019-0703) Medium · Patch now · Closed
16 May 2022
- Zyxel Multiple Firewalls OS Command Injection Vulnerability (CVE-2022-30525) Critical · Patch now · Closed
- VMware Spring Cloud Gateway Code Injection Vulnerability (CVE-2022-22947) Critical · Patch now · Closed