Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 18 of 30. 100 incidents from 25 March 2022 to 16 May 2022.
16 May 2022
- OGUsers (2021 breach) data breach: 348K accounts exposed High · Breach · Closed
- BlackBerry Fans data breach: 174K accounts exposed High · Breach · Closed
14 May 2022
- Paragon Cheats data breach: 188K accounts exposed Medium · Breach · Closed
10 May 2022
- F5 BIG-IP Missing Authentication Vulnerability (CVE-2022-1388) Critical · Patch now · Closed
4 May 2022
- Apple Multiple Products Type Confusion Vulnerability (CVE-2021-1789) High · Patch now · Closed
- Apple Multiple Products Type Confusion Vulnerability (CVE-2019-8506) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2014-4113) High · Patch now · Closed
- Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2014-0322) High · Patch now · Closed
- OpenSSL Information Disclosure Vulnerability (CVE-2014-0160) High · Patch now · Closed
2 May 2022
- Aimware data breach: 305K accounts exposed High · Breach · Closed
- PayHere data breach: 1.6M accounts exposed High · Breach · Closed
1 May 2022
- Devil-Torrents.pl data breach: 63K accounts exposed High · Breach · Closed
25 April 2022
- WSO2 Multiple Products Unrestrictive Upload of File Vulnerability (CVE-2022-29464) Critical · Patch now · Closed
- Jenkins Script Security Plugin Sandbox Bypass Vulnerability (CVE-2019-1003029) Critical · Patch now · Closed
- Microsoft Windows User Profile Service Privilege Escalation Vulnerability (CVE-2022-26904) High · Patch now · Closed
- Microsoft Windows User Profile Service Privilege Escalation Vulnerability (CVE-2022-21919) High · Patch now · Closed
- Linux Kernel Privilege Escalation Vulnerability (CVE-2022-0847) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2021-41357) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2021-40450) High · Patch now · Closed
19 April 2022
- WhatsApp VOIP Stack Buffer Overflow Vulnerability (CVE-2019-3568) Critical · Patch now · Closed
- Microsoft Windows Print Spooler Privilege Escalation Vulnerability (CVE-2022-22718) High · Patch now · Closed
- Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability (CVE-2018-6882) Medium · Patch now · Closed
15 April 2022
- Crestron Multiple Products Command Injection Vulnerability (CVE-2019-3929) Critical · Patch now · Closed
- D-Link DNS-320 Remote Code Execution Vulnerability (CVE-2019-16057) Critical · Patch now · Closed
- Schneider Electric U.motion Builder SQL Injection Vulnerability (CVE-2018-7841) Critical · Patch now · Closed
- InduSoft Web Studio NTWebServer Directory Traversal Vulnerability (CVE-2014-0780) Critical · Patch now · Closed
- Ubiquiti AirOS Command Injection Vulnerability (CVE-2010-5330) Critical · Patch now · Closed
- Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability (CVE-2007-3010) Critical · Patch now · Closed
- VMware Multiple Products Privilege Escalation Vulnerability (CVE-2022-22960) High · Patch now · Closed
- Google Chromium V8 Type Confusion Vulnerability (CVE-2022-1364) High · Patch now · Closed
- Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability (CVE-2016-4523) High · Patch now · Closed
- Avvo data breach: 4.1M accounts exposed High · Breach · Closed
14 April 2022
- VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability (CVE-2022-22954) Critical · Patch now · Closed
13 April 2022
- Drupal Core Remote Code Execution Vulnerability (CVE-2018-7602) Critical · Patch now · Closed
- Kaseya VSA Remote Code Execution Vulnerability (CVE-2018-20753) Critical · Patch now · Closed
- Adobe Flash Player Use-After-Free Vulnerability (CVE-2015-5123) Critical · Patch now · Closed
- Adobe Flash Player Use-After-Free Vulnerability (CVE-2015-5122) Critical · Patch now · Closed
- Adobe Flash Player Heap-Based Buffer Overflow Vulnerability (CVE-2015-3113) Critical · Patch now · Closed
- Adobe Flash Player Use-After-Free Vulnerability (CVE-2015-0313) Critical · Patch now · Closed
- Adobe Flash Player Remote Code Execution Vulnerability (CVE-2015-0311) Critical · Patch now · Closed
- Microsoft Windows CLFS Driver Privilege Escalation Vulnerability (CVE-2022-24521) High · Patch now · Closed
- Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2502) High · Patch now · Closed
- Adobe Flash Player Stack-Based Buffer Overflow Vulnerability (CVE-2014-9163) High · Patch now · Closed
11 April 2022
- Checkbox Survey Deserialization of Untrusted Data Vulnerability (CVE-2021-27852) Critical · Patch now · Closed
- QNAP Network-Attached Storage (NAS) Command Injection Vulnerability (CVE-2020-2509) Critical · Patch now · Closed
- Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability (CVE-2017-11317) Critical · Patch now · Closed
- WatchGuard Firebox and XTM Privilege Escalation Vulnerability (CVE-2022-23176) High · Patch now · Closed
- Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2021-42287) High · Patch now · Closed
- Microsoft Active Directory Domain Services Privilege Escalation Vulnerability (CVE-2021-42278) High · Patch now · Closed
- Google Pixel Out-of-Bounds Write Vulnerability (CVE-2021-39793) High · Patch now · Closed
- Linux Kernel Privilege Escalation Vulnerability (CVE-2021-22600) High · Patch now · Closed
8 April 2022
- Travelio data breach: 471K accounts exposed High · Breach · Closed
6 April 2022
- Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability (CVE-2021-31166) Critical · Patch now · Closed
- Sudo Heap-Based Buffer Overflow Vulnerability (CVE-2021-3156) High · Patch now · Closed
- Microsoft SMBv1 Server Remote Code Execution Vulnerability (CVE-2017-0148) High · Patch now · Closed
4 April 2022
- Spring Framework JDK 9+ Remote Code Execution Vulnerability (CVE-2022-22965) Critical · Patch now · Closed
- D-Link Multiple Routers Remote Code Execution Vulnerability (CVE-2021-45382) Critical · Patch now · Closed
- Apple macOS Out-of-Bounds Write Vulnerability (CVE-2022-22675) High · Patch now · Closed
- Apple macOS Out-of-Bounds Read Vulnerability (CVE-2022-22674) Medium · Patch now · Closed
31 March 2022
- Trend Micro Apex Central Arbitrary File Upload Vulnerability (CVE-2022-26871) Critical · Patch now · Closed
- Sophos Firewall Authentication Bypass Vulnerability (CVE-2022-1040) Critical · Patch now · Closed
- QNAP NAS Improper Authorization Vulnerability (CVE-2021-28799) Critical · Patch now · Closed
- Dasan GPON Routers Command Injection Vulnerability (CVE-2018-10562) Critical · Patch now · Closed
- Dasan GPON Routers Authentication Bypass Vulnerability (CVE-2018-10561) Critical · Patch now · Closed
- Microsoft Windows User Profile Service Privilege Escalation Vulnerability (CVE-2021-34484) High · Patch now · Closed
- Dell dbutil Driver Insufficient Access Control Vulnerability (CVE-2021-21551) High · Patch now · Closed
- Royal Enfield data breach: 420K accounts exposed High · Breach · Closed
28 March 2022
- Debian-specific Redis Server Lua Sandbox Escape Vulnerability (CVE-2022-0543) Critical · Patch now · Closed
- SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability (CVE-2021-20028) Critical · Patch now · Closed
- Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability (CVE-2013-2729) Critical · Patch now · Closed
- Oracle Java SE Unspecified Vulnerability (CVE-2013-2465) Critical · Patch now · Closed
- Oracle Java SE Sandbox Bypass Vulnerability (CVE-2012-5076) Critical · Patch now · Closed
- Google Chromium V8 Type Confusion Vulnerability (CVE-2022-1096) High · Patch now · Closed
- Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability (CVE-2021-38646) High · Patch now · Closed
- Microsoft Windows Event Tracing Privilege Escalation Vulnerability (CVE-2021-34486) High · Patch now · Closed
- SonicWall SMA100 Directory Traversal Vulnerability (CVE-2019-7483) High · Patch now · Closed
- Microsoft Windows Privilege Escalation Vulnerability (CVE-2018-8440) High · Patch now · Closed
- Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability (CVE-2018-8406) High · Patch now · Closed
- Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability (CVE-2018-8405) High · Patch now · Closed
- Microsoft Windows Privilege Escalation Vulnerability (CVE-2017-0213) High · Patch now · Closed
- Microsoft Edge and Internet Explorer Type Confusion Vulnerability (CVE-2017-0037) High · Patch now · Closed
- Microsoft Edge Memory Corruption Vulnerability (CVE-2016-7201) High · Patch now · Closed
- Microsoft Edge Memory Corruption Vulnerability (CVE-2016-7200) High · Patch now · Closed
- Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2016-0189) High · Patch now · Closed
- Microsoft Windows CSRSS Security Feature Bypass Vulnerability (CVE-2016-0151) High · Patch now · Closed
- Microsoft Windows Kernel Privilege Escalation Vulnerability (CVE-2016-0040) High · Patch now · Closed
- Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability (CVE-2015-2426) High · Patch now · Closed
- Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-2419) High · Patch now · Closed
- Microsoft Office Uninitialized Memory Use Vulnerability (CVE-2015-1770) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2013-3660) High · Patch now · Closed
- Microsoft Internet Explorer Use-After-Free Vulnerability (CVE-2013-2551) High · Patch now · Closed
- Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability (CVE-2013-1690) High · Patch now · Closed
- Microsoft Word Remote Code Execution Vulnerability (CVE-2012-2539) High · Patch now · Closed
- Adobe Flash Player Memory Corruption Vulnerability (CVE-2012-2034) High · Patch now · Closed
- Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability (CVE-2011-2005) High · Patch now · Closed
- Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability (CVE-2010-4398) High · Patch now · Closed
- Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability (CVE-2021-26085) Medium · Patch now · Closed
- Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2017-0059) Medium · Patch now · Closed
- Oracle Fusion Middleware Unspecified Vulnerability (CVE-2012-0518) Medium · Patch now · Closed
25 March 2022
- WatchGuard Firebox and XTM Appliances Arbitrary Code Execution (CVE-2022-26318) Critical · Patch now · Closed