Threat Watch– active
Live incidents
Incident archive
Every exploited vulnerability, breach and supply chain attack Threat Watch has logged, grouped by the day it started. Each date opens that day's log.
2,909 incidents, newest first. Page 23 of 30. 100 incidents from 3 November 2021.
3 November 2021
- Microsoft Exchange Server Privilege Escalation Vulnerability (CVE-2021-34523) Critical · Patch now · Closed
- Microsoft Windows Server Buffer Overflow Vulnerability (CVE-2017-7269) Critical · Patch now · Closed
- Microsoft Remote Desktop Services Remote Code Execution Vulnerability (CVE-2019-0708) Critical · Patch now · Closed
- Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-34473) Critical · Patch now · Closed
- Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability (CVE-2020-1040) Critical · Patch now · Closed
- Microsoft Windows DNS Server Remote Code Execution Vulnerability (CVE-2020-1350) Critical · Patch now · Closed
- Microsoft Office Memory Corruption Vulnerability (CVE-2015-1641) High · Patch now · Closed
- Microsoft Internet Explorer Remote Code Execution Vulnerability (CVE-2021-27085) High · Patch now · Closed
- Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2019-0541) High · Patch now · Closed
- Microsoft Office Memory Corruption Vulnerability (CVE-2017-11882) High · Patch now · Closed
- Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2020-0674) High · Patch now · Closed
- Microsoft Office Remote Code Execution Vulnerability (CVE-2021-27059) High · Patch now · Closed
- Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2019-1367) High · Patch now · Closed
- Microsoft Office and WordPad Remote Code Execution Vulnerability (CVE-2017-0199) High · Patch now · Closed
- Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2020-1380) High · Patch now · Closed
- Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2019-1429) High · Patch now · Closed
- Microsoft Office Outlook Security Feature Bypass Vulnerability (CVE-2017-11774) High · Patch now · Closed
- Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2020-0968) High · Patch now · Closed
- Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-26858) High · Patch now · Closed
- Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-27065) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2020-1054) High · Patch now · Closed
- Microsoft Windows Print Spooler Remote Code Execution Vulnerability (CVE-2021-1675) High · Patch now · Closed
- Microsoft Windows CryptoAPI Spoofing Vulnerability (CVE-2020-0601) High · Patch now · Closed
- Microsoft Win32k Privilege Escalation Vulnerability (CVE-2019-0808) High · Patch now · Closed
- Microsoft Exchange Server Remote Code Execution Vulnerability (CVE-2021-26857) High · Patch now · Closed
- Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability (CVE-2020-1147) High · Patch now · Closed
- Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability (CVE-2019-1214) High · Patch now · Closed
- Microsoft Office OLE DLL Side Loading Vulnerability (CVE-2016-3235) High · Patch now · Closed
- Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability (CVE-2019-0863) High · Patch now · Closed
- Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability (CVE-2021-36955) High · Patch now · Closed
- Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability (CVE-2021-38648) High · Patch now · Closed
- Mozilla Firefox And Thunderbird Use-After-Free Vulnerability (CVE-2020-6819) High · Patch now · Closed
- Mozilla Firefox And Thunderbird Use-After-Free Vulnerability (CVE-2020-6820) High · Patch now · Closed
- Mozilla Firefox And Thunderbird Type Confusion Vulnerability (CVE-2019-17026) High · Patch now · Closed
- Nagios XI Remote Code Execution Vulnerability (CVE-2019-15949) High · Patch now · Closed
- Netis WF2419 Devices Remote Code Execution Vulnerability (CVE-2019-19356) High · Patch now · Closed
- Oracle WebLogic Server Unspecified Vulnerability (CVE-2020-14883) High · Patch now · Closed
- Ivanti Pulse Connect Secure Code Execution Vulnerability (CVE-2020-8243) High · Patch now · Closed
- Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability (CVE-2021-22900) High · Patch now · Closed
- Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability (CVE-2021-22894) High · Patch now · Closed
- Ivanti Pulse Connect Secure Code Execution Vulnerability (CVE-2020-8260) High · Patch now · Closed
- Ivanti Pulse Connect Secure Command Injection Vulnerability (CVE-2021-22899) High · Patch now · Closed
- Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability (CVE-2019-11539) High · Patch now · Closed
- Qualcomm Multiple Chipsets Use-After-Free Vulnerability (CVE-2021-1905) High · Patch now · Closed
- rConfig OS Command Injection Vulnerability (CVE-2020-10221) High · Patch now · Closed
- Roundcube Webmail File Disclosure Vulnerability (CVE-2017-16651) High · Patch now · Closed
- SAP NetWeaver Directory Traversal Vulnerability (CVE-2016-3976) High · Patch now · Closed
- SolarWinds Virtualization Manager Privilege Escalation Vulnerability (CVE-2016-3643) High · Patch now · Closed
- Sonatype Nexus Repository Remote Code Execution Vulnerability (CVE-2020-10199) High · Patch now · Closed
- SonicWall SMA100 SQL Injection Vulnerability (CVE-2019-7481) High · Patch now · Closed
- SonicWall Email Security Unrestricted Upload of File Vulnerability (CVE-2021-20022) High · Patch now · Closed
- Symantec Messaging Gateway Remote Code Execution Vulnerability (CVE-2017-6327) High · Patch now · Closed
- TeamViewer Desktop Bypass Remote Login Vulnerability (CVE-2019-18988) High · Patch now · Closed
- ThinkPHP Remote Code Execution Vulnerability (CVE-2019-9082) High · Patch now · Closed
- Trend Micro OfficeScan Directory Traversal Vulnerability (CVE-2019-18187) High · Patch now · Closed
- Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability (CVE-2020-8467) High · Patch now · Closed
- Trend Micro Multiple Products Content Validation Escape Vulnerability (CVE-2020-8468) High · Patch now · Closed
- Trend Micro Multiple Products Improper Access Control Vulnerability (CVE-2020-24557) High · Patch now · Closed
- Trend Micro Multiple Products Improper Input Validation Vulnerability (CVE-2021-36742) High · Patch now · Closed
- Trend Micro Multiple Products Improper Input Validation Vulnerability (CVE-2021-36741) High · Patch now · Closed
- TVT NVMS-1000 Directory Traversal Vulnerability (CVE-2019-20085) High · Patch now · Closed
- Unraid Authentication Bypass Vulnerability (CVE-2020-5849) High · Patch now · Closed
- VMware Multiple Products Privilege Escalation Vulnerability (CVE-2020-3950) High · Patch now · Closed
- WordPress Snap Creek Duplicator Plugin File Download Vulnerability (CVE-2020-11738) High · Patch now · Closed
- Accellion FTA OS Command Injection Vulnerability (CVE-2021-27102) High · Patch now · Closed
- Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability (CVE-2021-21017) High · Patch now · Closed
- Adobe Acrobat and Reader Use-After-Free Vulnerability (CVE-2021-28550) High · Patch now · Closed
- Adobe Flash Player Use-After-Free Vulnerability (CVE-2018-4878) High · Patch now · Closed
- Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability (CVE-2020-5735) High · Patch now · Closed
- Android Kernel Use-After-Free Vulnerability (CVE-2019-2215) High · Patch now · Closed
- Android Kernel Out-of-Bounds Write Vulnerability (CVE-2020-0041) High · Patch now · Closed
- Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability (CVE-2020-0069) High · Patch now · Closed
- Apache Struts Deserialization of Untrusted Data Vulnerability (CVE-2017-9805) High · Patch now · Closed
- Apache HTTP Server Privilege Escalation Vulnerability (CVE-2019-0211) High · Patch now · Closed
- Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability (CVE-2019-17558) High · Patch now · Closed
- Apache Struts Remote Code Execution Vulnerability (CVE-2018-11776) High · Patch now · Closed
- Apple iOS, iPadOS, macOS Use-After-Free Vulnerability (CVE-2021-30858) High · Patch now · Closed
- Apple iOS and macOS Group Facetime Vulnerability (CVE-2019-6223) High · Patch now · Closed
- Apple Multiple Products Integer Overflow Vulnerability (CVE-2021-30860) High · Patch now · Closed
- Apple Multiple Products Memory Corruption Vulnerability (CVE-2020-27930) High · Patch now · Closed
- Apple Multiple Products Memory Corruption Vulnerability (CVE-2021-30807) High · Patch now · Closed
- Apple Multiple Products Type Confusion Vulnerability (CVE-2020-27932) High · Patch now · Closed
- Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability (CVE-2020-9818) High · Patch now · Closed
- Apple iOS WebKit Use-After-Free Vulnerability (CVE-2021-30762) High · Patch now · Closed
- Apple Multiple Products Race Condition Vulnerability (CVE-2021-1782) High · Patch now · Closed
- Apple Multiple Products WebKit Storage Use-After-Free Vulnerability (CVE-2021-30661) High · Patch now · Closed
- Apple iOS WebKit Buffer Overflow Vulnerability (CVE-2021-30666) High · Patch now · Closed
- Apple macOS Unspecified Vulnerability (CVE-2021-30713) High · Patch now · Closed
- Apple Multiple Products WebKit Memory Corruption Vulnerability (CVE-2021-30665) High · Patch now · Closed
- Apple Multiple Products WebKit Integer Overflow Vulnerability (CVE-2021-30663) High · Patch now · Closed
- Apple iOS WebKit Memory Corruption Vulnerability (CVE-2021-30761) High · Patch now · Closed
- Apple iOS, iPadOS, and macOS Type Confusion Vulnerability (CVE-2021-30869) High · Patch now · Closed
- Apple Multiple Products Code Execution Vulnerability (CVE-2020-9859) High · Patch now · Closed
- Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability (CVE-2021-28664) High · Patch now · Closed
- Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability (CVE-2021-28663) High · Patch now · Closed
- Atlassian Confluence Server and Data Center Path Traversal Vulnerability (CVE-2019-3398) High · Patch now · Closed
- Cisco ASA and FTD Read-Only Path Traversal Vulnerability (CVE-2020-3452) High · Patch now · Closed
- Cisco IOS XR Software Discovery Protocol Format String Vulnerability (CVE-2020-3118) High · Patch now · Closed
- Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability (CVE-2020-3566) High · Patch now · Closed
- Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability (CVE-2020-3569) High · Patch now · Closed