CVE-20XX-?
agent?

Drop everything.

Critical CVEs that are confirmed exploited or very likely to be. Newest first.

235 CVEs · updated 2026-11-10 13:00 UTC

Reset all
  1. CVE-2026-41089

    Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

    Drop everything Memory safety OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 78% exploit odds Fix listed
  2. CVE-2026-33824

    Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.

    Drop everything exploited Memory safety OS & kernel Microsoft Windows 10 1607

    9.8 CRITICAL 77% exploit odds Fix listed
  3. CVE-2025-11953

    The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary executables. On Windows, the attackers can also execute arbitrary shell commands with fully controlled arguments.

    Drop everything exploited Injection OS & kernel react-native-community React Native Community Cli

    9.8 CRITICAL 94% exploit odds Fix listed
  4. CVE-2025-59287

    Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

    Drop everything exploited Code execution OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 100% exploit odds Fix listed
  5. CVE-2025-47981

    Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network.

    Drop everything Memory safety OS & kernel Microsoft Windows 10 1507

    9.8 CRITICAL 41% exploit odds Fix listed
  6. CVE-2025-32463

    Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

    Drop everything exploited Other OS & kernel Sudo Project Sudo

    9.3 CRITICAL 56% exploit odds Fix listed
  7. CVE-2025-31200

    A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.

    Drop everything exploited Memory safety OS & kernel Apple macOS

    9.8 CRITICAL 21% exploit odds Fix listed
  8. CVE-2025-21298

    Windows OLE Remote Code Execution Vulnerability

    Drop everything Memory safety OS & kernel Microsoft Windows 10 1507

    9.8 CRITICAL 74% exploit odds Fix listed
  9. CVE-2024-49112

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Drop everything Memory safety OS & kernel Microsoft Windows 10 1507

    9.8 CRITICAL 72% exploit odds Fix listed
  10. CVE-2024-38063

    Windows TCP/IP Remote Code Execution Vulnerability

    Drop everything Code execution OS & kernel Microsoft Windows 10 1507

    9.8 CRITICAL 71% exploit odds Fix listed
  11. CVE-2024-38077

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

    Drop everything Memory safety OS & kernel Microsoft Windows Server 2008

    9.8 CRITICAL 84% exploit odds Fix listed
  12. CVE-2024-30080

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    Drop everything Memory safety OS & kernel Microsoft Windows 10 1507

    9.8 CRITICAL 43% exploit odds Fix listed
  13. CVE-2024-4577

    In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

    Drop everything exploited Injection OS & kernel PHP

    9.8 CRITICAL 100% exploit odds Fix listed
  14. CVE-2024-26594

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.

    Drop everything Memory safety OS & kernel Linux Kernel

    9.1 CRITICAL 51% exploit odds Fix listed
  15. CVE-2023-48365

    Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch 12, August 2022 Patch 14, May 2022 Patch 16, February 2022 Patch 15, and November 2021 Patch 17. NOTE: this issue exists because of an incomplete fix for CVE-2023-41265.

    Drop everything exploited Code execution OS & kernel Qlik Sense

    9.6 CRITICAL 48% exploit odds Fix listed
  16. CVE-2023-20198

    Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command to create a local user and password combination. This allowed the user to log in with normal user access. The attacker then exploited another component of the web UI feature, leveraging the new local user to elevate privilege to root and write the implant to the file system. Cisco has assigned CVE-2023-20273 to this issue. CVE-2023-20198 has been assigned a CVSS Score of 10.0. CVE-2023-20273 has been assigned a CVSS Score of 7.2. Both of these CVEs are being tracked by CSCwh87343.

    Drop everything exploited Other OS & kernel Rockwellautomation allen-bradley Stratix 5200 Firmware

    10.0 CRITICAL 100% exploit odds Fix listed
  17. CVE-2023-39143

    PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled (a very common configuration).

    Drop everything Disclosure OS & kernel Papercut Mf

    9.8 CRITICAL 80% exploit odds Fix listed
  18. CVE-2023-24941

    Windows Network File System Remote Code Execution Vulnerability

    Drop everything Code execution OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 95% exploit odds Fix listed
  19. CVE-2023-21554

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    Drop everything Code execution OS & kernel Microsoft Windows 10 1607

    9.8 CRITICAL 95% exploit odds Fix listed
  20. CVE-2022-47939

    An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT.

    Drop everything Memory safety OS & kernel Linux Kernel

    9.8 CRITICAL 49% exploit odds Fix listed
  21. CVE-2022-24697

    Kylin's cube designer function has a command injection vulnerability when overwriting system parameters in the configuration overwrites menu. RCE can be implemented by closing the single quotation marks around the parameter value of “-- conf=” to inject any operating system command into the command line parameters. This vulnerability affects Kylin 2 version 2.6.5 and earlier, Kylin 3 version 3.1.2 and earlier, and Kylin 4 version 4.0.1 and earlier.

    Drop everything Injection OS & kernel Apache Kylin

    9.8 CRITICAL 85% exploit odds Fix listed
  22. CVE-2022-34718

    Windows TCP/IP Remote Code Execution Vulnerability

    Drop everything Code execution OS & kernel Microsoft Windows 10

    9.8 CRITICAL 57% exploit odds No fix listed
  23. CVE-2022-34721

    Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

    Drop everything Code execution OS & kernel Microsoft Windows 10

    9.8 CRITICAL 77% exploit odds No fix listed
  24. CVE-2022-34715

    Windows Network File System Remote Code Execution Vulnerability

    Drop everything Injection OS & kernel Microsoft Windows Server 2022

    9.8 CRITICAL 80% exploit odds No fix listed
  25. CVE-2022-30136

    Windows Network File System Remote Code Execution Vulnerability

    Drop everything Code execution OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 73% exploit odds Fix listed
  26. CVE-2022-26937

    Windows Network File System Remote Code Execution Vulnerability

    Drop everything Code execution OS & kernel Microsoft Windows Server

    9.8 CRITICAL 76% exploit odds Fix listed
  27. CVE-2022-26809

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

    Drop everything Code execution OS & kernel Microsoft Windows 10

    9.8 CRITICAL 91% exploit odds No fix listed
  28. CVE-2022-21907

    HTTP Protocol Stack Remote Code Execution Vulnerability

    Drop everything Code execution OS & kernel Microsoft Windows 10

    9.8 CRITICAL 93% exploit odds No fix listed
  29. CVE-2021-43267

    An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type.

    Drop everything Crypto OS & kernel Linux Kernel

    9.8 CRITICAL 58% exploit odds Fix listed
  30. CVE-2021-26424

    Windows TCP/IP Remote Code Execution Vulnerability

    Drop everything Code execution OS & kernel Microsoft Windows 10

    9.9 CRITICAL 61% exploit odds Fix listed
  31. CVE-2021-35064

    KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg.

    Drop everything Auth & access OS & kernel Kramerav Viaware

    9.8 CRITICAL 71% exploit odds Fix listed
  32. CVE-2021-30116

    Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client for Windows and installs it, the file KaseyaD.ini is generated (C:\Program Files (x86)\Kaseya\XXXXXXXXXX\KaseyaD.ini) which contains an Agent_Guid and AgentPassword This Agent_Guid and AgentPassword can be used to log in on dl.asp (https://x.x.x.x/dl.asp?un=840997037507813&pw=113cc622839a4077a84837485ced6b93e440bf66d44057713cb2f95e503a06d9) This request authenticates the client and returns a sessionId cookie that can be used in subsequent attacks to bypass authentication. Security issues discovered --- * Unauthenticated download page leaks credentials * Credentials of agent software can be used to obtain a sessionId (cookie) that can be used for services not intended for use by agents * dl.asp accepts credentials via a GET request * Access to KaseyaD.ini gives an attacker access to sufficient information to penetrate the Kaseya installation and its clients. Impact --- Via the page /dl.asp enough information can be obtained to give an attacker a sessionId that can be used to execute further (semi-authenticated) attacks against the system.

    Drop everything exploited Other OS & kernel Kaseya Vsa Agent

    10.0 CRITICAL 86% exploit odds Fix listed
  33. CVE-2021-31166

    HTTP Protocol Stack Remote Code Execution Vulnerability

    Drop everything exploited Memory safety OS & kernel Microsoft Windows 10 2004

    9.8 CRITICAL 100% exploit odds Fix listed
  34. CVE-2020-35665

    An unauthenticated command-execution vulnerability exists in TerraMaster TOS through 4.2.06 via shell metacharacters in the Event parameter in include/makecvs.php during CSV creation.

    Drop everything Injection OS & kernel terra-master Terramaster Operating System

    9.8 CRITICAL 78% exploit odds No fix listed
  35. CVE-2020-25110

    An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is used for internal memory operations. This may lead to successful Denial-of-Service, and possibly Remote Code Execution.

    Drop everything Memory safety OS & kernel Ethernut nut\/os

    9.8 CRITICAL 54% exploit odds No fix listed
  36. CVE-2020-1350

    A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

    Drop everything exploited Code execution OS & kernel Microsoft Windows Server 2008

    10.0 CRITICAL 97% exploit odds Fix listed
  37. CVE-2020-0796

    A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

    Drop everything exploited Memory safety OS & kernel Microsoft Windows 10 1903

    10.0 CRITICAL 100% exploit odds Fix listed
  38. CVE-2020-7209

    LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.

    Drop everything Code execution OS & kernel HP Linuxki

    9.8 CRITICAL 99% exploit odds Fix listed
  39. CVE-2014-9390

    Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.

    Drop everything Code execution OS & kernel git-scm Git

    9.8 CRITICAL 76% exploit odds Fix listed
  40. CVE-2020-0609

    A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0610.

    Drop everything Code execution OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 78% exploit odds Fix listed
  41. CVE-2020-0610

    A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0609.

    Drop everything Code execution OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 68% exploit odds Fix listed
  42. CVE-2012-4284

    A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code

    Drop everything Code execution OS & kernel Sparklabs Viscosity

    9.8 CRITICAL 70% exploit odds Fix listed
  43. CVE-2019-5544

    OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.

    Drop everything exploited Memory safety OS & kernel VMware Horizon Daas

    9.8 CRITICAL 98% exploit odds Fix listed
  44. CVE-2019-1181

    A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP. The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.

    Drop everything Code execution OS & kernel Microsoft Windows 10

    9.8 CRITICAL 78% exploit odds Fix listed
  45. CVE-2019-12255

    Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.

    Drop everything Memory safety OS & kernel Windriver Vxworks

    9.8 CRITICAL 75% exploit odds Fix listed
  46. CVE-2019-0785

    A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.

    Drop everything Memory safety OS & kernel Microsoft Windows Server 2012

    9.8 CRITICAL 50% exploit odds Fix listed
  47. CVE-2019-0708

    A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.

    Drop everything exploited Memory safety OS & kernel Microsoft Windows 7

    9.8 CRITICAL 100% exploit odds Fix listed
  48. CVE-2019-0698

    A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0726.

    Drop everything Memory safety OS & kernel Microsoft Windows 10

    9.8 CRITICAL 63% exploit odds Fix listed
  49. CVE-2019-0726

    A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698.

    Drop everything Memory safety OS & kernel Microsoft Windows 10

    9.8 CRITICAL 54% exploit odds Fix listed
  50. CVE-2019-0626

    A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.

    Drop everything Memory safety OS & kernel Microsoft Windows 10

    9.8 CRITICAL 69% exploit odds Fix listed

A CVE is listed as major when it is critical (CVSS 9.0 or higher) and either confirmed exploited in the wild with a real chance of more, or very likely to be exploited (EPSS 40% or more).