Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2023-36802 | MicrosoftMicrosoft Windows | Buffer overflow in Microsoft Windows and Windows Server | CWE-119 | CISA KEVENISA KEV | |
| CVE-2023-36761 | MicrosoftMicrosoft Word | Information disclosure in Microsoft products | CWE-200 | CISA KEVENISA KEV | |
| CVE-2023-26369 | AdobeAdobe Reader | Out-of-bounds write in Adobe Reader and Adobe Acrobat | CWE-787 | CISA KEVENISA KEV | |
| CVE-2023-4863 | GoogleGoogle Chrome | Heap-based buffer overflow in Google Chrome | CWE-122 | CISA KEVENISA KEV | |
| CVE-2023-41061 | Apple Inc.Apple iOS | Input validation error in iPadOS and Apple iOS | CWE-20 | CISA KEVENISA KEV | |
| CVE-2023-41064 | Apple Inc.Apple iOS | Buffer overflow in iPadOS and Apple iOS | CWE-119 | CISA KEVENISA KEV | |
| CVE-2023-20269 | Cisco Systems, IncCisco Secure Firewall Adaptive Security Appliance (ASA) | Authentication bypass using an alternate path or channel in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) | CWE-288 | CISA KEVENISA KEV | |
| CVE-2023-35674 | GoogleGoogle Android | Improper input validation in Google Android | CWE-20 | CISA KEVENISA KEV | |
| CVE-2023-38035 | IvantiMobileIron Sentry | Improper Authentication in MobileIron Sentry | CWE-287 | CISA KEVENISA KEV | |
| CVE-2023-38180 | MicrosoftASP.NET Core | Input validation error in Microsoft products | CWE-20 | CISA KEVENISA KEV | |
| CVE-2023-38831 | RARLABWinRAR | Input validation error in WinRAR | CWE-20 | CISA KEVENISA KEV | |
| CVE-2023-35081 | IvantiEndpoint Manager Mobile (formerly MobileIron Core) | Path traversal in Endpoint Manager Mobile (formerly MobileIron Core) | CWE-22 | CISA KEVENISA KEV | |
| CVE-2023-35078 | IvantiEndpoint Manager Mobile (formerly MobileIron Core) | Improper Authentication in Endpoint Manager Mobile (formerly MobileIron Core) | CWE-287 | CISA KEVENISA KEV | |
| CVE-2023-41990 | Apple Inc.Apple iOS | Buffer overflow in Apple iOS | CWE-119 | CISA KEVENISA KEV | |
| CVE-2023-38606 | Apple Inc.Apple iOS | Buffer overflow in Apple iOS and iPadOS | CWE-119 | CISA KEVENISA KEV | |
| CVE-2023-38205 | AdobeColdFusion | Improper access control in ColdFusion | CWE-284 | CISA KEVENISA KEV | |
| CVE-2023-3519 | CitrixCitrix Netscaler ADC | Code Injection in Citrix Netscaler ADC and Citrix NetScaler Gateway | CWE-94 | CISA KEVENISA KEV | |
| CVE-2023-37580 | Synacor Inc.Zimbra Collaboration | Cross-site scripting in Zimbra Collaboration | CWE-79 | CISA KEVENISA KEV | |
| CVE-2023-36884 | MicrosoftMicrosoft Windows | Input validation error in Microsoft products | CWE-20 | CISA KEVENISA KEV | |
| CVE-2023-35311 | MicrosoftMicrosoft Outlook | Input validation error in Microsoft products | CWE-20 | CISA KEVENISA KEV |
Showing 261–280 of 670 results