Complete index
Zero-Day Vulnerability Archive
Search all tracked zero-day vulnerabilities and narrow the results by year, vendor, software, weakness type, or presence in the CISA and ENISA known exploited vulnerability catalogs.
| CVE | Vendor / Product | Vulnerability | CWE | Discovered | KEV |
|---|---|---|---|---|---|
| CVE-2023-34362 | UnknownMOVEit Transfer | SQL injection in MOVEit Transfer | CWE-89 | CISA KEVENISA KEV | |
| CVE-2023-2868 | Barracuda NetworksEmail Security Gateway (ESG) | OS Command Injection in Email Security Gateway (ESG) | CWE-78 | CISA KEVENISA KEV | |
| CVE-2023-32373 | Apple Inc.Apple iOS | Use-after-free in WebKitGTK+ and WPE WebKit | CWE-416 | CISA KEVENISA KEV | |
| CVE-2023-28204 | Apple Inc.Apple iOS | Out-of-bounds read in WebKitGTK+ and WPE WebKit | CWE-125 | CISA KEVENISA KEV | |
| CVE-2023-32409 | Apple Inc.Apple iOS | Buffer overflow in WebKitGTK+ and WPE WebKit | CWE-119 | CISA KEVENISA KEV | |
| CVE-2023-29336 | MicrosoftMicrosoft Windows | Use-after-free in Microsoft Windows and Windows Server | CWE-416 | CISA KEVENISA KEV | |
| CVE-2023-21492 | SamsungSamsung Mobile Firmware | Inclusion of sensitive information in log files in Samsung Mobile Firmware | CWE-532 | CISA KEVENISA KEV | |
| CVE-2023-2136 | GoogleGoogle Chrome | Integer overflow in Google Chromium | CWE-190 | CISA KEVENISA KEV | |
| CVE-2023-2033 | GoogleGoogle Chrome | Type Confusion in Google Chromium | CWE-843 | CISA KEVENISA KEV | |
| CVE-2023-28252 | MicrosoftMicrosoft Windows | Buffer overflow in Microsoft Windows and Windows Server | CWE-119 | CISA KEVENISA KEV | |
| CVE-2023-28205 | Apple Inc.Apple iOS | Use-after-free in WebKitGTK+ and WPE WebKit | CWE-416 | CISA KEVENISA KEV | |
| CVE-2023-28206 | Apple Inc.Apple iOS | Out-of-bounds write in iPadOS and Apple iOS | CWE-787 | CISA KEVENISA KEV | |
| CVE-2023-26083 | ARMBifrost GPU Kernel Driver, Midgard GPU Kernel Driver, Valhall GPU Kernel Driver | Memory leak in ARM products | CWE-401 | CISA KEVENISA KEV | |
| CVE-2023-26360 | AdobeColdFusion | Improper access control in ColdFusion | CWE-284 | CISA KEVENISA KEV | |
| CVE-2023-26359 | AdobeColdFusion | Deserialization of Untrusted Data in ColdFusion | CWE-502 | CISA KEVENISA KEV | |
| CVE-2023-23397 | MicrosoftMicrosoft Outlook | Information disclosure in Microsoft Office and Microsoft Outlook | CWE-200 | CISA KEVENISA KEV | |
| CVE-2023-24880 | MicrosoftMicrosoft Windows | Security features bypass in Microsoft Windows and Windows Server | CWE-254 | CISA KEVENISA KEV | |
| CVE-2022-41328 | Fortinet, IncFortiOS | Path traversal in FortiOS | CWE-22 | CISA KEVENISA KEV | |
| CVE-2023-20963 | GoogleGoogle Android | Permissions, Privileges, and Access Controls in Google Android | CWE-264 | CISA KEVENISA KEV | |
| CVE-2023-21823 | MicrosoftMicrosoft Windows | Buffer overflow in Microsoft Windows and Windows Server | CWE-119 | CISA KEVENISA KEV |
Showing 321–340 of 699 results