Vulnerabilities with evidence of exploitation, including affected products and required actions.
This page is an archived snapshot of the CISA Exploited Vulnerabilities feed collected on Oct 1, 2026, preserved by BioThreat Corporation. Publication dates belong to the original source; this snapshot is not a current advisory.
Vendor: SolarView | Product: Compact | SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable. | Federal remediation due: 2023-08-03
CVE-2023-37450 · CISA Known Exploited Vulnerabilities
Vendor: Apple | Product: Multiple Products | Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | Required action: Apply updates per vendor…
Read full source summary
Vendor: Apple | Product: Multiple Products | Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable. | Federal remediation due: 2023-08-03
CVE-2023-32046 · CISA Known Exploited Vulnerabilities
Vendor: Microsoft | Product: Windows | Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable. | Federal remediation due: 2023-08-01
CVE-2023-32049 · CISA Known Exploited Vulnerabilities
Vendor: Microsoft | Product: Windows | Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable. | Federal remediation due: 2023-08-01
CVE-2023-35311 · CISA Known Exploited Vulnerabilities
Vendor: Microsoft | Product: Outlook | Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable. | Federal remediation due: 2023-08-01
CVE-2023-36874 · CISA Known Exploited Vulnerabilities
Vendor: Microsoft | Product: Windows | Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable. | Federal remediation due: 2023-08-01
CVE-2022-31199 · CISA Known Exploited Vulnerabilities
Vendor: Netwrix | Product: Auditor | Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthenticated, remote attacker to execute code as the NT AUTHORITY\SYSTEM user. Successful exploitation requires that the attacker is able to reach port 9004/TCP, which is commonly blocked by standard enterprise firewalling. | Required action:…
Read full source summary
Vendor: Netwrix | Product: Auditor | Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthenticated, remote attacker to execute code as the NT AUTHORITY\SYSTEM user. Successful exploitation requires that the attacker is able to reach port 9004/TCP, which is commonly blocked by standard enterprise firewalling. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable. | Federal remediation due: 2023-08-01
CVE-2021-29256 · CISA Known Exploited Vulnerabilities
Vendor: Arm | Product: Mali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable. | Federal remediation due: 2023-07-28
CVE-2019-17621 · CISA Known Exploited Vulnerabilities
Vendor: D-Link | Product: DIR-859 Router | D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network. | Required action: Apply updates per vendor instructions or discontinue…
Read full source summary
Vendor: D-Link | Product: DIR-859 Router | D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable. | Federal remediation due: 2023-07-20
CVE-2019-20500 · CISA Known Exploited Vulnerabilities
Vendor: D-Link | Product: DWL-2600AP Access Point | D-Link DWL-2600AP access point contains an authenticated command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are…
Read full source summary
Vendor: D-Link | Product: DWL-2600AP Access Point | D-Link DWL-2600AP access point contains an authenticated command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable. | Federal remediation due: 2023-07-20
CVE-2021-25487 · CISA Known Exploited Vulnerabilities
Vendor: Samsung | Product: Mobile Devices | Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable | Federal…
Read full source summary
Vendor: Samsung | Product: Mobile Devices | Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable | Federal remediation due: 2023-07-20
CVE-2021-25489 · CISA Known Exploited Vulnerabilities
Vendor: Samsung | Product: Mobile Devices | Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable | Federal remediation due: 2023-07-20
CVE-2021-25394 · CISA Known Exploited Vulnerabilities
Vendor: Samsung | Product: Mobile Devices | Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable | Federal remediation due: 2023-07-20
CVE-2021-25395 · CISA Known Exploited Vulnerabilities
Vendor: Samsung | Product: Mobile Devices | Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable | Federal remediation due: 2023-07-20
CVE-2021-25371 · CISA Known Exploited Vulnerabilities
Vendor: Samsung | Product: Mobile Devices | Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable | Federal remediation due: 2023-07-20
CVE-2021-25372 · CISA Known Exploited Vulnerabilities
Vendor: Samsung | Product: Mobile Devices | Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access. | Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable | Federal remediation due: 2023-07-20
CVE-2023-32434 · CISA Known Exploited Vulnerabilities
Vendor: Apple | Product: Multiple Products | Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2023-07-14
CVE-2023-32435 · CISA Known Exploited Vulnerabilities
Vendor: Apple | Product: Multiple Products | Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | Required action: Apply updates per…
Read full source summary
Vendor: Apple | Product: Multiple Products | Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2023-07-14
CVE-2023-32439 · CISA Known Exploited Vulnerabilities
Vendor: Apple | Product: Multiple Products | Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | Required action: Apply updates per vendor…
Read full source summary
Vendor: Apple | Product: Multiple Products | Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2023-07-14
CVE-2023-20867 · CISA Known Exploited Vulnerabilities
Vendor: VMware | Product: Tools | VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability. | Required action: Apply updates per vendor…
Read full source summary
Vendor: VMware | Product: Tools | VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability. | Required action: Apply updates per vendor instructions. | Federal remediation due: 2023-07-14
BioThreat Corporation threat monitoring workflows bring together reports published by the named source institutions. These are public-source reports; publication dates and source links accompany each record.
01 / SOURCE
Read the source
Open a feed to search titles, summaries, or CVE IDs. Follow a record’s title or the Official source link to read the reporting in its original context.
Daily snapshots are collected when a source is visited and successfully refreshed. Archive dates indicate collection dates, and the archive may contain gaps.
JSON links provide machine-readable records with source names, titles, summaries, links, and publication dates. Choose a saved date for the records collected in that snapshot.