Known Exploited Vulnerabilities
The CISA catalogue of vulnerabilities with evidence of exploitation in the wild, newest additions first. Catalogue version 2026.11.10, released 2026-11-10 19:03 UTC.
1,779 entries
| Added | CVE | Vendor · product | Name | CVSS | Due | Ransomware |
|---|---|---|---|---|---|---|
| 2022-06-27 | CVE-2019-8605 | Apple · Multiple Products | Apple Multiple Products Use-After-Free Vulnerability | 7.8 High | 2022-07-18 | unknown |
| 2022-06-27 | CVE-2018-4344 | Apple · Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 7.8 High | 2022-07-18 | unknown |
| 2022-06-14 | CVE-2022-30190 | Microsoft · Windows | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 7.8 High | 2022-07-05 | known |
| 2022-06-09 | CVE-2021-38163 | SAP · NetWeaver | SAP NetWeaver Unrestricted File Upload Vulnerability | 9.9 Critical | 2022-06-30 | unknown |
| 2022-06-09 | CVE-2016-2388 | SAP · NetWeaver | SAP NetWeaver Information Disclosure Vulnerability | 5.3 Medium | 2022-06-30 | unknown |
| 2022-06-09 | CVE-2016-2386 | SAP · NetWeaver | SAP NetWeaver SQL Injection Vulnerability | 9.8 Critical | 2022-06-30 | unknown |
| 2022-06-08 | CVE-2019-7195 | QNAP · Photo Station | QNAP Photo Station Path Traversal Vulnerability | 9.8 Critical | 2022-06-22 | known |
| 2022-06-08 | CVE-2019-7194 | QNAP · Photo Station | QNAP Photo Station Path Traversal Vulnerability | 9.8 Critical | 2022-06-22 | known |
| 2022-06-08 | CVE-2019-7193 | QNAP · QTS | QNAP QTS Improper Input Validation Vulnerability | 9.8 Critical | 2022-06-22 | known |
| 2022-06-08 | CVE-2019-7192 | QNAP · Photo Station | QNAP Photo Station Improper Access Control Vulnerability | 9.8 Critical | 2022-06-22 | known |
| 2022-06-08 | CVE-2019-5825 | Google · Chromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 6.5 Medium | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2019-15271 | Cisco · RV Series Routers | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2018-6065 | Google · Chromium V8 | Google Chromium V8 Integer Overflow Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2018-4990 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Double Free Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2018-17480 | Google · Chromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2018-17463 | Google · Chromium V8 | Google Chromium V8 Remote Code Execution Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2017-6862 | NETGEAR · Multiple Devices | NETGEAR Multiple Devices Buffer Overflow Vulnerability | 9.8 Critical | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2017-5070 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2017-5030 | Google · Chromium V8 | Google Chromium V8 Memory Corruption Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2016-5198 | Google · Chromium V8 | Google Chromium V8 Out-of-Bounds Memory Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2016-1646 | Google · Chromium V8 | Google Chromium V8 Out-of-Bounds Read Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2013-1331 | Microsoft · Office | Microsoft Office Buffer Overflow Vulnerability | 7.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2012-5054 | Adobe · Flash Player | Adobe Flash Player Integer Overflow Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2012-4969 | Microsoft · Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 8.1 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2012-1889 | Microsoft · XML Core Services | Microsoft XML Core Services Memory Corruption Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2012-0767 | Adobe · Flash Player | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | 6.1 Medium | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2012-0754 | Adobe · Flash Player | Adobe Flash Player Memory Corruption Vulnerability | 7.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2012-0151 | Microsoft · Windows | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | 7.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2011-2462 | Adobe · Reader and Acrobat | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2011-0609 | Adobe · Flash Player | Adobe Flash Player Unspecified Vulnerability | 7.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2010-2883 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability | 7.3 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2010-2572 | Microsoft · PowerPoint | Microsoft PowerPoint Buffer Overflow Vulnerability | 7.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2010-1297 | Adobe · Flash Player | Adobe Flash Player Memory Corruption Vulnerability | 7.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2009-4324 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | 7.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2009-3953 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2009-1862 | Adobe · Acrobat and Reader, Flash Player | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability | 7.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2009-0563 | Microsoft · Office | Microsoft Office Buffer Overflow Vulnerability | 7.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2009-0557 | Microsoft · Office | Microsoft Office Object Record Corruption Vulnerability | 7.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2008-0655 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Unspecified Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2007-5659 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Buffer Overflow Vulnerability | 7.8 High | 2022-06-22 | unknown |
| 2022-06-08 | CVE-2006-2492 | Microsoft · Word | Microsoft Word Malformed Object Pointer Vulnerability | 8.8 High | 2022-06-22 | unknown |
| 2022-06-02 | CVE-2022-26134 | Atlassian · Confluence Server/Data Center | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | 9.8 Critical | 2022-06-06 | known |
| 2022-05-25 | CVE-2019-3010 | Oracle · Solaris | Oracle Solaris Privilege Escalation Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2016-7256 | Microsoft · Windows | Microsoft Windows Open Type Font Remote Code Execution Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2016-3393 | Microsoft · Windows | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability | 7.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2016-1010 | Adobe · Flash Player and AIR | Adobe Flash Player and AIR Integer Overflow Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2016-0984 | Adobe · Flash Player and AIR | Adobe Flash Player and AIR Use-After-Free Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2016-0034 | Microsoft · Silverlight | Microsoft Silverlight Runtime Remote Code Execution Vulnerability | 8.8 High | 2022-06-15 | known |
| 2022-05-25 | CVE-2015-8651 | Adobe · Flash Player | Adobe Flash Player Integer Overflow Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2015-6175 | Microsoft · Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2015-4495 | Mozilla · Firefox | Mozilla Firefox Security Feature Bypass Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2015-2425 | Microsoft · Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2015-2360 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2015-1769 | Microsoft · Windows | Microsoft Windows Mount Manager Privilege Escalation Vulnerability | 6.6 Medium | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2015-1671 | Microsoft · Windows | Microsoft Windows Remote Code Execution Vulnerability | 7.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2015-0310 | Adobe · Flash Player | Adobe Flash Player ASLR Bypass Vulnerability | 7.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2015-0071 | Microsoft · Internet Explorer | Microsoft Internet Explorer ASLR Bypass Vulnerability | 6.5 Medium | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2015-0016 | Microsoft · Windows | Microsoft Windows TS WebProxy Directory Traversal Vulnerability | 7.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2014-8439 | Adobe · Flash Player | Adobe Flash Player Dereferenced Pointer Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2014-4148 | Microsoft · Windows | Microsoft Windows Remote Code Execution Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2014-4123 | Microsoft · Internet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2014-4077 | Microsoft · Input Method Editor (IME) Japanese | Microsoft IME Japanese Privilege Escalation Vulnerability | 7.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2014-3153 | Linux · Kernel | Linux Kernel Privilege Escalation Vulnerability | 7.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2014-2817 | Microsoft · Internet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2014-0546 | Adobe · Reader and Acrobat | Adobe Reader and Acrobat Sandbox Bypass Vulnerability | 8.8 High | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2013-7331 | Microsoft · Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | 6.5 Medium | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2013-3993 | IBM · InfoSphere BigInsights | IBM InfoSphere BigInsights Invalid Input Vulnerability | 6.5 Medium | 2022-06-15 | known |
| 2022-05-25 | CVE-2013-3896 | Microsoft · Silverlight | Microsoft Silverlight Information Disclosure Vulnerability | 5.5 Medium | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2013-2423 | Oracle · Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | 3.7 Low | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2013-0431 | Oracle · Java Runtime Environment (JRE) | Oracle JRE Sandbox Bypass Vulnerability | 3.7 Low | 2022-06-15 | known |
| 2022-05-25 | CVE-2013-0422 | Oracle · Java Runtime Environment (JRE) | Oracle JRE Remote Code Execution Vulnerability | 9.8 Critical | 2022-06-15 | known |
| 2022-05-25 | CVE-2013-0074 | Microsoft · Silverlight | Microsoft Silverlight Double Dereference Vulnerability | 7.8 High | 2022-06-15 | known |
| 2022-05-25 | CVE-2012-1710 | Oracle · Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | 9.8 Critical | 2022-06-15 | known |
| 2022-05-25 | CVE-2010-1428 | Red Hat · JBoss | Red Hat JBoss Information Disclosure Vulnerability | 5.9 Medium | 2022-06-15 | known |
| 2022-05-25 | CVE-2010-0840 | Oracle · Java Runtime Environment (JRE) | Oracle JRE Unspecified Vulnerability | 9.8 Critical | 2022-06-15 | unknown |
| 2022-05-25 | CVE-2010-0738 | Red Hat · JBoss | Red Hat JBoss Authentication Bypass Vulnerability | 3.7 Low | 2022-06-15 | known |
| 2022-05-24 | CVE-2018-8611 | Microsoft · Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 High | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2018-19953 | QNAP · Network Attached Storage (NAS) | QNAP NAS File Station Cross-Site Scripting Vulnerability | 6.1 Medium | 2022-06-14 | known |
| 2022-05-24 | CVE-2018-19949 | QNAP · Network Attached Storage (NAS) | QNAP NAS File Station Command Injection Vulnerability | 9.8 Critical | 2022-06-14 | known |
| 2022-05-24 | CVE-2018-19943 | QNAP · Network Attached Storage (NAS) | QNAP NAS File Station Cross-Site Scripting Vulnerability | 8.0 High | 2022-06-14 | known |
| 2022-05-24 | CVE-2017-8543 | Microsoft · Windows | Microsoft Windows Search Remote Code Execution Vulnerability | 9.8 Critical | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2017-8291 | Artifex · Ghostscript | Artifex Ghostscript Type Confusion Vulnerability | 7.8 High | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2017-18362 | Kaseya · Virtual System/Server Administrator (VSA) | Kaseya VSA SQL Injection Vulnerability | 9.8 Critical | 2022-06-14 | known |
| 2022-05-24 | CVE-2017-0210 | Microsoft · Internet Explorer | Microsoft Internet Explorer Privilege Escalation Vulnerability | 8.8 High | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2017-0149 | Microsoft · Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 8.8 High | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2017-0147 | Microsoft · SMBv1 server | Microsoft Windows SMBv1 Information Disclosure Vulnerability | 7.5 High | 2022-06-14 | known |
| 2022-05-24 | CVE-2017-0022 | Microsoft · XML Core Services | Microsoft XML Core Services Information Disclosure Vulnerability | 6.5 Medium | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2017-0005 | Microsoft · Windows | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 7.8 High | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2016-6367 | Cisco · Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | 7.8 High | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2016-6366 | Cisco · Adaptive Security Appliance (ASA) | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | 8.8 High | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2016-4657 | Apple · iOS | Apple iOS Webkit Memory Corruption Vulnerability | 8.8 High | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2016-4656 | Apple · iOS | Apple iOS Memory Corruption Vulnerability | 7.8 High | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2016-4655 | Apple · iOS | Apple iOS Information Disclosure Vulnerability | 5.5 Medium | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2016-3351 | Microsoft · Internet Explorer and Edge | Microsoft Internet Explorer and Edge Information Disclosure Vulnerability | 6.5 Medium | 2022-06-14 | known |
| 2022-05-24 | CVE-2016-3298 | Microsoft · Internet Explorer | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability | 6.5 Medium | 2022-06-14 | unknown |
| 2022-05-24 | CVE-2016-0162 | Microsoft · Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | 4.3 Medium | 2022-06-14 | unknown |
| 2022-05-23 | CVE-2022-20821 | Cisco · IOS XR | Cisco IOS XR Open Port Vulnerability | 6.5 Medium | 2022-06-13 | unknown |
| 2022-05-23 | CVE-2021-30883 | Apple · Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 7.8 High | 2022-06-13 | unknown |
| 2022-05-23 | CVE-2021-1048 | Android · Kernel | Android Kernel Use-After-Free Vulnerability | 7.8 High | 2022-06-13 | unknown |
| 2022-05-23 | CVE-2021-0920 | Android · Kernel | Android Kernel Race Condition Vulnerability | 6.4 Medium | 2022-06-13 | unknown |
Source: CISA Known Exploited Vulnerabilities Catalog (cisa.gov). Due dates are the remediation deadlines CISA sets for US federal civilian agencies.