Known Exploited Vulnerabilities
The CISA catalogue of vulnerabilities with evidence of exploitation in the wild, newest additions first. Catalogue version 2026.11.10, released 2026-11-10 19:03 UTC.
1,779 entries
| Added | CVE | Vendor · product | Name | CVSS | Due | Ransomware |
|---|---|---|---|---|---|---|
| 2022-03-07 | CVE-2009-3960 | Adobe · BlazeDS | Adobe BlazeDS Information Disclosure Vulnerability | 6.5 Medium | 2022-09-07 | known |
| 2022-03-03 | CVE-2022-20708 | Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 10.0 Critical | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2022-20703 | Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 10.0 Critical | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2022-20701 | Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 10.0 Critical | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2022-20700 | Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 10.0 Critical | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2022-20699 | Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 10.0 Critical | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2021-41379 | Microsoft · Windows | Microsoft Windows Installer Privilege Escalation Vulnerability | 5.5 Medium | 2022-03-17 | known |
| 2022-03-03 | CVE-2020-1938 | Apache · Tomcat | Apache Tomcat Improper Privilege Management Vulnerability | 9.8 Critical | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2020-11899 | Treck TCP/IP stack · IPv6 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability | 5.4 Medium | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2019-16928 | Exim · Exim Internet Mailer | Exim Out-of-bounds Write Vulnerability | 9.8 Critical | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2019-1652 | Cisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | Cisco Small Business Routers Improper Input Validation Vulnerability | 7.2 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2019-1297 | Microsoft · Excel | Microsoft Excel Remote Code Execution Vulnerability | 8.8 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-8581 | Microsoft · Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 7.4 High | 2022-03-17 | known |
| 2022-03-03 | CVE-2018-8298 | ChakraCore · ChakraCore scripting engine | ChakraCore Scripting Engine Type Confusion Vulnerability | 7.5 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0180 | Cisco · IOS Software | Cisco IOS Software Denial-of-Service Vulnerability | 6.8 Medium | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0179 | Cisco · IOS Software | Cisco IOS Software Denial-of-Service Vulnerability | 6.8 Medium | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0175 | Cisco · IOS, XR, and XE Software | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | 8.0 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0174 | Cisco · IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | 8.6 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0173 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 8.6 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0172 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 8.6 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0167 | Cisco · IOS, XR, and XE Software | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | 8.8 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0161 | Cisco · IOS Software | Cisco IOS Software Resource Management Errors Vulnerability | 6.3 Medium | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0159 | Cisco · IOS Software and Cisco IOS XE Software | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability | 7.5 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0158 | Cisco · IOS Software and Cisco IOS XE Software | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability | 8.6 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0156 | Cisco · IOS Software and Cisco IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability | 7.5 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0155 | Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability | 8.6 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0154 | Cisco · IOS Software | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability | 7.5 High | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2018-0151 | Cisco · IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability | 9.8 Critical | 2022-03-17 | unknown |
| 2022-03-03 | CVE-2017-8540 | Microsoft · Malware Protection Engine | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-6744 | Cisco · IOS software | Cisco IOS Software SNMP Remote Code Execution Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-6743 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-6740 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-6739 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-6738 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-6737 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-6736 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-6663 | Cisco · IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability | 6.5 Medium | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-6627 | Cisco · IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability | 7.5 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-12319 | Cisco · IOS XE Software | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability | 5.9 Medium | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-12240 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability | 9.8 Critical | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-12238 | Cisco · Catalyst 6800 Series Switches | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability | 6.5 Medium | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-12237 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability | 7.5 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-12235 | Cisco · IOS software | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability | 7.5 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-12234 | Cisco · IOS software | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | 7.5 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-12233 | Cisco · IOS software | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | 7.5 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-12232 | Cisco · IOS software | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability | 6.5 Medium | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-12231 | Cisco · IOS software | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability | 7.5 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-11826 | Microsoft · Office | Microsoft Office Remote Code Execution Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-11292 | Adobe · Flash Player | Adobe Flash Player Type Confusion Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-0261 | Microsoft · Office | Microsoft Office Use-After-Free Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2017-0001 | Microsoft · Graphics Device Interface (GDI) | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2016-8562 | Siemens · SIMATIC CP | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability | 7.5 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2016-7855 | Adobe · Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2016-7262 | Microsoft · Excel | Microsoft Office Security Feature Bypass Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2016-7193 | Microsoft · Office | Microsoft Office Memory Corruption Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2016-5195 | Linux · Kernel | Linux Kernel Race Condition Vulnerability | 7.0 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2016-4117 | Adobe · Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 7.8 High | 2022-03-24 | known |
| 2022-03-03 | CVE-2016-1019 | Adobe · Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 7.8 High | 2022-03-24 | known |
| 2022-03-03 | CVE-2016-0099 | Microsoft · Windows | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability | 7.8 High | 2022-03-24 | known |
| 2022-03-03 | CVE-2015-7645 | Adobe · Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 7.8 High | 2022-03-24 | known |
| 2022-03-03 | CVE-2015-5119 | Adobe · Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2015-4902 | Oracle · Java SE | Oracle Java SE Integrity Check Vulnerability | 5.3 Medium | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2015-3043 | Adobe · Flash Player | Adobe Flash Player Memory Corruption Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2015-2590 | Oracle · Java SE | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | 9.8 Critical | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2015-2545 | Microsoft · Office | Microsoft Office Malformed EPS File Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2015-2424 | Microsoft · PowerPoint | Microsoft PowerPoint Memory Corruption Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2015-2387 | Microsoft · ATM Font Driver | Microsoft ATM Font Driver Privilege Escalation Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2015-1701 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 High | 2022-03-24 | known |
| 2022-03-03 | CVE-2015-1642 | Microsoft · Office | Microsoft Office Memory Corruption Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2014-4114 | Microsoft · Windows | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2014-0496 | Adobe · Reader and Acrobat | Adobe Reader and Acrobat Use-After-Free Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2013-5065 | Microsoft · Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2013-3897 | Microsoft · Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2013-3346 | Adobe · Reader and Acrobat | Adobe Reader and Acrobat Memory Corruption Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2013-1675 | Mozilla · Firefox | Mozilla Firefox Information Disclosure Vulnerability | 6.5 Medium | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2013-1347 | Microsoft · Internet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2013-0641 | Adobe · Reader | Adobe Reader Buffer Overflow Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2013-0640 | Adobe · Reader and Acrobat | Adobe Reader and Acrobat Memory Corruption Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2013-0632 | Adobe · ColdFusion | Adobe ColdFusion Authentication Bypass Vulnerability | 9.8 Critical | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2012-4681 | Oracle · Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 9.8 Critical | 2022-03-24 | known |
| 2022-03-03 | CVE-2012-1856 | Microsoft · Office | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2012-1723 | Oracle · Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 9.8 Critical | 2022-03-24 | known |
| 2022-03-03 | CVE-2012-1535 | Adobe · Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2012-0507 | Oracle · Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 9.8 Critical | 2022-03-24 | known |
| 2022-03-03 | CVE-2011-3544 | Oracle · Java SE JDK and JRE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 9.8 Critical | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2011-1889 | Microsoft · Forefront Threat Management Gateway (TMG) | Microsoft Forefront TMG Remote Code Execution Vulnerability | 9.8 Critical | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2011-0611 | Adobe · Flash Player | Adobe Flash Player Remote Code Execution Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2010-3333 | Microsoft · Office | Microsoft Office Stack-based Buffer Overflow Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2010-0232 | Microsoft · Windows | Microsoft Windows Kernel Exception Handler Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2010-0188 | Adobe · Reader and Acrobat | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | 7.8 High | 2022-03-24 | known |
| 2022-03-03 | CVE-2009-3129 | Microsoft · Excel | Microsoft Excel Featheader Record Memory Corruption Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2009-1123 | Microsoft · Windows | Microsoft Windows Improper Input Validation Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2008-3431 | Oracle · VirtualBox | Oracle VirtualBox Insufficient Input Validation Vulnerability | 8.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2008-2992 | Adobe · Acrobat and Reader | Adobe Reader and Acrobat Input Validation Vulnerability | 7.8 High | 2022-03-24 | known |
| 2022-03-03 | CVE-2004-0210 | Microsoft · Windows | Microsoft Windows Privilege Escalation Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-03-03 | CVE-2002-0367 | Microsoft · Windows | Microsoft Windows Privilege Escalation Vulnerability | 7.8 High | 2022-03-24 | unknown |
| 2022-02-25 | CVE-2022-24682 | Synacor · Zimbra Collaborate Suite (ZCS) | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability | 6.1 Medium | 2022-03-11 | known |
| 2022-02-25 | CVE-2017-8570 | Microsoft · Office | Microsoft Office Remote Code Execution Vulnerability | 7.8 High | 2022-08-25 | unknown |
| 2022-02-25 | CVE-2017-0222 | Microsoft · Internet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | 8.8 High | 2022-08-25 | unknown |
| 2022-02-25 | CVE-2014-6352 | Microsoft · Windows | Microsoft Windows Code Injection Vulnerability | 7.8 High | 2022-08-25 | unknown |
Source: CISA Known Exploited Vulnerabilities Catalog (cisa.gov). Due dates are the remediation deadlines CISA sets for US federal civilian agencies.