Browse all
Known Exploited Vulnerabilities (CISA KEV) — all
The full CISA KEV catalog of vulnerabilities confirmed exploited in the wild — filter and search by year, ransomware use, and date added.
1,660 results
| Urgency | CVE | Name / product | Vendor | KEV added |
|---|---|---|---|---|
| High | CVE-2023-28205 ↗ | Apple Multiple Products — Apple Multiple Products WebKit Use-After-Free Vulner... | Apple | Apr 10, 2023 |
| High | CVE-2023-26083 ↗ | Arm Mali Graphics Processing Unit (GPU) — Arm Mali GPU Kernel Driver Informati... | Arm | Apr 7, 2023 |
| Critical | CVE-2019-1388 ↗ | Microsoft Windows — Microsoft Windows Certificate Dialog Privilege Escalation... | Microsoft | Apr 7, 2023 |
| Critical | CVE-2021-27878 ↗ | Veritas Backup Exec Agent — Veritas Backup Exec Agent Command Execution Vulner... | Veritas | Apr 7, 2023 |
| Critical | CVE-2021-27877 ↗ | Veritas Backup Exec Agent — Veritas Backup Exec Agent Improper Authentication... | Veritas | Apr 7, 2023 |
| Critical | CVE-2021-27876 ↗ | Veritas Backup Exec Agent — Veritas Backup Exec Agent File Access Vulnerabilit... | Veritas | Apr 7, 2023 |
| High | CVE-2022-27926 ↗ | Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite... | Synacor | Apr 3, 2023 |
| High | CVE-2022-22706 ↗ | Arm Mali Graphics Processing Unit (GPU) — Arm Mali GPU Kernel Driver Unspecifi... | Arm | Mar 30, 2023 |
| High | CVE-2022-3038 ↗ | Google Chromium Network Service — Google Chromium Network Service Use-After-Fr... | Mar 30, 2023 | |
| High | CVE-2023-0266 ↗ | Linux Kernel — Linux Kernel Use-After-Free Vulnerability | Linux | Mar 30, 2023 |
| High | CVE-2022-38181 ↗ | Arm Mali Graphics Processing Unit (GPU) — Arm Mali GPU Kernel Driver Use-After... | Arm | Mar 30, 2023 |
| High | CVE-2021-30900 ↗ | Apple iOS, iPadOS, and macOS — Apple iOS, iPadOS, and macOS Out-of-Bounds Writ... | Apple | Mar 30, 2023 |
| High | CVE-2022-39197 ↗ | Fortra Cobalt Strike — Fortra Cobalt Strike Teamserver Cross-Site Scripting (X... | Fortra | Mar 30, 2023 |
| High | CVE-2022-42948 ↗ | Fortra Cobalt Strike — Fortra Cobalt Strike User Interface Remote Code Executi... | Fortra | Mar 30, 2023 |
| Critical | CVE-2017-7494 ↗ | Samba Samba — Samba Remote Code Execution Vulnerability | Samba | Mar 30, 2023 |
| High | CVE-2013-3163 ↗ | Microsoft Internet Explorer — Microsoft Internet Explorer Memory Corruption Vu... | Microsoft | Mar 30, 2023 |
| High | CVE-2023-26360 ↗ | Adobe ColdFusion — Adobe ColdFusion Deserialization of Untrusted Data Vulnerab... | Adobe | Mar 15, 2023 |
| High | CVE-2022-41328 ↗ | Fortinet FortiOS — Fortinet FortiOS Path Traversal Vulnerability | Fortinet | Mar 14, 2023 |
| Critical | CVE-2023-24880 ↗ | Microsoft Windows — Microsoft Windows SmartScreen Security Feature Bypass Vuln... | Microsoft | Mar 14, 2023 |
| High | CVE-2023-23397 ↗ | Microsoft Office — Microsoft Office Outlook Privilege Escalation Vulnerability | Microsoft | Mar 14, 2023 |
| High | CVE-2020-5741 ↗ | Plex Media Server — Plex Media Server Remote Code Execution Vulnerability | Plex | Mar 10, 2023 |
| High | CVE-2021-39144 ↗ | XStream XStream — XStream Remote Code Execution Vulnerability | XStream | Mar 10, 2023 |
| High | CVE-2022-35914 ↗ | Teclib GLPI — Teclib GLPI Remote Code Execution Vulnerability | Teclib | Mar 7, 2023 |
| High | CVE-2022-33891 ↗ | Apache Spark — Apache Spark Command Injection Vulnerability | Apache | Mar 7, 2023 |
| High | CVE-2022-28810 ↗ | Zoho ManageEngine — Zoho ManageEngine ADSelfService Plus Remote Code Execution... | Zoho | Mar 7, 2023 |
| Critical | CVE-2022-36537 ↗ | ZK Framework AuUploader — ZK Framework AuUploader Unspecified Vulnerability | ZK Framework | Feb 27, 2023 |
| Critical | CVE-2022-40765 ↗ | Mitel MiVoice Connect — Mitel MiVoice Connect Command Injection Vulnerability | Mitel | Feb 21, 2023 |
| Critical | CVE-2022-41223 ↗ | Mitel MiVoice Connect — Mitel MiVoice Connect Code Injection Vulnerability | Mitel | Feb 21, 2023 |
| Critical | CVE-2022-47986 ↗ | IBM Aspera Faspex — IBM Aspera Faspex Code Execution Vulnerability | IBM | Feb 21, 2023 |
| High | CVE-2022-46169 ↗ | Cacti Cacti — Cacti Command Injection Vulnerability | Cacti | Feb 16, 2023 |
| High | CVE-2023-21823 ↗ | Microsoft Windows — Microsoft Windows Graphic Component Privilege Escalation V... | Microsoft | Feb 14, 2023 |
| High | CVE-2023-23529 ↗ | Apple Multiple Products — Apple Multiple Products WebKit Type Confusion Vulner... | Apple | Feb 14, 2023 |
| Critical | CVE-2023-23376 ↗ | Microsoft Windows — Microsoft Windows Common Log File System (CLFS) Driver Pri... | Microsoft | Feb 14, 2023 |
| High | CVE-2023-21715 ↗ | Microsoft Office — Microsoft Office Publisher Security Feature Bypass Vulnerab... | Microsoft | Feb 14, 2023 |
| Critical | CVE-2023-0669 ↗ | Fortra GoAnywhere MFT — Fortra GoAnywhere MFT Remote Code Execution Vulnerabil... | Fortra | Feb 10, 2023 |
| Critical | CVE-2022-24990 ↗ | TerraMaster TerraMaster OS — TerraMaster OS Remote Command Execution Vulnerabi... | TerraMaster | Feb 10, 2023 |
| Critical | CVE-2015-2291 ↗ | Intel Ethernet Diagnostics Driver for Windows — Intel Ethernet Diagnostics Dri... | Intel | Feb 10, 2023 |
| High | CVE-2023-22952 ↗ | SugarCRM Multiple Products — Multiple SugarCRM Products Remote Code Execution... | SugarCRM | Feb 2, 2023 |
| Critical | CVE-2022-21587 ↗ | Oracle E-Business Suite — Oracle E-Business Suite Unspecified Vulnerability | Oracle | Feb 2, 2023 |
| Critical | CVE-2017-11357 ↗ | Telerik User Interface (UI) for ASP.NET AJAX — Telerik UI for ASP.NET AJAX Ins... | Telerik | Jan 26, 2023 |
| Critical | CVE-2022-47966 ↗ | Zoho ManageEngine — Zoho ManageEngine Multiple Products Remote Code Execution... | Zoho | Jan 23, 2023 |
| High | CVE-2022-44877 ↗ | CWP Control Web Panel — CWP Control Web Panel OS Command Injection Vulnerabili... | CWP | Jan 17, 2023 |
| High | CVE-2023-21674 ↗ | Microsoft Windows — Microsoft Windows Advanced Local Procedure Call (ALPC) Pri... | Microsoft | Jan 10, 2023 |
| Critical | CVE-2022-41080 ↗ | Microsoft Exchange Server — Microsoft Exchange Server Privilege Escalation Vul... | Microsoft | Jan 10, 2023 |
| High | CVE-2018-18809 ↗ | TIBCO JasperReports — TIBCO JasperReports Library Directory Traversal Vulnerab... | TIBCO | Dec 29, 2022 |
| High | CVE-2018-5430 ↗ | TIBCO JasperReports — TIBCO JasperReports Server Information Disclosure Vulner... | TIBCO | Dec 29, 2022 |
| High | CVE-2022-42856 ↗ | Apple iOS — Apple iOS Type Confusion Vulnerability | Apple | Dec 14, 2022 |
| Critical | CVE-2022-26501 ↗ | Veeam Backup & Replication — Veeam Backup & Replication Remote Code Execution... | Veeam | Dec 13, 2022 |
| Critical | CVE-2022-26500 ↗ | Veeam Backup & Replication — Veeam Backup & Replication Remote Code Execution... | Veeam | Dec 13, 2022 |
| High | CVE-2022-27518 ↗ | Citrix Application Delivery Controller (ADC) and Gateway — Citrix Application... | Citrix | Dec 13, 2022 |
Source: official U.S. government open data. This is an organized index, not an official U.S. government site. "Explained" links to our summary page; otherwise links go to the official primary source.