Browse all
Known Exploited Vulnerabilities (CISA KEV) — all
The full CISA KEV catalog of vulnerabilities confirmed exploited in the wild — filter and search by year, ransomware use, and date added.
1,660 results
| Urgency | CVE | Name / product | Vendor | KEV added |
|---|---|---|---|---|
| High | CVE-2020-36193 ↗ | PEAR Archive_Tar — PEAR Archive_Tar Improper Link Resolution Vulnerability | PEAR | Aug 25, 2022 |
| High | CVE-2021-31010 ↗ | Apple iOS, macOS, watchOS — Apple iOS, macOS, watchOS Sandbox Bypass Vulnerabi... | Apple | Aug 25, 2022 |
| High | CVE-2021-38406 ↗ | Delta Electronics DOPSoft 2 — Delta Electronics DOPSoft 2 Improper Input Valid... | Delta Electronics | Aug 25, 2022 |
| High | CVE-2021-39226 ↗ | Grafana Labs Grafana — Grafana Authentication Bypass Vulnerability | Grafana Labs | Aug 25, 2022 |
| Critical | CVE-2022-2294 ↗ | WebRTC WebRTC — WebRTC Heap Buffer Overflow Vulnerability | WebRTC | Aug 25, 2022 |
| High | CVE-2022-22963 ↗ | VMware Tanzu Spring Cloud — VMware Tanzu Spring Cloud Function Remote Code Exe... | VMware Tanzu | Aug 25, 2022 |
| High | CVE-2022-24112 ↗ | Apache APISIX — Apache APISIX Authentication Bypass Vulnerability | Apache | Aug 25, 2022 |
| High | CVE-2022-24706 ↗ | Apache CouchDB — Apache CouchDB Insecure Default Initialization of Resource Vu... | Apache | Aug 25, 2022 |
| Critical | CVE-2022-26352 ↗ | dotCMS dotCMS — dotCMS Unrestricted Upload of File Vulnerability | dotCMS | Aug 25, 2022 |
| High | CVE-2022-0028 ↗ | Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Reflected Amplification... | Palo Alto Networks | Aug 22, 2022 |
| High | CVE-2017-15944 ↗ | Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Remote Code Execution Vu... | Palo Alto Networks | Aug 18, 2022 |
| High | CVE-2022-21971 ↗ | Microsoft Windows — Microsoft Windows Runtime Remote Code Execution Vulnerabil... | Microsoft | Aug 18, 2022 |
| High | CVE-2022-26923 ↗ | Microsoft Active Directory — Microsoft Active Directory Domain Services Privil... | Microsoft | Aug 18, 2022 |
| High | CVE-2022-2856 ↗ | Google Chromium Intents — Google Chromium Intents Insufficient Input Validatio... | Aug 18, 2022 | |
| High | CVE-2022-32893 ↗ | Apple iOS and macOS — Apple iOS and macOS Out-of-Bounds Write Vulnerability | Apple | Aug 18, 2022 |
| High | CVE-2022-32894 ↗ | Apple iOS and macOS — Apple iOS and macOS Out-of-Bounds Write Vulnerability | Apple | Aug 18, 2022 |
| High | CVE-2022-22536 ↗ | SAP Multiple Products — SAP Multiple Products HTTP Request Smuggling Vulnerabi... | SAP | Aug 18, 2022 |
| Critical | CVE-2022-37042 ↗ | Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite... | Synacor | Aug 11, 2022 |
| Critical | CVE-2022-27925 ↗ | Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite... | Synacor | Aug 11, 2022 |
| Critical | CVE-2022-30333 ↗ | RARLAB UnRAR — RARLAB UnRAR Directory Traversal Vulnerability | RARLAB | Aug 9, 2022 |
| High | CVE-2022-34713 ↗ | Microsoft Windows — Microsoft Windows Support Diagnostic Tool (MSDT) Remote Co... | Microsoft | Aug 9, 2022 |
| Critical | CVE-2022-27924 ↗ | Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite... | Synacor | Aug 4, 2022 |
| High | CVE-2022-26138 ↗ | Atlassian Confluence — Atlassian Questions For Confluence App Hard-coded Crede... | Atlassian | Jul 29, 2022 |
| High | CVE-2022-22047 ↗ | Microsoft Windows — Microsoft Windows Client Server Runtime Subsystem (CSRSS)... | Microsoft | Jul 12, 2022 |
| High | CVE-2022-26925 ↗ | Microsoft Windows — Microsoft Windows LSA Spoofing Vulnerability | Microsoft | Jul 1, 2022 |
| High | CVE-2018-4344 ↗ | Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerabil... | Apple | Jun 27, 2022 |
| High | CVE-2019-8605 ↗ | Apple Multiple Products — Apple Multiple Products Use-After-Free Vulnerability | Apple | Jun 27, 2022 |
| High | CVE-2020-9907 ↗ | Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerabil... | Apple | Jun 27, 2022 |
| High | CVE-2020-3837 ↗ | Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerabil... | Apple | Jun 27, 2022 |
| High | CVE-2021-30983 ↗ | Apple iOS and iPadOS — Apple iOS and iPadOS Buffer Overflow Vulnerability | Apple | Jun 27, 2022 |
| High | CVE-2021-4034 ↗ | Red Hat Polkit — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | Red Hat | Jun 27, 2022 |
| High | CVE-2021-30533 ↗ | Google Chromium PopupBlocker — Google Chromium PopupBlocker Security Bypass Vu... | Jun 27, 2022 | |
| Critical | CVE-2022-29499 ↗ | Mitel MiVoice Connect — Mitel MiVoice Connect Data Validation Vulnerability | Mitel | Jun 27, 2022 |
| Critical | CVE-2022-30190 ↗ | Microsoft Windows — Microsoft Windows Support Diagnostic Tool (MSDT) Remote Co... | Microsoft | Jun 14, 2022 |
| High | CVE-2016-2388 ↗ | SAP NetWeaver — SAP NetWeaver Information Disclosure Vulnerability | SAP | Jun 9, 2022 |
| High | CVE-2016-2386 ↗ | SAP NetWeaver — SAP NetWeaver SQL Injection Vulnerability | SAP | Jun 9, 2022 |
| High | CVE-2021-38163 ↗ | SAP NetWeaver — SAP NetWeaver Unrestricted File Upload Vulnerability | SAP | Jun 9, 2022 |
| High | CVE-2006-2492 ↗ | Microsoft Word — Microsoft Word Malformed Object Pointer Vulnerability | Microsoft | Jun 8, 2022 |
| High | CVE-2007-5659 ↗ | Adobe Acrobat and Reader — Adobe Acrobat and Reader Buffer Overflow Vulnerabil... | Adobe | Jun 8, 2022 |
| High | CVE-2008-0655 ↗ | Adobe Acrobat and Reader — Adobe Acrobat and Reader Unspecified Vulnerability | Adobe | Jun 8, 2022 |
| High | CVE-2009-0557 ↗ | Microsoft Office — Microsoft Office Object Record Corruption Vulnerability | Microsoft | Jun 8, 2022 |
| High | CVE-2009-0563 ↗ | Microsoft Office — Microsoft Office Buffer Overflow Vulnerability | Microsoft | Jun 8, 2022 |
| High | CVE-2009-1862 ↗ | Adobe Acrobat and Reader, Flash Player — Adobe Acrobat and Reader, Flash Playe... | Adobe | Jun 8, 2022 |
| High | CVE-2009-3953 ↗ | Adobe Acrobat and Reader — Adobe Acrobat and Reader Universal 3D Remote Code E... | Adobe | Jun 8, 2022 |
| High | CVE-2009-4324 ↗ | Adobe Acrobat and Reader — Adobe Acrobat and Reader Use-After-Free Vulnerabili... | Adobe | Jun 8, 2022 |
| High | CVE-2010-1297 ↗ | Adobe Flash Player — Adobe Flash Player Memory Corruption Vulnerability | Adobe | Jun 8, 2022 |
| High | CVE-2010-2572 ↗ | Microsoft PowerPoint — Microsoft PowerPoint Buffer Overflow Vulnerability | Microsoft | Jun 8, 2022 |
| High | CVE-2010-2883 ↗ | Adobe Acrobat and Reader — Adobe Acrobat and Reader Stack-Based Buffer Overflo... | Adobe | Jun 8, 2022 |
| High | CVE-2011-0609 ↗ | Adobe Flash Player — Adobe Flash Player Unspecified Vulnerability | Adobe | Jun 8, 2022 |
| High | CVE-2011-2462 ↗ | Adobe Reader and Acrobat — Adobe Reader and Acrobat Universal 3D Memory Corrup... | Adobe | Jun 8, 2022 |
Source: official U.S. government open data. This is an organized index, not an official U.S. government site. "Explained" links to our summary page; otherwise links go to the official primary source.