Browse all
Known Exploited Vulnerabilities (CISA KEV) — all
The full CISA KEV catalog of vulnerabilities confirmed exploited in the wild — filter and search by year, ransomware use, and date added.
1,660 results
| Urgency | CVE | Name / product | Vendor | KEV added |
|---|---|---|---|---|
| High | CVE-2022-22965 ↗ | VMware Spring Framework — Spring Framework JDK 9+ Remote Code Execution Vulner... | VMware | Apr 4, 2022 |
| High | CVE-2018-10561 ↗ | Dasan Gigabit Passive Optical Network (GPON) Routers — Dasan GPON Routers Auth... | Dasan | Mar 31, 2022 |
| Critical | CVE-2018-10562 ↗ | Dasan Gigabit Passive Optical Network (GPON) Routers — Dasan GPON Routers Comm... | Dasan | Mar 31, 2022 |
| High | CVE-2021-21551 ↗ | Dell dbutil Driver — Dell dbutil Driver Insufficient Access Control Vulnerabil... | Dell | Mar 31, 2022 |
| Critical | CVE-2021-28799 ↗ | QNAP Network Attached Storage (NAS) — QNAP NAS Improper Authorization Vulnerab... | QNAP | Mar 31, 2022 |
| High | CVE-2021-34484 ↗ | Microsoft Windows — Microsoft Windows User Profile Service Privilege Escalatio... | Microsoft | Mar 31, 2022 |
| High | CVE-2022-1040 ↗ | Sophos Firewall — Sophos Firewall Authentication Bypass Vulnerability | Sophos | Mar 31, 2022 |
| High | CVE-2022-26871 ↗ | Trend Micro Apex Central — Trend Micro Apex Central Arbitrary File Upload Vuln... | Trend Micro | Mar 31, 2022 |
| High | CVE-2010-4398 ↗ | Microsoft Windows — Microsoft Windows Kernel Stack-Based Buffer Overflow Vulne... | Microsoft | Mar 28, 2022 |
| High | CVE-2011-2005 ↗ | Microsoft Ancillary Function Driver (afd.sys) — Microsoft Ancillary Function D... | Microsoft | Mar 28, 2022 |
| High | CVE-2012-0518 ↗ | Oracle Fusion Middleware — Oracle Fusion Middleware Unspecified Vulnerability | Oracle | Mar 28, 2022 |
| High | CVE-2012-2034 ↗ | Adobe Flash Player — Adobe Flash Player Memory Corruption Vulnerability | Adobe | Mar 28, 2022 |
| High | CVE-2012-2539 ↗ | Microsoft Word — Microsoft Word Remote Code Execution Vulnerability | Microsoft | Mar 28, 2022 |
| High | CVE-2012-5076 ↗ | Oracle Java SE — Oracle Java SE Sandbox Bypass Vulnerability | Oracle | Mar 28, 2022 |
| High | CVE-2013-1690 ↗ | Mozilla Firefox and Thunderbird — Mozilla Firefox and Thunderbird Denial-of-Se... | Mozilla | Mar 28, 2022 |
| Critical | CVE-2013-2465 ↗ | Oracle Java SE — Oracle Java SE Unspecified Vulnerability | Oracle | Mar 28, 2022 |
| Critical | CVE-2013-2551 ↗ | Microsoft Internet Explorer — Microsoft Internet Explorer Use-After-Free Vulne... | Microsoft | Mar 28, 2022 |
| High | CVE-2013-2729 ↗ | Adobe Reader and Acrobat — Adobe Reader and Acrobat Arbitrary Integer Overflow... | Adobe | Mar 28, 2022 |
| High | CVE-2013-3660 ↗ | Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Mar 28, 2022 |
| High | CVE-2015-1770 ↗ | Microsoft Office — Microsoft Office Uninitialized Memory Use Vulnerability | Microsoft | Mar 28, 2022 |
| High | CVE-2015-2419 ↗ | Microsoft Internet Explorer — Microsoft Internet Explorer Memory Corruption Vu... | Microsoft | Mar 28, 2022 |
| High | CVE-2015-2426 ↗ | Microsoft Windows — Microsoft Windows Adobe Type Manager Library Remote Code E... | Microsoft | Mar 28, 2022 |
| High | CVE-2016-0040 ↗ | Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerabilit... | Microsoft | Mar 28, 2022 |
| Critical | CVE-2016-0151 ↗ | Microsoft Client-Server Run-time Subsystem (CSRSS) — Microsoft Windows CSRSS S... | Microsoft | Mar 28, 2022 |
| High | CVE-2016-0189 ↗ | Microsoft Internet Explorer — Microsoft Internet Explorer Memory Corruption Vu... | Microsoft | Mar 28, 2022 |
| High | CVE-2016-7200 ↗ | Microsoft Edge — Microsoft Edge Memory Corruption Vulnerability | Microsoft | Mar 28, 2022 |
| High | CVE-2016-7201 ↗ | Microsoft Edge — Microsoft Edge Memory Corruption Vulnerability | Microsoft | Mar 28, 2022 |
| High | CVE-2017-0037 ↗ | Microsoft Edge and Internet Explorer — Microsoft Edge and Internet Explorer Ty... | Microsoft | Mar 28, 2022 |
| High | CVE-2017-0059 ↗ | Microsoft Internet Explorer — Microsoft Internet Explorer Information Disclosu... | Microsoft | Mar 28, 2022 |
| Critical | CVE-2017-0213 ↗ | Microsoft Windows — Microsoft Windows Privilege Escalation Vulnerability | Microsoft | Mar 28, 2022 |
| Critical | CVE-2018-8405 ↗ | Microsoft DirectX Graphics Kernel (DXGKRNL) — Microsoft DirectX Graphics Kerne... | Microsoft | Mar 28, 2022 |
| Critical | CVE-2018-8406 ↗ | Microsoft DirectX Graphics Kernel (DXGKRNL) — Microsoft DirectX Graphics Kerne... | Microsoft | Mar 28, 2022 |
| Critical | CVE-2018-8440 ↗ | Microsoft Windows — Microsoft Windows Privilege Escalation Vulnerability | Microsoft | Mar 28, 2022 |
| High | CVE-2019-7483 ↗ | SonicWall SMA100 — SonicWall SMA100 Directory Traversal Vulnerability | SonicWall | Mar 28, 2022 |
| Critical | CVE-2021-20028 ↗ | SonicWall Secure Remote Access (SRA) — SonicWall Secure Remote Access (SRA) SQ... | SonicWall | Mar 28, 2022 |
| Critical | CVE-2021-26085 ↗ | Atlassian Confluence Server — Atlassian Confluence Server Pre-Authorization Ar... | Atlassian | Mar 28, 2022 |
| High | CVE-2021-34486 ↗ | Microsoft Windows — Microsoft Windows Event Tracing Privilege Escalation Vulne... | Microsoft | Mar 28, 2022 |
| Critical | CVE-2021-38646 ↗ | Microsoft Office — Microsoft Office Access Connectivity Engine Remote Code Exe... | Microsoft | Mar 28, 2022 |
| High | CVE-2022-0543 ↗ | Redis Debian-specific Redis Servers — Debian-specific Redis Server Lua Sandbox... | Redis | Mar 28, 2022 |
| High | CVE-2022-1096 ↗ | Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability | Mar 28, 2022 | |
| High | CVE-2005-2773 ↗ | Hewlett Packard (HP) OpenView Network Node Manager — HP OpenView Network Node... | Hewlett Packard (HP) | Mar 25, 2022 |
| High | CVE-2009-0927 ↗ | Adobe Reader and Acrobat — Adobe Reader and Adobe Acrobat Stack-Based Buffer O... | Adobe | Mar 25, 2022 |
| High | CVE-2009-1151 ↗ | phpMyAdmin phpMyAdmin — phpMyAdmin Remote Code Execution Vulnerability | phpMyAdmin | Mar 25, 2022 |
| High | CVE-2009-2055 ↗ | Cisco IOS XR — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vu... | Cisco | Mar 25, 2022 |
| Critical | CVE-2010-2861 ↗ | Adobe ColdFusion — Adobe ColdFusion Directory Traversal Vulnerability | Adobe | Mar 25, 2022 |
| High | CVE-2010-3035 ↗ | Cisco IOS XR — Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vu... | Cisco | Mar 25, 2022 |
| High | CVE-2010-4344 ↗ | Exim Exim — Exim Heap-Based Buffer Overflow Vulnerability | Exim | Mar 25, 2022 |
| High | CVE-2010-4345 ↗ | Exim Exim — Exim Privilege Escalation Vulnerability | Exim | Mar 25, 2022 |
| High | CVE-2012-1823 ↗ | PHP PHP — PHP-CGI Query String Parameter Vulnerability | PHP | Mar 25, 2022 |
| High | CVE-2013-2251 ↗ | Apache Struts — Apache Struts Improper Input Validation Vulnerability | Apache | Mar 25, 2022 |
Source: official U.S. government open data. This is an organized index, not an official U.S. government site. "Explained" links to our summary page; otherwise links go to the official primary source.