Browse all
Known Exploited Vulnerabilities (CISA KEV) — all
The full CISA KEV catalog of vulnerabilities confirmed exploited in the wild — filter and search by year, ransomware use, and date added.
1,721 results
| Urgency | CVE | Name / product | Vendor | KEV added |
|---|---|---|---|---|
| High | CVE-2025-24054 ↗ | Microsoft Windows — Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerabil... | Microsoft | Apr 17, 2025 |
| High | CVE-2021-20035 ↗ | SonicWall SMA100 Appliances — SonicWall SMA100 Appliances OS Command Injection... | SonicWall | Apr 16, 2025 |
| High | CVE-2024-53197 ↗ | Linux Kernel — Linux Kernel Out-of-Bounds Access Vulnerability | Linux | Apr 9, 2025 |
| High | CVE-2024-53150 ↗ | Linux Kernel — Linux Kernel Out-of-Bounds Read Vulnerability | Linux | Apr 9, 2025 |
| High | CVE-2025-30406 ↗ | Gladinet CentreStack — Gladinet CentreStack and Triofox Use of Hard-coded Cryp... | Gladinet | Apr 8, 2025 |
| Critical | CVE-2025-29824 Explained | Microsoft Windows — Microsoft Windows Common Log File System (CLFS) Driver Use... | Microsoft | Apr 8, 2025 |
| Critical | CVE-2025-31161 ↗ | CrushFTP CrushFTP — CrushFTP Authentication Bypass Vulnerability | CrushFTP | Apr 7, 2025 |
| Critical | CVE-2025-22457 Explained | Ivanti Connect Secure, Policy Secure, and ZTA Gateways — Ivanti Connect Secure... | Ivanti | Apr 4, 2025 |
| High | CVE-2025-24813 ↗ | Apache Tomcat — Apache Tomcat Path Equivalence Vulnerability | Apache | Apr 1, 2025 |
| High | CVE-2024-20439 ↗ | Cisco Smart Licensing Utility — Cisco Smart Licensing Utility Static Credentia... | Cisco | Mar 31, 2025 |
| High | CVE-2025-2783 ↗ | Google Chromium Mojo — Google Chromium Mojo Sandbox Escape Vulnerability | Mar 27, 2025 | |
| High | CVE-2019-9874 ↗ | Sitecore CMS and Experience Platform (XP) — Sitecore CMS and Experience Platfo... | Sitecore | Mar 26, 2025 |
| High | CVE-2019-9875 ↗ | Sitecore CMS and Experience Platform (XP) — Sitecore CMS and Experience Platfo... | Sitecore | Mar 26, 2025 |
| High | CVE-2025-30154 ↗ | reviewdog action-setup GitHub Action — reviewdog/action-setup GitHub Action Em... | reviewdog | Mar 24, 2025 |
| High | CVE-2025-1316 ↗ | Edimax IC-7100 IP Camera — Edimax IC-7100 IP Camera OS Command Injection Vulne... | Edimax | Mar 19, 2025 |
| High | CVE-2024-48248 ↗ | NAKIVO Backup and Replication — NAKIVO Backup and Replication Absolute Path Tr... | NAKIVO | Mar 19, 2025 |
| High | CVE-2017-12637 ↗ | SAP NetWeaver — SAP NetWeaver Directory Traversal Vulnerability | SAP | Mar 19, 2025 |
| Critical | CVE-2025-24472 ↗ | Fortinet FortiOS and FortiProxy — Fortinet FortiOS and FortiProxy Authenticati... | Fortinet | Mar 18, 2025 |
| High | CVE-2025-30066 ↗ | tj-actions changed-files GitHub Action — tj-actions/changed-files GitHub Actio... | tj-actions | Mar 18, 2025 |
| High | CVE-2025-24201 ↗ | Apple Multiple Products — Apple Multiple Products WebKit Out-of-Bounds Write V... | Apple | Mar 13, 2025 |
| High | CVE-2025-21590 ↗ | Juniper Junos OS — Juniper Junos OS Improper Isolation or Compartmentalization... | Juniper | Mar 13, 2025 |
| Critical | CVE-2025-26633 ↗ | Microsoft Windows — Microsoft Windows Management Console (MMC) Improper Neutra... | Microsoft | Mar 11, 2025 |
| High | CVE-2025-24983 ↗ | Microsoft Windows — Microsoft Windows Win32k Use-After-Free Vulnerability | Microsoft | Mar 11, 2025 |
| High | CVE-2025-24984 ↗ | Microsoft Windows — Microsoft Windows NTFS Information Disclosure Vulnerabilit... | Microsoft | Mar 11, 2025 |
| High | CVE-2025-24985 ↗ | Microsoft Windows — Microsoft Windows Fast FAT File System Driver Integer Over... | Microsoft | Mar 11, 2025 |
| High | CVE-2025-24991 ↗ | Microsoft Windows — Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | Microsoft | Mar 11, 2025 |
| High | CVE-2025-24993 ↗ | Microsoft Windows — Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerab... | Microsoft | Mar 11, 2025 |
| High | CVE-2025-25181 ↗ | Advantive VeraCore — Advantive VeraCore SQL Injection Vulnerability | Advantive | Mar 10, 2025 |
| High | CVE-2024-57968 ↗ | Advantive VeraCore — Advantive VeraCore Unrestricted File Upload Vulnerability | Advantive | Mar 10, 2025 |
| High | CVE-2024-13159 ↗ | Ivanti Endpoint Manager (EPM) — Ivanti Endpoint Manager (EPM) Absolute Path Tr... | Ivanti | Mar 10, 2025 |
| High | CVE-2024-13160 ↗ | Ivanti Endpoint Manager (EPM) — Ivanti Endpoint Manager (EPM) Absolute Path Tr... | Ivanti | Mar 10, 2025 |
| High | CVE-2024-13161 ↗ | Ivanti Endpoint Manager (EPM) — Ivanti Endpoint Manager (EPM) Absolute Path Tr... | Ivanti | Mar 10, 2025 |
| High | CVE-2024-50302 ↗ | Linux Kernel — Linux Kernel Use of Uninitialized Resource Vulnerability | Linux | Mar 4, 2025 |
| High | CVE-2025-22224 ↗ | VMware ESXi and Workstation — VMware ESXi and Workstation TOCTOU Race Conditio... | VMware | Mar 4, 2025 |
| Critical | CVE-2025-22225 ↗ | VMware ESXi — VMware ESXi Arbitrary Write Vulnerability | VMware | Mar 4, 2025 |
| High | CVE-2025-22226 ↗ | VMware ESXi, Workstation, and Fusion — VMware ESXi, Workstation, and Fusion In... | VMware | Mar 4, 2025 |
| High | CVE-2023-20118 ↗ | Cisco Small Business RV Series Routers — Cisco Small Business RV Series Router... | Cisco | Mar 3, 2025 |
| High | CVE-2022-43939 ↗ | Hitachi Vantara Pentaho Business Analytics (BA) Server — Hitachi Vantara Penta... | Hitachi Vantara | Mar 3, 2025 |
| High | CVE-2022-43769 ↗ | Hitachi Vantara Pentaho Business Analytics (BA) Server — Hitachi Vantara Penta... | Hitachi Vantara | Mar 3, 2025 |
| Critical | CVE-2018-8639 ↗ | Microsoft Windows — Microsoft Windows Win32k Improper Resource Shutdown or Rel... | Microsoft | Mar 3, 2025 |
| High | CVE-2024-4885 ↗ | Progress WhatsUp Gold — Progress WhatsUp Gold Path Traversal Vulnerability | Progress | Mar 3, 2025 |
| High | CVE-2024-49035 ↗ | Microsoft Partner Center — Microsoft Partner Center Improper Access Control Vu... | Microsoft | Feb 25, 2025 |
| High | CVE-2023-34192 ↗ | Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite... | Synacor | Feb 25, 2025 |
| High | CVE-2017-3066 ↗ | Adobe ColdFusion — Adobe ColdFusion Deserialization Vulnerability | Adobe | Feb 24, 2025 |
| High | CVE-2024-20953 ↗ | Oracle Agile Product Lifecycle Management (PLM) — Oracle Agile Product Lifecyc... | Oracle | Feb 24, 2025 |
| High | CVE-2025-24989 ↗ | Microsoft Power Pages — Microsoft Power Pages Improper Access Control Vulnerab... | Microsoft | Feb 21, 2025 |
| High | CVE-2025-23209 ↗ | Craft CMS Craft CMS — Craft CMS Code Injection Vulnerability | Craft CMS | Feb 20, 2025 |
| High | CVE-2025-0111 ↗ | Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS File Read Vulnerability | Palo Alto Networks | Feb 20, 2025 |
| Critical | CVE-2024-53704 ↗ | SonicWall SonicOS — SonicWall SonicOS SSLVPN Improper Authentication Vulnerabi... | SonicWall | Feb 18, 2025 |
| High | CVE-2025-0108 ↗ | Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Authentication Bypass Vu... | Palo Alto Networks | Feb 18, 2025 |
Source: official U.S. government open data. This is an organized index, not an official U.S. government site. "Explained" links to our summary page; otherwise links go to the official primary source.