Known Exploited Vulnerabilities
The CISA KEV catalog lists 1,779 CVEs with evidence of exploitation in the wild, newest first. Catalog version 2026.11.10. Source: sources and licenses.
| CVE | Vulnerability | Added | Federal due date | Ransomware |
|---|---|---|---|---|
| CVE-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Red Hat / Polkit | Jun 27, 2022 | Jul 18, 2022 | Known |
| CVE-2022-29499 | Mitel MiVoice Connect Data Validation Vulnerability Mitel / MiVoice Connect | Jun 27, 2022 | Jul 18, 2022 | Known |
| CVE-2022-30190 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft / Windows | Jun 14, 2022 | Jul 5, 2022 | Known |
| CVE-2016-2386 | SAP NetWeaver SQL Injection Vulnerability SAP / NetWeaver | Jun 9, 2022 | Jun 30, 2022 | |
| CVE-2016-2388 | SAP NetWeaver Information Disclosure Vulnerability SAP / NetWeaver | Jun 9, 2022 | Jun 30, 2022 | |
| CVE-2021-38163 | SAP NetWeaver Unrestricted File Upload Vulnerability SAP / NetWeaver | Jun 9, 2022 | Jun 30, 2022 | |
| CVE-2006-2492 | Microsoft Word Malformed Object Pointer Vulnerability Microsoft / Word | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2007-5659 | Adobe Acrobat and Reader Buffer Overflow Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2008-0655 | Adobe Acrobat and Reader Unspecified Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2009-0557 | Microsoft Office Object Record Corruption Vulnerability Microsoft / Office | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2009-0563 | Microsoft Office Buffer Overflow Vulnerability Microsoft / Office | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2009-1862 | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability Adobe / Acrobat and Reader, Flash Player | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2009-3953 | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2009-4324 | Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2010-1297 | Adobe Flash Player Memory Corruption Vulnerability Adobe / Flash Player | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2010-2572 | Microsoft PowerPoint Buffer Overflow Vulnerability Microsoft / PowerPoint | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2010-2883 | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2011-0609 | Adobe Flash Player Unspecified Vulnerability Adobe / Flash Player | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2011-2462 | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability Adobe / Reader and Acrobat | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2012-0151 | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability Microsoft / Windows | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2012-0754 | Adobe Flash Player Memory Corruption Vulnerability Adobe / Flash Player | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2012-0767 | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability Adobe / Flash Player | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2012-1889 | Microsoft XML Core Services Memory Corruption Vulnerability Microsoft / XML Core Services | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2012-4969 | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2012-5054 | Adobe Flash Player Integer Overflow Vulnerability Adobe / Flash Player | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2013-1331 | Microsoft Office Buffer Overflow Vulnerability Microsoft / Office | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2016-1646 | Google Chromium V8 Out-of-Bounds Read Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2016-5198 | Google Chromium V8 Out-of-Bounds Memory Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2017-5030 | Google Chromium V8 Memory Corruption Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2017-5070 | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2017-6862 | NETGEAR Multiple Devices Buffer Overflow Vulnerability NETGEAR / Multiple Devices | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2018-17463 | Google Chromium V8 Remote Code Execution Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2018-17480 | Google Chromium V8 Out-of-Bounds Write Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2018-4990 | Adobe Acrobat and Reader Double Free Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2018-6065 | Google Chromium V8 Integer Overflow Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2019-15271 | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability Cisco / RV Series Routers | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2019-5825 | Google Chromium V8 Out-of-Bounds Write Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | |
| CVE-2019-7192 | QNAP Photo Station Improper Access Control Vulnerability QNAP / Photo Station | Jun 8, 2022 | Jun 22, 2022 | Known |
| CVE-2019-7193 | QNAP QTS Improper Input Validation Vulnerability QNAP / QTS | Jun 8, 2022 | Jun 22, 2022 | Known |
| CVE-2019-7194 | QNAP Photo Station Path Traversal Vulnerability QNAP / Photo Station | Jun 8, 2022 | Jun 22, 2022 | Known |
| CVE-2019-7195 | QNAP Photo Station Path Traversal Vulnerability QNAP / Photo Station | Jun 8, 2022 | Jun 22, 2022 | Known |
| CVE-2022-26134 | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Atlassian / Confluence Server/Data Center | Jun 2, 2022 | Jun 6, 2022 | Known |
| CVE-2010-0738 | Red Hat JBoss Authentication Bypass Vulnerability Red Hat / JBoss | May 25, 2022 | Jun 15, 2022 | Known |
| CVE-2010-0840 | Oracle JRE Unspecified Vulnerability Oracle / Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | |
| CVE-2010-1428 | Red Hat JBoss Information Disclosure Vulnerability Red Hat / JBoss | May 25, 2022 | Jun 15, 2022 | Known |
| CVE-2012-1710 | Oracle Fusion Middleware Unspecified Vulnerability Oracle / Fusion Middleware | May 25, 2022 | Jun 15, 2022 | Known |
| CVE-2013-0074 | Microsoft Silverlight Double Dereference Vulnerability Microsoft / Silverlight | May 25, 2022 | Jun 15, 2022 | Known |
| CVE-2013-0422 | Oracle JRE Remote Code Execution Vulnerability Oracle / Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | Known |
| CVE-2013-0431 | Oracle JRE Sandbox Bypass Vulnerability Oracle / Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | Known |
| CVE-2013-2423 | Oracle JRE Unspecified Vulnerability Oracle / Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | |
| CVE-2013-3896 | Microsoft Silverlight Information Disclosure Vulnerability Microsoft / Silverlight | May 25, 2022 | Jun 15, 2022 | |
| CVE-2013-3993 | IBM InfoSphere BigInsights Invalid Input Vulnerability IBM / InfoSphere BigInsights | May 25, 2022 | Jun 15, 2022 | Known |
| CVE-2013-7331 | Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft / Internet Explorer | May 25, 2022 | Jun 15, 2022 | |
| CVE-2014-0546 | Adobe Reader and Acrobat Sandbox Bypass Vulnerability Adobe / Reader and Acrobat | May 25, 2022 | Jun 15, 2022 | |
| CVE-2014-2817 | Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft / Internet Explorer | May 25, 2022 | Jun 15, 2022 | |
| CVE-2014-3153 | Linux Kernel Privilege Escalation Vulnerability Linux / Kernel | May 25, 2022 | Jun 15, 2022 | |
| CVE-2014-4077 | Microsoft IME Japanese Privilege Escalation Vulnerability Microsoft / Input Method Editor (IME) Japanese | May 25, 2022 | Jun 15, 2022 | |
| CVE-2014-4123 | Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft / Internet Explorer | May 25, 2022 | Jun 15, 2022 | |
| CVE-2014-4148 | Microsoft Windows Remote Code Execution Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | |
| CVE-2014-8439 | Adobe Flash Player Dereferenced Pointer Vulnerability Adobe / Flash Player | May 25, 2022 | Jun 15, 2022 | |
| CVE-2015-0016 | Microsoft Windows TS WebProxy Directory Traversal Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | |
| CVE-2015-0071 | Microsoft Internet Explorer ASLR Bypass Vulnerability Microsoft / Internet Explorer | May 25, 2022 | Jun 15, 2022 | |
| CVE-2015-0310 | Adobe Flash Player ASLR Bypass Vulnerability Adobe / Flash Player | May 25, 2022 | Jun 15, 2022 | |
| CVE-2015-1671 | Microsoft Windows Remote Code Execution Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | |
| CVE-2015-1769 | Microsoft Windows Mount Manager Privilege Escalation Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | |
| CVE-2015-2360 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | May 25, 2022 | Jun 15, 2022 | |
| CVE-2015-2425 | Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft / Internet Explorer | May 25, 2022 | Jun 15, 2022 | |
| CVE-2015-4495 | Mozilla Firefox Security Feature Bypass Vulnerability Mozilla / Firefox | May 25, 2022 | Jun 15, 2022 | |
| CVE-2015-6175 | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | |
| CVE-2015-8651 | Adobe Flash Player Integer Overflow Vulnerability Adobe / Flash Player | May 25, 2022 | Jun 15, 2022 | |
| CVE-2016-0034 | Microsoft Silverlight Runtime Remote Code Execution Vulnerability Microsoft / Silverlight | May 25, 2022 | Jun 15, 2022 | Known |
| CVE-2016-0984 | Adobe Flash Player and AIR Use-After-Free Vulnerability Adobe / Flash Player and AIR | May 25, 2022 | Jun 15, 2022 | |
| CVE-2016-1010 | Adobe Flash Player and AIR Integer Overflow Vulnerability Adobe / Flash Player and AIR | May 25, 2022 | Jun 15, 2022 | |
| CVE-2016-3393 | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | |
| CVE-2016-7256 | Microsoft Windows Open Type Font Remote Code Execution Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | |
| CVE-2019-3010 | Oracle Solaris Privilege Escalation Vulnerability Oracle / Solaris | May 25, 2022 | Jun 15, 2022 | |
| CVE-2016-0162 | Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft / Internet Explorer | May 24, 2022 | Jun 14, 2022 | |
| CVE-2016-3298 | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability Microsoft / Internet Explorer | May 24, 2022 | Jun 14, 2022 | |
| CVE-2016-3351 | Microsoft Internet Explorer and Edge Information Disclosure Vulnerability Microsoft / Internet Explorer and Edge | May 24, 2022 | Jun 14, 2022 | Known |
| CVE-2016-4655 | Apple iOS Information Disclosure Vulnerability Apple / iOS | May 24, 2022 | Jun 14, 2022 | |
| CVE-2016-4656 | Apple iOS Memory Corruption Vulnerability Apple / iOS | May 24, 2022 | Jun 14, 2022 | |
| CVE-2016-4657 | Apple iOS Webkit Memory Corruption Vulnerability Apple / iOS | May 24, 2022 | Jun 14, 2022 | |
| CVE-2016-6366 | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability Cisco / Adaptive Security Appliance (ASA) | May 24, 2022 | Jun 14, 2022 | |
| CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability Cisco / Adaptive Security Appliance (ASA) | May 24, 2022 | Jun 14, 2022 | |
| CVE-2017-0005 | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability Microsoft / Windows | May 24, 2022 | Jun 14, 2022 | |
| CVE-2017-0022 | Microsoft XML Core Services Information Disclosure Vulnerability Microsoft / XML Core Services | May 24, 2022 | Jun 14, 2022 | |
| CVE-2017-0147 | Microsoft Windows SMBv1 Information Disclosure Vulnerability Microsoft / SMBv1 server | May 24, 2022 | Jun 14, 2022 | Known |
| CVE-2017-0149 | Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft / Internet Explorer | May 24, 2022 | Jun 14, 2022 | |
| CVE-2017-0210 | Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft / Internet Explorer | May 24, 2022 | Jun 14, 2022 | |
| CVE-2017-18362 | Kaseya VSA SQL Injection Vulnerability Kaseya / Virtual System/Server Administrator (VSA) | May 24, 2022 | Jun 14, 2022 | Known |
| CVE-2017-8291 | Artifex Ghostscript Type Confusion Vulnerability Artifex / Ghostscript | May 24, 2022 | Jun 14, 2022 | |
| CVE-2017-8543 | Microsoft Windows Search Remote Code Execution Vulnerability Microsoft / Windows | May 24, 2022 | Jun 14, 2022 | |
| CVE-2018-19943 | QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP / Network Attached Storage (NAS) | May 24, 2022 | Jun 14, 2022 | Known |
| CVE-2018-19949 | QNAP NAS File Station Command Injection Vulnerability QNAP / Network Attached Storage (NAS) | May 24, 2022 | Jun 14, 2022 | Known |
| CVE-2018-19953 | QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP / Network Attached Storage (NAS) | May 24, 2022 | Jun 14, 2022 | Known |
| CVE-2018-8611 | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | May 24, 2022 | Jun 14, 2022 | |
| CVE-2018-5002 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability Adobe / Flash Player | May 23, 2022 | Jun 13, 2022 | |
| CVE-2018-8589 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | May 23, 2022 | Jun 13, 2022 | |
| CVE-2019-0676 | Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft / Internet Explorer | May 23, 2022 | Jun 13, 2022 | |
| CVE-2019-0703 | Microsoft Windows SMB Information Disclosure Vulnerability Microsoft / Windows | May 23, 2022 | Jun 13, 2022 |
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Sources and licenses