Known Exploited Vulnerabilities
The CISA KEV catalog lists 1,779 CVEs with evidence of exploitation in the wild, newest first. Catalog version 2026.11.10. Source: sources and licenses.
| CVE | Vulnerability | Added | Federal due date | Ransomware |
|---|---|---|---|---|
| CVE-2019-0880 | Microsoft Windows Privilege Escalation Vulnerability Microsoft / Windows | May 23, 2022 | Jun 13, 2022 | |
| CVE-2019-1130 | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability Microsoft / Windows | May 23, 2022 | Jun 13, 2022 | Known |
| CVE-2019-11707 | Mozilla Firefox and Thunderbird Type Confusion Vulnerability Mozilla / Firefox and Thunderbird | May 23, 2022 | Jun 13, 2022 | |
| CVE-2019-11708 | Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability Mozilla / Firefox and Thunderbird | May 23, 2022 | Jun 13, 2022 | |
| CVE-2019-13720 | Google Chrome WebAudio Use-After-Free Vulnerability Google / Chrome WebAudio | May 23, 2022 | Jun 13, 2022 | |
| CVE-2019-1385 | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability Microsoft / Windows | May 23, 2022 | Jun 13, 2022 | Known |
| CVE-2019-18426 | WhatsApp Cross-Site Scripting Vulnerability Meta Platforms / WhatsApp | May 23, 2022 | Jun 13, 2022 | |
| CVE-2019-5786 | Google Chrome Blink Use-After-Free Vulnerability Google / Chrome Blink | May 23, 2022 | Jun 13, 2022 | |
| CVE-2019-7286 | Apple Multiple Products Memory Corruption Vulnerability Apple / Multiple Products | May 23, 2022 | Jun 13, 2022 | |
| CVE-2019-7287 | Apple iOS Memory Corruption Vulnerability Apple / iOS | May 23, 2022 | Jun 13, 2022 | |
| CVE-2019-8720 | WebKitGTK Memory Corruption Vulnerability WebKitGTK / WebKitGTK | May 23, 2022 | Jun 13, 2022 | |
| CVE-2020-0638 | Microsoft Update Notification Manager Privilege Escalation Vulnerability Microsoft / Update Notification Manager | May 23, 2022 | Jun 13, 2022 | Known |
| CVE-2020-1027 | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | May 23, 2022 | Jun 13, 2022 | |
| CVE-2021-0920 | Android Kernel Race Condition Vulnerability Android / Kernel | May 23, 2022 | Jun 13, 2022 | |
| CVE-2021-1048 | Android Kernel Use-After-Free Vulnerability Android / Kernel | May 23, 2022 | Jun 13, 2022 | |
| CVE-2021-30883 | Apple Multiple Products Memory Corruption Vulnerability Apple / Multiple Products | May 23, 2022 | Jun 13, 2022 | |
| CVE-2022-20821 | Cisco IOS XR Open Port Vulnerability Cisco / IOS XR | May 23, 2022 | Jun 13, 2022 | |
| CVE-2022-22947 | VMware Spring Cloud Gateway Code Injection Vulnerability VMware / Spring Cloud Gateway | May 16, 2022 | Jun 6, 2022 | |
| CVE-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability Zyxel / Multiple Firewalls | May 16, 2022 | Jun 6, 2022 | |
| CVE-2022-1388 | F5 BIG-IP Missing Authentication Vulnerability F5 / BIG-IP | May 10, 2022 | May 31, 2022 | Known |
| CVE-2014-0160 | OpenSSL Information Disclosure Vulnerability OpenSSL / OpenSSL | May 4, 2022 | May 25, 2022 | |
| CVE-2014-0322 | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | May 4, 2022 | May 25, 2022 | |
| CVE-2014-4113 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | May 4, 2022 | May 25, 2022 | |
| CVE-2019-8506 | Apple Multiple Products Type Confusion Vulnerability Apple / Multiple Products | May 4, 2022 | May 25, 2022 | |
| CVE-2021-1789 | Apple Multiple Products Type Confusion Vulnerability Apple / Multiple Products | May 4, 2022 | May 25, 2022 | |
| CVE-2019-1003029 | Jenkins Script Security Plugin Sandbox Bypass Vulnerability Jenkins / Script Security Plugin | Apr 25, 2022 | May 16, 2022 | |
| CVE-2021-40450 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Apr 25, 2022 | May 16, 2022 | |
| CVE-2021-41357 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Apr 25, 2022 | May 16, 2022 | |
| CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability Linux / Kernel | Apr 25, 2022 | May 16, 2022 | |
| CVE-2022-21919 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft / Windows | Apr 25, 2022 | May 16, 2022 | |
| CVE-2022-26904 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft / Windows | Apr 25, 2022 | May 16, 2022 | |
| CVE-2022-29464 | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability WSO2 / Multiple Products | Apr 25, 2022 | May 16, 2022 | Known |
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Apr 19, 2022 | May 10, 2022 | Known |
| CVE-2019-3568 | WhatsApp VOIP Stack Buffer Overflow Vulnerability Meta Platforms / WhatsApp | Apr 19, 2022 | May 10, 2022 | |
| CVE-2022-22718 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft / Windows | Apr 19, 2022 | May 10, 2022 | |
| CVE-2007-3010 | Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability Alcatel / OmniPCX Enterprise | Apr 15, 2022 | May 6, 2022 | |
| CVE-2010-5330 | Ubiquiti AirOS Command Injection Vulnerability Ubiquiti / AirOS | Apr 15, 2022 | May 6, 2022 | |
| CVE-2014-0780 | InduSoft Web Studio NTWebServer Directory Traversal Vulnerability InduSoft / Web Studio | Apr 15, 2022 | May 6, 2022 | |
| CVE-2016-4523 | Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability Trihedral / VTScada (formerly VTS) | Apr 15, 2022 | May 6, 2022 | |
| CVE-2018-7841 | Schneider Electric U.motion Builder SQL Injection Vulnerability Schneider Electric / U.motion Builder | Apr 15, 2022 | May 6, 2022 | |
| CVE-2019-16057 | D-Link DNS-320 Remote Code Execution Vulnerability D-Link / DNS-320 Storage Device | Apr 15, 2022 | May 6, 2022 | Known |
| CVE-2019-3929 | Crestron Multiple Products Command Injection Vulnerability Crestron / Multiple Products | Apr 15, 2022 | May 6, 2022 | |
| CVE-2022-1364 | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Apr 15, 2022 | May 6, 2022 | |
| CVE-2022-22960 | VMware Multiple Products Privilege Escalation Vulnerability VMware / Multiple Products | Apr 15, 2022 | May 6, 2022 | |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability VMware / Workspace ONE Access and Identity Manager | Apr 14, 2022 | May 5, 2022 | Known |
| CVE-2014-9163 | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | |
| CVE-2015-0311 | Adobe Flash Player Remote Code Execution Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | |
| CVE-2015-0313 | Adobe Flash Player Use-After-Free Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | |
| CVE-2015-2502 | Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft / Internet Explorer | Apr 13, 2022 | May 4, 2022 | |
| CVE-2015-3113 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | |
| CVE-2015-5122 | Adobe Flash Player Use-After-Free Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | |
| CVE-2015-5123 | Adobe Flash Player Use-After-Free Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | |
| CVE-2018-20753 | Kaseya VSA Remote Code Execution Vulnerability Kaseya / Virtual System/Server Administrator (VSA) | Apr 13, 2022 | May 4, 2022 | Known |
| CVE-2018-7602 | Drupal Core Remote Code Execution Vulnerability Drupal / Core | Apr 13, 2022 | May 4, 2022 | Known |
| CVE-2022-24521 | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability Microsoft / Windows | Apr 13, 2022 | May 4, 2022 | Known |
| CVE-2017-11317 | Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability Telerik / User Interface (UI) for ASP.NET AJAX | Apr 11, 2022 | May 2, 2022 | |
| CVE-2020-2509 | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability QNAP / QNAP Network-Attached Storage (NAS) | Apr 11, 2022 | May 2, 2022 | |
| CVE-2021-22600 | Linux Kernel Privilege Escalation Vulnerability Linux / Kernel | Apr 11, 2022 | May 2, 2022 | |
| CVE-2021-27852 | Checkbox Survey Deserialization of Untrusted Data Vulnerability Checkbox / Checkbox Survey | Apr 11, 2022 | May 2, 2022 | |
| CVE-2021-39793 | Google Pixel Out-of-Bounds Write Vulnerability Google / Pixel | Apr 11, 2022 | May 2, 2022 | |
| CVE-2021-42278 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft / Active Directory | Apr 11, 2022 | May 2, 2022 | Known |
| CVE-2021-42287 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft / Active Directory | Apr 11, 2022 | May 2, 2022 | Known |
| CVE-2022-23176 | WatchGuard Firebox and XTM Privilege Escalation Vulnerability WatchGuard / Firebox and XTM | Apr 11, 2022 | May 2, 2022 | |
| CVE-2017-0148 | Microsoft SMBv1 Server Remote Code Execution Vulnerability Microsoft / SMBv1 server | Apr 6, 2022 | Apr 27, 2022 | Known |
| CVE-2021-31166 | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability Microsoft / HTTP Protocol Stack | Apr 6, 2022 | Apr 27, 2022 | |
| CVE-2021-3156 | Sudo Heap-Based Buffer Overflow Vulnerability Sudo / Sudo | Apr 6, 2022 | Apr 27, 2022 | |
| CVE-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability D-Link / Multiple Routers | Apr 4, 2022 | Apr 25, 2022 | |
| CVE-2022-22674 | Apple macOS Out-of-Bounds Read Vulnerability Apple / macOS | Apr 4, 2022 | Apr 25, 2022 | |
| CVE-2022-22675 | Apple macOS Out-of-Bounds Write Vulnerability Apple / macOS | Apr 4, 2022 | Apr 25, 2022 | |
| CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability VMware / Spring Framework | Apr 4, 2022 | Apr 25, 2022 | |
| CVE-2018-10561 | Dasan GPON Routers Authentication Bypass Vulnerability Dasan / Gigabit Passive Optical Network (GPON) Routers | Mar 31, 2022 | Apr 21, 2022 | |
| CVE-2018-10562 | Dasan GPON Routers Command Injection Vulnerability Dasan / Gigabit Passive Optical Network (GPON) Routers | Mar 31, 2022 | Apr 21, 2022 | Known |
| CVE-2021-21551 | Dell dbutil Driver Insufficient Access Control Vulnerability Dell / dbutil Driver | Mar 31, 2022 | Apr 21, 2022 | |
| CVE-2021-28799 | QNAP NAS Improper Authorization Vulnerability QNAP / Network Attached Storage (NAS) | Mar 31, 2022 | Apr 21, 2022 | Known |
| CVE-2021-34484 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft / Windows | Mar 31, 2022 | Apr 21, 2022 | |
| CVE-2022-1040 | Sophos Firewall Authentication Bypass Vulnerability Sophos / Firewall | Mar 31, 2022 | Apr 21, 2022 | |
| CVE-2022-26871 | Trend Micro Apex Central Arbitrary File Upload Vulnerability Trend Micro / Apex Central | Mar 31, 2022 | Apr 21, 2022 | |
| CVE-2010-4398 | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability Microsoft / Windows | Mar 28, 2022 | Apr 21, 2022 | |
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability Microsoft / Ancillary Function Driver (afd.sys) | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2012-0518 | Oracle Fusion Middleware Unspecified Vulnerability Oracle / Fusion Middleware | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2012-2034 | Adobe Flash Player Memory Corruption Vulnerability Adobe / Flash Player | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2012-2539 | Microsoft Word Remote Code Execution Vulnerability Microsoft / Word | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2012-5076 | Oracle Java SE Sandbox Bypass Vulnerability Oracle / Java SE | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2013-1690 | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability Mozilla / Firefox and Thunderbird | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2013-2465 | Oracle Java SE Unspecified Vulnerability Oracle / Java SE | Mar 28, 2022 | Apr 18, 2022 | Known |
| CVE-2013-2551 | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | Known |
| CVE-2013-2729 | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability Adobe / Reader and Acrobat | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2013-3660 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2015-1770 | Microsoft Office Uninitialized Memory Use Vulnerability Microsoft / Office | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2015-2419 | Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft / Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2015-2426 | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Microsoft / Windows | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2016-0040 | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2016-0151 | Microsoft Windows CSRSS Security Feature Bypass Vulnerability Microsoft / Client-Server Run-time Subsystem (CSRSS) | Mar 28, 2022 | Apr 18, 2022 | Known |
| CVE-2016-0189 | Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft / Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | Known |
| CVE-2016-7200 | Microsoft Edge Memory Corruption Vulnerability Microsoft / Edge | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2016-7201 | Microsoft Edge Memory Corruption Vulnerability Microsoft / Edge | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2017-0037 | Microsoft Edge and Internet Explorer Type Confusion Vulnerability Microsoft / Edge and Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2017-0059 | Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft / Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | |
| CVE-2017-0213 | Microsoft Windows Privilege Escalation Vulnerability Microsoft / Windows | Mar 28, 2022 | Apr 18, 2022 | Known |
| CVE-2018-8405 | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Microsoft / DirectX Graphics Kernel (DXGKRNL) | Mar 28, 2022 | Apr 18, 2022 | Known |
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Sources and licenses