Known Exploited Vulnerabilities
The CISA KEV catalog lists 1,779 CVEs with evidence of exploitation in the wild, newest first. Catalog version 2026.11.10. Source: sources and licenses.
| CVE | Vulnerability | Added | Federal due date | Ransomware |
|---|---|---|---|---|
| CVE-2022-26486 | Mozilla Firefox Use-After-Free Vulnerability Mozilla / Firefox | Mar 7, 2022 | Mar 21, 2022 | |
| CVE-2002-0367 | Microsoft Windows Privilege Escalation Vulnerability Microsoft / Windows | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2004-0210 | Microsoft Windows Privilege Escalation Vulnerability Microsoft / Windows | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2008-2992 | Adobe Reader and Acrobat Input Validation Vulnerability Adobe / Acrobat and Reader | Mar 3, 2022 | Mar 24, 2022 | Known |
| CVE-2008-3431 | Oracle VirtualBox Insufficient Input Validation Vulnerability Oracle / VirtualBox | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2009-1123 | Microsoft Windows Improper Input Validation Vulnerability Microsoft / Windows | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2009-3129 | Microsoft Excel Featheader Record Memory Corruption Vulnerability Microsoft / Excel | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2010-0188 | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability Adobe / Reader and Acrobat | Mar 3, 2022 | Mar 24, 2022 | Known |
| CVE-2010-0232 | Microsoft Windows Kernel Exception Handler Vulnerability Microsoft / Windows | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2010-3333 | Microsoft Office Stack-based Buffer Overflow Vulnerability Microsoft / Office | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2011-0611 | Adobe Flash Player Remote Code Execution Vulnerability Adobe / Flash Player | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2011-1889 | Microsoft Forefront TMG Remote Code Execution Vulnerability Microsoft / Forefront Threat Management Gateway (TMG) | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2011-3544 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle / Java SE JDK and JRE | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2012-0507 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle / Java SE | Mar 3, 2022 | Mar 24, 2022 | Known |
| CVE-2012-1535 | Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe / Flash Player | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2012-1723 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle / Java SE | Mar 3, 2022 | Mar 24, 2022 | Known |
| CVE-2012-1856 | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability Microsoft / Office | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2012-4681 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Oracle / Java SE | Mar 3, 2022 | Mar 24, 2022 | Known |
| CVE-2013-0632 | Adobe ColdFusion Authentication Bypass Vulnerability Adobe / ColdFusion | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2013-0640 | Adobe Reader and Acrobat Memory Corruption Vulnerability Adobe / Reader and Acrobat | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2013-0641 | Adobe Reader Buffer Overflow Vulnerability Adobe / Reader | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2013-1347 | Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft / Internet Explorer | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2013-1675 | Mozilla Firefox Information Disclosure Vulnerability Mozilla / Firefox | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2013-3346 | Adobe Reader and Acrobat Memory Corruption Vulnerability Adobe / Reader and Acrobat | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2013-3897 | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2013-5065 | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2014-0496 | Adobe Reader and Acrobat Use-After-Free Vulnerability Adobe / Reader and Acrobat | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2014-4114 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability Microsoft / Windows | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2015-1642 | Microsoft Office Memory Corruption Vulnerability Microsoft / Office | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2015-1701 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Mar 3, 2022 | Mar 24, 2022 | Known |
| CVE-2015-2387 | Microsoft ATM Font Driver Privilege Escalation Vulnerability Microsoft / ATM Font Driver | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2015-2424 | Microsoft PowerPoint Memory Corruption Vulnerability Microsoft / PowerPoint | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2015-2545 | Microsoft Office Malformed EPS File Vulnerability Microsoft / Office | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2015-2590 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability Oracle / Java SE | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2015-3043 | Adobe Flash Player Memory Corruption Vulnerability Adobe / Flash Player | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2015-4902 | Oracle Java SE Integrity Check Vulnerability Oracle / Java SE | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2015-5119 | Adobe Flash Player Use-After-Free Vulnerability Adobe / Flash Player | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2015-7645 | Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe / Flash Player | Mar 3, 2022 | Mar 24, 2022 | Known |
| CVE-2016-0099 | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability Microsoft / Windows | Mar 3, 2022 | Mar 24, 2022 | Known |
| CVE-2016-1019 | Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe / Flash Player | Mar 3, 2022 | Mar 24, 2022 | Known |
| CVE-2016-4117 | Adobe Flash Player Arbitrary Code Execution Vulnerability Adobe / Flash Player | Mar 3, 2022 | Mar 24, 2022 | Known |
| CVE-2016-5195 | Linux Kernel Race Condition Vulnerability Linux / Kernel | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2016-7193 | Microsoft Office Memory Corruption Vulnerability Microsoft / Office | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2016-7262 | Microsoft Office Security Feature Bypass Vulnerability Microsoft / Excel | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2016-7855 | Adobe Flash Player Use-After-Free Vulnerability Adobe / Flash Player | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2016-8562 | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability Siemens / SIMATIC CP | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-0001 | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability Microsoft / Graphics Device Interface (GDI) | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-0261 | Microsoft Office Use-After-Free Vulnerability Microsoft / Office | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-11292 | Adobe Flash Player Type Confusion Vulnerability Adobe / Flash Player | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-11826 | Microsoft Office Remote Code Execution Vulnerability Microsoft / Office | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-12231 | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability Cisco / IOS software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-12232 | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability Cisco / IOS software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-12233 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Cisco / IOS software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-12234 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability Cisco / IOS software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-12235 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability Cisco / IOS software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-12237 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-12238 | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability Cisco / Catalyst 6800 Series Switches | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-12240 | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-12319 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability Cisco / IOS XE Software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-6627 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-6663 | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-6736 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-6737 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-6738 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-6739 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-6740 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-6743 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-6744 | Cisco IOS Software SNMP Remote Code Execution Vulnerability Cisco / IOS software | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2017-8540 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability Microsoft / Malware Protection Engine | Mar 3, 2022 | Mar 24, 2022 | |
| CVE-2018-0151 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0154 | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability Cisco / IOS Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0155 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability Cisco / Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability Cisco / IOS Software and Cisco IOS XE Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0158 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability Cisco / IOS Software and Cisco IOS XE Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0159 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability Cisco / IOS Software and Cisco IOS XE Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0161 | Cisco IOS Software Resource Management Errors Vulnerability Cisco / IOS Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0167 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Cisco / IOS, XR, and XE Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0172 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0173 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability Cisco / IOS and IOS XE Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0174 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability Cisco / IOS XE Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0175 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability Cisco / IOS, XR, and XE Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0179 | Cisco IOS Software Denial-of-Service Vulnerability Cisco / IOS Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-0180 | Cisco IOS Software Denial-of-Service Vulnerability Cisco / IOS Software | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-8298 | ChakraCore Scripting Engine Type Confusion Vulnerability ChakraCore / ChakraCore scripting engine | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2018-8581 | Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft / Exchange Server | Mar 3, 2022 | Mar 17, 2022 | Known |
| CVE-2019-1297 | Microsoft Excel Remote Code Execution Vulnerability Microsoft / Excel | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2019-1652 | Cisco Small Business Routers Improper Input Validation Vulnerability Cisco / Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2019-16928 | Exim Out-of-bounds Write Vulnerability Exim / Exim Internet Mailer | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2020-11899 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability Treck TCP/IP stack / IPv6 | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2020-1938 | Apache Tomcat Improper Privilege Management Vulnerability Apache / Tomcat | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2021-41379 | Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft / Windows | Mar 3, 2022 | Mar 17, 2022 | Known |
| CVE-2022-20699 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2022-20700 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2022-20701 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2022-20703 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2022-20708 | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 3, 2022 | Mar 17, 2022 | |
| CVE-2014-6352 | Microsoft Windows Code Injection Vulnerability Microsoft / Windows | Feb 25, 2022 | Aug 25, 2022 | |
| CVE-2017-0222 | Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft / Internet Explorer | Feb 25, 2022 | Aug 25, 2022 | |
| CVE-2017-8570 | Microsoft Office Remote Code Execution Vulnerability Microsoft / Office | Feb 25, 2022 | Aug 25, 2022 | |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability Synacor / Zimbra Collaborate Suite (ZCS) | Feb 25, 2022 | Mar 11, 2022 | Known |
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Sources and licenses