Known Exploited Vulnerabilities
The CISA KEV catalog lists 1,779 CVEs with evidence of exploitation in the wild, newest first. Catalog version 2026.11.10. Source: sources and licenses.
| CVE | Vulnerability | Added | Federal due date | Ransomware |
|---|---|---|---|---|
| CVE-2016-3235 | Microsoft Office OLE DLL Side Loading Vulnerability Microsoft / Office | Nov 3, 2021 | May 3, 2022 | |
| CVE-2016-3643 | SolarWinds Virtualization Manager Privilege Escalation Vulnerability SolarWinds / Virtualization Manager | Nov 3, 2021 | May 3, 2022 | |
| CVE-2016-3715 | ImageMagick Arbitrary File Deletion Vulnerability ImageMagick / ImageMagick | Nov 3, 2021 | May 3, 2022 | |
| CVE-2016-3718 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability ImageMagick / ImageMagick | Nov 3, 2021 | May 3, 2022 | |
| CVE-2016-3976 | SAP NetWeaver Directory Traversal Vulnerability SAP / NetWeaver | Nov 3, 2021 | May 3, 2022 | |
| CVE-2016-4437 | Apache Shiro Code Execution Vulnerability Apache / Shiro | Nov 3, 2021 | May 3, 2022 | |
| CVE-2016-7255 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2016-9563 | SAP NetWeaver XML External Entity (XXE) Vulnerability SAP / NetWeaver | Nov 3, 2021 | May 3, 2022 | |
| CVE-2017-0143 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability Microsoft / Windows | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2017-0199 | Microsoft Office and WordPad Remote Code Execution Vulnerability Microsoft / Office and WordPad | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2017-11774 | Microsoft Office Outlook Security Feature Bypass Vulnerability Microsoft / Office | Nov 3, 2021 | May 3, 2022 | |
| CVE-2017-11882 | Microsoft Office Memory Corruption Vulnerability Microsoft / Office | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2017-16651 | Roundcube Webmail File Disclosure Vulnerability Roundcube / Roundcube Webmail | Nov 3, 2021 | May 3, 2022 | |
| CVE-2017-5638 | Apache Struts Remote Code Execution Vulnerability Apache / Struts | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2017-6327 | Symantec Messaging Gateway Remote Code Execution Vulnerability Symantec / Symantec Messaging Gateway | Nov 3, 2021 | May 3, 2022 | |
| CVE-2017-7269 | Microsoft Windows Server Buffer Overflow Vulnerability Microsoft / Internet Information Services (IIS) | Nov 3, 2021 | May 3, 2022 | |
| CVE-2017-8759 | Microsoft .NET Framework Remote Code Execution Vulnerability Microsoft / .NET Framework | Nov 3, 2021 | May 3, 2022 | |
| CVE-2017-9248 | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability Progress / ASP.NET AJAX and Sitefinity | Nov 3, 2021 | May 3, 2022 | |
| CVE-2017-9805 | Apache Struts Deserialization of Untrusted Data Vulnerability Apache / Struts | Nov 3, 2021 | May 3, 2022 | |
| CVE-2017-9822 | DotNetNuke (DNN) Remote Code Execution Vulnerability DotNetNuke (DNN) / DotNetNuke (DNN) | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2018-0171 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability Cisco / IOS and IOS XE | Nov 3, 2021 | May 3, 2022 | |
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability Cisco / Adaptive Security Appliance (ASA) | Nov 3, 2021 | May 3, 2022 | |
| CVE-2018-0798 | Microsoft Office Memory Corruption Vulnerability Microsoft / Office | Nov 3, 2021 | May 3, 2022 | |
| CVE-2018-0802 | Microsoft Office Memory Corruption Vulnerability Microsoft / Office | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2018-11776 | Apache Struts Remote Code Execution Vulnerability Apache / Struts | Nov 3, 2021 | May 3, 2022 | |
| CVE-2018-13379 | Fortinet FortiOS SSL VPN Path Traversal Vulnerability Fortinet / FortiOS | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability Tenda / AC7, AC9, and AC10 Routers | Nov 3, 2021 | May 3, 2022 | |
| CVE-2018-15811 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability DotNetNuke (DNN) / DotNetNuke (DNN) | Nov 3, 2021 | May 3, 2022 | |
| CVE-2018-15961 | Adobe ColdFusion Unrestricted File Upload Vulnerability Adobe / ColdFusion | Nov 3, 2021 | May 3, 2022 | |
| CVE-2018-18325 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability DotNetNuke (DNN) / DotNetNuke (DNN) | Nov 3, 2021 | May 3, 2022 | |
| CVE-2018-20062 | ThinkPHP "noneCms" Remote Code Execution Vulnerability ThinkPHP / noneCms | Nov 3, 2021 | May 3, 2022 | |
| CVE-2018-2380 | SAP Customer Relationship Management (CRM) Path Traversal Vulnerability SAP / Customer Relationship Management (CRM) | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2018-4878 | Adobe Flash Player Use-After-Free Vulnerability Adobe / Flash Player | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2018-4939 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe / ColdFusion | Nov 3, 2021 | May 3, 2022 | |
| CVE-2018-6789 | Exim Buffer Overflow Vulnerability Exim / Exim | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2018-7600 | Drupal Core Remote Code Execution Vulnerability Drupal / Drupal Core | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2018-8653 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft / Internet Explorer | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-0211 | Apache HTTP Server Privilege Escalation Vulnerability Apache / HTTP Server | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-0541 | Microsoft MSHTML Remote Code Execution Vulnerability Microsoft / MSHTML | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-0604 | Microsoft SharePoint Remote Code Execution Vulnerability Microsoft / SharePoint | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-0708 | Microsoft Remote Desktop Services Remote Code Execution Vulnerability Microsoft / Remote Desktop Services | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-0797 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-0803 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-0808 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-0859 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-0863 | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability Microsoft / Windows | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-11510 | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability Ivanti / Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-11539 | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Ivanti / Pulse Connect Secure and Pulse Policy Secure | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-11580 | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability Atlassian / Crowd and Crowd Data Center | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-11634 | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability Citrix / Workspace Application and Receiver for Windows | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-1214 | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability Microsoft / Windows | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-1215 | Microsoft Windows Privilege Escalation Vulnerability Microsoft / Windows | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-13608 | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability Citrix / StoreFront Server | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-1367 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft / Internet Explorer | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-1429 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft / Internet Explorer | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-15752 | Docker Desktop Community Edition Privilege Escalation Vulnerability Docker / Desktop Community Edition | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-15949 | Nagios XI Remote Code Execution Vulnerability Nagios / Nagios XI | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-16256 | SIMalliance Toolbox Browser Command Injection Vulnerability SIMalliance / Toolbox Browser | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability Cisco / Small Business RV320 and RV325 Routers | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-16759 | vBulletin PHP Module Remote Code Execution Vulnerability vBulletin / vBulletin | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-17026 | Mozilla Firefox And Thunderbird Type Confusion Vulnerability Mozilla / Firefox and Thunderbird | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-17558 | Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability Apache / Solr | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-18187 | Trend Micro OfficeScan Directory Traversal Vulnerability Trend Micro / OfficeScan | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-18935 | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Progress / Telerik UI for ASP.NET AJAX | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-18988 | TeamViewer Desktop Bypass Remote Login Vulnerability TeamViewer / Desktop | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-19356 | Netis WF2419 Devices Remote Code Execution Vulnerability Netis / WF2419 Devices | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-19781 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-20085 | TVT NVMS-1000 Directory Traversal Vulnerability TVT / NVMS-1000 | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-2215 | Android Kernel Use-After-Free Vulnerability Android / Android Kernel | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-3396 | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability Atlassian / Confluence Server and Data Server | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-3398 | Atlassian Confluence Server and Data Center Path Traversal Vulnerability Atlassian / Confluence Server and Data Center | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-4716 | IBM Planning Analytics Remote Code Execution Vulnerability IBM / Planning Analytics | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-5544 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability VMware / VMware ESXi and Horizon DaaS | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-5591 | Fortinet FortiOS Default Configuration Vulnerability Fortinet / FortiOS | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-6223 | Apple iOS and macOS Group Facetime Vulnerability Apple / iOS and macOS | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-7481 | SonicWall SMA100 SQL Injection Vulnerability SonicWall / SMA100 | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2019-8394 | Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability Zoho / ManageEngine | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-9082 | ThinkPHP Remote Code Execution Vulnerability ThinkPHP / ThinkPHP | Nov 3, 2021 | May 3, 2022 | |
| CVE-2019-9978 | WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability WordPress / Social Warfare Plugin | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-0041 | Android Kernel Out-of-Bounds Write Vulnerability Android / Android Kernel | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-0069 | Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability MediaTek / Multiple Chipsets | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-0601 | Microsoft Windows CryptoAPI Spoofing Vulnerability Microsoft / Windows | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-0646 | Microsoft .NET Framework Remote Code Execution Vulnerability Microsoft / .NET Framework | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-0674 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft / Internet Explorer | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-0683 | Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft / Windows | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-0688 | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Microsoft / Exchange Server | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability Microsoft / Edge and Internet Explorer | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2020-0938 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft / Windows | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-0968 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft / Internet Explorer | Nov 3, 2021 | May 3, 2022 | Known |
| CVE-2020-0986 | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-10148 | SolarWinds Orion Authentication Bypass Vulnerability SolarWinds / Orion | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-10181 | Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability Sumavision / Enhanced Multimedia Router (EMR) | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-10189 | Zoho ManageEngine Desktop Central File Upload Vulnerability Zoho / ManageEngine | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-10199 | Sonatype Nexus Repository Remote Code Execution Vulnerability Sonatype / Nexus Repository | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-1020 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft / Windows | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-10221 | rConfig OS Command Injection Vulnerability rConfig / rConfig | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability Microsoft / Hyper-V RemoteFX | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-1054 | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability Tenda / AC1900 Router AC15 Model | Nov 3, 2021 | May 3, 2022 | |
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Microsoft / .NET Framework, SharePoint, Visual Studio | Nov 3, 2021 | May 3, 2022 |
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Sources and licenses