Known Exploited Vulnerabilities
Page 10 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2022-35405 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 9.8 | 99.9% | 2022-09-22 | 2022-10-13 |
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | 7.2 | 3.3% | 2022-09-15 | 2022-10-06 |
| CVE-2013-6282 | Linux Kernel Improper Input Validation Vulnerability | 8.8 | 39.7% | 2022-09-15 | 2022-10-06 |
| CVE-2013-2597 | Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability | 8.4 | 1.5% | 2022-09-15 | 2022-10-06 |
| CVE-2013-2596 | Linux Kernel Integer Overflow Vulnerability | 7.8 | 3.2% | 2022-09-15 | 2022-10-06 |
| CVE-2013-2094 | Linux Kernel Privilege Escalation Vulnerability | 8.4 | 47.7% | 2022-09-15 | 2022-10-06 |
| CVE-2010-2568 | Microsoft Windows Remote Code Execution Vulnerability | 7.8 | 91.3% | 2022-09-15 | 2022-10-06 |
| CVE-2022-37969 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Ransomware | 7.8 | 28.3% | 2022-09-14 | 2022-10-05 |
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | 7.8 | 5.6% | 2022-09-14 | 2022-10-05 |
| CVE-2022-3075 | Google Chromium Mojo Insufficient Data Validation Vulnerability | 9.6 | 5.8% | 2022-09-08 | 2022-09-29 |
| CVE-2022-27593 | QNAP Photo Station Externally Controlled Reference Vulnerability Ransomware | 10.0 | 87.9% | 2022-09-08 | 2022-09-29 |
| CVE-2022-26258 | D-Link DIR-820L Remote Code Execution Vulnerability | 9.8 | 92.0% | 2022-09-08 | 2022-09-29 |
| CVE-2020-9934 | Apple iOS, iPadOS, and macOS Input Validation Vulnerability | 5.5 | 3.2% | 2022-09-08 | 2022-09-29 |
| CVE-2018-7445 | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability | 9.8 | 60.8% | 2022-09-08 | 2022-09-29 |
| CVE-2018-6530 | D-Link Multiple Routers OS Command Injection Vulnerability Ransomware | 9.8 | 96.7% | 2022-09-08 | 2022-09-29 |
| CVE-2018-2628 | Oracle WebLogic Server Unspecified Vulnerability | 9.8 | 100.0% | 2022-09-08 | 2022-09-29 |
| CVE-2018-13374 | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability Ransomware | 4.3 | 37.8% | 2022-09-08 | 2022-09-29 |
| CVE-2017-5521 | NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability | 8.1 | 89.2% | 2022-09-08 | 2022-09-29 |
| CVE-2011-4723 | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | 5.7 | 3.1% | 2022-09-08 | 2022-09-29 |
| CVE-2011-1823 | Android OS Privilege Escalation Vulnerability | 7.8 | 41.4% | 2022-09-08 | 2022-09-29 |
| CVE-2022-26352 | dotCMS Unrestricted Upload of File Vulnerability Ransomware | 9.8 | 91.6% | 2022-08-25 | 2022-09-15 |
| CVE-2022-24706 | Apache CouchDB Insecure Default Initialization of Resource Vulnerability | 9.8 | 92.5% | 2022-08-25 | 2022-09-15 |
| CVE-2022-24112 | Apache APISIX Authentication Bypass Vulnerability | 9.8 | 96.1% | 2022-08-25 | 2022-09-15 |
| CVE-2022-22963 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | 9.8 | 99.9% | 2022-08-25 | 2022-09-15 |
| CVE-2022-2294 | WebRTC Heap Buffer Overflow Vulnerability Ransomware | 8.8 | 70.5% | 2022-08-25 | 2022-09-15 |
| CVE-2021-39226 | Grafana Authentication Bypass Vulnerability | 9.8 | 99.9% | 2022-08-25 | 2022-09-15 |
| CVE-2021-38406 | Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | 7.8 | 76.4% | 2022-08-25 | 2022-09-15 |
| CVE-2021-31010 | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | 7.5 | 3.7% | 2022-08-25 | 2022-09-15 |
| CVE-2020-36193 | PEAR Archive_Tar Improper Link Resolution Vulnerability | 7.5 | 70.6% | 2022-08-25 | 2022-09-15 |
| CVE-2020-28949 | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | 7.8 | 84.6% | 2022-08-25 | 2022-09-15 |
| CVE-2022-0028 | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | 8.6 | 2.4% | 2022-08-22 | 2022-09-12 |
| CVE-2022-32894 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 7.8 | 3.3% | 2022-08-18 | 2022-09-08 |
| CVE-2022-32893 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 8.8 | 9.9% | 2022-08-18 | 2022-09-08 |
| CVE-2022-2856 | Google Chromium Intents Insufficient Input Validation Vulnerability | 6.5 | 4.5% | 2022-08-18 | 2022-09-08 |
| CVE-2022-26923 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 8.8 | 83.5% | 2022-08-18 | 2022-09-08 |
| CVE-2022-22536 | SAP Multiple Products HTTP Request Smuggling Vulnerability | 9.8 | 97.9% | 2022-08-18 | 2022-09-08 |
| CVE-2022-21971 | Microsoft Windows Runtime Remote Code Execution Vulnerability | 7.8 | 53.9% | 2022-08-18 | 2022-09-08 |
| CVE-2017-15944 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 9.8 | 98.3% | 2022-08-18 | 2022-09-08 |
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability Ransomware | 9.8 | 91.9% | 2022-08-11 | 2022-09-01 |
| CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Ransomware | 7.2 | 98.7% | 2022-08-11 | 2022-09-01 |
| CVE-2022-34713 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 7.8 | 67.8% | 2022-08-09 | 2022-08-30 |
| CVE-2022-30333 | RARLAB UnRAR Directory Traversal Vulnerability Ransomware | 9.8 | 99.1% | 2022-08-09 | 2022-08-30 |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability Ransomware | 9.8 | 85.4% | 2022-08-04 | 2022-08-25 |
| CVE-2022-26138 | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | 9.8 | 98.2% | 2022-07-29 | 2022-08-19 |
| CVE-2022-22047 | Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | 7.8 | 18.8% | 2022-07-12 | 2022-08-02 |
| CVE-2022-26925 | Microsoft Windows LSA Spoofing Vulnerability | 8.1 | 10.5% | 2022-07-01 | 2022-07-22 |
| CVE-2022-29499 | Mitel MiVoice Connect Data Validation Vulnerability Ransomware | 9.8 | 55.2% | 2022-06-27 | 2022-07-18 |
| CVE-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Ransomware | 7.8 | 94.3% | 2022-06-27 | 2022-07-18 |
| CVE-2021-30983 | Apple iOS and iPadOS Buffer Overflow Vulnerability | 7.8 | 2.9% | 2022-06-27 | 2022-07-18 |
| CVE-2021-30533 | Google Chromium PopupBlocker Security Bypass Vulnerability | 6.5 | 16.6% | 2022-06-27 | 2022-07-18 |
| CVE-2020-9907 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 3.2% | 2022-06-27 | 2022-07-18 |
| CVE-2020-3837 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 14.7% | 2022-06-27 | 2022-07-18 |
| CVE-2019-8605 | Apple Multiple Products Use-After-Free Vulnerability | 7.8 | 17.6% | 2022-06-27 | 2022-07-18 |
| CVE-2018-4344 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 2.4% | 2022-06-27 | 2022-07-18 |
| CVE-2022-30190 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Ransomware | 7.8 | 99.2% | 2022-06-14 | 2022-07-05 |
| CVE-2021-38163 | SAP NetWeaver Unrestricted File Upload Vulnerability | 9.9 | 36.0% | 2022-06-09 | 2022-06-30 |
| CVE-2016-2388 | SAP NetWeaver Information Disclosure Vulnerability | 5.3 | 52.2% | 2022-06-09 | 2022-06-30 |
| CVE-2016-2386 | SAP NetWeaver SQL Injection Vulnerability | 9.8 | 71.5% | 2022-06-09 | 2022-06-30 |
| CVE-2019-7195 | QNAP Photo Station Path Traversal Vulnerability Ransomware | 9.8 | 89.7% | 2022-06-08 | 2022-06-22 |
| CVE-2019-7194 | QNAP Photo Station Path Traversal Vulnerability Ransomware | 9.8 | 83.1% | 2022-06-08 | 2022-06-22 |
| CVE-2019-7193 | QNAP QTS Improper Input Validation Vulnerability Ransomware | 9.8 | 14.4% | 2022-06-08 | 2022-06-22 |
| CVE-2019-7192 | QNAP Photo Station Improper Access Control Vulnerability Ransomware | 9.8 | 88.1% | 2022-06-08 | 2022-06-22 |
| CVE-2019-5825 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 6.5 | 55.9% | 2022-06-08 | 2022-06-22 |
| CVE-2019-15271 | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | 8.8 | 5.5% | 2022-06-08 | 2022-06-22 |
| CVE-2018-6065 | Google Chromium V8 Integer Overflow Vulnerability | 8.8 | 60.3% | 2022-06-08 | 2022-06-22 |
| CVE-2018-4990 | Adobe Acrobat and Reader Double Free Vulnerability | 8.8 | 36.2% | 2022-06-08 | 2022-06-22 |
| CVE-2018-17480 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 8.8 | 35.6% | 2022-06-08 | 2022-06-22 |
| CVE-2018-17463 | Google Chromium V8 Remote Code Execution Vulnerability | 8.8 | 84.6% | 2022-06-08 | 2022-06-22 |
| CVE-2017-6862 | NETGEAR Multiple Devices Buffer Overflow Vulnerability | 9.8 | 45.7% | 2022-06-08 | 2022-06-22 |
| CVE-2017-5070 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 32.1% | 2022-06-08 | 2022-06-22 |
| CVE-2017-5030 | Google Chromium V8 Memory Corruption Vulnerability | 8.8 | 40.6% | 2022-06-08 | 2022-06-22 |
| CVE-2016-5198 | Google Chromium V8 Out-of-Bounds Memory Vulnerability | 8.8 | 34.2% | 2022-06-08 | 2022-06-22 |
| CVE-2016-1646 | Google Chromium V8 Out-of-Bounds Read Vulnerability | 8.8 | 48.1% | 2022-06-08 | 2022-06-22 |
| CVE-2013-1331 | Microsoft Office Buffer Overflow Vulnerability | 7.8 | 79.8% | 2022-06-08 | 2022-06-22 |
| CVE-2012-5054 | Adobe Flash Player Integer Overflow Vulnerability | 8.8 | 21.2% | 2022-06-08 | 2022-06-22 |
| CVE-2012-4969 | Microsoft Internet Explorer Use-After-Free Vulnerability | 8.1 | 80.3% | 2022-06-08 | 2022-06-22 |
| CVE-2012-1889 | Microsoft XML Core Services Memory Corruption Vulnerability | 8.8 | 83.5% | 2022-06-08 | 2022-06-22 |
| CVE-2012-0767 | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | 6.1 | 6.4% | 2022-06-08 | 2022-06-22 |
| CVE-2012-0754 | Adobe Flash Player Memory Corruption Vulnerability | 7.8 | 91.2% | 2022-06-08 | 2022-06-22 |
| CVE-2012-0151 | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability | 7.8 | 87.7% | 2022-06-08 | 2022-06-22 |
| CVE-2011-2462 | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability | 8.8 | 88.5% | 2022-06-08 | 2022-06-22 |
| CVE-2011-0609 | Adobe Flash Player Unspecified Vulnerability | 7.8 | 63.5% | 2022-06-08 | 2022-06-22 |
| CVE-2010-2883 | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability | 7.3 | 81.4% | 2022-06-08 | 2022-06-22 |
| CVE-2010-2572 | Microsoft PowerPoint Buffer Overflow Vulnerability | 7.8 | 58.6% | 2022-06-08 | 2022-06-22 |
| CVE-2010-1297 | Adobe Flash Player Memory Corruption Vulnerability | 7.8 | 82.5% | 2022-06-08 | 2022-06-22 |
| CVE-2009-4324 | Adobe Acrobat and Reader Use-After-Free Vulnerability | 7.8 | 81.9% | 2022-06-08 | 2022-06-22 |
| CVE-2009-3953 | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability | 8.8 | 83.2% | 2022-06-08 | 2022-06-22 |
| CVE-2009-1862 | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability | 7.8 | 21.2% | 2022-06-08 | 2022-06-22 |
| CVE-2009-0563 | Microsoft Office Buffer Overflow Vulnerability | 7.8 | 62.8% | 2022-06-08 | 2022-06-22 |
| CVE-2009-0557 | Microsoft Office Object Record Corruption Vulnerability | 7.8 | 53.0% | 2022-06-08 | 2022-06-22 |
| CVE-2008-0655 | Adobe Acrobat and Reader Unspecified Vulnerability | 8.8 | 37.9% | 2022-06-08 | 2022-06-22 |
| CVE-2007-5659 | Adobe Acrobat and Reader Buffer Overflow Vulnerability | 7.8 | 87.4% | 2022-06-08 | 2022-06-22 |
| CVE-2006-2492 | Microsoft Word Malformed Object Pointer Vulnerability | 8.8 | 48.1% | 2022-06-08 | 2022-06-22 |
| CVE-2022-26134 | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Ransomware | 9.8 | 100.0% | 2022-06-02 | 2022-06-06 |
| CVE-2019-3010 | Oracle Solaris Privilege Escalation Vulnerability | 8.8 | 13.4% | 2022-05-25 | 2022-06-15 |
| CVE-2016-7256 | Microsoft Windows Open Type Font Remote Code Execution Vulnerability | 8.8 | 64.6% | 2022-05-25 | 2022-06-15 |
| CVE-2016-3393 | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability | 7.8 | 68.5% | 2022-05-25 | 2022-06-15 |
| CVE-2016-1010 | Adobe Flash Player and AIR Integer Overflow Vulnerability | 8.8 | 19.3% | 2022-05-25 | 2022-06-15 |
| CVE-2016-0984 | Adobe Flash Player and AIR Use-After-Free Vulnerability | 8.8 | 54.5% | 2022-05-25 | 2022-06-15 |
| CVE-2016-0034 | Microsoft Silverlight Runtime Remote Code Execution Vulnerability Ransomware | 8.8 | 69.4% | 2022-05-25 | 2022-06-15 |