Known Exploited Vulnerabilities
Page 11 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2015-8651 | Adobe Flash Player Integer Overflow Vulnerability | 8.8 | 67.7% | 2022-05-25 | 2022-06-15 |
| CVE-2015-6175 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 5.1% | 2022-05-25 | 2022-06-15 |
| CVE-2015-4495 | Mozilla Firefox Security Feature Bypass Vulnerability | 8.8 | 68.6% | 2022-05-25 | 2022-06-15 |
| CVE-2015-2425 | Microsoft Internet Explorer Memory Corruption Vulnerability | 8.8 | 44.7% | 2022-05-25 | 2022-06-15 |
| CVE-2015-2360 | Microsoft Win32k Privilege Escalation Vulnerability | 8.8 | 14.8% | 2022-05-25 | 2022-06-15 |
| CVE-2015-1769 | Microsoft Windows Mount Manager Privilege Escalation Vulnerability | 6.6 | 4.1% | 2022-05-25 | 2022-06-15 |
| CVE-2015-1671 | Microsoft Windows Remote Code Execution Vulnerability | 7.8 | 49.0% | 2022-05-25 | 2022-06-15 |
| CVE-2015-0310 | Adobe Flash Player ASLR Bypass Vulnerability | 7.8 | 15.1% | 2022-05-25 | 2022-06-15 |
| CVE-2015-0071 | Microsoft Internet Explorer ASLR Bypass Vulnerability | 6.5 | 33.6% | 2022-05-25 | 2022-06-15 |
| CVE-2015-0016 | Microsoft Windows TS WebProxy Directory Traversal Vulnerability | 7.8 | 75.8% | 2022-05-25 | 2022-06-15 |
| CVE-2014-8439 | Adobe Flash Player Dereferenced Pointer Vulnerability | 8.8 | 20.4% | 2022-05-25 | 2022-06-15 |
| CVE-2014-4148 | Microsoft Windows Remote Code Execution Vulnerability | 8.8 | 59.9% | 2022-05-25 | 2022-06-15 |
| CVE-2014-4123 | Microsoft Internet Explorer Privilege Escalation Vulnerability | 8.8 | 47.1% | 2022-05-25 | 2022-06-15 |
| CVE-2014-4077 | Microsoft IME Japanese Privilege Escalation Vulnerability | 7.8 | 54.6% | 2022-05-25 | 2022-06-15 |
| CVE-2014-3153 | Linux Kernel Privilege Escalation Vulnerability | 7.8 | 37.2% | 2022-05-25 | 2022-06-15 |
| CVE-2014-2817 | Microsoft Internet Explorer Privilege Escalation Vulnerability | 8.8 | 26.3% | 2022-05-25 | 2022-06-15 |
| CVE-2014-0546 | Adobe Reader and Acrobat Sandbox Bypass Vulnerability | 8.8 | 22.3% | 2022-05-25 | 2022-06-15 |
| CVE-2013-7331 | Microsoft Internet Explorer Information Disclosure Vulnerability | 6.5 | 50.2% | 2022-05-25 | 2022-06-15 |
| CVE-2013-3993 | IBM InfoSphere BigInsights Invalid Input Vulnerability Ransomware | 6.5 | 4.8% | 2022-05-25 | 2022-06-15 |
| CVE-2013-3896 | Microsoft Silverlight Information Disclosure Vulnerability | 5.5 | 68.0% | 2022-05-25 | 2022-06-15 |
| CVE-2013-2423 | Oracle JRE Unspecified Vulnerability | 3.7 | 85.2% | 2022-05-25 | 2022-06-15 |
| CVE-2013-0431 | Oracle JRE Sandbox Bypass Vulnerability Ransomware | 3.7 | 90.2% | 2022-05-25 | 2022-06-15 |
| CVE-2013-0422 | Oracle JRE Remote Code Execution Vulnerability Ransomware | 9.8 | 97.0% | 2022-05-25 | 2022-06-15 |
| CVE-2013-0074 | Microsoft Silverlight Double Dereference Vulnerability Ransomware | 7.8 | 78.9% | 2022-05-25 | 2022-06-15 |
| CVE-2012-1710 | Oracle Fusion Middleware Unspecified Vulnerability Ransomware | 9.8 | 7.8% | 2022-05-25 | 2022-06-15 |
| CVE-2010-1428 | Red Hat JBoss Information Disclosure Vulnerability Ransomware | 5.9 | 62.1% | 2022-05-25 | 2022-06-15 |
| CVE-2010-0840 | Oracle JRE Unspecified Vulnerability | 9.8 | 96.3% | 2022-05-25 | 2022-06-15 |
| CVE-2010-0738 | Red Hat JBoss Authentication Bypass Vulnerability Ransomware | 3.7 | 79.4% | 2022-05-25 | 2022-06-15 |
| CVE-2018-8611 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 4.2% | 2022-05-24 | 2022-06-14 |
| CVE-2018-19953 | QNAP NAS File Station Cross-Site Scripting Vulnerability Ransomware | 6.1 | 28.8% | 2022-05-24 | 2022-06-14 |
| CVE-2018-19949 | QNAP NAS File Station Command Injection Vulnerability Ransomware | 9.8 | 28.4% | 2022-05-24 | 2022-06-14 |
| CVE-2018-19943 | QNAP NAS File Station Cross-Site Scripting Vulnerability Ransomware | 8.0 | 21.5% | 2022-05-24 | 2022-06-14 |
| CVE-2017-8543 | Microsoft Windows Search Remote Code Execution Vulnerability | 9.8 | 74.2% | 2022-05-24 | 2022-06-14 |
| CVE-2017-8291 | Artifex Ghostscript Type Confusion Vulnerability | 7.8 | 97.0% | 2022-05-24 | 2022-06-14 |
| CVE-2017-18362 | Kaseya VSA SQL Injection Vulnerability Ransomware | 9.8 | 86.8% | 2022-05-24 | 2022-06-14 |
| CVE-2017-0210 | Microsoft Internet Explorer Privilege Escalation Vulnerability | 8.8 | 22.3% | 2022-05-24 | 2022-06-14 |
| CVE-2017-0149 | Microsoft Internet Explorer Memory Corruption Vulnerability | 8.8 | 29.2% | 2022-05-24 | 2022-06-14 |
| CVE-2017-0147 | Microsoft Windows SMBv1 Information Disclosure Vulnerability Ransomware | 7.5 | 99.7% | 2022-05-24 | 2022-06-14 |
| CVE-2017-0022 | Microsoft XML Core Services Information Disclosure Vulnerability | 6.5 | 18.1% | 2022-05-24 | 2022-06-14 |
| CVE-2017-0005 | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 7.8 | 11.0% | 2022-05-24 | 2022-06-14 |
| CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | 7.8 | 22.6% | 2022-05-24 | 2022-06-14 |
| CVE-2016-6366 | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | 8.8 | 87.6% | 2022-05-24 | 2022-06-14 |
| CVE-2016-4657 | Apple iOS Webkit Memory Corruption Vulnerability | 8.8 | 66.8% | 2022-05-24 | 2022-06-14 |
| CVE-2016-4656 | Apple iOS Memory Corruption Vulnerability | 7.8 | 23.6% | 2022-05-24 | 2022-06-14 |
| CVE-2016-4655 | Apple iOS Information Disclosure Vulnerability | 5.5 | 33.4% | 2022-05-24 | 2022-06-14 |
| CVE-2016-3351 | Microsoft Internet Explorer and Edge Information Disclosure Vulnerability Ransomware | 6.5 | 26.3% | 2022-05-24 | 2022-06-14 |
| CVE-2016-3298 | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability | 6.5 | 33.3% | 2022-05-24 | 2022-06-14 |
| CVE-2016-0162 | Microsoft Internet Explorer Information Disclosure Vulnerability | 4.3 | 22.0% | 2022-05-24 | 2022-06-14 |
| CVE-2022-20821 | Cisco IOS XR Open Port Vulnerability | 6.5 | 11.5% | 2022-05-23 | 2022-06-13 |
| CVE-2021-30883 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 14.7% | 2022-05-23 | 2022-06-13 |
| CVE-2021-1048 | Android Kernel Use-After-Free Vulnerability | 7.8 | 1.0% | 2022-05-23 | 2022-06-13 |
| CVE-2021-0920 | Android Kernel Race Condition Vulnerability | 6.4 | 0.8% | 2022-05-23 | 2022-06-13 |
| CVE-2020-1027 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 4.5% | 2022-05-23 | 2022-06-13 |
| CVE-2020-0638 | Microsoft Update Notification Manager Privilege Escalation Vulnerability Ransomware | 7.8 | 2.4% | 2022-05-23 | 2022-06-13 |
| CVE-2019-8720 | WebKitGTK Memory Corruption Vulnerability | 8.8 | 1.6% | 2022-05-23 | 2022-06-13 |
| CVE-2019-7287 | Apple iOS Memory Corruption Vulnerability | 7.8 | 4.6% | 2022-05-23 | 2022-06-13 |
| CVE-2019-7286 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 15.9% | 2022-05-23 | 2022-06-13 |
| CVE-2019-5786 | Google Chrome Blink Use-After-Free Vulnerability | 6.5 | 61.1% | 2022-05-23 | 2022-06-13 |
| CVE-2019-18426 | WhatsApp Cross-Site Scripting Vulnerability | 8.2 | 67.9% | 2022-05-23 | 2022-06-13 |
| CVE-2019-1385 | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability Ransomware | 7.8 | 3.6% | 2022-05-23 | 2022-06-13 |
| CVE-2019-13720 | Google Chrome WebAudio Use-After-Free Vulnerability | 8.8 | 49.1% | 2022-05-23 | 2022-06-13 |
| CVE-2019-11708 | Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability | 10.0 | 55.9% | 2022-05-23 | 2022-06-13 |
| CVE-2019-11707 | Mozilla Firefox and Thunderbird Type Confusion Vulnerability | 8.8 | 37.7% | 2022-05-23 | 2022-06-13 |
| CVE-2019-1130 | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability Ransomware | 7.8 | 1.7% | 2022-05-23 | 2022-06-13 |
| CVE-2019-0880 | Microsoft Windows Privilege Escalation Vulnerability | 7.8 | 2.3% | 2022-05-23 | 2022-06-13 |
| CVE-2019-0703 | Microsoft Windows SMB Information Disclosure Vulnerability | 6.5 | 9.6% | 2022-05-23 | 2022-06-13 |
| CVE-2019-0676 | Microsoft Internet Explorer Information Disclosure Vulnerability | 6.5 | 8.1% | 2022-05-23 | 2022-06-13 |
| CVE-2018-8589 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 3.0% | 2022-05-23 | 2022-06-13 |
| CVE-2018-5002 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | 7.8 | 25.1% | 2022-05-23 | 2022-06-13 |
| CVE-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | 9.8 | 99.9% | 2022-05-16 | 2022-06-06 |
| CVE-2022-22947 | VMware Spring Cloud Gateway Code Injection Vulnerability | 10.0 | 98.3% | 2022-05-16 | 2022-06-06 |
| CVE-2022-1388 | F5 BIG-IP Missing Authentication Vulnerability Ransomware | 9.8 | 100.0% | 2022-05-10 | 2022-05-31 |
| CVE-2021-1789 | Apple Multiple Products Type Confusion Vulnerability | 8.8 | 14.0% | 2022-05-04 | 2022-05-25 |
| CVE-2019-8506 | Apple Multiple Products Type Confusion Vulnerability | 8.8 | 16.2% | 2022-05-04 | 2022-05-25 |
| CVE-2014-4113 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 86.9% | 2022-05-04 | 2022-05-25 |
| CVE-2014-0322 | Microsoft Internet Explorer Use-After-Free Vulnerability | 8.8 | 85.1% | 2022-05-04 | 2022-05-25 |
| CVE-2014-0160 | OpenSSL Information Disclosure Vulnerability | 7.5 | 100.0% | 2022-05-04 | 2022-05-25 |
| CVE-2022-29464 | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability Ransomware | 9.8 | 100.0% | 2022-04-25 | 2022-05-16 |
| CVE-2022-26904 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 7.0 | 16.9% | 2022-04-25 | 2022-05-16 |
| CVE-2022-21919 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 7.0 | 2.4% | 2022-04-25 | 2022-05-16 |
| CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability | 7.8 | 92.8% | 2022-04-25 | 2022-05-16 |
| CVE-2021-41357 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 1.6% | 2022-04-25 | 2022-05-16 |
| CVE-2021-40450 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 1.6% | 2022-04-25 | 2022-05-16 |
| CVE-2019-1003029 | Jenkins Script Security Plugin Sandbox Bypass Vulnerability | 9.9 | 74.4% | 2022-04-25 | 2022-05-16 |
| CVE-2022-22718 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 7.8 | 18.5% | 2022-04-19 | 2022-05-10 |
| CVE-2019-3568 | WhatsApp VOIP Stack Buffer Overflow Vulnerability | 9.8 | 30.1% | 2022-04-19 | 2022-05-10 |
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Ransomware | 6.1 | 29.8% | 2022-04-19 | 2022-05-10 |
| CVE-2022-22960 | VMware Multiple Products Privilege Escalation Vulnerability | 7.8 | 35.5% | 2022-04-15 | 2022-05-06 |
| CVE-2022-1364 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 13.7% | 2022-04-15 | 2022-05-06 |
| CVE-2019-3929 | Crestron Multiple Products Command Injection Vulnerability | 9.8 | 99.0% | 2022-04-15 | 2022-05-06 |
| CVE-2019-16057 | D-Link DNS-320 Remote Code Execution Vulnerability Ransomware | 9.8 | 86.5% | 2022-04-15 | 2022-05-06 |
| CVE-2018-7841 | Schneider Electric U.motion Builder SQL Injection Vulnerability | 9.8 | 72.7% | 2022-04-15 | 2022-05-06 |
| CVE-2016-4523 | Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability | 7.5 | 31.2% | 2022-04-15 | 2022-05-06 |
| CVE-2014-0780 | InduSoft Web Studio NTWebServer Directory Traversal Vulnerability | 9.8 | 74.7% | 2022-04-15 | 2022-05-06 |
| CVE-2010-5330 | Ubiquiti AirOS Command Injection Vulnerability | 9.8 | 39.4% | 2022-04-15 | 2022-05-06 |
| CVE-2007-3010 | Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability | 9.8 | 97.4% | 2022-04-15 | 2022-05-06 |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability Ransomware | 9.8 | 100.0% | 2022-04-14 | 2022-05-05 |
| CVE-2022-24521 | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability Ransomware | 7.8 | 7.1% | 2022-04-13 | 2022-05-04 |
| CVE-2018-7602 | Drupal Core Remote Code Execution Vulnerability Ransomware | 8.1 | 99.2% | 2022-04-13 | 2022-05-04 |
| CVE-2018-20753 | Kaseya VSA Remote Code Execution Vulnerability Ransomware | 9.8 | 29.3% | 2022-04-13 | 2022-05-04 |