Known Exploited Vulnerabilities
Page 12 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2015-5123 | Adobe Flash Player Use-After-Free Vulnerability | 7.8 | 18.8% | 2022-04-13 | 2022-05-04 |
| CVE-2015-5122 | Adobe Flash Player Use-After-Free Vulnerability | 7.8 | 94.0% | 2022-04-13 | 2022-05-04 |
| CVE-2015-3113 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | 7.8 | 99.9% | 2022-04-13 | 2022-05-04 |
| CVE-2015-2502 | Microsoft Internet Explorer Memory Corruption Vulnerability | 8.8 | 51.0% | 2022-04-13 | 2022-05-04 |
| CVE-2015-0313 | Adobe Flash Player Use-After-Free Vulnerability | 7.8 | 95.3% | 2022-04-13 | 2022-05-04 |
| CVE-2015-0311 | Adobe Flash Player Remote Code Execution Vulnerability | 7.8 | 85.6% | 2022-04-13 | 2022-05-04 |
| CVE-2014-9163 | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | 7.8 | 20.7% | 2022-04-13 | 2022-05-04 |
| CVE-2022-23176 | WatchGuard Firebox and XTM Privilege Escalation Vulnerability | 8.8 | 10.8% | 2022-04-11 | 2022-05-02 |
| CVE-2021-42287 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Ransomware | 7.5 | 77.2% | 2022-04-11 | 2022-05-02 |
| CVE-2021-42278 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Ransomware | 7.5 | 73.3% | 2022-04-11 | 2022-05-02 |
| CVE-2021-39793 | Google Pixel Out-of-Bounds Write Vulnerability | 7.8 | 0.7% | 2022-04-11 | 2022-05-02 |
| CVE-2021-27852 | Checkbox Survey Deserialization of Untrusted Data Vulnerability | 9.8 | 30.3% | 2022-04-11 | 2022-05-02 |
| CVE-2021-22600 | Linux Kernel Privilege Escalation Vulnerability | 6.6 | 6.6% | 2022-04-11 | 2022-05-02 |
| CVE-2020-2509 | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability | 9.8 | 34.0% | 2022-04-11 | 2022-05-02 |
| CVE-2017-11317 | Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability | 9.8 | 84.2% | 2022-04-11 | 2022-05-02 |
| CVE-2021-3156 | Sudo Heap-Based Buffer Overflow Vulnerability | 7.8 | 100.0% | 2022-04-06 | 2022-04-27 |
| CVE-2021-31166 | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability | 9.8 | 99.9% | 2022-04-06 | 2022-04-27 |
| CVE-2017-0148 | Microsoft SMBv1 Server Remote Code Execution Vulnerability Ransomware | 8.1 | 99.4% | 2022-04-06 | 2022-04-27 |
| CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability | 9.8 | 99.6% | 2022-04-04 | 2022-04-25 |
| CVE-2022-22675 | Apple macOS Out-of-Bounds Write Vulnerability | 7.8 | 12.5% | 2022-04-04 | 2022-04-25 |
| CVE-2022-22674 | Apple macOS Out-of-Bounds Read Vulnerability | 5.5 | 1.1% | 2022-04-04 | 2022-04-25 |
| CVE-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability | 9.8 | 97.8% | 2022-04-04 | 2022-04-25 |
| CVE-2022-26871 | Trend Micro Apex Central Arbitrary File Upload Vulnerability | 9.8 | 19.5% | 2022-03-31 | 2022-04-21 |
| CVE-2022-1040 | Sophos Firewall Authentication Bypass Vulnerability | 9.8 | 99.8% | 2022-03-31 | 2022-04-21 |
| CVE-2021-34484 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 7.8 | 21.8% | 2022-03-31 | 2022-04-21 |
| CVE-2021-28799 | QNAP NAS Improper Authorization Vulnerability Ransomware | 10.0 | 78.3% | 2022-03-31 | 2022-04-21 |
| CVE-2021-21551 | Dell dbutil Driver Insufficient Access Control Vulnerability | 8.8 | 79.2% | 2022-03-31 | 2022-04-21 |
| CVE-2018-10562 | Dasan GPON Routers Command Injection Vulnerability Ransomware | 9.8 | 99.9% | 2022-03-31 | 2022-04-21 |
| CVE-2018-10561 | Dasan GPON Routers Authentication Bypass Vulnerability | 9.8 | 92.9% | 2022-03-31 | 2022-04-21 |
| CVE-2022-1096 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 24.2% | 2022-03-28 | 2022-04-18 |
| CVE-2022-0543 | Debian-specific Redis Server Lua Sandbox Escape Vulnerability | 10.0 | 99.4% | 2022-03-28 | 2022-04-18 |
| CVE-2021-38646 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Ransomware | 7.8 | 8.0% | 2022-03-28 | 2022-04-18 |
| CVE-2021-34486 | Microsoft Windows Event Tracing Privilege Escalation Vulnerability | 7.8 | 9.3% | 2022-03-28 | 2022-04-18 |
| CVE-2021-26085 | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability Ransomware | 5.3 | 99.9% | 2022-03-28 | 2022-04-18 |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability Ransomware | 9.8 | 30.1% | 2022-03-28 | 2022-04-18 |
| CVE-2019-7483 | SonicWall SMA100 Directory Traversal Vulnerability | 7.5 | 4.0% | 2022-03-28 | 2022-04-18 |
| CVE-2018-8440 | Microsoft Windows Privilege Escalation Vulnerability Ransomware | 7.8 | 18.4% | 2022-03-28 | 2022-04-18 |
| CVE-2018-8406 | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Ransomware | 7.8 | 3.4% | 2022-03-28 | 2022-04-18 |
| CVE-2018-8405 | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Ransomware | 7.8 | 3.4% | 2022-03-28 | 2022-04-18 |
| CVE-2017-0213 | Microsoft Windows Privilege Escalation Vulnerability Ransomware | 7.3 | 84.1% | 2022-03-28 | 2022-04-18 |
| CVE-2017-0059 | Microsoft Internet Explorer Information Disclosure Vulnerability | 4.3 | 62.0% | 2022-03-28 | 2022-04-18 |
| CVE-2017-0037 | Microsoft Edge and Internet Explorer Type Confusion Vulnerability | 8.1 | 80.4% | 2022-03-28 | 2022-04-18 |
| CVE-2016-7201 | Microsoft Edge Memory Corruption Vulnerability | 8.8 | 80.0% | 2022-03-28 | 2022-04-18 |
| CVE-2016-7200 | Microsoft Edge Memory Corruption Vulnerability | 8.8 | 82.8% | 2022-03-28 | 2022-04-18 |
| CVE-2016-0189 | Microsoft Internet Explorer Memory Corruption Vulnerability Ransomware | 7.5 | 94.1% | 2022-03-28 | 2022-04-18 |
| CVE-2016-0151 | Microsoft Windows CSRSS Security Feature Bypass Vulnerability Ransomware | 7.8 | 62.9% | 2022-03-28 | 2022-04-18 |
| CVE-2016-0040 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 24.5% | 2022-03-28 | 2022-04-18 |
| CVE-2015-2426 | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | 8.8 | 86.6% | 2022-03-28 | 2022-04-18 |
| CVE-2015-2419 | Microsoft Internet Explorer Memory Corruption Vulnerability | 8.8 | 53.1% | 2022-03-28 | 2022-04-18 |
| CVE-2015-1770 | Microsoft Office Uninitialized Memory Use Vulnerability | 8.8 | 35.0% | 2022-03-28 | 2022-04-18 |
| CVE-2013-3660 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 39.3% | 2022-03-28 | 2022-04-18 |
| CVE-2013-2729 | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability | 8.8 | 66.6% | 2022-03-28 | 2022-04-18 |
| CVE-2013-2551 | Microsoft Internet Explorer Use-After-Free Vulnerability Ransomware | 8.8 | 74.1% | 2022-03-28 | 2022-04-18 |
| CVE-2013-2465 | Oracle Java SE Unspecified Vulnerability Ransomware | 9.8 | 98.8% | 2022-03-28 | 2022-04-18 |
| CVE-2013-1690 | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability | 8.8 | 69.0% | 2022-03-28 | 2022-04-18 |
| CVE-2012-5076 | Oracle Java SE Sandbox Bypass Vulnerability | 9.8 | 91.3% | 2022-03-28 | 2022-04-18 |
| CVE-2012-2539 | Microsoft Word Remote Code Execution Vulnerability | 7.8 | 53.0% | 2022-03-28 | 2022-04-18 |
| CVE-2012-2034 | Adobe Flash Player Memory Corruption Vulnerability | 7.5 | 7.8% | 2022-03-28 | 2022-04-18 |
| CVE-2012-0518 | Oracle Fusion Middleware Unspecified Vulnerability | 4.7 | 4.7% | 2022-03-28 | 2022-04-18 |
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | 7.8 | 31.5% | 2022-03-28 | 2022-04-18 |
| CVE-2010-4398 | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | 7.8 | 8.7% | 2022-03-28 | 2022-04-21 |
| CVE-2022-26318 | WatchGuard Firebox and XTM Appliances Arbitrary Code Execution | 9.8 | 78.2% | 2022-03-25 | 2022-04-15 |
| CVE-2022-26143 | MiCollab, MiVoice Business Express Access Control Vulnerability | 9.8 | 87.3% | 2022-03-25 | 2022-04-15 |
| CVE-2022-21999 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability Ransomware | 7.8 | 41.0% | 2022-03-25 | 2022-04-15 |
| CVE-2021-42237 | Sitecore XP Remote Command Execution Vulnerability Ransomware | 9.8 | 97.6% | 2022-03-25 | 2022-04-15 |
| CVE-2021-22941 | Citrix ShareFile Improper Access Control Vulnerability Ransomware | 9.8 | 53.6% | 2022-03-25 | 2022-04-15 |
| CVE-2020-9377 | D-Link DIR-610 Devices Remote Command Execution | 8.8 | 21.3% | 2022-03-25 | 2022-04-15 |
| CVE-2020-9054 | Zyxel Multiple NAS Devices OS Command Injection Vulnerability | 9.8 | 100.0% | 2022-03-25 | 2022-04-15 |
| CVE-2020-7247 | OpenSMTPD Remote Code Execution Vulnerability | 9.8 | 99.0% | 2022-03-25 | 2022-04-15 |
| CVE-2020-5410 | VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability | 7.5 | 95.6% | 2022-03-25 | 2022-04-15 |
| CVE-2020-25223 | Sophos SG UTM Remote Code Execution Vulnerability | 9.8 | 96.8% | 2022-03-25 | 2022-04-15 |
| CVE-2020-2506 | QNAP Helpdesk Improper Access Control Vulnerability | 7.3 | 2.0% | 2022-03-25 | 2022-04-15 |
| CVE-2020-2021 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Ransomware | 10.0 | 4.4% | 2022-03-25 | 2022-04-15 |
| CVE-2020-1956 | Apache Kylin OS Command Injection Vulnerability | 8.8 | 97.3% | 2022-03-25 | 2022-04-15 |
| CVE-2020-1631 | Juniper Junos OS Path Traversal Vulnerability | 8.8 | 4.8% | 2022-03-25 | 2022-04-15 |
| CVE-2019-6340 | Drupal Core Remote Code Execution Vulnerability | 8.1 | 92.0% | 2022-03-25 | 2022-04-15 |
| CVE-2019-2616 | Oracle BI Publisher Unauthorized Access Vulnerability | 7.2 | 92.2% | 2022-03-25 | 2022-04-15 |
| CVE-2019-16920 | D-Link Multiple Routers Command Injection Vulnerability | 9.8 | 100.0% | 2022-03-25 | 2022-04-15 |
| CVE-2019-15107 | Webmin Command Injection Vulnerability Ransomware | 9.8 | 99.7% | 2022-03-25 | 2022-04-15 |
| CVE-2019-12991 | Citrix SD-WAN and NetScaler Command Injection Vulnerability | 8.8 | 74.1% | 2022-03-25 | 2022-04-15 |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler SQL Injection Vulnerability | 9.8 | 95.0% | 2022-03-25 | 2022-04-15 |
| CVE-2019-11043 | PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability Ransomware | 8.7 | 99.8% | 2022-03-25 | 2022-04-15 |
| CVE-2019-10068 | Kentico Xperience Deserialization of Untrusted Data Vulnerability | 9.8 | 95.1% | 2022-03-25 | 2022-04-15 |
| CVE-2019-1003030 | Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | 9.9 | 97.1% | 2022-03-25 | 2022-04-15 |
| CVE-2019-0903 | Microsoft GDI Remote Code Execution Vulnerability | 8.8 | 21.7% | 2022-03-25 | 2022-04-15 |
| CVE-2018-8414 | Microsoft Windows Shell Remote Code Execution Vulnerability | 8.8 | 72.9% | 2022-03-25 | 2022-04-15 |
| CVE-2018-8373 | Microsoft Scripting Engine Memory Corruption Vulnerability | 7.5 | 61.9% | 2022-03-25 | 2022-04-15 |
| CVE-2018-6961 | VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | 8.1 | 86.3% | 2022-03-25 | 2022-04-15 |
| CVE-2018-14839 | LG N1A1 NAS Remote Command Execution Vulnerability | 9.8 | 89.4% | 2022-03-25 | 2022-04-15 |
| CVE-2018-1273 | VMware Tanzu Spring Data Commons Property Binder Vulnerability Ransomware | 9.8 | 97.0% | 2022-03-25 | 2022-04-15 |
| CVE-2018-11138 | Quest KACE System Management Appliance Remote Command Execution Vulnerability Ransomware | 9.8 | 91.8% | 2022-03-25 | 2022-04-15 |
| CVE-2018-0147 | Cisco Secure Access Control System Java Deserialization Vulnerability | 9.8 | 18.2% | 2022-03-25 | 2022-04-15 |
| CVE-2018-0125 | Cisco VPN Routers Remote Code Execution Vulnerability | 9.8 | 55.2% | 2022-03-25 | 2022-04-15 |
| CVE-2017-6334 | NETGEAR DGN2200 Devices OS Command Injection Vulnerability | 8.8 | 72.6% | 2022-03-25 | 2022-04-15 |
| CVE-2017-6316 | Citrix Multiple Products Remote Code Execution Vulnerability | 9.8 | 73.0% | 2022-03-25 | 2022-04-15 |
| CVE-2017-3881 | Cisco IOS and IOS XE Remote Code Execution Vulnerability | 9.8 | 99.0% | 2022-03-25 | 2022-04-15 |
| CVE-2017-12617 | Apache Tomcat Remote Code Execution Vulnerability | 8.1 | 100.0% | 2022-03-25 | 2022-04-15 |
| CVE-2017-12615 | Apache Tomcat on Windows Remote Code Execution Vulnerability Ransomware | 8.1 | 99.6% | 2022-03-25 | 2022-04-15 |
| CVE-2017-0146 | Microsoft Windows SMB Remote Code Execution Vulnerability Ransomware | 8.8 | 89.9% | 2022-03-25 | 2022-04-15 |
| CVE-2016-7892 | Adobe Flash Player Use-After-Free Vulnerability | 8.8 | 18.8% | 2022-03-25 | 2022-04-15 |