Known Exploited Vulnerabilities
Page 14 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2017-11292 | Adobe Flash Player Type Confusion Vulnerability | 8.8 | 11.9% | 2022-03-03 | 2022-03-24 |
| CVE-2017-0261 | Microsoft Office Use-After-Free Vulnerability | 7.8 | 78.1% | 2022-03-03 | 2022-03-24 |
| CVE-2017-0001 | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 7.8 | 3.1% | 2022-03-03 | 2022-03-24 |
| CVE-2016-8562 | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability | 7.5 | 3.6% | 2022-03-03 | 2022-03-24 |
| CVE-2016-7855 | Adobe Flash Player Use-After-Free Vulnerability | 8.8 | 25.2% | 2022-03-03 | 2022-03-24 |
| CVE-2016-7262 | Microsoft Office Security Feature Bypass Vulnerability | 7.8 | 57.7% | 2022-03-03 | 2022-03-24 |
| CVE-2016-7193 | Microsoft Office Memory Corruption Vulnerability | 7.8 | 57.6% | 2022-03-03 | 2022-03-24 |
| CVE-2016-5195 | Linux Kernel Race Condition Vulnerability | 7.0 | 83.5% | 2022-03-03 | 2022-03-24 |
| CVE-2016-4117 | Adobe Flash Player Arbitrary Code Execution Vulnerability Ransomware | 7.8 | 94.4% | 2022-03-03 | 2022-03-24 |
| CVE-2016-1019 | Adobe Flash Player Arbitrary Code Execution Vulnerability Ransomware | 7.8 | 22.3% | 2022-03-03 | 2022-03-24 |
| CVE-2016-0099 | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability Ransomware | 7.8 | 37.0% | 2022-03-03 | 2022-03-24 |
| CVE-2015-7645 | Adobe Flash Player Arbitrary Code Execution Vulnerability Ransomware | 7.8 | 65.3% | 2022-03-03 | 2022-03-24 |
| CVE-2015-5119 | Adobe Flash Player Use-After-Free Vulnerability | 7.8 | 99.3% | 2022-03-03 | 2022-03-24 |
| CVE-2015-4902 | Oracle Java SE Integrity Check Vulnerability | 5.3 | 13.6% | 2022-03-03 | 2022-03-24 |
| CVE-2015-3043 | Adobe Flash Player Memory Corruption Vulnerability | 7.8 | 73.9% | 2022-03-03 | 2022-03-24 |
| CVE-2015-2590 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | 9.8 | 25.5% | 2022-03-03 | 2022-03-24 |
| CVE-2015-2545 | Microsoft Office Malformed EPS File Vulnerability | 7.8 | 85.9% | 2022-03-03 | 2022-03-24 |
| CVE-2015-2424 | Microsoft PowerPoint Memory Corruption Vulnerability | 8.8 | 40.4% | 2022-03-03 | 2022-03-24 |
| CVE-2015-2387 | Microsoft ATM Font Driver Privilege Escalation Vulnerability | 7.8 | 34.9% | 2022-03-03 | 2022-03-24 |
| CVE-2015-1701 | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 55.9% | 2022-03-03 | 2022-03-24 |
| CVE-2015-1642 | Microsoft Office Memory Corruption Vulnerability | 7.8 | 53.1% | 2022-03-03 | 2022-03-24 |
| CVE-2014-4114 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | 7.8 | 81.6% | 2022-03-03 | 2022-03-24 |
| CVE-2014-0496 | Adobe Reader and Acrobat Use-After-Free Vulnerability | 8.8 | 40.0% | 2022-03-03 | 2022-03-24 |
| CVE-2013-5065 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 34.7% | 2022-03-03 | 2022-03-24 |
| CVE-2013-3897 | Microsoft Internet Explorer Use-After-Free Vulnerability | 8.8 | 77.3% | 2022-03-03 | 2022-03-24 |
| CVE-2013-3346 | Adobe Reader and Acrobat Memory Corruption Vulnerability | 8.8 | 78.9% | 2022-03-03 | 2022-03-24 |
| CVE-2013-1675 | Mozilla Firefox Information Disclosure Vulnerability | 6.5 | 6.7% | 2022-03-03 | 2022-03-24 |
| CVE-2013-1347 | Microsoft Internet Explorer Remote Code Execution Vulnerability | 8.8 | 77.7% | 2022-03-03 | 2022-03-24 |
| CVE-2013-0641 | Adobe Reader Buffer Overflow Vulnerability | 7.8 | 32.3% | 2022-03-03 | 2022-03-24 |
| CVE-2013-0640 | Adobe Reader and Acrobat Memory Corruption Vulnerability | 7.8 | 86.9% | 2022-03-03 | 2022-03-24 |
| CVE-2013-0632 | Adobe ColdFusion Authentication Bypass Vulnerability | 9.8 | 93.6% | 2022-03-03 | 2022-03-24 |
| CVE-2012-4681 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Ransomware | 9.8 | 98.5% | 2022-03-03 | 2022-03-24 |
| CVE-2012-1856 | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | 8.8 | 72.0% | 2022-03-03 | 2022-03-24 |
| CVE-2012-1723 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Ransomware | 9.8 | 93.7% | 2022-03-03 | 2022-03-24 |
| CVE-2012-1535 | Adobe Flash Player Arbitrary Code Execution Vulnerability | 7.8 | 70.4% | 2022-03-03 | 2022-03-24 |
| CVE-2012-0507 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Ransomware | 9.8 | 98.1% | 2022-03-03 | 2022-03-24 |
| CVE-2011-3544 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 9.8 | 96.7% | 2022-03-03 | 2022-03-24 |
| CVE-2011-1889 | Microsoft Forefront TMG Remote Code Execution Vulnerability | 9.8 | 49.0% | 2022-03-03 | 2022-03-24 |
| CVE-2011-0611 | Adobe Flash Player Remote Code Execution Vulnerability | 8.8 | 99.4% | 2022-03-03 | 2022-03-24 |
| CVE-2010-3333 | Microsoft Office Stack-based Buffer Overflow Vulnerability | 7.8 | 89.5% | 2022-03-03 | 2022-03-24 |
| CVE-2010-0232 | Microsoft Windows Kernel Exception Handler Vulnerability | 7.8 | 28.7% | 2022-03-03 | 2022-03-24 |
| CVE-2010-0188 | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability Ransomware | 7.8 | 88.2% | 2022-03-03 | 2022-03-24 |
| CVE-2009-3129 | Microsoft Excel Featheader Record Memory Corruption Vulnerability | 7.8 | 84.0% | 2022-03-03 | 2022-03-24 |
| CVE-2009-1123 | Microsoft Windows Improper Input Validation Vulnerability | 7.8 | 4.9% | 2022-03-03 | 2022-03-24 |
| CVE-2008-3431 | Oracle VirtualBox Insufficient Input Validation Vulnerability | 8.8 | 6.9% | 2022-03-03 | 2022-03-24 |
| CVE-2008-2992 | Adobe Reader and Acrobat Input Validation Vulnerability Ransomware | 7.8 | 98.5% | 2022-03-03 | 2022-03-24 |
| CVE-2004-0210 | Microsoft Windows Privilege Escalation Vulnerability | 7.8 | 7.2% | 2022-03-03 | 2022-03-24 |
| CVE-2002-0367 | Microsoft Windows Privilege Escalation Vulnerability | 7.8 | 4.9% | 2022-03-03 | 2022-03-24 |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability Ransomware | 6.1 | 30.9% | 2022-02-25 | 2022-03-11 |
| CVE-2017-8570 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | 89.9% | 2022-02-25 | 2022-08-25 |
| CVE-2017-0222 | Microsoft Internet Explorer Remote Code Execution Vulnerability | 8.8 | 29.6% | 2022-02-25 | 2022-08-25 |
| CVE-2014-6352 | Microsoft Windows Code Injection Vulnerability | 7.8 | 77.5% | 2022-02-25 | 2022-08-25 |
| CVE-2022-23134 | Zabbix Frontend Improper Access Control Vulnerability | 3.7 | 95.3% | 2022-02-22 | 2022-03-08 |
| CVE-2022-23131 | Zabbix Frontend Authentication Bypass Vulnerability | 9.1 | 95.7% | 2022-02-22 | 2022-03-08 |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | 9.8 | 99.2% | 2022-02-15 | 2022-03-01 |
| CVE-2022-0609 | Google Chromium Animation Use-After-Free Vulnerability | 8.8 | 22.9% | 2022-02-15 | 2022-03-01 |
| CVE-2019-0752 | Microsoft Internet Explorer Type Confusion Vulnerability Ransomware | 7.5 | 81.6% | 2022-02-15 | 2022-08-15 |
| CVE-2018-8174 | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability Ransomware | 7.5 | 88.3% | 2022-02-15 | 2022-08-15 |
| CVE-2018-20250 | WinRAR Absolute Path Traversal Vulnerability Ransomware | 7.8 | 96.0% | 2022-02-15 | 2022-08-15 |
| CVE-2018-15982 | Adobe Flash Player Use-After-Free Vulnerability Ransomware | 7.8 | 89.6% | 2022-02-15 | 2022-08-15 |
| CVE-2017-9841 | PHPUnit Command Injection Vulnerability | 9.8 | 100.0% | 2022-02-15 | 2022-08-15 |
| CVE-2014-1761 | Microsoft Word Memory Corruption Vulnerability | 7.8 | 77.5% | 2022-02-15 | 2022-08-15 |
| CVE-2013-3906 | Microsoft Graphics Component Memory Corruption Vulnerability | 7.8 | 84.9% | 2022-02-15 | 2022-08-15 |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability | 8.8 | 16.3% | 2022-02-11 | 2022-02-25 |
| CVE-2021-36934 | Microsoft Windows SAM Local Privilege Escalation Vulnerability | 7.8 | 67.3% | 2022-02-10 | 2022-02-24 |
| CVE-2020-0796 | Microsoft SMBv3 Remote Code Execution Vulnerability Ransomware | 10.0 | 99.8% | 2022-02-10 | 2022-08-10 |
| CVE-2018-1000861 | Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability | 9.8 | 98.3% | 2022-02-10 | 2022-08-10 |
| CVE-2017-9791 | Apache Struts 1 Improper Input Validation Vulnerability | 9.8 | 98.9% | 2022-02-10 | 2022-08-10 |
| CVE-2017-8464 | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability | 8.8 | 89.9% | 2022-02-10 | 2022-08-10 |
| CVE-2017-10271 | Oracle Corporation WebLogic Server Remote Code Execution Vulnerability Ransomware | 7.5 | 100.0% | 2022-02-10 | 2022-08-10 |
| CVE-2017-0263 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 10.0% | 2022-02-10 | 2022-08-10 |
| CVE-2017-0262 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | 81.0% | 2022-02-10 | 2022-08-10 |
| CVE-2017-0145 | Microsoft SMBv1 Remote Code Execution Vulnerability Ransomware | 8.8 | 89.8% | 2022-02-10 | 2022-08-10 |
| CVE-2017-0144 | Microsoft SMBv1 Remote Code Execution Vulnerability Ransomware | 8.8 | 99.2% | 2022-02-10 | 2022-08-10 |
| CVE-2016-3088 | Apache ActiveMQ Improper Input Validation Vulnerability | 9.8 | 98.5% | 2022-02-10 | 2022-08-10 |
| CVE-2015-2051 | D-Link DIR-645 Router Remote Code Execution Vulnerability | 8.8 | 97.1% | 2022-02-10 | 2022-08-10 |
| CVE-2015-1635 | Microsoft HTTP.sys Remote Code Execution Vulnerability | 9.8 | 100.0% | 2022-02-10 | 2022-08-10 |
| CVE-2015-1130 | Apple OS X Authentication Bypass Vulnerability | 7.8 | 9.9% | 2022-02-10 | 2022-08-10 |
| CVE-2014-4404 | Apple OS X Heap-Based Buffer Overflow Vulnerability | 7.8 | 48.9% | 2022-02-10 | 2022-08-10 |
| CVE-2022-21882 | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.0 | 59.2% | 2022-02-04 | 2022-02-18 |
| CVE-2022-22587 | Apple Memory Corruption Vulnerability | 9.8 | 11.6% | 2022-01-28 | 2022-02-11 |
| CVE-2021-20038 | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability Ransomware | 9.8 | 99.9% | 2022-01-28 | 2022-02-11 |
| CVE-2020-5722 | Grandstream Networks UCM6200 Series SQL Injection Vulnerability | 9.8 | 84.4% | 2022-01-28 | 2022-07-28 |
| CVE-2020-0787 | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability Ransomware | 7.8 | 42.5% | 2022-01-28 | 2022-07-28 |
| CVE-2017-5689 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability | 9.8 | 92.2% | 2022-01-28 | 2022-07-28 |
| CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | 9.8 | 99.9% | 2022-01-28 | 2022-07-28 |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability | 9.8 | 100.0% | 2022-01-28 | 2022-07-28 |
| CVE-2014-1776 | Microsoft Internet Explorer Memory Corruption Vulnerability | 9.8 | 82.7% | 2022-01-28 | 2022-07-28 |
| CVE-2021-35247 | SolarWinds Serv-U Improper Input Validation Vulnerability | 4.3 | 3.5% | 2022-01-21 | 2022-02-04 |
| CVE-2018-8453 | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 70.0% | 2022-01-21 | 2022-07-21 |
| CVE-2012-0391 | Apache Struts 2 Improper Input Validation Vulnerability | 9.8 | 75.6% | 2022-01-21 | 2022-07-21 |
| CVE-2006-1547 | Apache Struts 1 ActionForm Denial-of-Service Vulnerability | 7.5 | 54.6% | 2022-01-21 | 2022-07-21 |
| CVE-2021-40870 | Aviatrix Controller Unrestricted Upload of File | 9.8 | 93.0% | 2022-01-18 | 2022-02-01 |
| CVE-2021-33766 | Microsoft Exchange Server Information Disclosure | 7.3 | 98.1% | 2022-01-18 | 2022-02-01 |
| CVE-2021-32648 | October CMS Improper Authentication | 8.2 | 90.4% | 2022-01-18 | 2022-02-01 |
| CVE-2021-25298 | Nagios XI OS Command Injection | 8.8 | 75.1% | 2022-01-18 | 2022-02-01 |
| CVE-2021-25297 | Nagios XI OS Command Injection | 8.8 | 56.7% | 2022-01-18 | 2022-02-01 |
| CVE-2021-25296 | Nagios XI OS Command Injection | 8.8 | 72.2% | 2022-01-18 | 2022-02-01 |
| CVE-2021-22991 | F5 BIG-IP Traffic Management Microkernel Buffer Overflow | 9.8 | 61.1% | 2022-01-18 | 2022-02-01 |
| CVE-2021-21975 | VMware Server Side Request Forgery in vRealize Operations Manager API Ransomware | 9.8 | 78.3% | 2022-01-18 | 2022-02-01 |