Known Exploited Vulnerabilities
Page 16 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2021-28550 | Adobe Acrobat and Reader Use-After-Free Vulnerability | 9.6 | 52.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-28310 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 8.3% | 2021-11-03 | 2021-11-17 |
| CVE-2021-27562 | Arm Trusted Firmware Out-of-Bounds Write Vulnerability | 5.5 | 3.1% | 2021-11-03 | 2021-11-17 |
| CVE-2021-27561 | Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | 9.8 | 82.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-27104 | Accellion FTA OS Command Injection Vulnerability Ransomware | 9.8 | 56.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-27103 | Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability Ransomware | 9.8 | 11.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-27102 | Accellion FTA OS Command Injection Vulnerability Ransomware | 7.8 | 3.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-27101 | Accellion FTA SQL Injection Vulnerability Ransomware | 9.8 | 6.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-27085 | Microsoft Internet Explorer Remote Code Execution Vulnerability | 8.8 | 5.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-27065 | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 7.8 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2021-27059 | Microsoft Office Remote Code Execution Vulnerability | 7.6 | 6.1% | 2021-11-03 | 2021-11-17 |
| CVE-2021-26858 | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 7.8 | 93.7% | 2021-11-03 | 2022-05-03 |
| CVE-2021-26857 | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 7.8 | 95.8% | 2021-11-03 | 2022-05-03 |
| CVE-2021-26855 | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 9.1 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2021-26411 | Microsoft Internet Explorer Memory Corruption Vulnerability Ransomware | 8.8 | 80.8% | 2021-11-03 | 2021-11-17 |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-23874 | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | 8.2 | 1.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability Ransomware | 9.8 | 99.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-22900 | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 7.2 | 14.1% | 2021-11-03 | 2022-05-03 |
| CVE-2021-22899 | Ivanti Pulse Connect Secure Command Injection Vulnerability | 8.8 | 22.9% | 2021-11-03 | 2022-05-03 |
| CVE-2021-22894 | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | 8.8 | 41.3% | 2021-11-03 | 2022-05-03 |
| CVE-2021-22893 | Ivanti Pulse Connect Secure Use-After-Free Vulnerability Ransomware | 10.0 | 47.2% | 2021-11-03 | 2022-05-03 |
| CVE-2021-22506 | Micro Focus Access Manager Information Leakage Vulnerability | 7.5 | 25.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-22502 | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | 9.8 | 96.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-22205 | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability Ransomware | 10.0 | 99.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-22005 | VMware vCenter Server File Upload Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-21985 | VMware vCenter Server Improper Input Validation Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-21972 | VMware vCenter Server Remote Code Execution Vulnerability Ransomware | 9.8 | 99.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-21224 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 84.2% | 2021-11-03 | 2021-11-17 |
| CVE-2021-21220 | Google Chromium V8 Improper Input Validation Vulnerability | 8.8 | 70.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-21206 | Google Chromium Blink Use-After-Free Vulnerability | 8.8 | 9.3% | 2021-11-03 | 2021-11-17 |
| CVE-2021-21193 | Google Chromium Blink Use-After-Free Vulnerability | 8.8 | 9.9% | 2021-11-03 | 2021-11-17 |
| CVE-2021-21166 | Google Chromium Race Condition Vulnerability | 8.8 | 24.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-21148 | Google Chromium V8 Heap Buffer Overflow Vulnerability | 8.8 | 20.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-21017 | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 8.8 | 86.3% | 2021-11-03 | 2021-11-17 |
| CVE-2021-20090 | Arcadyan Buffalo Firmware Path Traversal Vulnerability | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-20023 | SonicWall Email Security Path Traversal Vulnerability Ransomware | 4.9 | 51.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-20022 | SonicWall Email Security Unrestricted Upload of File Vulnerability Ransomware | 7.2 | 16.5% | 2021-11-03 | 2021-11-17 |
| CVE-2021-20021 | SonicWall Email Security Improper Privilege Management Vulnerability Ransomware | 9.8 | 88.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability Ransomware | 9.8 | 40.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-1906 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | 6.2 | 0.5% | 2021-11-03 | 2021-11-17 |
| CVE-2021-1905 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 8.4 | 1.5% | 2021-11-03 | 2022-05-03 |
| CVE-2021-1879 | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | 6.1 | 7.1% | 2021-11-03 | 2021-11-17 |
| CVE-2021-1871 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 9.8 | 7.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-1870 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 9.8 | 7.7% | 2021-11-03 | 2021-11-17 |
| CVE-2021-1782 | Apple Multiple Products Race Condition Vulnerability | 7.0 | 2.2% | 2021-11-03 | 2021-11-17 |
| CVE-2021-1732 | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 78.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-1675 | Microsoft Windows Print Spooler Remote Code Execution Vulnerability Ransomware | 7.8 | 85.3% | 2021-11-03 | 2021-11-17 |
| CVE-2021-1647 | Microsoft Defender Remote Code Execution Vulnerability | 7.8 | 39.4% | 2021-11-03 | 2021-11-17 |
| CVE-2021-1498 | Cisco HyperFlex HX Data Platform Command Injection Vulnerability | 9.8 | 100.0% | 2021-11-03 | 2021-11-17 |
| CVE-2021-1497 | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | 9.8 | 99.9% | 2021-11-03 | 2021-11-17 |
| CVE-2020-9859 | Apple Multiple Products Code Execution Vulnerability | 7.8 | 0.8% | 2021-11-03 | 2022-05-03 |
| CVE-2020-9819 | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | 4.3 | 2.2% | 2021-11-03 | 2022-05-03 |
| CVE-2020-9818 | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | 8.8 | 2.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8657 | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | 9.8 | 91.9% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8655 | EyesOfNetwork Improper Privilege Management Vulnerability | 7.8 | 60.1% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8644 | PlaySMS Server-Side Template Injection Vulnerability | 9.8 | 86.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8599 | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | 9.8 | 11.9% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8515 | Multiple DrayTek Vigor Routers Web Management Page Vulnerability | 9.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8468 | Trend Micro Multiple Products Content Validation Escape Vulnerability | 8.8 | 6.2% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8467 | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | 8.8 | 10.9% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8260 | Ivanti Pulse Connect Secure Code Execution Vulnerability | 7.2 | 96.5% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8243 | Ivanti Pulse Connect Secure Code Execution Vulnerability | 7.2 | 90.8% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8196 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 4.3 | 26.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8195 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 6.5 | 33.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-8193 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 6.5 | 88.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-7961 | Liferay Portal Deserialization of Untrusted Data Vulnerability | 9.8 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2020-6820 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 8.1 | 7.1% | 2021-11-03 | 2022-05-03 |
| CVE-2020-6819 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 8.1 | 3.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-6418 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 78.8% | 2021-11-03 | 2022-05-03 |
| CVE-2020-6287 | SAP NetWeaver Missing Authentication for Critical Function Vulnerability | 10.0 | 94.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-6207 | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | 10.0 | 98.1% | 2021-11-03 | 2022-05-03 |
| CVE-2020-5902 | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-5849 | Unraid Authentication Bypass Vulnerability | 7.5 | 93.2% | 2021-11-03 | 2022-05-03 |
| CVE-2020-5847 | Unraid Remote Code Execution Vulnerability | 9.8 | 95.8% | 2021-11-03 | 2022-05-03 |
| CVE-2020-5735 | Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | 8.8 | 36.2% | 2021-11-03 | 2022-05-03 |
| CVE-2020-4430 | IBM Data Risk Manager Directory Traversal Vulnerability | 4.3 | 68.5% | 2021-11-03 | 2022-05-03 |
| CVE-2020-4428 | IBM Data Risk Manager Remote Code Execution Vulnerability | 9.1 | 61.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-4427 | IBM Data Risk Manager Security Bypass Vulnerability | 9.0 | 70.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-4006 | Multiple VMware Products Command Injection Vulnerability | 9.1 | 17.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-3992 | VMware ESXi OpenSLP Use-After-Free Vulnerability Ransomware | 9.8 | 83.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-3952 | VMware vCenter Server Information Disclosure Vulnerability | 9.8 | 90.4% | 2021-11-03 | 2022-05-03 |
| CVE-2020-3950 | VMware Multiple Products Privilege Escalation Vulnerability | 7.8 | 7.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-3580 | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Ransomware | 6.1 | 85.6% | 2021-11-03 | 2022-05-03 |
| CVE-2020-3569 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 8.6 | 3.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-3566 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 8.6 | 3.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-3452 | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | 7.5 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-3161 | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | 9.8 | 83.9% | 2021-11-03 | 2022-05-03 |
| CVE-2020-3118 | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | 8.8 | 11.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-29583 | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | 9.8 | 90.2% | 2021-11-03 | 2022-05-03 |
| CVE-2020-29557 | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 9.8 | 54.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-27950 | Apple Multiple Products Memory Initialization Vulnerability | 5.5 | 16.5% | 2021-11-03 | 2022-05-03 |
| CVE-2020-27932 | Apple Multiple Products Type Confusion Vulnerability | 7.8 | 10.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-27930 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 22.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-26919 | Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | 9.8 | 57.5% | 2021-11-03 | 2022-05-03 |
| CVE-2020-2555 | Oracle Multiple Products Remote Code Execution Vulnerability | 9.8 | 97.1% | 2021-11-03 | 2022-05-03 |
| CVE-2020-25506 | D-Link DNS-320 Device Command Injection Vulnerability | 9.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2020-25213 | WordPress File Manager Plugin Remote Code Execution Vulnerability | 10.0 | 97.3% | 2021-11-03 | 2022-05-03 |
| CVE-2020-24557 | Trend Micro Multiple Products Improper Access Control Vulnerability | 7.8 | 2.7% | 2021-11-03 | 2022-05-03 |
| CVE-2020-17530 | Apache Struts Remote Code Execution Vulnerability | 9.8 | 95.9% | 2021-11-03 | 2022-05-03 |