Known Exploited Vulnerabilities
Page 18 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2018-0798 | Microsoft Office Memory Corruption Vulnerability | 8.8 | 95.1% | 2021-11-03 | 2022-05-03 |
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | 7.5 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2018-0171 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | 7.5 | 99.5% | 2021-11-03 | 2022-05-03 |
| CVE-2017-9822 | DotNetNuke (DNN) Remote Code Execution Vulnerability Ransomware | 8.8 | 94.8% | 2021-11-03 | 2022-05-03 |
| CVE-2017-9805 | Apache Struts Deserialization of Untrusted Data Vulnerability | 8.1 | 99.4% | 2021-11-03 | 2022-05-03 |
| CVE-2017-9248 | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability | 9.8 | 75.1% | 2021-11-03 | 2022-05-03 |
| CVE-2017-8759 | Microsoft .NET Framework Remote Code Execution Vulnerability | 7.8 | 88.7% | 2021-11-03 | 2022-05-03 |
| CVE-2017-7269 | Microsoft Windows Server Buffer Overflow Vulnerability | 9.8 | 99.8% | 2021-11-03 | 2022-05-03 |
| CVE-2017-6327 | Symantec Messaging Gateway Remote Code Execution Vulnerability | 8.8 | 35.9% | 2021-11-03 | 2022-05-03 |
| CVE-2017-5638 | Apache Struts Remote Code Execution Vulnerability Ransomware | 9.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2017-16651 | Roundcube Webmail File Disclosure Vulnerability | 7.8 | 45.7% | 2021-11-03 | 2022-05-03 |
| CVE-2017-11882 | Microsoft Office Memory Corruption Vulnerability Ransomware | 7.8 | 99.9% | 2021-11-03 | 2022-05-03 |
| CVE-2017-11774 | Microsoft Office Outlook Security Feature Bypass Vulnerability | 7.8 | 59.6% | 2021-11-03 | 2022-05-03 |
| CVE-2017-0199 | Microsoft Office and WordPad Remote Code Execution Vulnerability Ransomware | 7.8 | 99.5% | 2021-11-03 | 2022-05-03 |
| CVE-2017-0143 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability Ransomware | 8.8 | 93.3% | 2021-11-03 | 2022-05-03 |
| CVE-2016-9563 | SAP NetWeaver XML External Entity (XXE) Vulnerability | 6.5 | 24.2% | 2021-11-03 | 2022-05-03 |
| CVE-2016-7255 | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 81.0% | 2021-11-03 | 2022-05-03 |
| CVE-2016-4437 | Apache Shiro Code Execution Vulnerability | 9.8 | 93.0% | 2021-11-03 | 2022-05-03 |
| CVE-2016-3976 | SAP NetWeaver Directory Traversal Vulnerability | 7.5 | 47.3% | 2021-11-03 | 2022-05-03 |
| CVE-2016-3718 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability | 5.5 | 76.7% | 2021-11-03 | 2022-05-03 |
| CVE-2016-3715 | ImageMagick Arbitrary File Deletion Vulnerability | 5.5 | 75.3% | 2021-11-03 | 2022-05-03 |
| CVE-2016-3643 | SolarWinds Virtualization Manager Privilege Escalation Vulnerability | 7.8 | 3.7% | 2021-11-03 | 2022-05-03 |
| CVE-2016-3235 | Microsoft Office OLE DLL Side Loading Vulnerability | 7.8 | 43.3% | 2021-11-03 | 2022-05-03 |
| CVE-2016-0185 | Microsoft Windows Media Center Remote Code Execution Vulnerability | 7.8 | 69.8% | 2021-11-03 | 2022-05-03 |
| CVE-2016-0167 | Microsoft Win32k Privilege Escalation Vulnerability Ransomware | 7.8 | 5.7% | 2021-11-03 | 2022-05-03 |
| CVE-2015-4852 | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | 9.8 | 96.0% | 2021-11-03 | 2022-05-03 |
| CVE-2015-1641 | Microsoft Office Memory Corruption Vulnerability | 7.8 | 96.7% | 2021-11-03 | 2022-05-03 |
| CVE-2014-1812 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability Ransomware | 8.8 | 64.9% | 2021-11-03 | 2022-05-03 |
| CVE-2012-3152 | Oracle Fusion Middleware Unspecified Vulnerability | 9.1 | 98.8% | 2021-11-03 | 2022-05-03 |
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability Ransomware | 8.8 | 100.0% | 2021-11-03 | 2022-05-03 |
| CVE-2010-5326 | SAP NetWeaver Remote Code Execution Vulnerability | 10.0 | 17.8% | 2021-11-03 | 2022-05-03 |