Known Exploited Vulnerabilities
Page 8 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2023-36847 | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | 5.3 | 83.5% | 2023-11-13 | 2023-11-17 |
| CVE-2023-36846 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 5.3 | 93.5% | 2023-11-13 | 2023-11-17 |
| CVE-2023-36845 | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | 9.8 | 95.1% | 2023-11-13 | 2023-11-17 |
| CVE-2023-36844 | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | 5.3 | 90.0% | 2023-11-13 | 2023-11-17 |
| CVE-2023-29552 | Service Location Protocol (SLP) Denial-of-Service Vulnerability | 7.5 | 64.0% | 2023-11-08 | 2023-11-29 |
| CVE-2023-22518 | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Ransomware | 10.0 | 100.0% | 2023-11-07 | 2023-11-28 |
| CVE-2023-46604 | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Ransomware | 10.0 | 99.9% | 2023-11-02 | 2023-11-23 |
| CVE-2023-46748 | F5 BIG-IP Configuration Utility SQL Injection Vulnerability | 8.8 | 4.5% | 2023-10-31 | 2023-11-21 |
| CVE-2023-46747 | F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability Ransomware | 9.8 | 96.5% | 2023-10-31 | 2023-11-21 |
| CVE-2023-5631 | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 6.1 | 75.9% | 2023-10-26 | 2023-11-16 |
| CVE-2023-20273 | Cisco IOS XE Web UI Command Injection Vulnerability | 7.2 | 89.6% | 2023-10-23 | 2023-10-27 |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Ransomware | 9.4 | 100.0% | 2023-10-18 | 2023-11-08 |
| CVE-2023-20198 | Cisco IOS XE Web UI Privilege Escalation Vulnerability | 10.0 | 99.6% | 2023-10-16 | 2023-10-20 |
| CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability | 7.5 | 100.0% | 2023-10-10 | 2023-10-31 |
| CVE-2023-41763 | Microsoft Skype for Business Privilege Escalation Vulnerability | 5.3 | 90.4% | 2023-10-10 | 2023-10-31 |
| CVE-2023-36563 | Microsoft WordPad Information Disclosure Vulnerability | 6.5 | 20.7% | 2023-10-10 | 2023-10-31 |
| CVE-2023-21608 | Adobe Acrobat and Reader Use-After-Free Vulnerability | 7.8 | 61.5% | 2023-10-10 | 2023-10-31 |
| CVE-2023-20109 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | 6.6 | 2.5% | 2023-10-10 | 2023-10-31 |
| CVE-2023-42824 | Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | 7.8 | 0.9% | 2023-10-05 | 2023-10-26 |
| CVE-2023-40044 | Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability Ransomware | 10.0 | 90.6% | 2023-10-05 | 2023-10-26 |
| CVE-2023-22515 | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Ransomware | 10.0 | 99.2% | 2023-10-05 | 2023-10-13 |
| CVE-2023-42793 | JetBrains TeamCity Authentication Bypass Vulnerability Ransomware | 9.8 | 100.0% | 2023-10-04 | 2023-10-25 |
| CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 7.0 | 1.7% | 2023-10-04 | 2023-10-25 |
| CVE-2023-4211 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 5.5 | 1.1% | 2023-10-03 | 2023-10-24 |
| CVE-2023-5217 | Google Chromium libvpx Heap Buffer Overflow Vulnerability | 8.8 | 49.0% | 2023-10-02 | 2023-10-23 |
| CVE-2018-14667 | Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | 9.8 | 74.2% | 2023-09-28 | 2023-10-19 |
| CVE-2023-41993 | Apple Multiple Products WebKit Code Execution Vulnerability | 8.8 | 24.3% | 2023-09-25 | 2023-10-16 |
| CVE-2023-41992 | Apple Multiple Products Kernel Privilege Escalation Vulnerability | 7.8 | 9.5% | 2023-09-25 | 2023-10-16 |
| CVE-2023-41991 | Apple Multiple Products Improper Certificate Validation Vulnerability | 5.5 | 13.4% | 2023-09-25 | 2023-10-16 |
| CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | 7.2 | 4.3% | 2023-09-21 | 2023-10-12 |
| CVE-2023-28434 | MinIO Security Feature Bypass Vulnerability | 8.8 | 7.9% | 2023-09-19 | 2023-10-10 |
| CVE-2022-22265 | Samsung Mobile Devices Use-After-Free Vulnerability | 5.0 | 0.4% | 2023-09-18 | 2023-10-09 |
| CVE-2021-3129 | Laravel Ignition File Upload Vulnerability Ransomware | 9.8 | 99.9% | 2023-09-18 | 2023-10-09 |
| CVE-2017-6884 | Zyxel EMG2926 Routers Command Injection Vulnerability Ransomware | 8.8 | 34.6% | 2023-09-18 | 2023-10-09 |
| CVE-2014-8361 | Realtek SDK Improper Input Validation Vulnerability | 9.8 | 100.0% | 2023-09-18 | 2023-10-09 |
| CVE-2023-26369 | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | 7.8 | 6.7% | 2023-09-14 | 2023-10-05 |
| CVE-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | 8.8 | 100.0% | 2023-09-13 | 2023-10-04 |
| CVE-2023-35674 | Android Framework Privilege Escalation Vulnerability | 8.8 | 2.6% | 2023-09-13 | 2023-10-04 |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Ransomware | 5.0 | 25.5% | 2023-09-13 | 2023-10-04 |
| CVE-2023-36802 | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | 7.8 | 27.9% | 2023-09-12 | 2023-10-03 |
| CVE-2023-36761 | Microsoft Word Information Disclosure Vulnerability | 6.5 | 19.6% | 2023-09-12 | 2023-10-03 |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | 7.8 | 53.4% | 2023-09-11 | 2023-10-02 |
| CVE-2023-41061 | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | 7.8 | 3.8% | 2023-09-11 | 2023-10-02 |
| CVE-2023-33246 | Apache RocketMQ Command Execution Vulnerability | 9.8 | 96.6% | 2023-09-06 | 2023-09-27 |
| CVE-2023-38831 | RARLAB WinRAR Code Execution Vulnerability Ransomware | 7.8 | 99.8% | 2023-08-24 | 2023-09-14 |
| CVE-2023-32315 | Ignite Realtime Openfire Path Traversal Vulnerability | 8.6 | 100.0% | 2023-08-24 | 2023-09-14 |
| CVE-2023-38035 | Ivanti Sentry Authentication Bypass Vulnerability Ransomware | 9.8 | 100.0% | 2023-08-22 | 2023-09-12 |
| CVE-2023-27532 | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability Ransomware | 7.5 | 81.3% | 2023-08-22 | 2023-09-12 |
| CVE-2023-26359 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 9.8 | 17.0% | 2023-08-21 | 2023-09-11 |
| CVE-2023-24489 | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | 9.8 | 97.3% | 2023-08-16 | 2023-09-06 |
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | 7.5 | 14.0% | 2023-08-09 | 2023-08-30 |
| CVE-2017-18368 | Zyxel P660HN-T1A Routers Command Injection Vulnerability | 9.8 | 94.4% | 2023-08-07 | 2023-08-28 |
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 7.2 | 63.6% | 2023-07-31 | 2023-08-21 |
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 6.1 | 49.1% | 2023-07-27 | 2023-08-17 |
| CVE-2023-38606 | Apple Multiple Products Kernel Unspecified Vulnerability | 5.5 | 2.9% | 2023-07-26 | 2023-08-16 |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Ransomware | 10.0 | 100.0% | 2023-07-25 | 2023-08-15 |
| CVE-2023-38205 | Adobe ColdFusion Improper Access Control Vulnerability | 7.5 | 99.7% | 2023-07-20 | 2023-08-10 |
| CVE-2023-29298 | Adobe ColdFusion Improper Access Control Vulnerability | 7.5 | 99.8% | 2023-07-20 | 2023-08-10 |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Ransomware | 9.8 | 99.7% | 2023-07-19 | 2023-08-09 |
| CVE-2023-36884 | Microsoft Windows Search Remote Code Execution Vulnerability Ransomware | 7.5 | 98.9% | 2023-07-17 | 2023-08-29 |
| CVE-2023-37450 | Apple Multiple Products WebKit Code Execution Vulnerability | 8.8 | 18.9% | 2023-07-13 | 2023-08-03 |
| CVE-2022-29303 | SolarView Compact Command Injection Vulnerability | 9.8 | 98.0% | 2023-07-13 | 2023-08-03 |
| CVE-2023-36874 | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | 7.8 | 42.6% | 2023-07-11 | 2023-08-01 |
| CVE-2023-35311 | Microsoft Outlook Security Feature Bypass Vulnerability | 8.8 | 15.5% | 2023-07-11 | 2023-08-01 |
| CVE-2023-32049 | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | 8.8 | 4.2% | 2023-07-11 | 2023-08-01 |
| CVE-2023-32046 | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | 7.8 | 10.0% | 2023-07-11 | 2023-08-01 |
| CVE-2022-31199 | Netwrix Auditor Insecure Object Deserialization Vulnerability Ransomware | 9.8 | 36.0% | 2023-07-11 | 2023-08-01 |
| CVE-2021-29256 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 8.8 | 3.0% | 2023-07-07 | 2023-07-28 |
| CVE-2021-25489 | Samsung Mobile Devices Improper Input Validation Vulnerability | 3.3 | 0.5% | 2023-06-29 | 2023-07-20 |
| CVE-2021-25487 | Samsung Mobile Devices Out-of-Bounds Read Vulnerability | 7.3 | 0.6% | 2023-06-29 | 2023-07-20 |
| CVE-2021-25395 | Samsung Mobile Devices Race Condition Vulnerability | 6.4 | 0.4% | 2023-06-29 | 2023-07-20 |
| CVE-2021-25394 | Samsung Mobile Devices Race Condition Vulnerability | 6.4 | 0.4% | 2023-06-29 | 2023-07-20 |
| CVE-2021-25372 | Samsung Mobile Devices Improper Boundary Check Vulnerability | 6.1 | 0.8% | 2023-06-29 | 2023-07-20 |
| CVE-2021-25371 | Samsung Mobile Devices Unspecified Vulnerability | 6.1 | 0.8% | 2023-06-29 | 2023-07-20 |
| CVE-2019-20500 | D-Link DWL-2600AP Access Point Command Injection Vulnerability | 7.8 | 97.1% | 2023-06-29 | 2023-07-20 |
| CVE-2019-17621 | D-Link DIR-859 Router Command Execution Vulnerability | 9.8 | 89.6% | 2023-06-29 | 2023-07-20 |
| CVE-2023-32439 | Apple Multiple Products WebKit Type Confusion Vulnerability | 8.8 | 24.0% | 2023-06-23 | 2023-07-14 |
| CVE-2023-32435 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 8.8 | 23.0% | 2023-06-23 | 2023-07-14 |
| CVE-2023-32434 | Apple Multiple Products Integer Overflow Vulnerability | 7.8 | 51.5% | 2023-06-23 | 2023-07-14 |
| CVE-2023-27992 | Zyxel Multiple NAS Devices Command Injection Vulnerability | 9.8 | 82.8% | 2023-06-23 | 2023-07-14 |
| CVE-2023-20867 | VMware Tools Authentication Bypass Vulnerability | 3.9 | 13.5% | 2023-06-23 | 2023-07-14 |
| CVE-2023-20887 | Vmware Aria Operations for Networks Command Injection Vulnerability | 9.8 | 98.3% | 2023-06-22 | 2023-07-13 |
| CVE-2021-44026 | Roundcube Webmail SQL Injection Vulnerability | 9.8 | 69.9% | 2023-06-22 | 2023-07-13 |
| CVE-2020-35730 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 6.1 | 32.7% | 2023-06-22 | 2023-07-13 |
| CVE-2020-12641 | Roundcube Webmail Remote Code Execution Vulnerability | 9.8 | 84.3% | 2023-06-22 | 2023-07-13 |
| CVE-2016-9079 | Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability | 7.5 | 87.4% | 2023-06-22 | 2023-07-13 |
| CVE-2016-0165 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 13.7% | 2023-06-22 | 2023-07-13 |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Ransomware | 9.2 | 85.7% | 2023-06-13 | 2023-07-04 |
| CVE-2023-3079 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 32.1% | 2023-06-07 | 2023-06-28 |
| CVE-2023-33010 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 9.8 | 28.8% | 2023-06-05 | 2023-06-26 |
| CVE-2023-33009 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 9.8 | 28.1% | 2023-06-05 | 2023-06-26 |
| CVE-2023-34362 | Progress MOVEit Transfer SQL Injection Vulnerability Ransomware | 9.8 | 99.9% | 2023-06-02 | 2023-06-23 |
| CVE-2023-28771 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | 9.8 | 99.3% | 2023-05-31 | 2023-06-21 |
| CVE-2023-2868 | Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | 9.4 | 87.7% | 2023-05-26 | 2023-06-16 |
| CVE-2023-32409 | Apple Multiple Products WebKit Sandbox Escape Vulnerability | 8.6 | 16.5% | 2023-05-22 | 2023-06-12 |
| CVE-2023-32373 | Apple Multiple Products WebKit Use-After-Free Vulnerability | 8.8 | 12.2% | 2023-05-22 | 2023-06-12 |
| CVE-2023-28204 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 6.5 | 14.3% | 2023-05-22 | 2023-06-12 |
| CVE-2023-21492 | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | 4.4 | 2.6% | 2023-05-19 | 2023-06-09 |
| CVE-2016-6415 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | 7.5 | 87.7% | 2023-05-19 | 2023-06-09 |
| CVE-2004-1464 | Cisco IOS Denial-of-Service Vulnerability | 5.9 | 4.8% | 2023-05-19 | 2023-06-09 |