Known Exploited Vulnerabilities
Page 9 of 18. 1731 CVEs confirmed as actively exploited, per the CISA KEV catalog.
Catalog Entries
1731 total| CVE | Vulnerability | CVSS | EPSS | Added | Due |
|---|---|---|---|---|---|
| CVE-2023-25717 | Multiple Ruckus Wireless Products CSRF and RCE Vulnerability | 9.8 | 98.1% | 2023-05-12 | 2023-06-02 |
| CVE-2021-3560 | Red Hat Polkit Incorrect Authorization Vulnerability | 7.8 | 23.7% | 2023-05-12 | 2023-06-02 |
| CVE-2016-8735 | Apache Tomcat Remote Code Execution Vulnerability | 9.8 | 90.3% | 2023-05-12 | 2023-06-02 |
| CVE-2016-3427 | Oracle Java SE and JRockit Unspecified Vulnerability | 9.8 | 92.3% | 2023-05-12 | 2023-06-02 |
| CVE-2015-5317 | Jenkins User Interface (UI) Information Disclosure Vulnerability | 7.5 | 23.0% | 2023-05-12 | 2023-06-02 |
| CVE-2014-0196 | Linux Kernel Race Condition Vulnerability | 5.5 | 22.5% | 2023-05-12 | 2023-06-02 |
| CVE-2010-3904 | Linux Kernel Improper Input Validation Vulnerability | 7.8 | 14.5% | 2023-05-12 | 2023-06-02 |
| CVE-2023-29336 | Microsoft Win32K Privilege Escalation Vulnerability | 7.8 | 40.9% | 2023-05-09 | 2023-05-30 |
| CVE-2023-21839 | Oracle WebLogic Server Unspecified Vulnerability | 7.5 | 99.9% | 2023-05-01 | 2023-05-22 |
| CVE-2023-1389 | TP-Link Archer AX-21 Command Injection Vulnerability | 8.8 | 100.0% | 2023-05-01 | 2023-05-22 |
| CVE-2021-45046 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability Ransomware | 9.0 | 100.0% | 2023-05-01 | 2023-05-22 |
| CVE-2023-28432 | MinIO Information Disclosure Vulnerability | 7.5 | 84.0% | 2023-04-21 | 2023-05-12 |
| CVE-2023-27350 | PaperCut MF/NG Improper Access Control Vulnerability Ransomware | 9.8 | 100.0% | 2023-04-21 | 2023-05-12 |
| CVE-2023-2136 | Google Chrome Skia Integer Overflow Vulnerability | 9.6 | 5.7% | 2023-04-21 | 2023-05-12 |
| CVE-2017-6742 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 8.8 | 21.4% | 2023-04-19 | 2023-05-10 |
| CVE-2023-2033 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 40.8% | 2023-04-17 | 2023-05-08 |
| CVE-2019-8526 | Apple macOS Use-After-Free Vulnerability | 7.8 | 0.7% | 2023-04-17 | 2023-05-08 |
| CVE-2023-29492 | Novi Survey Insecure Deserialization Vulnerability | 9.8 | 2.7% | 2023-04-13 | 2023-05-04 |
| CVE-2023-20963 | Android Framework Privilege Escalation Vulnerability | 7.8 | 1.5% | 2023-04-13 | 2023-05-04 |
| CVE-2023-28252 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Ransomware | 7.8 | 49.0% | 2023-04-11 | 2023-05-02 |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | 8.6 | 23.2% | 2023-04-10 | 2023-05-01 |
| CVE-2023-28205 | Apple Multiple Products WebKit Use-After-Free Vulnerability | 8.8 | 27.1% | 2023-04-10 | 2023-05-01 |
| CVE-2023-26083 | Arm Mali GPU Kernel Driver Information Disclosure Vulnerability | 3.3 | 1.2% | 2023-04-07 | 2023-04-28 |
| CVE-2021-27878 | Veritas Backup Exec Agent Command Execution Vulnerability Ransomware | 8.8 | 24.0% | 2023-04-07 | 2023-04-28 |
| CVE-2021-27877 | Veritas Backup Exec Agent Improper Authentication Vulnerability Ransomware | 8.2 | 64.9% | 2023-04-07 | 2023-04-28 |
| CVE-2021-27876 | Veritas Backup Exec Agent File Access Vulnerability Ransomware | 8.1 | 13.5% | 2023-04-07 | 2023-04-28 |
| CVE-2019-1388 | Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability Ransomware | 7.8 | 8.6% | 2023-04-07 | 2023-04-28 |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 6.1 | 17.6% | 2023-04-03 | 2023-04-24 |
| CVE-2023-0266 | Linux Kernel Use-After-Free Vulnerability | 7.9 | 3.7% | 2023-03-30 | 2023-04-20 |
| CVE-2022-42948 | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | 9.8 | 2.7% | 2023-03-30 | 2023-04-20 |
| CVE-2022-39197 | Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | 6.1 | 46.4% | 2023-03-30 | 2023-04-20 |
| CVE-2022-38181 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 8.8 | 14.1% | 2023-03-30 | 2023-04-20 |
| CVE-2022-3038 | Google Chromium Network Service Use-After-Free Vulnerability | 8.8 | 24.7% | 2023-03-30 | 2023-04-20 |
| CVE-2022-22706 | Arm Mali GPU Kernel Driver Unspecified Vulnerability | 7.8 | 1.1% | 2023-03-30 | 2023-04-20 |
| CVE-2021-30900 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 7.8 | 5.2% | 2023-03-30 | 2023-04-20 |
| CVE-2017-7494 | Samba Remote Code Execution Vulnerability Ransomware | 9.8 | 99.4% | 2023-03-30 | 2023-04-20 |
| CVE-2013-3163 | Microsoft Internet Explorer Memory Corruption Vulnerability | 8.8 | 70.7% | 2023-03-30 | 2023-04-20 |
| CVE-2023-26360 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 8.6 | 97.3% | 2023-03-15 | 2023-04-05 |
| CVE-2023-24880 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Ransomware | 4.4 | 78.0% | 2023-03-14 | 2023-04-04 |
| CVE-2023-23397 | Microsoft Office Outlook Privilege Escalation Vulnerability | 9.8 | 97.2% | 2023-03-14 | 2023-04-04 |
| CVE-2022-41328 | Fortinet FortiOS Path Traversal Vulnerability | 6.5 | 10.7% | 2023-03-14 | 2023-04-04 |
| CVE-2021-39144 | XStream Remote Code Execution Vulnerability | 8.5 | 98.1% | 2023-03-10 | 2023-03-31 |
| CVE-2020-5741 | Plex Media Server Remote Code Execution Vulnerability | 7.2 | 72.9% | 2023-03-10 | 2023-03-31 |
| CVE-2022-35914 | Teclib GLPI Remote Code Execution Vulnerability | 9.8 | 99.9% | 2023-03-07 | 2023-03-28 |
| CVE-2022-33891 | Apache Spark Command Injection Vulnerability | 8.8 | 93.1% | 2023-03-07 | 2023-03-28 |
| CVE-2022-28810 | Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability | 6.8 | 71.0% | 2023-03-07 | 2023-03-28 |
| CVE-2022-36537 | ZK Framework AuUploader Unspecified Vulnerability Ransomware | 7.5 | 95.4% | 2023-02-27 | 2023-03-20 |
| CVE-2022-47986 | IBM Aspera Faspex Code Execution Vulnerability Ransomware | 9.8 | 100.0% | 2023-02-21 | 2023-03-14 |
| CVE-2022-41223 | Mitel MiVoice Connect Code Injection Vulnerability Ransomware | 6.8 | 10.7% | 2023-02-21 | 2023-03-14 |
| CVE-2022-40765 | Mitel MiVoice Connect Command Injection Vulnerability Ransomware | 6.8 | 10.6% | 2023-02-21 | 2023-03-14 |
| CVE-2022-46169 | Cacti Command Injection Vulnerability | 9.8 | 99.8% | 2023-02-16 | 2023-03-09 |
| CVE-2023-23529 | Apple Multiple Products WebKit Type Confusion Vulnerability | 8.8 | 9.5% | 2023-02-14 | 2023-03-07 |
| CVE-2023-23376 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Ransomware | 7.8 | 10.9% | 2023-02-14 | 2023-03-07 |
| CVE-2023-21823 | Microsoft Windows Graphic Component Privilege Escalation Vulnerability | 7.8 | 5.6% | 2023-02-14 | 2023-03-07 |
| CVE-2023-21715 | Microsoft Office Publisher Security Feature Bypass Vulnerability | 7.3 | 12.0% | 2023-02-14 | 2023-03-07 |
| CVE-2023-0669 | Fortra GoAnywhere MFT Remote Code Execution Vulnerability Ransomware | 7.2 | 100.0% | 2023-02-10 | 2023-03-03 |
| CVE-2022-24990 | TerraMaster OS Remote Command Execution Vulnerability Ransomware | 9.8 | 83.0% | 2023-02-10 | 2023-03-03 |
| CVE-2015-2291 | Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability Ransomware | 7.8 | 9.0% | 2023-02-10 | 2023-03-03 |
| CVE-2023-22952 | Multiple SugarCRM Products Remote Code Execution Vulnerability | 8.8 | 80.1% | 2023-02-02 | 2023-02-23 |
| CVE-2022-21587 | Oracle E-Business Suite Unspecified Vulnerability Ransomware | 9.8 | 98.3% | 2023-02-02 | 2023-02-23 |
| CVE-2017-11357 | Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Ransomware | 9.8 | 77.7% | 2023-01-26 | 2023-02-16 |
| CVE-2022-47966 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Ransomware | 9.8 | 99.8% | 2023-01-23 | 2023-02-13 |
| CVE-2022-44877 | CWP Control Web Panel OS Command Injection Vulnerability | 9.8 | 100.0% | 2023-01-17 | 2023-02-07 |
| CVE-2023-21674 | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | 8.8 | 41.0% | 2023-01-10 | 2023-01-31 |
| CVE-2022-41080 | Microsoft Exchange Server Privilege Escalation Vulnerability Ransomware | 8.8 | 77.3% | 2023-01-10 | 2023-01-31 |
| CVE-2018-5430 | TIBCO JasperReports Server Information Disclosure Vulnerability | 7.7 | 49.0% | 2022-12-29 | 2023-01-19 |
| CVE-2018-18809 | TIBCO JasperReports Library Directory Traversal Vulnerability | 9.9 | 79.1% | 2022-12-29 | 2023-01-19 |
| CVE-2022-42856 | Apple iOS Type Confusion Vulnerability | 8.8 | 8.5% | 2022-12-14 | 2023-01-04 |
| CVE-2022-44698 | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability Ransomware | 5.4 | 76.3% | 2022-12-13 | 2023-01-03 |
| CVE-2022-42475 | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Ransomware | 9.3 | 99.5% | 2022-12-13 | 2023-01-03 |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | 9.8 | 6.7% | 2022-12-13 | 2023-01-03 |
| CVE-2022-26501 | Veeam Backup & Replication Remote Code Execution Vulnerability Ransomware | 9.8 | 4.1% | 2022-12-13 | 2023-01-03 |
| CVE-2022-26500 | Veeam Backup & Replication Remote Code Execution Vulnerability Ransomware | 8.8 | 5.8% | 2022-12-13 | 2023-01-03 |
| CVE-2022-4262 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 23.5% | 2022-12-05 | 2022-12-26 |
| CVE-2022-4135 | Google Chromium GPU Heap Buffer Overflow Vulnerability | 9.6 | 31.9% | 2022-11-28 | 2022-12-19 |
| CVE-2021-35587 | Oracle Fusion Middleware Unspecified Vulnerability | 9.8 | 96.3% | 2022-11-28 | 2022-12-19 |
| CVE-2022-41049 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 5.4 | 2.5% | 2022-11-14 | 2022-12-09 |
| CVE-2022-41128 | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | 8.8 | 24.6% | 2022-11-08 | 2022-12-09 |
| CVE-2022-41125 | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 7.8 | 3.0% | 2022-11-08 | 2022-12-09 |
| CVE-2022-41091 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Ransomware | 5.4 | 1.8% | 2022-11-08 | 2022-12-09 |
| CVE-2022-41073 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability Ransomware | 7.8 | 2.3% | 2022-11-08 | 2022-12-09 |
| CVE-2021-25370 | Samsung Mobile Devices Memory Corruption Vulnerability | 6.1 | 0.9% | 2022-11-08 | 2022-11-29 |
| CVE-2021-25369 | Samsung Mobile Devices Improper Access Control Vulnerability | 6.2 | 1.1% | 2022-11-08 | 2022-11-29 |
| CVE-2021-25337 | Samsung Mobile Devices Improper Access Control Vulnerability | 4.4 | 2.8% | 2022-11-08 | 2022-11-29 |
| CVE-2022-3723 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 7.9% | 2022-10-28 | 2022-11-18 |
| CVE-2022-42827 | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | 7.8 | 1.0% | 2022-10-25 | 2022-11-15 |
| CVE-2020-3433 | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability Ransomware | 7.8 | 10.0% | 2022-10-24 | 2022-11-14 |
| CVE-2020-3153 | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability Ransomware | 6.5 | 28.3% | 2022-10-24 | 2022-11-14 |
| CVE-2018-19323 | GIGABYTE Multiple Products Privilege Escalation Vulnerability Ransomware | 9.8 | 7.8% | 2022-10-24 | 2022-11-14 |
| CVE-2018-19322 | GIGABYTE Multiple Products Code Execution Vulnerability Ransomware | 7.8 | 1.8% | 2022-10-24 | 2022-11-14 |
| CVE-2018-19321 | GIGABYTE Multiple Products Privilege Escalation Vulnerability Ransomware | 7.8 | 3.7% | 2022-10-24 | 2022-11-14 |
| CVE-2018-19320 | GIGABYTE Multiple Products Unspecified Vulnerability Ransomware | 7.8 | 3.6% | 2022-10-24 | 2022-11-14 |
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Ransomware | 9.8 | 95.5% | 2022-10-20 | 2022-11-10 |
| CVE-2021-3493 | Linux Kernel Privilege Escalation Vulnerability | 8.8 | 49.2% | 2022-10-20 | 2022-11-10 |
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | 7.8 | 1.7% | 2022-10-11 | 2022-11-01 |
| CVE-2022-40684 | Fortinet Multiple Products Authentication Bypass Vulnerability Ransomware | 9.8 | 100.0% | 2022-10-11 | 2022-11-01 |
| CVE-2022-41082 | Microsoft Exchange Server Remote Code Execution Vulnerability Ransomware | 8.0 | 100.0% | 2022-09-30 | 2022-10-21 |
| CVE-2022-41040 | Microsoft Exchange Server Server-Side Request Forgery Vulnerability Ransomware | 8.8 | 100.0% | 2022-09-30 | 2022-10-21 |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | 8.8 | 99.2% | 2022-09-30 | 2022-10-21 |
| CVE-2022-3236 | Sophos Firewall Code Injection Vulnerability | 9.8 | 98.9% | 2022-09-23 | 2022-10-14 |