Home › Exploited CVEs
CISA Known Exploited Vulnerabilities (KEV)
All 1,721 CVEs in CISA's KEV catalog, newest first, with EPSS exploit probability. RSS · JSON Feed
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2021-45046 | Apache Log4j2 | 2023-05-01 | 100.0% | known |
| CVE-2023-28432 | MinIO MinIO | 2023-04-21 | 84.0% | |
| CVE-2023-27350 | PaperCut MF/NG | 2023-04-21 | 100.0% | known |
| CVE-2023-2136 | Google Chromium Skia | 2023-04-21 | 5.7% | |
| CVE-2017-6742 | Cisco IOS and IOS XE Software | 2023-04-19 | 21.4% | |
| CVE-2023-2033 | Google Chromium V8 | 2023-04-17 | 40.8% | |
| CVE-2019-8526 | Apple macOS | 2023-04-17 | 0.7% | |
| CVE-2023-29492 | Novi Survey Novi Survey | 2023-04-13 | 2.7% | |
| CVE-2023-20963 | Android Framework | 2023-04-13 | 1.5% | |
| CVE-2023-28252 | Microsoft Windows | 2023-04-11 | 49.0% | known |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS | 2023-04-10 | 23.0% | |
| CVE-2023-28205 | Apple Multiple Products | 2023-04-10 | 27.1% | |
| CVE-2023-26083 | Arm Mali Graphics Processing Unit (GPU) | 2023-04-07 | 1.2% | |
| CVE-2021-27878 | Veritas Backup Exec Agent | 2023-04-07 | 24.0% | known |
| CVE-2021-27877 | Veritas Backup Exec Agent | 2023-04-07 | 64.9% | known |
| CVE-2021-27876 | Veritas Backup Exec Agent | 2023-04-07 | 13.5% | known |
| CVE-2019-1388 | Microsoft Windows | 2023-04-07 | 8.6% | known |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) | 2023-04-03 | 17.6% | |
| CVE-2023-0266 | Linux Kernel | 2023-03-30 | 3.7% | |
| CVE-2022-42948 | Fortra Cobalt Strike | 2023-03-30 | 2.7% | |
| CVE-2022-39197 | Fortra Cobalt Strike | 2023-03-30 | 46.4% | |
| CVE-2022-38181 | Arm Mali Graphics Processing Unit (GPU) | 2023-03-30 | 13.6% | |
| CVE-2022-3038 | Google Chromium Network Service | 2023-03-30 | 24.7% | |
| CVE-2022-22706 | Arm Mali Graphics Processing Unit (GPU) | 2023-03-30 | 1.1% | |
| CVE-2021-30900 | Apple iOS, iPadOS, and macOS | 2023-03-30 | 5.2% | |
| CVE-2017-7494 | Samba Samba | 2023-03-30 | 99.4% | known |
| CVE-2013-3163 | Microsoft Internet Explorer | 2023-03-30 | 70.7% | |
| CVE-2023-26360 | Adobe ColdFusion | 2023-03-15 | 97.3% | |
| CVE-2023-24880 | Microsoft Windows | 2023-03-14 | 78.0% | known |
| CVE-2023-23397 | Microsoft Office | 2023-03-14 | 97.4% | |
| CVE-2022-41328 | Fortinet FortiOS | 2023-03-14 | 10.7% | |
| CVE-2021-39144 | XStream XStream | 2023-03-10 | 98.1% | |
| CVE-2020-5741 | Plex Media Server | 2023-03-10 | 72.9% | |
| CVE-2022-35914 | Teclib GLPI | 2023-03-07 | 99.9% | |
| CVE-2022-33891 | Apache Spark | 2023-03-07 | 93.1% | |
| CVE-2022-28810 | Zoho ManageEngine | 2023-03-07 | 71.0% | |
| CVE-2022-36537 | ZK Framework AuUploader | 2023-02-27 | 95.4% | known |
| CVE-2022-47986 | IBM Aspera Faspex | 2023-02-21 | 100.0% | known |
| CVE-2022-41223 | Mitel MiVoice Connect | 2023-02-21 | 10.6% | known |
| CVE-2022-40765 | Mitel MiVoice Connect | 2023-02-21 | 10.6% | known |
| CVE-2022-46169 | Cacti Cacti | 2023-02-16 | 99.8% | |
| CVE-2023-23529 | Apple Multiple Products | 2023-02-14 | 9.5% | |
| CVE-2023-23376 | Microsoft Windows | 2023-02-14 | 10.9% | known |
| CVE-2023-21823 | Microsoft Windows | 2023-02-14 | 5.6% | |
| CVE-2023-21715 | Microsoft Office | 2023-02-14 | 12.0% | |
| CVE-2023-0669 | Fortra GoAnywhere MFT | 2023-02-10 | 100.0% | known |
| CVE-2022-24990 | TerraMaster TerraMaster OS | 2023-02-10 | 83.6% | known |
| CVE-2015-2291 | Intel Ethernet Diagnostics Driver for Windows | 2023-02-10 | 9.0% | known |
| CVE-2023-22952 | SugarCRM Multiple Products | 2023-02-02 | 80.1% | |
| CVE-2022-21587 | Oracle E-Business Suite | 2023-02-02 | 98.3% | known |
| CVE-2017-11357 | Telerik User Interface (UI) for ASP.NET AJAX | 2023-01-26 | 77.7% | known |
| CVE-2022-47966 | Zoho ManageEngine | 2023-01-23 | 99.8% | known |
| CVE-2022-44877 | CWP Control Web Panel | 2023-01-17 | 100.0% | |
| CVE-2023-21674 | Microsoft Windows | 2023-01-10 | 41.8% | |
| CVE-2022-41080 | Microsoft Exchange Server | 2023-01-10 | 77.3% | known |
| CVE-2018-5430 | TIBCO JasperReports | 2022-12-29 | 49.6% | |
| CVE-2018-18809 | TIBCO JasperReports | 2022-12-29 | 79.1% | |
| CVE-2022-42856 | Apple iOS | 2022-12-14 | 8.5% | |
| CVE-2022-44698 | Microsoft Defender | 2022-12-13 | 76.3% | known |
| CVE-2022-42475 | Fortinet FortiOS | 2022-12-13 | 99.5% | known |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway | 2022-12-13 | 6.7% | |
| CVE-2022-26501 | Veeam Backup & Replication | 2022-12-13 | 4.1% | known |
| CVE-2022-26500 | Veeam Backup & Replication | 2022-12-13 | 5.8% | known |
| CVE-2022-4262 | Google Chromium V8 | 2022-12-05 | 16.0% | |
| CVE-2022-4135 | Google Chromium GPU | 2022-11-28 | 31.9% | |
| CVE-2021-35587 | Oracle Fusion Middleware | 2022-11-28 | 96.3% | |
| CVE-2022-41049 | Microsoft Windows | 2022-11-14 | 2.5% | |
| CVE-2022-41128 | Microsoft Windows | 2022-11-08 | 24.6% | |
| CVE-2022-41125 | Microsoft Windows | 2022-11-08 | 3.0% | |
| CVE-2022-41091 | Microsoft Windows | 2022-11-08 | 1.8% | known |
| CVE-2022-41073 | Microsoft Windows | 2022-11-08 | 2.3% | known |
| CVE-2021-25370 | Samsung Mobile Devices | 2022-11-08 | 0.9% | |
| CVE-2021-25369 | Samsung Mobile Devices | 2022-11-08 | 1.1% | |
| CVE-2021-25337 | Samsung Mobile Devices | 2022-11-08 | 2.8% | |
| CVE-2022-3723 | Google Chromium V8 | 2022-10-28 | 7.9% | |
| CVE-2022-42827 | Apple iOS and iPadOS | 2022-10-25 | 1.0% | |
| CVE-2020-3433 | Cisco AnyConnect Secure | 2022-10-24 | 10.0% | known |
| CVE-2020-3153 | Cisco AnyConnect Secure | 2022-10-24 | 28.3% | known |
| CVE-2018-19323 | GIGABYTE Multiple Products | 2022-10-24 | 7.8% | known |
| CVE-2018-19322 | GIGABYTE Multiple Products | 2022-10-24 | 1.8% | known |
| CVE-2018-19321 | GIGABYTE Multiple Products | 2022-10-24 | 3.7% | known |
| CVE-2018-19320 | GIGABYTE Multiple Products | 2022-10-24 | 3.6% | known |
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-10-20 | 95.5% | known |
| CVE-2021-3493 | Linux Kernel | 2022-10-20 | 49.2% | |
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service | 2022-10-11 | 1.7% | |
| CVE-2022-40684 | Fortinet Multiple Products | 2022-10-11 | 100.0% | known |
| CVE-2022-41082 | Microsoft Exchange Server | 2022-09-30 | 100.0% | known |
| CVE-2022-41040 | Microsoft Exchange Server | 2022-09-30 | 100.0% | known |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | 2022-09-30 | 99.2% | |
| CVE-2022-3236 | Sophos Firewall | 2022-09-23 | 98.9% | |
| CVE-2022-35405 | Zoho ManageEngine | 2022-09-22 | 99.9% | |
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service | 2022-09-15 | 3.3% | |
| CVE-2013-6282 | Linux Kernel | 2022-09-15 | 39.7% | |
| CVE-2013-2597 | Code Aurora ACDB Audio Driver | 2022-09-15 | 1.5% | |
| CVE-2013-2596 | Linux Kernel | 2022-09-15 | 3.2% | |
| CVE-2013-2094 | Linux Kernel | 2022-09-15 | 47.7% | |
| CVE-2010-2568 | Microsoft Windows | 2022-09-15 | 91.3% | |
| CVE-2022-37969 | Microsoft Windows | 2022-09-14 | 28.3% | known |
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS | 2022-09-14 | 5.6% | |
| CVE-2022-3075 | Google Chromium Mojo | 2022-09-08 | 5.8% | |
| CVE-2022-27593 | QNAP Photo Station | 2022-09-08 | 87.9% | known |
| CVE-2022-26258 | D-Link DIR-820L | 2022-09-08 | 92.0% | |
| CVE-2020-9934 | Apple iOS, iPadOS, and macOS | 2022-09-08 | 3.2% | |
| CVE-2018-7445 | MikroTik RouterOS | 2022-09-08 | 60.8% | |
| CVE-2018-6530 | D-Link Multiple Routers | 2022-09-08 | 96.7% | known |
| CVE-2018-2628 | Oracle WebLogic Server | 2022-09-08 | 99.4% | |
| CVE-2018-13374 | Fortinet FortiOS and FortiADC | 2022-09-08 | 37.8% | known |
| CVE-2017-5521 | NETGEAR Multiple Devices | 2022-09-08 | 89.2% | |
| CVE-2011-4723 | D-Link DIR-300 Router | 2022-09-08 | 3.1% | |
| CVE-2011-1823 | Android Android OS | 2022-09-08 | 41.4% | |
| CVE-2022-26352 | dotCMS dotCMS | 2022-08-25 | 91.6% | known |
| CVE-2022-24706 | Apache CouchDB | 2022-08-25 | 92.5% | |
| CVE-2022-24112 | Apache APISIX | 2022-08-25 | 96.1% | |
| CVE-2022-22963 | VMware Tanzu Spring Cloud | 2022-08-25 | 99.9% | |
| CVE-2022-2294 | WebRTC WebRTC | 2022-08-25 | 70.5% | known |
| CVE-2021-39226 | Grafana Labs Grafana | 2022-08-25 | 99.9% | |
| CVE-2021-38406 | Delta Electronics DOPSoft 2 | 2022-08-25 | 76.4% | |
| CVE-2021-31010 | Apple iOS, macOS, watchOS | 2022-08-25 | 3.7% | |
| CVE-2020-36193 | PEAR Archive_Tar | 2022-08-25 | 70.6% | |
| CVE-2020-28949 | PEAR Archive_Tar | 2022-08-25 | 84.6% | |
| CVE-2022-0028 | Palo Alto Networks PAN-OS | 2022-08-22 | 2.4% | |
| CVE-2022-32894 | Apple iOS and macOS | 2022-08-18 | 3.3% | |
| CVE-2022-32893 | Apple iOS and macOS | 2022-08-18 | 9.9% | |
| CVE-2022-2856 | Google Chromium Intents | 2022-08-18 | 4.5% | |
| CVE-2022-26923 | Microsoft Active Directory | 2022-08-18 | 83.5% | |
| CVE-2022-22536 | SAP Multiple Products | 2022-08-18 | 97.9% | |
| CVE-2022-21971 | Microsoft Windows | 2022-08-18 | 53.9% | |
| CVE-2017-15944 | Palo Alto Networks PAN-OS | 2022-08-18 | 98.3% | |
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 91.9% | known |
| CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 98.7% | known |
| CVE-2022-34713 | Microsoft Windows | 2022-08-09 | 67.8% | |
| CVE-2022-30333 | RARLAB UnRAR | 2022-08-09 | 99.1% | known |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-04 | 85.4% | known |
| CVE-2022-26138 | Atlassian Confluence | 2022-07-29 | 98.2% | |
| CVE-2022-22047 | Microsoft Windows | 2022-07-12 | 18.8% | |
| CVE-2022-26925 | Microsoft Windows | 2022-07-01 | 10.7% | |
| CVE-2022-29499 | Mitel MiVoice Connect | 2022-06-27 | 55.6% | known |
| CVE-2021-4034 | Red Hat Polkit | 2022-06-27 | 94.9% | known |
| CVE-2021-30983 | Apple iOS and iPadOS | 2022-06-27 | 2.9% | |
| CVE-2021-30533 | Google Chromium PopupBlocker | 2022-06-27 | 16.6% | |
| CVE-2020-9907 | Apple Multiple Products | 2022-06-27 | 3.9% | |
| CVE-2020-3837 | Apple Multiple Products | 2022-06-27 | 16.1% | |
| CVE-2019-8605 | Apple Multiple Products | 2022-06-27 | 17.5% | |
| CVE-2018-4344 | Apple Multiple Products | 2022-06-27 | 2.9% | |
| CVE-2022-30190 | Microsoft Windows | 2022-06-14 | 99.2% | known |
| CVE-2021-38163 | SAP NetWeaver | 2022-06-09 | 36.0% | |
| CVE-2016-2388 | SAP NetWeaver | 2022-06-09 | 52.2% | |
| CVE-2016-2386 | SAP NetWeaver | 2022-06-09 | 71.5% | |
| CVE-2019-7195 | QNAP Photo Station | 2022-06-08 | 89.7% | known |
| CVE-2019-7194 | QNAP Photo Station | 2022-06-08 | 83.1% | known |
| CVE-2019-7193 | QNAP QTS | 2022-06-08 | 14.4% | known |
| CVE-2019-7192 | QNAP Photo Station | 2022-06-08 | 88.1% | known |
| CVE-2019-5825 | Google Chromium V8 | 2022-06-08 | 55.9% | |
| CVE-2019-15271 | Cisco RV Series Routers | 2022-06-08 | 6.0% | |
| CVE-2018-6065 | Google Chromium V8 | 2022-06-08 | 60.3% | |
| CVE-2018-4990 | Adobe Acrobat and Reader | 2022-06-08 | 36.2% | |
| CVE-2018-17480 | Google Chromium V8 | 2022-06-08 | 35.6% | |
| CVE-2018-17463 | Google Chromium V8 | 2022-06-08 | 84.6% | |
| CVE-2017-6862 | NETGEAR Multiple Devices | 2022-06-08 | 43.3% | |
| CVE-2017-5070 | Google Chromium V8 | 2022-06-08 | 31.2% | |
| CVE-2017-5030 | Google Chromium V8 | 2022-06-08 | 41.7% | |
| CVE-2016-5198 | Google Chromium V8 | 2022-06-08 | 34.2% | |
| CVE-2016-1646 | Google Chromium V8 | 2022-06-08 | 48.1% | |
| CVE-2013-1331 | Microsoft Office | 2022-06-08 | 81.7% | |
| CVE-2012-5054 | Adobe Flash Player | 2022-06-08 | 21.2% | |
| CVE-2012-4969 | Microsoft Internet Explorer | 2022-06-08 | 81.7% | |
| CVE-2012-1889 | Microsoft XML Core Services | 2022-06-08 | 83.5% | |
| CVE-2012-0767 | Adobe Flash Player | 2022-06-08 | 6.7% | |
| CVE-2012-0754 | Adobe Flash Player | 2022-06-08 | 92.0% | |
| CVE-2012-0151 | Microsoft Windows | 2022-06-08 | 88.8% | |
| CVE-2011-2462 | Adobe Reader and Acrobat | 2022-06-08 | 86.6% | |
| CVE-2011-0609 | Adobe Flash Player | 2022-06-08 | 66.8% | |
| CVE-2010-2883 | Adobe Acrobat and Reader | 2022-06-08 | 82.4% | |
| CVE-2010-2572 | Microsoft PowerPoint | 2022-06-08 | 62.5% | |
| CVE-2010-1297 | Adobe Flash Player | 2022-06-08 | 82.2% | |
| CVE-2009-4324 | Adobe Acrobat and Reader | 2022-06-08 | 81.9% | |
| CVE-2009-3953 | Adobe Acrobat and Reader | 2022-06-08 | 83.9% | |
| CVE-2009-1862 | Adobe Acrobat and Reader, Flash Player | 2022-06-08 | 24.9% | |
| CVE-2009-0563 | Microsoft Office | 2022-06-08 | 62.8% | |
| CVE-2009-0557 | Microsoft Office | 2022-06-08 | 58.6% | |
| CVE-2008-0655 | Adobe Acrobat and Reader | 2022-06-08 | 38.9% | |
| CVE-2007-5659 | Adobe Acrobat and Reader | 2022-06-08 | 94.0% | |
| CVE-2006-2492 | Microsoft Word | 2022-06-08 | 48.1% | |
| CVE-2022-26134 | Atlassian Confluence Server/Data Center | 2022-06-02 | 100.0% | known |
| CVE-2019-3010 | Oracle Solaris | 2022-05-25 | 13.4% | |
| CVE-2016-7256 | Microsoft Windows | 2022-05-25 | 64.6% | |
| CVE-2016-3393 | Microsoft Windows | 2022-05-25 | 68.5% | |
| CVE-2016-1010 | Adobe Flash Player and AIR | 2022-05-25 | 19.3% | |
| CVE-2016-0984 | Adobe Flash Player and AIR | 2022-05-25 | 54.5% | |
| CVE-2016-0034 | Microsoft Silverlight | 2022-05-25 | 69.4% | known |
| CVE-2015-8651 | Adobe Flash Player | 2022-05-25 | 67.7% | |
| CVE-2015-6175 | Microsoft Windows | 2022-05-25 | 5.1% | |
| CVE-2015-4495 | Mozilla Firefox | 2022-05-25 | 71.3% | |
| CVE-2015-2425 | Microsoft Internet Explorer | 2022-05-25 | 44.7% | |
| CVE-2015-2360 | Microsoft Win32k | 2022-05-25 | 14.8% | |
| CVE-2015-1769 | Microsoft Windows | 2022-05-25 | 4.1% | |
| CVE-2015-1671 | Microsoft Windows | 2022-05-25 | 54.6% | |
| CVE-2015-0310 | Adobe Flash Player | 2022-05-25 | 15.1% | |
| CVE-2015-0071 | Microsoft Internet Explorer | 2022-05-25 | 33.6% | |
| CVE-2015-0016 | Microsoft Windows | 2022-05-25 | 75.8% |
1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 · 9
Kevscope: daily CISA KEV + EPSS datasetThe whole KEV catalog joined with daily EPSS and CVSS scores as CSV/Parquet, refreshed daily. Free to download.
Get the full file: Exploited Vulnerabilities Brief – September 2026 ($29): this month's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.
Get the full file: Exploited Vulnerabilities Brief – September 2026 ($29): this month's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.