Home › Exploited CVEs
CISA Known Exploited Vulnerabilities (KEV)
All 1,721 CVEs in CISA's KEV catalog, newest first, with EPSS exploit probability. RSS · JSON Feed
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2014-6332 | Microsoft Windows | 2022-03-25 | 95.0% | |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) | 2022-03-25 | 87.3% | |
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) | 2022-03-25 | 99.3% | |
| CVE-2014-3120 | Elastic Elasticsearch | 2022-03-25 | 88.6% | |
| CVE-2014-0130 | Rails Ruby on Rails | 2022-03-25 | 53.7% | |
| CVE-2013-5223 | D-Link DSL-2760U | 2022-03-25 | 50.8% | |
| CVE-2013-4810 | Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | 2022-03-25 | 79.5% | |
| CVE-2013-2251 | Apache Struts | 2022-03-25 | 100.0% | |
| CVE-2012-1823 | PHP PHP | 2022-03-25 | 100.0% | |
| CVE-2010-4345 | Exim Exim | 2022-03-25 | 18.0% | |
| CVE-2010-4344 | Exim Exim | 2022-03-25 | 71.7% | |
| CVE-2010-3035 | Cisco IOS XR | 2022-03-25 | 5.7% | |
| CVE-2010-2861 | Adobe ColdFusion | 2022-03-25 | 99.7% | known |
| CVE-2009-2055 | Cisco IOS XR | 2022-03-25 | 3.3% | |
| CVE-2009-1151 | phpMyAdmin phpMyAdmin | 2022-03-25 | 96.6% | |
| CVE-2009-0927 | Adobe Reader and Acrobat | 2022-03-25 | 96.6% | |
| CVE-2005-2773 | Hewlett Packard (HP) OpenView Network Node Manager | 2022-03-25 | 74.6% | |
| CVE-2020-5135 | SonicWall SonicOS | 2022-03-15 | 26.9% | known |
| CVE-2019-1405 | Microsoft Windows | 2022-03-15 | 29.9% | known |
| CVE-2019-1322 | Microsoft Windows | 2022-03-15 | 19.2% | known |
| CVE-2019-1315 | Microsoft Windows | 2022-03-15 | 3.5% | known |
| CVE-2019-1253 | Microsoft Windows | 2022-03-15 | 11.6% | known |
| CVE-2019-1132 | Microsoft Win32k | 2022-03-15 | 9.8% | |
| CVE-2019-1129 | Microsoft Windows | 2022-03-15 | 1.8% | known |
| CVE-2019-1069 | Microsoft Task Scheduler | 2022-03-15 | 6.1% | known |
| CVE-2019-1064 | Microsoft Windows | 2022-03-15 | 6.9% | known |
| CVE-2019-0841 | Microsoft Windows | 2022-03-15 | 41.4% | known |
| CVE-2019-0543 | Microsoft Windows | 2022-03-15 | 4.7% | known |
| CVE-2018-8120 | Microsoft Win32k | 2022-03-15 | 73.4% | known |
| CVE-2017-0101 | Microsoft Windows | 2022-03-15 | 57.5% | known |
| CVE-2016-3309 | Microsoft Windows | 2022-03-15 | 20.5% | known |
| CVE-2015-2546 | Microsoft Win32k | 2022-03-15 | 10.1% | known |
| CVE-2022-26486 | Mozilla Firefox | 2022-03-07 | 2.3% | |
| CVE-2022-26485 | Mozilla Firefox | 2022-03-07 | 14.3% | |
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation | 2022-03-07 | 87.6% | |
| CVE-2020-8218 | Pulse Secure Pulse Connect Secure | 2022-03-07 | 32.7% | |
| CVE-2019-11581 | Atlassian Jira Server and Data Center | 2022-03-07 | 84.6% | |
| CVE-2017-6077 | NETGEAR Wireless Router DGN2200 | 2022-03-07 | 68.7% | |
| CVE-2016-6277 | NETGEAR Multiple Routers | 2022-03-07 | 99.8% | |
| CVE-2013-0631 | Adobe ColdFusion | 2022-03-07 | 66.4% | |
| CVE-2013-0629 | Adobe ColdFusion | 2022-03-07 | 65.8% | |
| CVE-2013-0625 | Adobe ColdFusion | 2022-03-07 | 93.8% | |
| CVE-2009-3960 | Adobe BlazeDS | 2022-03-07 | 90.0% | known |
| CVE-2022-20708 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 14.9% | |
| CVE-2022-20703 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 9.2% | |
| CVE-2022-20701 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 9.7% | |
| CVE-2022-20700 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 5.7% | |
| CVE-2022-20699 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 72.5% | |
| CVE-2021-41379 | Microsoft Windows | 2022-03-03 | 19.5% | known |
| CVE-2020-1938 | Apache Tomcat | 2022-03-03 | 99.3% | |
| CVE-2020-11899 | Treck TCP/IP stack IPv6 | 2022-03-03 | 18.6% | |
| CVE-2019-16928 | Exim Exim Internet Mailer | 2022-03-03 | 41.6% | |
| CVE-2019-1652 | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | 2022-03-03 | 95.9% | |
| CVE-2019-1297 | Microsoft Excel | 2022-03-03 | 21.8% | |
| CVE-2018-8581 | Microsoft Exchange Server | 2022-03-03 | 27.4% | known |
| CVE-2018-8298 | ChakraCore ChakraCore scripting engine | 2022-03-03 | 74.5% | |
| CVE-2018-0180 | Cisco IOS Software | 2022-03-03 | 4.9% | |
| CVE-2018-0179 | Cisco IOS Software | 2022-03-03 | 4.9% | |
| CVE-2018-0175 | Cisco IOS, XR, and XE Software | 2022-03-03 | 3.5% | |
| CVE-2018-0174 | Cisco IOS XE Software | 2022-03-03 | 7.6% | |
| CVE-2018-0173 | Cisco IOS and IOS XE Software | 2022-03-03 | 7.6% | |
| CVE-2018-0172 | Cisco IOS and IOS XE Software | 2022-03-03 | 7.8% | |
| CVE-2018-0167 | Cisco IOS, XR, and XE Software | 2022-03-03 | 3.4% | |
| CVE-2018-0161 | Cisco IOS Software | 2022-03-03 | 4.1% | |
| CVE-2018-0159 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 6.9% | |
| CVE-2018-0158 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 7.2% | |
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 8.6% | |
| CVE-2018-0155 | Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | 2022-03-03 | 7.7% | |
| CVE-2018-0154 | Cisco IOS Software | 2022-03-03 | 7.1% | |
| CVE-2018-0151 | Cisco IOS and IOS XE Software | 2022-03-03 | 14.2% | |
| CVE-2017-8540 | Microsoft Malware Protection Engine | 2022-03-03 | 71.9% | |
| CVE-2017-6744 | Cisco IOS software | 2022-03-03 | 7.3% | |
| CVE-2017-6743 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.9% | |
| CVE-2017-6740 | Cisco IOS and IOS XE Software | 2022-03-03 | 11.1% | |
| CVE-2017-6739 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.9% | |
| CVE-2017-6738 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.9% | |
| CVE-2017-6737 | Cisco IOS and IOS XE Software | 2022-03-03 | 45.2% | |
| CVE-2017-6736 | Cisco IOS and IOS XE Software | 2022-03-03 | 70.4% | |
| CVE-2017-6663 | Cisco IOS and IOS XE Software | 2022-03-03 | 2.1% | |
| CVE-2017-6627 | Cisco IOS and IOS XE Software | 2022-03-03 | 6.2% | |
| CVE-2017-12319 | Cisco IOS XE Software | 2022-03-03 | 5.2% | |
| CVE-2017-12240 | Cisco IOS and IOS XE Software | 2022-03-03 | 13.8% | |
| CVE-2017-12238 | Cisco Catalyst 6800 Series Switches | 2022-03-03 | 2.0% | |
| CVE-2017-12237 | Cisco IOS and IOS XE Software | 2022-03-03 | 7.1% | |
| CVE-2017-12235 | Cisco IOS software | 2022-03-03 | 7.1% | |
| CVE-2017-12234 | Cisco IOS software | 2022-03-03 | 7.1% | |
| CVE-2017-12233 | Cisco IOS software | 2022-03-03 | 7.1% | |
| CVE-2017-12232 | Cisco IOS software | 2022-03-03 | 2.2% | |
| CVE-2017-12231 | Cisco IOS software | 2022-03-03 | 7.1% | |
| CVE-2017-11826 | Microsoft Office | 2022-03-03 | 81.2% | |
| CVE-2017-11292 | Adobe Flash Player | 2022-03-03 | 11.9% | |
| CVE-2017-0261 | Microsoft Office | 2022-03-03 | 78.1% | |
| CVE-2017-0001 | Microsoft Graphics Device Interface (GDI) | 2022-03-03 | 3.1% | |
| CVE-2016-8562 | Siemens SIMATIC CP | 2022-03-03 | 3.6% | |
| CVE-2016-7855 | Adobe Flash Player | 2022-03-03 | 25.2% | |
| CVE-2016-7262 | Microsoft Excel | 2022-03-03 | 57.7% | |
| CVE-2016-7193 | Microsoft Office | 2022-03-03 | 57.6% | |
| CVE-2016-5195 | Linux Kernel | 2022-03-03 | 83.5% | |
| CVE-2016-4117 | Adobe Flash Player | 2022-03-03 | 94.4% | known |
| CVE-2016-1019 | Adobe Flash Player | 2022-03-03 | 22.3% | known |
| CVE-2016-0099 | Microsoft Windows | 2022-03-03 | 36.8% | known |
| CVE-2015-7645 | Adobe Flash Player | 2022-03-03 | 65.3% | known |
| CVE-2015-5119 | Adobe Flash Player | 2022-03-03 | 99.3% | |
| CVE-2015-4902 | Oracle Java SE | 2022-03-03 | 13.6% | |
| CVE-2015-3043 | Adobe Flash Player | 2022-03-03 | 73.9% | |
| CVE-2015-2590 | Oracle Java SE | 2022-03-03 | 25.5% | |
| CVE-2015-2545 | Microsoft Office | 2022-03-03 | 85.9% | |
| CVE-2015-2424 | Microsoft PowerPoint | 2022-03-03 | 40.4% | |
| CVE-2015-2387 | Microsoft ATM Font Driver | 2022-03-03 | 34.9% | |
| CVE-2015-1701 | Microsoft Win32k | 2022-03-03 | 55.9% | known |
| CVE-2015-1642 | Microsoft Office | 2022-03-03 | 53.1% | |
| CVE-2014-4114 | Microsoft Windows | 2022-03-03 | 81.6% | |
| CVE-2014-0496 | Adobe Reader and Acrobat | 2022-03-03 | 40.0% | |
| CVE-2013-5065 | Microsoft Windows | 2022-03-03 | 34.7% | |
| CVE-2013-3897 | Microsoft Internet Explorer | 2022-03-03 | 77.3% | |
| CVE-2013-3346 | Adobe Reader and Acrobat | 2022-03-03 | 78.9% | |
| CVE-2013-1675 | Mozilla Firefox | 2022-03-03 | 6.7% | |
| CVE-2013-1347 | Microsoft Internet Explorer | 2022-03-03 | 77.7% | |
| CVE-2013-0641 | Adobe Reader | 2022-03-03 | 32.3% | |
| CVE-2013-0640 | Adobe Reader and Acrobat | 2022-03-03 | 86.9% | |
| CVE-2013-0632 | Adobe ColdFusion | 2022-03-03 | 93.6% | |
| CVE-2012-4681 | Oracle Java SE | 2022-03-03 | 98.5% | known |
| CVE-2012-1856 | Microsoft Office | 2022-03-03 | 72.0% | |
| CVE-2012-1723 | Oracle Java SE | 2022-03-03 | 93.7% | known |
| CVE-2012-1535 | Adobe Flash Player | 2022-03-03 | 70.4% | |
| CVE-2012-0507 | Oracle Java SE | 2022-03-03 | 98.1% | known |
| CVE-2011-3544 | Oracle Java SE JDK and JRE | 2022-03-03 | 96.7% | |
| CVE-2011-1889 | Microsoft Forefront Threat Management Gateway (TMG) | 2022-03-03 | 49.0% | |
| CVE-2011-0611 | Adobe Flash Player | 2022-03-03 | 99.4% | |
| CVE-2010-3333 | Microsoft Office | 2022-03-03 | 89.5% | |
| CVE-2010-0232 | Microsoft Windows | 2022-03-03 | 29.3% | |
| CVE-2010-0188 | Adobe Reader and Acrobat | 2022-03-03 | 88.2% | known |
| CVE-2009-3129 | Microsoft Excel | 2022-03-03 | 85.6% | |
| CVE-2009-1123 | Microsoft Windows | 2022-03-03 | 4.9% | |
| CVE-2008-3431 | Oracle VirtualBox | 2022-03-03 | 6.9% | |
| CVE-2008-2992 | Adobe Acrobat and Reader | 2022-03-03 | 98.5% | known |
| CVE-2004-0210 | Microsoft Windows | 2022-03-03 | 7.2% | |
| CVE-2002-0367 | Microsoft Windows | 2022-03-03 | 4.9% | |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | 2022-02-25 | 30.9% | known |
| CVE-2017-8570 | Microsoft Office | 2022-02-25 | 89.9% | |
| CVE-2017-0222 | Microsoft Internet Explorer | 2022-02-25 | 29.6% | |
| CVE-2014-6352 | Microsoft Windows | 2022-02-25 | 77.5% | |
| CVE-2022-23134 | Zabbix Frontend | 2022-02-22 | 84.7% | |
| CVE-2022-23131 | Zabbix Frontend | 2022-02-22 | 95.7% | |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source | 2022-02-15 | 99.2% | |
| CVE-2022-0609 | Google Chromium Animation | 2022-02-15 | 22.9% | |
| CVE-2019-0752 | Microsoft Internet Explorer | 2022-02-15 | 81.6% | known |
| CVE-2018-8174 | Microsoft Windows | 2022-02-15 | 88.3% | known |
| CVE-2018-20250 | RARLAB WinRAR | 2022-02-15 | 96.3% | known |
| CVE-2018-15982 | Adobe Flash Player | 2022-02-15 | 89.1% | known |
| CVE-2017-9841 | PHPUnit PHPUnit | 2022-02-15 | 100.0% | |
| CVE-2014-1761 | Microsoft Word | 2022-02-15 | 77.5% | |
| CVE-2013-3906 | Microsoft Graphics Component | 2022-02-15 | 84.9% | |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS | 2022-02-11 | 16.3% | |
| CVE-2021-36934 | Microsoft Windows | 2022-02-10 | 67.3% | |
| CVE-2020-0796 | Microsoft SMBv3 | 2022-02-10 | 99.8% | known |
| CVE-2018-1000861 | Jenkins Jenkins Stapler Web Framework | 2022-02-10 | 98.3% | |
| CVE-2017-9791 | Apache Struts 1 | 2022-02-10 | 98.9% | |
| CVE-2017-8464 | Microsoft Windows | 2022-02-10 | 89.9% | |
| CVE-2017-10271 | Oracle WebLogic Server | 2022-02-10 | 100.0% | known |
| CVE-2017-0263 | Microsoft Win32k | 2022-02-10 | 10.0% | |
| CVE-2017-0262 | Microsoft Office | 2022-02-10 | 81.0% | |
| CVE-2017-0145 | Microsoft SMBv1 | 2022-02-10 | 89.8% | known |
| CVE-2017-0144 | Microsoft SMBv1 | 2022-02-10 | 99.2% | known |
| CVE-2016-3088 | Apache ActiveMQ | 2022-02-10 | 98.5% | |
| CVE-2015-2051 | D-Link DIR-645 Router | 2022-02-10 | 97.1% | |
| CVE-2015-1635 | Microsoft HTTP.sys | 2022-02-10 | 100.0% | |
| CVE-2015-1130 | Apple OS X | 2022-02-10 | 9.9% | |
| CVE-2014-4404 | Apple OS X | 2022-02-10 | 48.9% | |
| CVE-2022-21882 | Microsoft Win32k | 2022-02-04 | 59.2% | known |
| CVE-2022-22587 | Apple iOS and macOS | 2022-01-28 | 11.6% | |
| CVE-2021-20038 | SonicWall SMA 100 Appliances | 2022-01-28 | 99.9% | known |
| CVE-2020-5722 | Grandstream UCM6200 | 2022-01-28 | 84.4% | |
| CVE-2020-0787 | Microsoft Windows | 2022-01-28 | 42.5% | known |
| CVE-2017-5689 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | 2022-01-28 | 92.2% | |
| CVE-2014-7169 | GNU Bourne-Again Shell (Bash) | 2022-01-28 | 99.9% | |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) | 2022-01-28 | 100.0% | |
| CVE-2014-1776 | Microsoft Internet Explorer | 2022-01-28 | 88.0% | |
| CVE-2021-35247 | SolarWinds Serv-U | 2022-01-21 | 3.5% | |
| CVE-2018-8453 | Microsoft Win32k | 2022-01-21 | 70.0% | known |
| CVE-2012-0391 | Apache Struts 2 | 2022-01-21 | 75.6% | |
| CVE-2006-1547 | Apache Struts 1 | 2022-01-21 | 54.6% | |
| CVE-2021-40870 | Aviatrix Aviatrix Controller | 2022-01-18 | 93.0% | |
| CVE-2021-33766 | Microsoft Exchange Server | 2022-01-18 | 98.1% | |
| CVE-2021-32648 | October CMS October CMS | 2022-01-18 | 90.4% | |
| CVE-2021-25298 | Nagios Nagios XI | 2022-01-18 | 75.1% | |
| CVE-2021-25297 | Nagios Nagios XI | 2022-01-18 | 56.7% | |
| CVE-2021-25296 | Nagios Nagios XI | 2022-01-18 | 72.2% | |
| CVE-2021-22991 | F5 BIG-IP Traffic Management Microkernel | 2022-01-18 | 61.1% | |
| CVE-2021-21975 | VMware vRealize Operations Manager API | 2022-01-18 | 78.3% | known |
| CVE-2021-21315 | Npm package System Information Library for Node.JS | 2022-01-18 | 90.7% | |
| CVE-2020-14864 | Oracle Intelligence Enterprise Edition | 2022-01-18 | 97.2% | |
| CVE-2020-13927 | Apache Airflow's Experimental API | 2022-01-18 | 99.8% | |
| CVE-2020-13671 | Drupal Drupal core | 2022-01-18 | 35.4% | |
| CVE-2020-11978 | Apache Airflow | 2022-01-18 | 99.2% | |
| CVE-2021-36260 | Hikvision Security cameras web server | 2022-01-10 | 99.9% | |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN software | 2022-01-10 | 39.8% | |
| CVE-2021-22017 | VMware vCenter Server | 2022-01-10 | 49.2% | |
| CVE-2020-6572 | Google Chrome Media | 2022-01-10 | 10.6% | |
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-01-10 | 100.0% |
1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 · 9
Kevscope: daily CISA KEV + EPSS datasetThe whole KEV catalog joined with daily EPSS and CVSS scores as CSV/Parquet, refreshed daily. Free to download.
Get the full file: Exploited Vulnerabilities Brief – September 2026 ($29): this month's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.
Get the full file: Exploited Vulnerabilities Brief – September 2026 ($29): this month's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.