Home › Exploited CVEs
CISA Known Exploited Vulnerabilities (KEV)
All 1,769 CVEs in CISA's KEV catalog, newest first, with EPSS exploit probability. RSS · JSON Feed
Most likely to be exploited next
The five KEV entries with the highest EPSS score today. Patch these first.
| CVE | Vendor / product | EPSS |
|---|---|---|
| CVE-2026-109619 | PHP Group PHP | 100.0% |
| CVE-2026-109618 | PHP Group PHP | 100.0% |
| CVE-2025-53770 | Microsoft SharePoint | 100.0% |
| CVE-2021-26086 | Atlassian Jira Server and Data Center | 100.0% |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | 100.0% |
Need it fresh, filtered or via API?These pages are a free snapshot, last updated 2026-11-07.
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
- Kevscope CVE priority API 200 free calls a day, $5 for 2,000 calls (no expiry), or $19/month for 10,000: returns a patch-priority verdict for up to 20 CVEs per call with the evidence (KEV, EPSS, CVSS, CISA SSVC), most urgent first, by API or MCP.
- Kevscope API $5 pack $5 for 2,000 calls, never expires: patch-priority verdicts for up to 20 CVEs per call from today's KEV, EPSS, CVSS and SSVC data, by REST API or MCP. Pay by card, your API key is on screen the moment checkout ends; no account, no subscription.
- Exploited Vulnerabilities Brief: Weekly Edition $9/month: a fresh KEV + EPSS brief every Monday (PDF + CSVs): new exploited CVEs, what to patch first, upcoming CISA deadlines.
- All Three Monday Briefs: Rates, Recalls + Exploited Vulns $25/month: all three weekly briefs (Treasury/BLS rates & macro, NHTSA recalls, CISA KEV/EPSS) for $25/month instead of $37.
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
1,769exploited CVEs in KEV
30added in the last 30 days
361used in ransomware
907with EPSS of 50% or more
Browse and filter
200 shown on this page
No CVEs match. Clear the filter box or turn a chip off. Click a column heading to sort.
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2023-36874 | Microsoft Windows | 2023-07-11 | 42.6% | |
| CVE-2023-35311 | Microsoft Outlook | 2023-07-11 | 15.5% | |
| CVE-2023-32049 | Microsoft Windows | 2023-07-11 | 4.2% | |
| CVE-2023-32046 | Microsoft Windows | 2023-07-11 | 10.0% | |
| CVE-2022-31199 | Netwrix Auditor | 2023-07-11 | 36.0% | known |
| CVE-2021-29256 | Arm Mali Graphics Processing Unit (GPU) | 2023-07-07 | 3.0% | |
| CVE-2021-25489 | Samsung Mobile Devices | 2023-06-29 | 0.5% | |
| CVE-2021-25487 | Samsung Mobile Devices | 2023-06-29 | 0.6% | |
| CVE-2021-25395 | Samsung Mobile Devices | 2023-06-29 | 0.4% | |
| CVE-2021-25394 | Samsung Mobile Devices | 2023-06-29 | 0.4% | |
| CVE-2021-25372 | Samsung Mobile Devices | 2023-06-29 | 0.8% | |
| CVE-2021-25371 | Samsung Mobile Devices | 2023-06-29 | 0.8% | |
| CVE-2019-20500 | D-Link DWL-2600AP Access Point | 2023-06-29 | 96.7% | |
| CVE-2019-17621 | D-Link DIR-859 Router | 2023-06-29 | 90.6% | |
| CVE-2023-32439 | Apple Multiple Products | 2023-06-23 | 24.0% | |
| CVE-2023-32435 | Apple Multiple Products | 2023-06-23 | 23.0% | |
| CVE-2023-32434 | Apple Multiple Products | 2023-06-23 | 51.5% | |
| CVE-2023-27992 | Zyxel Multiple Network-Attached Storage (NAS) Devices | 2023-06-23 | 82.3% | |
| CVE-2023-20867 | VMware Tools | 2023-06-23 | 13.6% | |
| CVE-2023-20887 | VMware Aria Operations for Networks | 2023-06-22 | 98.3% | |
| CVE-2021-44026 | Roundcube Roundcube Webmail | 2023-06-22 | 69.9% | |
| CVE-2020-35730 | Roundcube Roundcube Webmail | 2023-06-22 | 32.9% | |
| CVE-2020-12641 | Roundcube Roundcube Webmail | 2023-06-22 | 84.4% | |
| CVE-2016-9079 | Mozilla Firefox, Firefox ESR, and Thunderbird | 2023-06-22 | 87.4% | |
| CVE-2016-0165 | Microsoft Win32k | 2023-06-22 | 13.7% | |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN | 2023-06-13 | 85.7% | known |
| CVE-2023-3079 | Google Chromium V8 | 2023-06-07 | 37.9% | |
| CVE-2023-33010 | Zyxel Multiple Firewalls | 2023-06-05 | 29.0% | |
| CVE-2023-33009 | Zyxel Multiple Firewalls | 2023-06-05 | 28.1% | |
| CVE-2023-34362 | Progress MOVEit Transfer | 2023-06-02 | 99.9% | known |
| CVE-2023-28771 | Zyxel Multiple Firewalls | 2023-05-31 | 99.3% | |
| CVE-2023-2868 | Barracuda Networks Email Security Gateway (ESG) Appliance | 2023-05-26 | 86.8% | |
| CVE-2023-32409 | Apple Multiple Products | 2023-05-22 | 16.5% | |
| CVE-2023-32373 | Apple Multiple Products | 2023-05-22 | 12.2% | |
| CVE-2023-28204 | Apple Multiple Products | 2023-05-22 | 14.3% | |
| CVE-2023-21492 | Samsung Mobile Devices | 2023-05-19 | 2.6% | |
| CVE-2016-6415 | Cisco IOS, IOS XR, and IOS XE | 2023-05-19 | 87.7% | |
| CVE-2004-1464 | Cisco IOS | 2023-05-19 | 4.8% | |
| CVE-2023-25717 | Ruckus Wireless Multiple Products | 2023-05-12 | 98.1% | |
| CVE-2021-3560 | Red Hat Polkit | 2023-05-12 | 22.2% | |
| CVE-2016-8735 | Apache Tomcat | 2023-05-12 | 90.3% | |
| CVE-2016-3427 | Oracle Java SE and JRockit | 2023-05-12 | 92.3% | |
| CVE-2015-5317 | Jenkins Jenkins User Interface (UI) | 2023-05-12 | 23.0% | |
| CVE-2014-0196 | Linux Kernel | 2023-05-12 | 20.3% | |
| CVE-2010-3904 | Linux Kernel | 2023-05-12 | 15.9% | |
| CVE-2023-29336 | Microsoft Win32k | 2023-05-09 | 41.2% | |
| CVE-2023-21839 | Oracle WebLogic Server | 2023-05-01 | 99.9% | |
| CVE-2023-1389 | TP-Link Archer AX21 | 2023-05-01 | 100.0% | |
| CVE-2021-45046 | Apache Log4j2 | 2023-05-01 | 100.0% | known |
| CVE-2023-28432 | MinIO MinIO | 2023-04-21 | 84.0% | |
| CVE-2023-27350 | PaperCut MF/NG | 2023-04-21 | 100.0% | known |
| CVE-2023-2136 | Google Chromium Skia | 2023-04-21 | 5.8% | |
| CVE-2017-6742 | Cisco IOS and IOS XE Software | 2023-04-19 | 21.3% | |
| CVE-2023-2033 | Google Chromium V8 | 2023-04-17 | 40.8% | |
| CVE-2019-8526 | Apple macOS | 2023-04-17 | 0.7% | |
| CVE-2023-29492 | Novi Survey Novi Survey | 2023-04-13 | 2.7% | |
| CVE-2023-20963 | Android Framework | 2023-04-13 | 1.5% | |
| CVE-2023-28252 | Microsoft Windows | 2023-04-11 | 48.9% | known |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS | 2023-04-10 | 23.2% | |
| CVE-2023-28205 | Apple Multiple Products | 2023-04-10 | 27.1% | |
| CVE-2023-26083 | Arm Mali Graphics Processing Unit (GPU) | 2023-04-07 | 1.2% | |
| CVE-2021-27878 | Veritas Backup Exec Agent | 2023-04-07 | 24.0% | known |
| CVE-2021-27877 | Veritas Backup Exec Agent | 2023-04-07 | 64.9% | known |
| CVE-2021-27876 | Veritas Backup Exec Agent | 2023-04-07 | 13.5% | known |
| CVE-2019-1388 | Microsoft Windows | 2023-04-07 | 8.6% | known |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) | 2023-04-03 | 17.6% | |
| CVE-2023-0266 | Linux Kernel | 2023-03-30 | 3.7% | |
| CVE-2022-42948 | Fortra Cobalt Strike | 2023-03-30 | 2.7% | |
| CVE-2022-39197 | Fortra Cobalt Strike | 2023-03-30 | 44.1% | |
| CVE-2022-38181 | Arm Mali Graphics Processing Unit (GPU) | 2023-03-30 | 18.5% | |
| CVE-2022-3038 | Google Chromium Network Service | 2023-03-30 | 24.9% | |
| CVE-2022-22706 | Arm Mali Graphics Processing Unit (GPU) | 2023-03-30 | 1.1% | |
| CVE-2021-30900 | Apple iOS, iPadOS, and macOS | 2023-03-30 | 5.2% | |
| CVE-2017-7494 | Samba Samba | 2023-03-30 | 99.4% | known |
| CVE-2013-3163 | Microsoft Internet Explorer | 2023-03-30 | 70.7% | |
| CVE-2023-26360 | Adobe ColdFusion | 2023-03-15 | 97.3% | |
| CVE-2023-24880 | Microsoft Windows | 2023-03-14 | 78.0% | known |
| CVE-2023-23397 | Microsoft Office | 2023-03-14 | 97.2% | |
| CVE-2022-41328 | Fortinet FortiOS | 2023-03-14 | 10.7% | |
| CVE-2021-39144 | XStream XStream | 2023-03-10 | 98.1% | |
| CVE-2020-5741 | Plex Media Server | 2023-03-10 | 72.9% | |
| CVE-2022-35914 | Teclib GLPI | 2023-03-07 | 99.9% | |
| CVE-2022-33891 | Apache Spark | 2023-03-07 | 93.2% | |
| CVE-2022-28810 | Zoho ManageEngine | 2023-03-07 | 71.0% | |
| CVE-2022-36537 | ZK Framework AuUploader | 2023-02-27 | 95.4% | known |
| CVE-2022-47986 | IBM Aspera Faspex | 2023-02-21 | 100.0% | known |
| CVE-2022-41223 | Mitel MiVoice Connect | 2023-02-21 | 10.7% | known |
| CVE-2022-40765 | Mitel MiVoice Connect | 2023-02-21 | 10.6% | known |
| CVE-2022-46169 | Cacti Cacti | 2023-02-16 | 99.8% | |
| CVE-2023-23529 | Apple Multiple Products | 2023-02-14 | 9.4% | |
| CVE-2023-23376 | Microsoft Windows | 2023-02-14 | 10.9% | known |
| CVE-2023-21823 | Microsoft Windows | 2023-02-14 | 5.6% | |
| CVE-2023-21715 | Microsoft Office | 2023-02-14 | 12.0% | |
| CVE-2023-0669 | Fortra GoAnywhere MFT | 2023-02-10 | 100.0% | known |
| CVE-2022-24990 | TerraMaster TerraMaster OS | 2023-02-10 | 83.2% | known |
| CVE-2015-2291 | Intel Ethernet Diagnostics Driver for Windows | 2023-02-10 | 15.7% | known |
| CVE-2023-22952 | SugarCRM Multiple Products | 2023-02-02 | 80.1% | |
| CVE-2022-21587 | Oracle E-Business Suite | 2023-02-02 | 98.3% | known |
| CVE-2017-11357 | Telerik User Interface (UI) for ASP.NET AJAX | 2023-01-26 | 77.7% | known |
| CVE-2022-47966 | Zoho ManageEngine | 2023-01-23 | 99.8% | known |
| CVE-2022-44877 | CWP Control Web Panel | 2023-01-17 | 100.0% | |
| CVE-2023-21674 | Microsoft Windows | 2023-01-10 | 34.2% | |
| CVE-2022-41080 | Microsoft Exchange Server | 2023-01-10 | 77.3% | known |
| CVE-2018-5430 | TIBCO JasperReports | 2022-12-29 | 48.1% | |
| CVE-2018-18809 | TIBCO JasperReports | 2022-12-29 | 79.1% | |
| CVE-2022-42856 | Apple iOS | 2022-12-14 | 8.5% | |
| CVE-2022-44698 | Microsoft Defender | 2022-12-13 | 74.8% | known |
| CVE-2022-42475 | Fortinet FortiOS | 2022-12-13 | 99.5% | known |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway | 2022-12-13 | 6.9% | |
| CVE-2022-26501 | Veeam Backup & Replication | 2022-12-13 | 4.1% | known |
| CVE-2022-26500 | Veeam Backup & Replication | 2022-12-13 | 5.8% | known |
| CVE-2022-4262 | Google Chromium V8 | 2022-12-05 | 23.5% | |
| CVE-2022-4135 | Google Chromium GPU | 2022-11-28 | 31.9% | |
| CVE-2021-35587 | Oracle Fusion Middleware | 2022-11-28 | 96.3% | |
| CVE-2022-41049 | Microsoft Windows | 2022-11-14 | 3.3% | |
| CVE-2022-41128 | Microsoft Windows | 2022-11-08 | 24.6% | |
| CVE-2022-41125 | Microsoft Windows | 2022-11-08 | 3.0% | |
| CVE-2022-41091 | Microsoft Windows | 2022-11-08 | 2.3% | known |
| CVE-2022-41073 | Microsoft Windows | 2022-11-08 | 2.6% | known |
| CVE-2021-25370 | Samsung Mobile Devices | 2022-11-08 | 0.9% | |
| CVE-2021-25369 | Samsung Mobile Devices | 2022-11-08 | 1.1% | |
| CVE-2021-25337 | Samsung Mobile Devices | 2022-11-08 | 2.8% | |
| CVE-2022-3723 | Google Chromium V8 | 2022-10-28 | 7.9% | |
| CVE-2022-42827 | Apple iOS and iPadOS | 2022-10-25 | 1.1% | |
| CVE-2020-3433 | Cisco AnyConnect Secure | 2022-10-24 | 10.0% | known |
| CVE-2020-3153 | Cisco AnyConnect Secure | 2022-10-24 | 28.5% | known |
| CVE-2018-19323 | GIGABYTE Multiple Products | 2022-10-24 | 8.4% | known |
| CVE-2018-19322 | GIGABYTE Multiple Products | 2022-10-24 | 1.8% | known |
| CVE-2018-19321 | GIGABYTE Multiple Products | 2022-10-24 | 3.7% | known |
| CVE-2018-19320 | GIGABYTE Multiple Products | 2022-10-24 | 4.6% | known |
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-10-20 | 95.5% | known |
| CVE-2021-3493 | Linux Kernel | 2022-10-20 | 49.2% | |
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service | 2022-10-11 | 1.9% | |
| CVE-2022-40684 | Fortinet Multiple Products | 2022-10-11 | 100.0% | known |
| CVE-2022-41082 | Microsoft Exchange Server | 2022-09-30 | 100.0% | known |
| CVE-2022-41040 | Microsoft Exchange Server | 2022-09-30 | 100.0% | known |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | 2022-09-30 | 99.1% | |
| CVE-2022-3236 | Sophos Firewall | 2022-09-23 | 98.9% | |
| CVE-2022-35405 | Zoho ManageEngine | 2022-09-22 | 99.9% | |
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service | 2022-09-15 | 3.4% | |
| CVE-2013-6282 | Linux Kernel | 2022-09-15 | 39.7% | |
| CVE-2013-2597 | Code Aurora ACDB Audio Driver | 2022-09-15 | 1.5% | |
| CVE-2013-2596 | Linux Kernel | 2022-09-15 | 3.2% | |
| CVE-2013-2094 | Linux Kernel | 2022-09-15 | 47.7% | |
| CVE-2010-2568 | Microsoft Windows | 2022-09-15 | 89.6% | |
| CVE-2022-37969 | Microsoft Windows | 2022-09-14 | 28.5% | known |
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS | 2022-09-14 | 5.6% | |
| CVE-2022-3075 | Google Chromium Mojo | 2022-09-08 | 5.8% | |
| CVE-2022-27593 | QNAP Photo Station | 2022-09-08 | 87.9% | known |
| CVE-2022-26258 | D-Link DIR-820L | 2022-09-08 | 91.6% | |
| CVE-2020-9934 | Apple iOS, iPadOS, and macOS | 2022-09-08 | 3.2% | |
| CVE-2018-7445 | MikroTik RouterOS | 2022-09-08 | 65.8% | |
| CVE-2018-6530 | D-Link Multiple Routers | 2022-09-08 | 96.7% | known |
| CVE-2018-2628 | Oracle WebLogic Server | 2022-09-08 | 100.0% | |
| CVE-2018-13374 | Fortinet FortiOS and FortiADC | 2022-09-08 | 38.1% | known |
| CVE-2017-5521 | NETGEAR Multiple Devices | 2022-09-08 | 89.4% | |
| CVE-2011-4723 | D-Link DIR-300 Router | 2022-09-08 | 3.1% | |
| CVE-2011-1823 | Android Android OS | 2022-09-08 | 41.4% | |
| CVE-2022-26352 | dotCMS dotCMS | 2022-08-25 | 91.2% | known |
| CVE-2022-24706 | Apache CouchDB | 2022-08-25 | 92.5% | |
| CVE-2022-24112 | Apache APISIX | 2022-08-25 | 96.1% | |
| CVE-2022-22963 | VMware Tanzu Spring Cloud | 2022-08-25 | 99.9% | |
| CVE-2022-2294 | WebRTC WebRTC | 2022-08-25 | 70.8% | known |
| CVE-2021-39226 | Grafana Labs Grafana | 2022-08-25 | 99.9% | |
| CVE-2021-38406 | Delta Electronics DOPSoft 2 | 2022-08-25 | 76.4% | |
| CVE-2021-31010 | Apple iOS, macOS, watchOS | 2022-08-25 | 3.7% | |
| CVE-2020-36193 | PEAR Archive_Tar | 2022-08-25 | 70.6% | |
| CVE-2020-28949 | PEAR Archive_Tar | 2022-08-25 | 84.6% | |
| CVE-2022-0028 | Palo Alto Networks PAN-OS | 2022-08-22 | 2.7% | |
| CVE-2022-32894 | Apple iOS and macOS | 2022-08-18 | 3.3% | |
| CVE-2022-32893 | Apple iOS and macOS | 2022-08-18 | 9.9% | |
| CVE-2022-2856 | Google Chromium Intents | 2022-08-18 | 4.6% | |
| CVE-2022-26923 | Microsoft Active Directory | 2022-08-18 | 83.5% | |
| CVE-2022-22536 | SAP Multiple Products | 2022-08-18 | 97.9% | |
| CVE-2022-21971 | Microsoft Windows | 2022-08-18 | 53.9% | |
| CVE-2017-15944 | Palo Alto Networks PAN-OS | 2022-08-18 | 98.3% | |
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 92.1% | known |
| CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 98.7% | known |
| CVE-2022-34713 | Microsoft Windows | 2022-08-09 | 67.8% | |
| CVE-2022-30333 | RARLAB UnRAR | 2022-08-09 | 99.2% | known |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-04 | 93.9% | known |
| CVE-2022-26138 | Atlassian Confluence | 2022-07-29 | 98.2% | |
| CVE-2022-22047 | Microsoft Windows | 2022-07-12 | 18.8% | |
| CVE-2022-26925 | Microsoft Windows | 2022-07-01 | 10.5% | |
| CVE-2022-29499 | Mitel MiVoice Connect | 2022-06-27 | 55.2% | known |
| CVE-2021-4034 | Red Hat Polkit | 2022-06-27 | 94.9% | known |
| CVE-2021-30983 | Apple iOS and iPadOS | 2022-06-27 | 2.9% | |
| CVE-2021-30533 | Google Chromium PopupBlocker | 2022-06-27 | 16.7% | |
| CVE-2020-9907 | Apple Multiple Products | 2022-06-27 | 3.2% | |
| CVE-2020-3837 | Apple Multiple Products | 2022-06-27 | 14.8% | |
| CVE-2019-8605 | Apple Multiple Products | 2022-06-27 | 17.6% | |
| CVE-2018-4344 | Apple Multiple Products | 2022-06-27 | 2.4% | |
| CVE-2022-30190 | Microsoft Windows | 2022-06-14 | 99.2% | known |
| CVE-2021-38163 | SAP NetWeaver | 2022-06-09 | 36.9% | |
| CVE-2016-2388 | SAP NetWeaver | 2022-06-09 | 52.2% | |
| CVE-2016-2386 | SAP NetWeaver | 2022-06-09 | 71.5% | |
| CVE-2019-7195 | QNAP Photo Station | 2022-06-08 | 89.3% | known |
| CVE-2019-7194 | QNAP Photo Station | 2022-06-08 | 82.7% | known |
| CVE-2019-7193 | QNAP QTS | 2022-06-08 | 14.4% | known |
| CVE-2019-7192 | QNAP Photo Station | 2022-06-08 | 88.1% | known |
1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 · 9
Filters and the CSV cover the 200 rows on this page. The full catalog is free as a daily dataset.
🔔 Get a browser alert when CISA adds a new KEV entry (free, no email, one click to stop).
Kevscope: daily CISA KEV + EPSS datasetThe whole KEV catalog joined with daily EPSS and CVSS scores as CSV/Parquet, refreshed daily. Free to download.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.