Home › Exploited CVEs
CISA Known Exploited Vulnerabilities (KEV)
All 1,769 CVEs in CISA's KEV catalog, newest first, with EPSS exploit probability. RSS · JSON Feed
Most likely to be exploited next
The five KEV entries with the highest EPSS score today. Patch these first.
| CVE | Vendor / product | EPSS |
|---|---|---|
| CVE-2026-109619 | PHP Group PHP | 100.0% |
| CVE-2026-109618 | PHP Group PHP | 100.0% |
| CVE-2025-53770 | Microsoft SharePoint | 100.0% |
| CVE-2021-26086 | Atlassian Jira Server and Data Center | 100.0% |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | 100.0% |
Need it fresh, filtered or via API?These pages are a free snapshot, last updated 2026-11-07.
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
- Kevscope CVE priority API 200 free calls a day, $5 for 2,000 calls (no expiry), or $19/month for 10,000: returns a patch-priority verdict for up to 20 CVEs per call with the evidence (KEV, EPSS, CVSS, CISA SSVC), most urgent first, by API or MCP.
- Kevscope API $5 pack $5 for 2,000 calls, never expires: patch-priority verdicts for up to 20 CVEs per call from today's KEV, EPSS, CVSS and SSVC data, by REST API or MCP. Pay by card, your API key is on screen the moment checkout ends; no account, no subscription.
- Exploited Vulnerabilities Brief: Weekly Edition $9/month: a fresh KEV + EPSS brief every Monday (PDF + CSVs): new exploited CVEs, what to patch first, upcoming CISA deadlines.
- All Three Monday Briefs: Rates, Recalls + Exploited Vulns $25/month: all three weekly briefs (Treasury/BLS rates & macro, NHTSA recalls, CISA KEV/EPSS) for $25/month instead of $37.
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
1,769exploited CVEs in KEV
30added in the last 30 days
361used in ransomware
907with EPSS of 50% or more
Browse and filter
200 shown on this page
No CVEs match. Clear the filter box or turn a chip off. Click a column heading to sort.
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2019-5825 | Google Chromium V8 | 2022-06-08 | 55.9% | |
| CVE-2019-15271 | Cisco RV Series Routers | 2022-06-08 | 5.5% | |
| CVE-2018-6065 | Google Chromium V8 | 2022-06-08 | 60.3% | |
| CVE-2018-4990 | Adobe Acrobat and Reader | 2022-06-08 | 35.9% | |
| CVE-2018-17480 | Google Chromium V8 | 2022-06-08 | 35.6% | |
| CVE-2018-17463 | Google Chromium V8 | 2022-06-08 | 84.6% | |
| CVE-2017-6862 | NETGEAR Multiple Devices | 2022-06-08 | 45.7% | |
| CVE-2017-5070 | Google Chromium V8 | 2022-06-08 | 32.1% | |
| CVE-2017-5030 | Google Chromium V8 | 2022-06-08 | 40.6% | |
| CVE-2016-5198 | Google Chromium V8 | 2022-06-08 | 34.2% | |
| CVE-2016-1646 | Google Chromium V8 | 2022-06-08 | 48.1% | |
| CVE-2013-1331 | Microsoft Office | 2022-06-08 | 79.8% | |
| CVE-2012-5054 | Adobe Flash Player | 2022-06-08 | 21.2% | |
| CVE-2012-4969 | Microsoft Internet Explorer | 2022-06-08 | 80.3% | |
| CVE-2012-1889 | Microsoft XML Core Services | 2022-06-08 | 83.5% | |
| CVE-2012-0767 | Adobe Flash Player | 2022-06-08 | 6.2% | |
| CVE-2012-0754 | Adobe Flash Player | 2022-06-08 | 91.1% | |
| CVE-2012-0151 | Microsoft Windows | 2022-06-08 | 87.7% | |
| CVE-2011-2462 | Adobe Reader and Acrobat | 2022-06-08 | 88.6% | |
| CVE-2011-0609 | Adobe Flash Player | 2022-06-08 | 63.5% | |
| CVE-2010-2883 | Adobe Acrobat and Reader | 2022-06-08 | 81.4% | |
| CVE-2010-2572 | Microsoft PowerPoint | 2022-06-08 | 58.6% | |
| CVE-2010-1297 | Adobe Flash Player | 2022-06-08 | 82.5% | |
| CVE-2009-4324 | Adobe Acrobat and Reader | 2022-06-08 | 81.9% | |
| CVE-2009-3953 | Adobe Acrobat and Reader | 2022-06-08 | 83.2% | |
| CVE-2009-1862 | Adobe Acrobat and Reader, Flash Player | 2022-06-08 | 21.2% | |
| CVE-2009-0563 | Microsoft Office | 2022-06-08 | 59.6% | |
| CVE-2009-0557 | Microsoft Office | 2022-06-08 | 52.8% | |
| CVE-2008-0655 | Adobe Acrobat and Reader | 2022-06-08 | 37.9% | |
| CVE-2007-5659 | Adobe Acrobat and Reader | 2022-06-08 | 87.4% | |
| CVE-2006-2492 | Microsoft Word | 2022-06-08 | 48.1% | |
| CVE-2022-26134 | Atlassian Confluence Server/Data Center | 2022-06-02 | 100.0% | known |
| CVE-2019-3010 | Oracle Solaris | 2022-05-25 | 13.5% | |
| CVE-2016-7256 | Microsoft Windows | 2022-05-25 | 64.6% | |
| CVE-2016-3393 | Microsoft Windows | 2022-05-25 | 68.5% | |
| CVE-2016-1010 | Adobe Flash Player and AIR | 2022-05-25 | 19.3% | |
| CVE-2016-0984 | Adobe Flash Player and AIR | 2022-05-25 | 54.5% | |
| CVE-2016-0034 | Microsoft Silverlight | 2022-05-25 | 69.4% | known |
| CVE-2015-8651 | Adobe Flash Player | 2022-05-25 | 67.7% | |
| CVE-2015-6175 | Microsoft Windows | 2022-05-25 | 5.3% | |
| CVE-2015-4495 | Mozilla Firefox | 2022-05-25 | 68.6% | |
| CVE-2015-2425 | Microsoft Internet Explorer | 2022-05-25 | 44.7% | |
| CVE-2015-2360 | Microsoft Win32k | 2022-05-25 | 14.8% | |
| CVE-2015-1769 | Microsoft Windows | 2022-05-25 | 4.1% | |
| CVE-2015-1671 | Microsoft Windows | 2022-05-25 | 48.8% | |
| CVE-2015-0310 | Adobe Flash Player | 2022-05-25 | 15.1% | |
| CVE-2015-0071 | Microsoft Internet Explorer | 2022-05-25 | 33.6% | |
| CVE-2015-0016 | Microsoft Windows | 2022-05-25 | 75.8% | |
| CVE-2014-8439 | Adobe Flash Player | 2022-05-25 | 20.4% | |
| CVE-2014-4148 | Microsoft Windows | 2022-05-25 | 59.9% | |
| CVE-2014-4123 | Microsoft Internet Explorer | 2022-05-25 | 47.1% | |
| CVE-2014-4077 | Microsoft Input Method Editor (IME) Japanese | 2022-05-25 | 54.6% | |
| CVE-2014-3153 | Linux Kernel | 2022-05-25 | 37.2% | |
| CVE-2014-2817 | Microsoft Internet Explorer | 2022-05-25 | 26.3% | |
| CVE-2014-0546 | Adobe Reader and Acrobat | 2022-05-25 | 22.3% | |
| CVE-2013-7331 | Microsoft Internet Explorer | 2022-05-25 | 50.2% | |
| CVE-2013-3993 | IBM InfoSphere BigInsights | 2022-05-25 | 4.8% | known |
| CVE-2013-3896 | Microsoft Silverlight | 2022-05-25 | 68.0% | |
| CVE-2013-2423 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 85.2% | |
| CVE-2013-0431 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 90.1% | known |
| CVE-2013-0422 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 97.1% | known |
| CVE-2013-0074 | Microsoft Silverlight | 2022-05-25 | 78.9% | known |
| CVE-2012-1710 | Oracle Fusion Middleware | 2022-05-25 | 7.8% | known |
| CVE-2010-1428 | Red Hat JBoss | 2022-05-25 | 52.7% | known |
| CVE-2010-0840 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 96.3% | |
| CVE-2010-0738 | Red Hat JBoss | 2022-05-25 | 73.8% | known |
| CVE-2018-8611 | Microsoft Windows | 2022-05-24 | 4.2% | |
| CVE-2018-19953 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 30.5% | known |
| CVE-2018-19949 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 30.2% | known |
| CVE-2018-19943 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 22.7% | known |
| CVE-2017-8543 | Microsoft Windows | 2022-05-24 | 74.2% | |
| CVE-2017-8291 | Artifex Ghostscript | 2022-05-24 | 97.0% | |
| CVE-2017-18362 | Kaseya Virtual System/Server Administrator (VSA) | 2022-05-24 | 86.8% | known |
| CVE-2017-0210 | Microsoft Internet Explorer | 2022-05-24 | 22.3% | |
| CVE-2017-0149 | Microsoft Internet Explorer | 2022-05-24 | 28.5% | |
| CVE-2017-0147 | Microsoft SMBv1 server | 2022-05-24 | 99.7% | known |
| CVE-2017-0022 | Microsoft XML Core Services | 2022-05-24 | 18.1% | |
| CVE-2017-0005 | Microsoft Windows | 2022-05-24 | 11.0% | |
| CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) | 2022-05-24 | 22.6% | |
| CVE-2016-6366 | Cisco Adaptive Security Appliance (ASA) | 2022-05-24 | 87.6% | |
| CVE-2016-4657 | Apple iOS | 2022-05-24 | 66.8% | |
| CVE-2016-4656 | Apple iOS | 2022-05-24 | 23.6% | |
| CVE-2016-4655 | Apple iOS | 2022-05-24 | 33.4% | |
| CVE-2016-3351 | Microsoft Internet Explorer and Edge | 2022-05-24 | 26.5% | known |
| CVE-2016-3298 | Microsoft Internet Explorer | 2022-05-24 | 33.3% | |
| CVE-2016-0162 | Microsoft Internet Explorer | 2022-05-24 | 21.9% | |
| CVE-2022-20821 | Cisco IOS XR | 2022-05-23 | 11.5% | |
| CVE-2021-30883 | Apple Multiple Products | 2022-05-23 | 14.7% | |
| CVE-2021-1048 | Android Kernel | 2022-05-23 | 1.1% | |
| CVE-2021-0920 | Android Kernel | 2022-05-23 | 0.9% | |
| CVE-2020-1027 | Microsoft Windows | 2022-05-23 | 4.7% | |
| CVE-2020-0638 | Microsoft Update Notification Manager | 2022-05-23 | 2.5% | known |
| CVE-2019-8720 | WebKitGTK WebKitGTK | 2022-05-23 | 1.6% | |
| CVE-2019-7287 | Apple iOS | 2022-05-23 | 4.6% | |
| CVE-2019-7286 | Apple Multiple Products | 2022-05-23 | 15.9% | |
| CVE-2019-5786 | Google Chrome Blink | 2022-05-23 | 61.1% | |
| CVE-2019-18426 | Meta Platforms WhatsApp | 2022-05-23 | 67.9% | |
| CVE-2019-1385 | Microsoft Windows | 2022-05-23 | 3.6% | known |
| CVE-2019-13720 | Google Chrome WebAudio | 2022-05-23 | 49.4% | |
| CVE-2019-11708 | Mozilla Firefox and Thunderbird | 2022-05-23 | 55.9% | |
| CVE-2019-11707 | Mozilla Firefox and Thunderbird | 2022-05-23 | 38.0% | |
| CVE-2019-1130 | Microsoft Windows | 2022-05-23 | 1.7% | known |
| CVE-2019-0880 | Microsoft Windows | 2022-05-23 | 2.3% | |
| CVE-2019-0703 | Microsoft Windows | 2022-05-23 | 9.4% | |
| CVE-2019-0676 | Microsoft Internet Explorer | 2022-05-23 | 8.1% | |
| CVE-2018-8589 | Microsoft Win32k | 2022-05-23 | 3.0% | |
| CVE-2018-5002 | Adobe Flash Player | 2022-05-23 | 24.4% | |
| CVE-2022-30525 | Zyxel Multiple Firewalls | 2022-05-16 | 99.9% | |
| CVE-2022-22947 | VMware Spring Cloud Gateway | 2022-05-16 | 98.3% | |
| CVE-2022-1388 | F5 BIG-IP | 2022-05-10 | 100.0% | known |
| CVE-2021-1789 | Apple Multiple Products | 2022-05-04 | 14.0% | |
| CVE-2019-8506 | Apple Multiple Products | 2022-05-04 | 16.2% | |
| CVE-2014-4113 | Microsoft Win32k | 2022-05-04 | 86.6% | |
| CVE-2014-0322 | Microsoft Internet Explorer | 2022-05-04 | 85.1% | |
| CVE-2014-0160 | OpenSSL OpenSSL | 2022-05-04 | 100.0% | |
| CVE-2022-29464 | WSO2 Multiple Products | 2022-04-25 | 100.0% | known |
| CVE-2022-26904 | Microsoft Windows | 2022-04-25 | 16.9% | |
| CVE-2022-21919 | Microsoft Windows | 2022-04-25 | 2.6% | |
| CVE-2022-0847 | Linux Kernel | 2022-04-25 | 92.8% | |
| CVE-2021-41357 | Microsoft Win32k | 2022-04-25 | 1.6% | |
| CVE-2021-40450 | Microsoft Win32k | 2022-04-25 | 1.6% | |
| CVE-2019-1003029 | Jenkins Script Security Plugin | 2022-04-25 | 74.4% | |
| CVE-2022-22718 | Microsoft Windows | 2022-04-19 | 18.5% | |
| CVE-2019-3568 | Meta Platforms WhatsApp | 2022-04-19 | 30.1% | |
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-04-19 | 29.8% | known |
| CVE-2022-22960 | VMware Multiple Products | 2022-04-15 | 35.5% | |
| CVE-2022-1364 | Google Chromium V8 | 2022-04-15 | 13.9% | |
| CVE-2019-3929 | Crestron Multiple Products | 2022-04-15 | 99.0% | |
| CVE-2019-16057 | D-Link DNS-320 Storage Device | 2022-04-15 | 86.5% | known |
| CVE-2018-7841 | Schneider Electric U.motion Builder | 2022-04-15 | 72.5% | |
| CVE-2016-4523 | Trihedral VTScada (formerly VTS) | 2022-04-15 | 31.2% | |
| CVE-2014-0780 | InduSoft Web Studio | 2022-04-15 | 74.7% | |
| CVE-2010-5330 | Ubiquiti AirOS | 2022-04-15 | 40.2% | |
| CVE-2007-3010 | Alcatel OmniPCX Enterprise | 2022-04-15 | 97.4% | |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager | 2022-04-14 | 100.0% | known |
| CVE-2022-24521 | Microsoft Windows | 2022-04-13 | 7.1% | known |
| CVE-2018-7602 | Drupal Core | 2022-04-13 | 99.2% | known |
| CVE-2018-20753 | Kaseya Virtual System/Server Administrator (VSA) | 2022-04-13 | 29.6% | known |
| CVE-2015-5123 | Adobe Flash Player | 2022-04-13 | 18.8% | |
| CVE-2015-5122 | Adobe Flash Player | 2022-04-13 | 87.0% | |
| CVE-2015-3113 | Adobe Flash Player | 2022-04-13 | 99.8% | |
| CVE-2015-2502 | Microsoft Internet Explorer | 2022-04-13 | 51.0% | |
| CVE-2015-0313 | Adobe Flash Player | 2022-04-13 | 95.3% | |
| CVE-2015-0311 | Adobe Flash Player | 2022-04-13 | 85.6% | |
| CVE-2014-9163 | Adobe Flash Player | 2022-04-13 | 44.9% | |
| CVE-2022-23176 | WatchGuard Firebox and XTM | 2022-04-11 | 10.9% | |
| CVE-2021-42287 | Microsoft Active Directory | 2022-04-11 | 77.2% | known |
| CVE-2021-42278 | Microsoft Active Directory | 2022-04-11 | 73.3% | known |
| CVE-2021-39793 | Google Pixel | 2022-04-11 | 0.7% | |
| CVE-2021-27852 | Checkbox Checkbox Survey | 2022-04-11 | 30.3% | |
| CVE-2021-22600 | Linux Kernel | 2022-04-11 | 6.6% | |
| CVE-2020-2509 | QNAP QNAP Network-Attached Storage (NAS) | 2022-04-11 | 34.0% | |
| CVE-2017-11317 | Telerik User Interface (UI) for ASP.NET AJAX | 2022-04-11 | 84.2% | |
| CVE-2021-3156 | Sudo Sudo | 2022-04-06 | 100.0% | |
| CVE-2021-31166 | Microsoft HTTP Protocol Stack | 2022-04-06 | 99.9% | |
| CVE-2017-0148 | Microsoft SMBv1 server | 2022-04-06 | 99.4% | known |
| CVE-2022-22965 | VMware Spring Framework | 2022-04-04 | 99.6% | |
| CVE-2022-22675 | Apple macOS | 2022-04-04 | 12.5% | |
| CVE-2022-22674 | Apple macOS | 2022-04-04 | 1.1% | |
| CVE-2021-45382 | D-Link Multiple Routers | 2022-04-04 | 97.8% | |
| CVE-2022-26871 | Trend Micro Apex Central | 2022-03-31 | 19.5% | |
| CVE-2022-1040 | Sophos Firewall | 2022-03-31 | 99.8% | |
| CVE-2021-34484 | Microsoft Windows | 2022-03-31 | 21.8% | |
| CVE-2021-28799 | QNAP Network Attached Storage (NAS) | 2022-03-31 | 78.3% | known |
| CVE-2021-21551 | Dell dbutil Driver | 2022-03-31 | 79.6% | |
| CVE-2018-10562 | Dasan Gigabit Passive Optical Network (GPON) Routers | 2022-03-31 | 99.9% | known |
| CVE-2018-10561 | Dasan Gigabit Passive Optical Network (GPON) Routers | 2022-03-31 | 92.8% | |
| CVE-2022-1096 | Google Chromium V8 | 2022-03-28 | 24.7% | |
| CVE-2022-0543 | Redis Debian-specific Redis Servers | 2022-03-28 | 99.4% | |
| CVE-2021-38646 | Microsoft Office | 2022-03-28 | 8.0% | known |
| CVE-2021-34486 | Microsoft Windows | 2022-03-28 | 9.3% | |
| CVE-2021-26085 | Atlassian Confluence Server | 2022-03-28 | 99.9% | known |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) | 2022-03-28 | 30.1% | known |
| CVE-2019-7483 | SonicWall SMA100 | 2022-03-28 | 4.0% | |
| CVE-2018-8440 | Microsoft Windows | 2022-03-28 | 18.5% | known |
| CVE-2018-8406 | Microsoft DirectX Graphics Kernel (DXGKRNL) | 2022-03-28 | 3.4% | known |
| CVE-2018-8405 | Microsoft DirectX Graphics Kernel (DXGKRNL) | 2022-03-28 | 3.4% | known |
| CVE-2017-0213 | Microsoft Windows | 2022-03-28 | 84.3% | known |
| CVE-2017-0059 | Microsoft Internet Explorer | 2022-03-28 | 62.0% | |
| CVE-2017-0037 | Microsoft Edge and Internet Explorer | 2022-03-28 | 80.4% | |
| CVE-2016-7201 | Microsoft Edge | 2022-03-28 | 80.0% | |
| CVE-2016-7200 | Microsoft Edge | 2022-03-28 | 82.8% | |
| CVE-2016-0189 | Microsoft Internet Explorer | 2022-03-28 | 94.1% | known |
| CVE-2016-0151 | Microsoft Client-Server Run-time Subsystem (CSRSS) | 2022-03-28 | 62.8% | known |
| CVE-2016-0040 | Microsoft Windows | 2022-03-28 | 24.3% | |
| CVE-2015-2426 | Microsoft Windows | 2022-03-28 | 86.6% | |
| CVE-2015-2419 | Microsoft Internet Explorer | 2022-03-28 | 53.0% | |
| CVE-2015-1770 | Microsoft Office | 2022-03-28 | 35.0% | |
| CVE-2013-3660 | Microsoft Win32k | 2022-03-28 | 39.3% | |
| CVE-2013-2729 | Adobe Reader and Acrobat | 2022-03-28 | 66.6% | |
| CVE-2013-2551 | Microsoft Internet Explorer | 2022-03-28 | 74.1% | known |
| CVE-2013-2465 | Oracle Java SE | 2022-03-28 | 98.8% | known |
| CVE-2013-1690 | Mozilla Firefox and Thunderbird | 2022-03-28 | 69.0% | |
| CVE-2012-5076 | Oracle Java SE | 2022-03-28 | 91.3% | |
| CVE-2012-2539 | Microsoft Word | 2022-03-28 | 53.0% | |
| CVE-2012-2034 | Adobe Flash Player | 2022-03-28 | 7.7% | |
| CVE-2012-0518 | Oracle Fusion Middleware | 2022-03-28 | 4.7% | |
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) | 2022-03-28 | 31.8% | |
| CVE-2010-4398 | Microsoft Windows | 2022-03-28 | 8.7% | |
| CVE-2022-26318 | WatchGuard Firebox and XTM Appliances | 2022-03-25 | 78.2% |
1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 · 9
Filters and the CSV cover the 200 rows on this page. The full catalog is free as a daily dataset.
🔔 Get a browser alert when CISA adds a new KEV entry (free, no email, one click to stop).
Kevscope: daily CISA KEV + EPSS datasetThe whole KEV catalog joined with daily EPSS and CVSS scores as CSV/Parquet, refreshed daily. Free to download.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.