Home › Exploited CVEs
CISA Known Exploited Vulnerabilities (KEV)
All 1,769 CVEs in CISA's KEV catalog, newest first, with EPSS exploit probability. RSS · JSON Feed
Most likely to be exploited next
The five KEV entries with the highest EPSS score today. Patch these first.
| CVE | Vendor / product | EPSS |
|---|---|---|
| CVE-2026-109619 | PHP Group PHP | 100.0% |
| CVE-2026-109618 | PHP Group PHP | 100.0% |
| CVE-2025-53770 | Microsoft SharePoint | 100.0% |
| CVE-2021-26086 | Atlassian Jira Server and Data Center | 100.0% |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | 100.0% |
Need it fresh, filtered or via API?These pages are a free snapshot, last updated 2026-11-07.
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
- Kevscope CVE priority API 200 free calls a day, $5 for 2,000 calls (no expiry), or $19/month for 10,000: returns a patch-priority verdict for up to 20 CVEs per call with the evidence (KEV, EPSS, CVSS, CISA SSVC), most urgent first, by API or MCP.
- Kevscope API $5 pack $5 for 2,000 calls, never expires: patch-priority verdicts for up to 20 CVEs per call from today's KEV, EPSS, CVSS and SSVC data, by REST API or MCP. Pay by card, your API key is on screen the moment checkout ends; no account, no subscription.
- Exploited Vulnerabilities Brief: Weekly Edition $9/month: a fresh KEV + EPSS brief every Monday (PDF + CSVs): new exploited CVEs, what to patch first, upcoming CISA deadlines.
- All Three Monday Briefs: Rates, Recalls + Exploited Vulns $25/month: all three weekly briefs (Treasury/BLS rates & macro, NHTSA recalls, CISA KEV/EPSS) for $25/month instead of $37.
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
1,769exploited CVEs in KEV
30added in the last 30 days
361used in ransomware
907with EPSS of 50% or more
Browse and filter
200 shown on this page
No CVEs match. Clear the filter box or turn a chip off. Click a column heading to sort.
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2022-26143 | Mitel MiCollab, MiVoice Business Express | 2022-03-25 | 87.3% | |
| CVE-2022-21999 | Microsoft Windows | 2022-03-25 | 41.0% | known |
| CVE-2021-42237 | Sitecore XP | 2022-03-25 | 97.6% | known |
| CVE-2021-22941 | Citrix ShareFile | 2022-03-25 | 53.6% | known |
| CVE-2020-9377 | D-Link DIR-610 Devices | 2022-03-25 | 21.9% | |
| CVE-2020-9054 | Zyxel Multiple Network-Attached Storage (NAS) Devices | 2022-03-25 | 100.0% | |
| CVE-2020-7247 | OpenBSD OpenSMTPD | 2022-03-25 | 99.0% | |
| CVE-2020-5410 | VMware Tanzu Spring Cloud Configuration (Config) Server | 2022-03-25 | 95.6% | |
| CVE-2020-25223 | Sophos SG UTM | 2022-03-25 | 96.8% | |
| CVE-2020-2506 | QNAP Systems Helpdesk | 2022-03-25 | 2.0% | |
| CVE-2020-2021 | Palo Alto Networks PAN-OS | 2022-03-25 | 4.4% | known |
| CVE-2020-1956 | Apache Kylin | 2022-03-25 | 97.4% | |
| CVE-2020-1631 | Juniper Junos OS | 2022-03-25 | 4.9% | |
| CVE-2019-6340 | Drupal Core | 2022-03-25 | 92.0% | |
| CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | 2022-03-25 | 92.2% | |
| CVE-2019-16920 | D-Link Multiple Routers | 2022-03-25 | 100.0% | |
| CVE-2019-15107 | Webmin Webmin | 2022-03-25 | 99.7% | known |
| CVE-2019-12991 | Citrix SD-WAN and NetScaler | 2022-03-25 | 74.1% | |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler | 2022-03-25 | 95.0% | |
| CVE-2019-11043 | PHP FastCGI Process Manager (FPM) | 2022-03-25 | 99.8% | known |
| CVE-2019-10068 | Kentico Xperience | 2022-03-25 | 95.1% | |
| CVE-2019-1003030 | Jenkins Matrix Project Plugin | 2022-03-25 | 97.1% | |
| CVE-2019-0903 | Microsoft Graphics Device Interface (GDI) | 2022-03-25 | 21.7% | |
| CVE-2018-8414 | Microsoft Windows | 2022-03-25 | 72.6% | |
| CVE-2018-8373 | Microsoft Internet Explorer Scripting Engine | 2022-03-25 | 61.8% | |
| CVE-2018-6961 | VMware SD-WAN Edge | 2022-03-25 | 85.3% | |
| CVE-2018-14839 | LG N1A1 NAS | 2022-03-25 | 89.2% | |
| CVE-2018-1273 | VMware Tanzu Spring Data Commons | 2022-03-25 | 97.0% | known |
| CVE-2018-11138 | Quest KACE System Management Appliance | 2022-03-25 | 91.7% | known |
| CVE-2018-0147 | Cisco Secure Access Control System (ACS) | 2022-03-25 | 18.2% | |
| CVE-2018-0125 | Cisco VPN Routers | 2022-03-25 | 55.2% | |
| CVE-2017-6334 | NETGEAR DGN2200 Devices | 2022-03-25 | 72.6% | |
| CVE-2017-6316 | Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | 2022-03-25 | 73.0% | |
| CVE-2017-3881 | Cisco IOS and IOS XE | 2022-03-25 | 99.0% | |
| CVE-2017-12617 | Apache Tomcat | 2022-03-25 | 100.0% | |
| CVE-2017-12615 | Apache Tomcat | 2022-03-25 | 99.7% | known |
| CVE-2017-0146 | Microsoft Windows | 2022-03-25 | 89.9% | known |
| CVE-2016-7892 | Adobe Flash Player | 2022-03-25 | 19.1% | |
| CVE-2016-4171 | Adobe Flash Player | 2022-03-25 | 20.1% | |
| CVE-2016-1555 | NETGEAR Wireless Access Point (WAP) Devices | 2022-03-25 | 98.3% | |
| CVE-2016-11021 | D-Link DCS-930L Devices | 2022-03-25 | 69.6% | |
| CVE-2016-10174 | NETGEAR WNR2000v5 Router | 2022-03-25 | 83.3% | |
| CVE-2016-0752 | Rails Ruby on Rails | 2022-03-25 | 95.5% | |
| CVE-2015-4068 | Arcserve Unified Data Protection (UDP) | 2022-03-25 | 63.6% | |
| CVE-2015-3035 | TP-Link Multiple Archer Devices | 2022-03-25 | 83.9% | |
| CVE-2015-1427 | Elastic Elasticsearch | 2022-03-25 | 99.9% | |
| CVE-2015-1187 | D-Link and TRENDnet Multiple Devices | 2022-03-25 | 82.7% | |
| CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) | 2022-03-25 | 40.4% | |
| CVE-2014-6332 | Microsoft Windows | 2022-03-25 | 94.9% | |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) | 2022-03-25 | 87.3% | |
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) | 2022-03-25 | 99.3% | |
| CVE-2014-3120 | Elastic Elasticsearch | 2022-03-25 | 88.6% | |
| CVE-2014-0130 | Rails Ruby on Rails | 2022-03-25 | 53.7% | |
| CVE-2013-5223 | D-Link DSL-2760U | 2022-03-25 | 50.8% | |
| CVE-2013-4810 | Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | 2022-03-25 | 79.5% | |
| CVE-2013-2251 | Apache Struts | 2022-03-25 | 100.0% | |
| CVE-2012-1823 | PHP PHP | 2022-03-25 | 100.0% | |
| CVE-2010-4345 | Exim Exim | 2022-03-25 | 18.0% | |
| CVE-2010-4344 | Exim Exim | 2022-03-25 | 71.7% | |
| CVE-2010-3035 | Cisco IOS XR | 2022-03-25 | 5.7% | |
| CVE-2010-2861 | Adobe ColdFusion | 2022-03-25 | 99.7% | known |
| CVE-2009-2055 | Cisco IOS XR | 2022-03-25 | 3.3% | |
| CVE-2009-1151 | phpMyAdmin phpMyAdmin | 2022-03-25 | 96.6% | |
| CVE-2009-0927 | Adobe Reader and Acrobat | 2022-03-25 | 96.6% | |
| CVE-2005-2773 | Hewlett Packard (HP) OpenView Network Node Manager | 2022-03-25 | 74.6% | |
| CVE-2020-5135 | SonicWall SonicOS | 2022-03-15 | 26.9% | known |
| CVE-2019-1405 | Microsoft Windows | 2022-03-15 | 30.2% | known |
| CVE-2019-1322 | Microsoft Windows | 2022-03-15 | 18.8% | known |
| CVE-2019-1315 | Microsoft Windows | 2022-03-15 | 3.5% | known |
| CVE-2019-1253 | Microsoft Windows | 2022-03-15 | 11.6% | known |
| CVE-2019-1132 | Microsoft Win32k | 2022-03-15 | 9.9% | |
| CVE-2019-1129 | Microsoft Windows | 2022-03-15 | 1.8% | known |
| CVE-2019-1069 | Microsoft Task Scheduler | 2022-03-15 | 6.2% | known |
| CVE-2019-1064 | Microsoft Windows | 2022-03-15 | 6.9% | known |
| CVE-2019-0841 | Microsoft Windows | 2022-03-15 | 41.4% | known |
| CVE-2019-0543 | Microsoft Windows | 2022-03-15 | 4.7% | known |
| CVE-2018-8120 | Microsoft Win32k | 2022-03-15 | 73.3% | known |
| CVE-2017-0101 | Microsoft Windows | 2022-03-15 | 57.5% | known |
| CVE-2016-3309 | Microsoft Windows | 2022-03-15 | 20.5% | known |
| CVE-2015-2546 | Microsoft Win32k | 2022-03-15 | 10.1% | known |
| CVE-2022-26486 | Mozilla Firefox | 2022-03-07 | 2.4% | |
| CVE-2022-26485 | Mozilla Firefox | 2022-03-07 | 14.3% | |
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation | 2022-03-07 | 88.0% | |
| CVE-2020-8218 | Pulse Secure Pulse Connect Secure | 2022-03-07 | 32.3% | |
| CVE-2019-11581 | Atlassian Jira Server and Data Center | 2022-03-07 | 84.6% | |
| CVE-2017-6077 | NETGEAR Wireless Router DGN2200 | 2022-03-07 | 68.7% | |
| CVE-2016-6277 | NETGEAR Multiple Routers | 2022-03-07 | 99.8% | |
| CVE-2013-0631 | Adobe ColdFusion | 2022-03-07 | 66.4% | |
| CVE-2013-0629 | Adobe ColdFusion | 2022-03-07 | 65.8% | |
| CVE-2013-0625 | Adobe ColdFusion | 2022-03-07 | 93.8% | |
| CVE-2009-3960 | Adobe BlazeDS | 2022-03-07 | 90.1% | known |
| CVE-2022-20708 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 14.9% | |
| CVE-2022-20703 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 9.2% | |
| CVE-2022-20701 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 9.7% | |
| CVE-2022-20700 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 5.7% | |
| CVE-2022-20699 | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers | 2022-03-03 | 72.5% | |
| CVE-2021-41379 | Microsoft Windows | 2022-03-03 | 19.5% | known |
| CVE-2020-1938 | Apache Tomcat | 2022-03-03 | 99.3% | |
| CVE-2020-11899 | Treck TCP/IP stack IPv6 | 2022-03-03 | 18.4% | |
| CVE-2019-16928 | Exim Exim Internet Mailer | 2022-03-03 | 41.6% | |
| CVE-2019-1652 | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | 2022-03-03 | 95.9% | |
| CVE-2019-1297 | Microsoft Excel | 2022-03-03 | 21.8% | |
| CVE-2018-8581 | Microsoft Exchange Server | 2022-03-03 | 27.6% | known |
| CVE-2018-8298 | ChakraCore ChakraCore scripting engine | 2022-03-03 | 74.7% | |
| CVE-2018-0180 | Cisco IOS Software | 2022-03-03 | 4.9% | |
| CVE-2018-0179 | Cisco IOS Software | 2022-03-03 | 4.9% | |
| CVE-2018-0175 | Cisco IOS, XR, and XE Software | 2022-03-03 | 3.5% | |
| CVE-2018-0174 | Cisco IOS XE Software | 2022-03-03 | 7.6% | |
| CVE-2018-0173 | Cisco IOS and IOS XE Software | 2022-03-03 | 7.6% | |
| CVE-2018-0172 | Cisco IOS and IOS XE Software | 2022-03-03 | 7.8% | |
| CVE-2018-0167 | Cisco IOS, XR, and XE Software | 2022-03-03 | 3.4% | |
| CVE-2018-0161 | Cisco IOS Software | 2022-03-03 | 4.1% | |
| CVE-2018-0159 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 6.9% | |
| CVE-2018-0158 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 7.2% | |
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 9.4% | |
| CVE-2018-0155 | Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | 2022-03-03 | 7.7% | |
| CVE-2018-0154 | Cisco IOS Software | 2022-03-03 | 7.1% | |
| CVE-2018-0151 | Cisco IOS and IOS XE Software | 2022-03-03 | 14.2% | |
| CVE-2017-8540 | Microsoft Malware Protection Engine | 2022-03-03 | 71.9% | |
| CVE-2017-6744 | Cisco IOS software | 2022-03-03 | 7.3% | |
| CVE-2017-6743 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.9% | |
| CVE-2017-6740 | Cisco IOS and IOS XE Software | 2022-03-03 | 11.1% | |
| CVE-2017-6739 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.9% | |
| CVE-2017-6738 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.9% | |
| CVE-2017-6737 | Cisco IOS and IOS XE Software | 2022-03-03 | 45.0% | |
| CVE-2017-6736 | Cisco IOS and IOS XE Software | 2022-03-03 | 70.4% | |
| CVE-2017-6663 | Cisco IOS and IOS XE Software | 2022-03-03 | 2.1% | |
| CVE-2017-6627 | Cisco IOS and IOS XE Software | 2022-03-03 | 6.2% | |
| CVE-2017-12319 | Cisco IOS XE Software | 2022-03-03 | 5.2% | |
| CVE-2017-12240 | Cisco IOS and IOS XE Software | 2022-03-03 | 13.8% | |
| CVE-2017-12238 | Cisco Catalyst 6800 Series Switches | 2022-03-03 | 2.0% | |
| CVE-2017-12237 | Cisco IOS and IOS XE Software | 2022-03-03 | 7.1% | |
| CVE-2017-12235 | Cisco IOS software | 2022-03-03 | 7.1% | |
| CVE-2017-12234 | Cisco IOS software | 2022-03-03 | 7.1% | |
| CVE-2017-12233 | Cisco IOS software | 2022-03-03 | 7.1% | |
| CVE-2017-12232 | Cisco IOS software | 2022-03-03 | 2.2% | |
| CVE-2017-12231 | Cisco IOS software | 2022-03-03 | 7.1% | |
| CVE-2017-11826 | Microsoft Office | 2022-03-03 | 81.3% | |
| CVE-2017-11292 | Adobe Flash Player | 2022-03-03 | 11.9% | |
| CVE-2017-0261 | Microsoft Office | 2022-03-03 | 78.1% | |
| CVE-2017-0001 | Microsoft Graphics Device Interface (GDI) | 2022-03-03 | 3.1% | |
| CVE-2016-8562 | Siemens SIMATIC CP | 2022-03-03 | 3.6% | |
| CVE-2016-7855 | Adobe Flash Player | 2022-03-03 | 25.2% | |
| CVE-2016-7262 | Microsoft Excel | 2022-03-03 | 58.8% | |
| CVE-2016-7193 | Microsoft Office | 2022-03-03 | 57.6% | |
| CVE-2016-5195 | Linux Kernel | 2022-03-03 | 83.5% | |
| CVE-2016-4117 | Adobe Flash Player | 2022-03-03 | 94.3% | known |
| CVE-2016-1019 | Adobe Flash Player | 2022-03-03 | 22.3% | known |
| CVE-2016-0099 | Microsoft Windows | 2022-03-03 | 37.0% | known |
| CVE-2015-7645 | Adobe Flash Player | 2022-03-03 | 65.3% | known |
| CVE-2015-5119 | Adobe Flash Player | 2022-03-03 | 98.6% | |
| CVE-2015-4902 | Oracle Java SE | 2022-03-03 | 13.6% | |
| CVE-2015-3043 | Adobe Flash Player | 2022-03-03 | 73.9% | |
| CVE-2015-2590 | Oracle Java SE | 2022-03-03 | 25.5% | |
| CVE-2015-2545 | Microsoft Office | 2022-03-03 | 85.9% | |
| CVE-2015-2424 | Microsoft PowerPoint | 2022-03-03 | 40.1% | |
| CVE-2015-2387 | Microsoft ATM Font Driver | 2022-03-03 | 34.9% | |
| CVE-2015-1701 | Microsoft Win32k | 2022-03-03 | 55.9% | known |
| CVE-2015-1642 | Microsoft Office | 2022-03-03 | 53.1% | |
| CVE-2014-4114 | Microsoft Windows | 2022-03-03 | 81.6% | |
| CVE-2014-0496 | Adobe Reader and Acrobat | 2022-03-03 | 40.0% | |
| CVE-2013-5065 | Microsoft Windows | 2022-03-03 | 34.7% | |
| CVE-2013-3897 | Microsoft Internet Explorer | 2022-03-03 | 77.3% | |
| CVE-2013-3346 | Adobe Reader and Acrobat | 2022-03-03 | 78.9% | |
| CVE-2013-1675 | Mozilla Firefox | 2022-03-03 | 6.7% | |
| CVE-2013-1347 | Microsoft Internet Explorer | 2022-03-03 | 77.7% | |
| CVE-2013-0641 | Adobe Reader | 2022-03-03 | 32.3% | |
| CVE-2013-0640 | Adobe Reader and Acrobat | 2022-03-03 | 86.9% | |
| CVE-2013-0632 | Adobe ColdFusion | 2022-03-03 | 93.1% | |
| CVE-2012-4681 | Oracle Java SE | 2022-03-03 | 98.5% | known |
| CVE-2012-1856 | Microsoft Office | 2022-03-03 | 72.0% | |
| CVE-2012-1723 | Oracle Java SE | 2022-03-03 | 93.6% | known |
| CVE-2012-1535 | Adobe Flash Player | 2022-03-03 | 70.4% | |
| CVE-2012-0507 | Oracle Java SE | 2022-03-03 | 98.2% | known |
| CVE-2011-3544 | Oracle Java SE JDK and JRE | 2022-03-03 | 96.7% | |
| CVE-2011-1889 | Microsoft Forefront Threat Management Gateway (TMG) | 2022-03-03 | 49.0% | |
| CVE-2011-0611 | Adobe Flash Player | 2022-03-03 | 99.4% | |
| CVE-2010-3333 | Microsoft Office | 2022-03-03 | 89.4% | |
| CVE-2010-0232 | Microsoft Windows | 2022-03-03 | 28.7% | |
| CVE-2010-0188 | Adobe Reader and Acrobat | 2022-03-03 | 88.2% | known |
| CVE-2009-3129 | Microsoft Excel | 2022-03-03 | 84.0% | |
| CVE-2009-1123 | Microsoft Windows | 2022-03-03 | 4.9% | |
| CVE-2008-3431 | Oracle VirtualBox | 2022-03-03 | 6.9% | |
| CVE-2008-2992 | Adobe Acrobat and Reader | 2022-03-03 | 99.8% | known |
| CVE-2004-0210 | Microsoft Windows | 2022-03-03 | 7.2% | |
| CVE-2002-0367 | Microsoft Windows | 2022-03-03 | 4.9% | |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | 2022-02-25 | 30.9% | known |
| CVE-2017-8570 | Microsoft Office | 2022-02-25 | 89.9% | |
| CVE-2017-0222 | Microsoft Internet Explorer | 2022-02-25 | 29.6% | |
| CVE-2014-6352 | Microsoft Windows | 2022-02-25 | 77.5% | |
| CVE-2022-23134 | Zabbix Frontend | 2022-02-22 | 95.3% | |
| CVE-2022-23131 | Zabbix Frontend | 2022-02-22 | 95.7% | |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source | 2022-02-15 | 99.2% | |
| CVE-2022-0609 | Google Chromium Animation | 2022-02-15 | 22.4% | |
| CVE-2019-0752 | Microsoft Internet Explorer | 2022-02-15 | 81.7% | known |
| CVE-2018-8174 | Microsoft Windows | 2022-02-15 | 88.2% | known |
| CVE-2018-20250 | RARLAB WinRAR | 2022-02-15 | 96.0% | known |
| CVE-2018-15982 | Adobe Flash Player | 2022-02-15 | 89.6% | known |
| CVE-2017-9841 | PHPUnit PHPUnit | 2022-02-15 | 100.0% | |
| CVE-2014-1761 | Microsoft Word | 2022-02-15 | 77.7% |
1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 · 9
Filters and the CSV cover the 200 rows on this page. The full catalog is free as a daily dataset.
🔔 Get a browser alert when CISA adds a new KEV entry (free, no email, one click to stop).
Kevscope: daily CISA KEV + EPSS datasetThe whole KEV catalog joined with daily EPSS and CVSS scores as CSV/Parquet, refreshed daily. Free to download.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.