Home › Exploited CVEs
CISA Known Exploited Vulnerabilities (KEV)
All 1,769 CVEs in CISA's KEV catalog, newest first, with EPSS exploit probability. RSS · JSON Feed
Most likely to be exploited next
The five KEV entries with the highest EPSS score today. Patch these first.
| CVE | Vendor / product | EPSS |
|---|---|---|
| CVE-2026-109619 | PHP Group PHP | 100.0% |
| CVE-2026-109618 | PHP Group PHP | 100.0% |
| CVE-2025-53770 | Microsoft SharePoint | 100.0% |
| CVE-2021-26086 | Atlassian Jira Server and Data Center | 100.0% |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | 100.0% |
Need it fresh, filtered or via API?These pages are a free snapshot, last updated 2026-11-07.
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
- Kevscope CVE priority API 200 free calls a day, $5 for 2,000 calls (no expiry), or $19/month for 10,000: returns a patch-priority verdict for up to 20 CVEs per call with the evidence (KEV, EPSS, CVSS, CISA SSVC), most urgent first, by API or MCP.
- Kevscope API $5 pack $5 for 2,000 calls, never expires: patch-priority verdicts for up to 20 CVEs per call from today's KEV, EPSS, CVSS and SSVC data, by REST API or MCP. Pay by card, your API key is on screen the moment checkout ends; no account, no subscription.
- Exploited Vulnerabilities Brief: Weekly Edition $9/month: a fresh KEV + EPSS brief every Monday (PDF + CSVs): new exploited CVEs, what to patch first, upcoming CISA deadlines.
- All Three Monday Briefs: Rates, Recalls + Exploited Vulns $25/month: all three weekly briefs (Treasury/BLS rates & macro, NHTSA recalls, CISA KEV/EPSS) for $25/month instead of $37.
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
1,769exploited CVEs in KEV
30added in the last 30 days
361used in ransomware
907with EPSS of 50% or more
Browse and filter
200 shown on this page
No CVEs match. Clear the filter box or turn a chip off. Click a column heading to sort.
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2013-3906 | Microsoft Graphics Component | 2022-02-15 | 84.9% | |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS | 2022-02-11 | 16.3% | |
| CVE-2021-36934 | Microsoft Windows | 2022-02-10 | 67.3% | |
| CVE-2020-0796 | Microsoft SMBv3 | 2022-02-10 | 99.8% | known |
| CVE-2018-1000861 | Jenkins Jenkins Stapler Web Framework | 2022-02-10 | 98.3% | |
| CVE-2017-9791 | Apache Struts 1 | 2022-02-10 | 98.9% | |
| CVE-2017-8464 | Microsoft Windows | 2022-02-10 | 90.0% | |
| CVE-2017-10271 | Oracle WebLogic Server | 2022-02-10 | 100.0% | known |
| CVE-2017-0263 | Microsoft Win32k | 2022-02-10 | 10.0% | |
| CVE-2017-0262 | Microsoft Office | 2022-02-10 | 81.0% | |
| CVE-2017-0145 | Microsoft SMBv1 | 2022-02-10 | 89.8% | known |
| CVE-2017-0144 | Microsoft SMBv1 | 2022-02-10 | 99.2% | known |
| CVE-2016-3088 | Apache ActiveMQ | 2022-02-10 | 98.4% | |
| CVE-2015-2051 | D-Link DIR-645 Router | 2022-02-10 | 97.1% | |
| CVE-2015-1635 | Microsoft HTTP.sys | 2022-02-10 | 100.0% | |
| CVE-2015-1130 | Apple OS X | 2022-02-10 | 9.9% | |
| CVE-2014-4404 | Apple OS X | 2022-02-10 | 48.9% | |
| CVE-2022-21882 | Microsoft Win32k | 2022-02-04 | 59.2% | known |
| CVE-2022-22587 | Apple iOS and macOS | 2022-01-28 | 11.6% | |
| CVE-2021-20038 | SonicWall SMA 100 Appliances | 2022-01-28 | 99.9% | known |
| CVE-2020-5722 | Grandstream UCM6200 | 2022-01-28 | 84.3% | |
| CVE-2020-0787 | Microsoft Windows | 2022-01-28 | 42.5% | known |
| CVE-2017-5689 | Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | 2022-01-28 | 92.2% | |
| CVE-2014-7169 | GNU Bourne-Again Shell (Bash) | 2022-01-28 | 99.9% | |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) | 2022-01-28 | 100.0% | |
| CVE-2014-1776 | Microsoft Internet Explorer | 2022-01-28 | 82.7% | |
| CVE-2021-35247 | SolarWinds Serv-U | 2022-01-21 | 3.6% | |
| CVE-2018-8453 | Microsoft Win32k | 2022-01-21 | 70.0% | known |
| CVE-2012-0391 | Apache Struts 2 | 2022-01-21 | 75.6% | |
| CVE-2006-1547 | Apache Struts 1 | 2022-01-21 | 54.6% | |
| CVE-2021-40870 | Aviatrix Aviatrix Controller | 2022-01-18 | 93.0% | |
| CVE-2021-33766 | Microsoft Exchange Server | 2022-01-18 | 98.2% | |
| CVE-2021-32648 | October CMS October CMS | 2022-01-18 | 91.1% | |
| CVE-2021-25298 | Nagios Nagios XI | 2022-01-18 | 73.6% | |
| CVE-2021-25297 | Nagios Nagios XI | 2022-01-18 | 56.7% | |
| CVE-2021-25296 | Nagios Nagios XI | 2022-01-18 | 71.9% | |
| CVE-2021-22991 | F5 BIG-IP Traffic Management Microkernel | 2022-01-18 | 62.4% | |
| CVE-2021-21975 | VMware vRealize Operations Manager API | 2022-01-18 | 78.0% | known |
| CVE-2021-21315 | Npm package System Information Library for Node.JS | 2022-01-18 | 90.7% | |
| CVE-2020-14864 | Oracle Intelligence Enterprise Edition | 2022-01-18 | 97.2% | |
| CVE-2020-13927 | Apache Airflow's Experimental API | 2022-01-18 | 99.8% | |
| CVE-2020-13671 | Drupal Drupal core | 2022-01-18 | 36.2% | |
| CVE-2020-11978 | Apache Airflow | 2022-01-18 | 99.2% | |
| CVE-2021-36260 | Hikvision Security cameras web server | 2022-01-10 | 99.9% | |
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN software | 2022-01-10 | 39.7% | |
| CVE-2021-22017 | VMware vCenter Server | 2022-01-10 | 49.2% | |
| CVE-2020-6572 | Google Chrome Media | 2022-01-10 | 10.6% | |
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-01-10 | 100.0% | |
| CVE-2019-7609 | Elastic Kibana | 2022-01-10 | 95.3% | |
| CVE-2019-2725 | Oracle WebLogic Server | 2022-01-10 | 100.0% | known |
| CVE-2019-1579 | Palo Alto Networks PAN-OS | 2022-01-10 | 44.2% | known |
| CVE-2019-1458 | Microsoft Win32k | 2022-01-10 | 74.4% | known |
| CVE-2019-10149 | Exim Mail Transfer Agent (MTA) | 2022-01-10 | 100.0% | |
| CVE-2018-13383 | Fortinet FortiOS and FortiProxy | 2022-01-10 | 32.5% | known |
| CVE-2018-13382 | Fortinet FortiOS and FortiProxy | 2022-01-10 | 81.7% | known |
| CVE-2017-1000486 | Primetek Primefaces Application | 2022-01-10 | 94.1% | |
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition | 2022-01-10 | 97.8% | |
| CVE-2013-3900 | Microsoft WinVerifyTrust function | 2022-01-10 | 44.6% | |
| CVE-2021-43890 | Microsoft Windows | 2021-12-15 | 11.3% | known |
| CVE-2021-4102 | Google Chromium V8 | 2021-12-15 | 7.8% | |
| CVE-2021-44515 | Zoho Desktop Central | 2021-12-10 | 99.9% | |
| CVE-2021-44228 | Apache Log4j2 | 2021-12-10 | 100.0% | known |
| CVE-2021-44168 | Fortinet FortiOS | 2021-12-10 | 0.9% | |
| CVE-2021-35394 | Realtek Jungle Software Development Kit (SDK) | 2021-12-10 | 99.9% | |
| CVE-2020-8816 | Pi-hole AdminLTE | 2021-12-10 | 78.3% | |
| CVE-2020-17463 | Fuel CMS Fuel CMS | 2021-12-10 | 89.7% | |
| CVE-2019-7238 | Sonatype Nexus Repository Manager | 2021-12-10 | 76.6% | |
| CVE-2019-13272 | Linux Kernel | 2021-12-10 | 52.2% | |
| CVE-2019-10758 | MongoDB mongo-express | 2021-12-10 | 84.7% | |
| CVE-2019-0193 | Apache Solr | 2021-12-10 | 83.5% | |
| CVE-2017-17562 | Embedthis GoAhead | 2021-12-10 | 97.1% | |
| CVE-2017-12149 | Red Hat JBoss Application Server | 2021-12-10 | 90.7% | known |
| CVE-2010-1871 | Red Hat JBoss Seam 2 | 2021-12-10 | 83.4% | |
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | 2021-12-01 | 93.3% | |
| CVE-2021-40438 | Apache Apache | 2021-12-01 | 100.0% | known |
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Plus (SDP) | 2021-12-01 | 99.8% | |
| CVE-2020-11261 | Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 2021-12-01 | 1.5% | |
| CVE-2018-14847 | MikroTik RouterOS | 2021-12-01 | 96.0% | |
| CVE-2021-42321 | Microsoft Exchange | 2021-11-17 | 91.7% | known |
| CVE-2021-42292 | Microsoft Office | 2021-11-17 | 43.0% | |
| CVE-2021-40449 | Microsoft Windows | 2021-11-17 | 81.9% | known |
| CVE-2021-22204 | Perl Exiftool | 2021-11-17 | 100.0% | |
| CVE-2021-42258 | BQE BillQuick Web Suite | 2021-11-03 | 75.2% | known |
| CVE-2021-42013 | Apache HTTP Server | 2021-11-03 | 100.0% | known |
| CVE-2021-41773 | Apache HTTP Server | 2021-11-03 | 100.0% | known |
| CVE-2021-40539 | Zoho ManageEngine | 2021-11-03 | 99.0% | known |
| CVE-2021-40444 | Microsoft MSHTML | 2021-11-03 | 97.8% | known |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 2.9% | |
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 11.4% | |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 99.9% | known |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 2.7% | |
| CVE-2021-38003 | Google Chromium V8 | 2021-11-03 | 38.6% | |
| CVE-2021-38000 | Google Chromium Intents | 2021-11-03 | 4.9% | |
| CVE-2021-37976 | Google Chromium | 2021-11-03 | 19.9% | |
| CVE-2021-37975 | Google Chromium V8 | 2021-11-03 | 34.9% | |
| CVE-2021-37973 | Google Chromium Portals | 2021-11-03 | 11.7% | |
| CVE-2021-36955 | Microsoft Windows | 2021-11-03 | 4.1% | known |
| CVE-2021-36948 | Microsoft Windows | 2021-11-03 | 23.3% | |
| CVE-2021-36942 | Microsoft Windows | 2021-11-03 | 66.0% | known |
| CVE-2021-36742 | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security | 2021-11-03 | 1.5% | |
| CVE-2021-36741 | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security | 2021-11-03 | 5.0% | |
| CVE-2021-35464 | ForgeRock Access Management (AM) | 2021-11-03 | 100.0% | known |
| CVE-2021-35395 | Realtek AP-Router SDK | 2021-11-03 | 98.1% | |
| CVE-2021-35211 | SolarWinds Serv-U | 2021-11-03 | 91.2% | known |
| CVE-2021-34527 | Microsoft Windows | 2021-11-03 | 99.8% | known |
| CVE-2021-34523 | Microsoft Exchange Server | 2021-11-03 | 100.0% | known |
| CVE-2021-34473 | Microsoft Exchange Server | 2021-11-03 | 100.0% | known |
| CVE-2021-34448 | Microsoft Windows | 2021-11-03 | 40.1% | |
| CVE-2021-33771 | Microsoft Windows | 2021-11-03 | 10.2% | |
| CVE-2021-33742 | Microsoft Windows | 2021-11-03 | 59.4% | |
| CVE-2021-33739 | Microsoft Windows | 2021-11-03 | 6.6% | |
| CVE-2021-31979 | Microsoft Windows | 2021-11-03 | 4.5% | |
| CVE-2021-31956 | Microsoft Windows | 2021-11-03 | 22.3% | |
| CVE-2021-31955 | Microsoft Windows | 2021-11-03 | 81.1% | |
| CVE-2021-31755 | Tenda AC11 Router | 2021-11-03 | 86.5% | |
| CVE-2021-31207 | Microsoft Exchange Server | 2021-11-03 | 99.8% | known |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider | 2021-11-03 | 2.6% | |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider | 2021-11-03 | 3.0% | |
| CVE-2021-30869 | Apple iOS, iPadOS, and macOS | 2021-11-03 | 4.2% | |
| CVE-2021-30860 | Apple Multiple Products | 2021-11-03 | 76.0% | |
| CVE-2021-30858 | Apple iOS, iPadOS, and macOS | 2021-11-03 | 13.4% | |
| CVE-2021-30807 | Apple Multiple Products | 2021-11-03 | 28.8% | |
| CVE-2021-30762 | Apple iOS | 2021-11-03 | 11.0% | |
| CVE-2021-30761 | Apple iOS | 2021-11-03 | 10.5% | |
| CVE-2021-30713 | Apple macOS | 2021-11-03 | 7.0% | |
| CVE-2021-30666 | Apple iOS | 2021-11-03 | 3.0% | |
| CVE-2021-30665 | Apple Multiple Products | 2021-11-03 | 3.7% | |
| CVE-2021-30663 | Apple Multiple Products | 2021-11-03 | 3.5% | |
| CVE-2021-30661 | Apple Multiple Products | 2021-11-03 | 4.5% | |
| CVE-2021-30657 | Apple macOS | 2021-11-03 | 68.5% | |
| CVE-2021-30633 | Google Chromium Indexed DB API | 2021-11-03 | 33.2% | |
| CVE-2021-30632 | Google Chromium V8 | 2021-11-03 | 63.2% | |
| CVE-2021-30563 | Google Chromium V8 | 2021-11-03 | 9.0% | |
| CVE-2021-30554 | Google Chromium WebGL | 2021-11-03 | 7.4% | |
| CVE-2021-30551 | Google Chromium V8 | 2021-11-03 | 64.7% | |
| CVE-2021-30116 | Kaseya Virtual System/Server Administrator (VSA) | 2021-11-03 | 85.7% | known |
| CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) | 2021-11-03 | 5.5% | |
| CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) | 2021-11-03 | 12.1% | |
| CVE-2021-28550 | Adobe Acrobat and Reader | 2021-11-03 | 52.1% | |
| CVE-2021-28310 | Microsoft Win32k | 2021-11-03 | 8.4% | |
| CVE-2021-27562 | Arm Trusted Firmware | 2021-11-03 | 3.1% | |
| CVE-2021-27561 | Yealink Device Management | 2021-11-03 | 82.9% | |
| CVE-2021-27104 | Accellion FTA | 2021-11-03 | 56.7% | known |
| CVE-2021-27103 | Accellion FTA | 2021-11-03 | 11.4% | known |
| CVE-2021-27102 | Accellion FTA | 2021-11-03 | 3.7% | known |
| CVE-2021-27101 | Accellion FTA | 2021-11-03 | 6.0% | known |
| CVE-2021-27085 | Microsoft Internet Explorer | 2021-11-03 | 5.4% | |
| CVE-2021-27065 | Microsoft Exchange Server | 2021-11-03 | 99.9% | known |
| CVE-2021-27059 | Microsoft Office | 2021-11-03 | 6.1% | |
| CVE-2021-26858 | Microsoft Exchange Server | 2021-11-03 | 93.7% | known |
| CVE-2021-26857 | Microsoft Exchange Server | 2021-11-03 | 95.8% | known |
| CVE-2021-26855 | Microsoft Exchange Server | 2021-11-03 | 100.0% | known |
| CVE-2021-26411 | Microsoft Internet Explorer | 2021-11-03 | 81.7% | known |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center | 2021-11-03 | 100.0% | known |
| CVE-2021-23874 | McAfee McAfee Total Protection (MTP) | 2021-11-03 | 1.1% | |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management | 2021-11-03 | 99.9% | known |
| CVE-2021-22900 | Ivanti Pulse Connect Secure | 2021-11-03 | 14.1% | |
| CVE-2021-22899 | Ivanti Pulse Connect Secure | 2021-11-03 | 22.9% | |
| CVE-2021-22894 | Ivanti Pulse Connect Secure | 2021-11-03 | 41.3% | |
| CVE-2021-22893 | Ivanti Pulse Connect Secure | 2021-11-03 | 47.2% | known |
| CVE-2021-22506 | Micro Focus Micro Focus Access Manager | 2021-11-03 | 25.7% | |
| CVE-2021-22502 | Micro Focus Operation Bridge Reporter (OBR) | 2021-11-03 | 96.7% | |
| CVE-2021-22205 | GitLab Community and Enterprise Editions | 2021-11-03 | 99.7% | known |
| CVE-2021-22005 | VMware vCenter Server | 2021-11-03 | 100.0% | known |
| CVE-2021-21985 | VMware vCenter Server | 2021-11-03 | 100.0% | known |
| CVE-2021-21972 | VMware vCenter Server | 2021-11-03 | 99.9% | known |
| CVE-2021-21224 | Google Chromium V8 | 2021-11-03 | 84.2% | |
| CVE-2021-21220 | Google Chromium V8 | 2021-11-03 | 70.4% | |
| CVE-2021-21206 | Google Chromium Blink | 2021-11-03 | 9.3% | |
| CVE-2021-21193 | Google Chromium Blink | 2021-11-03 | 10.0% | |
| CVE-2021-21166 | Google Chromium | 2021-11-03 | 24.0% | |
| CVE-2021-21148 | Google Chromium V8 | 2021-11-03 | 20.0% | |
| CVE-2021-21017 | Adobe Acrobat and Reader | 2021-11-03 | 86.3% | |
| CVE-2021-20090 | Arcadyan Buffalo Firmware | 2021-11-03 | 100.0% | |
| CVE-2021-20023 | SonicWall SonicWall Email Security | 2021-11-03 | 51.7% | known |
| CVE-2021-20022 | SonicWall SonicWall Email Security | 2021-11-03 | 16.6% | known |
| CVE-2021-20021 | SonicWall SonicWall Email Security | 2021-11-03 | 88.8% | known |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 | 2021-11-03 | 40.0% | known |
| CVE-2021-1906 | Qualcomm Multiple Chipsets | 2021-11-03 | 0.5% | |
| CVE-2021-1905 | Qualcomm Multiple Chipsets | 2021-11-03 | 1.5% | |
| CVE-2021-1879 | Apple iOS, iPadOS, and watchOS | 2021-11-03 | 7.1% | |
| CVE-2021-1871 | Apple iOS, iPadOS, and macOS | 2021-11-03 | 7.0% | |
| CVE-2021-1870 | Apple iOS, iPadOS, and macOS | 2021-11-03 | 7.7% | |
| CVE-2021-1782 | Apple Multiple Products | 2021-11-03 | 2.2% | |
| CVE-2021-1732 | Microsoft Win32k | 2021-11-03 | 78.4% | known |
| CVE-2021-1675 | Microsoft Windows | 2021-11-03 | 85.3% | known |
| CVE-2021-1647 | Microsoft Defender | 2021-11-03 | 39.7% | |
| CVE-2021-1498 | Cisco HyperFlex HX | 2021-11-03 | 100.0% | |
| CVE-2021-1497 | Cisco HyperFlex HX | 2021-11-03 | 99.9% | |
| CVE-2020-9859 | Apple Multiple Products | 2021-11-03 | 0.8% | |
| CVE-2020-9819 | Apple iOS, iPadOS, and watchOS | 2021-11-03 | 2.2% | |
| CVE-2020-9818 | Apple iOS, iPadOS, and watchOS | 2021-11-03 | 2.3% | |
| CVE-2020-8657 | EyesOfNetwork EyesOfNetwork | 2021-11-03 | 91.9% | |
| CVE-2020-8655 | EyesOfNetwork EyesOfNetwork | 2021-11-03 | 59.9% | |
| CVE-2020-8644 | PlaySMS PlaySMS | 2021-11-03 | 86.3% | |
| CVE-2020-8599 | Trend Micro Apex One and OfficeScan | 2021-11-03 | 11.9% | |
| CVE-2020-8515 | DrayTek Multiple Vigor Routers | 2021-11-03 | 100.0% | |
| CVE-2020-8468 | Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents | 2021-11-03 | 6.2% | |
| CVE-2020-8467 | Trend Micro Apex One and OfficeScan | 2021-11-03 | 10.9% | |
| CVE-2020-8260 | Ivanti Pulse Connect Secure | 2021-11-03 | 96.5% |
1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 · 9
Filters and the CSV cover the 200 rows on this page. The full catalog is free as a daily dataset.
🔔 Get a browser alert when CISA adds a new KEV entry (free, no email, one click to stop).
Kevscope: daily CISA KEV + EPSS datasetThe whole KEV catalog joined with daily EPSS and CVSS scores as CSV/Parquet, refreshed daily. Free to download.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.