Home › Exploited CVEs
CISA Known Exploited Vulnerabilities (KEV)
All 1,769 CVEs in CISA's KEV catalog, newest first, with EPSS exploit probability. RSS · JSON Feed
Most likely to be exploited next
The five KEV entries with the highest EPSS score today. Patch these first.
| CVE | Vendor / product | EPSS |
|---|---|---|
| CVE-2026-109619 | PHP Group PHP | 100.0% |
| CVE-2026-109618 | PHP Group PHP | 100.0% |
| CVE-2025-53770 | Microsoft SharePoint | 100.0% |
| CVE-2021-26086 | Atlassian Jira Server and Data Center | 100.0% |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | 100.0% |
Need it fresh, filtered or via API?These pages are a free snapshot, last updated 2026-11-07.
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
- Kevscope CVE priority API 200 free calls a day, $5 for 2,000 calls (no expiry), or $19/month for 10,000: returns a patch-priority verdict for up to 20 CVEs per call with the evidence (KEV, EPSS, CVSS, CISA SSVC), most urgent first, by API or MCP.
- Kevscope API $5 pack $5 for 2,000 calls, never expires: patch-priority verdicts for up to 20 CVEs per call from today's KEV, EPSS, CVSS and SSVC data, by REST API or MCP. Pay by card, your API key is on screen the moment checkout ends; no account, no subscription.
- Exploited Vulnerabilities Brief: Weekly Edition $9/month: a fresh KEV + EPSS brief every Monday (PDF + CSVs): new exploited CVEs, what to patch first, upcoming CISA deadlines.
- All Three Monday Briefs: Rates, Recalls + Exploited Vulns $25/month: all three weekly briefs (Treasury/BLS rates & macro, NHTSA recalls, CISA KEV/EPSS) for $25/month instead of $37.
Secure Stripe checkout (card, Apple Pay, Google Pay) · 14-day fix-or-refund if it doesn't work as described · terms
1,769exploited CVEs in KEV
30added in the last 30 days
361used in ransomware
907with EPSS of 50% or more
Browse and filter
169 shown on this page
No CVEs match. Clear the filter box or turn a chip off. Click a column heading to sort.
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2020-8243 | Ivanti Pulse Connect Secure | 2021-11-03 | 90.8% | |
| CVE-2020-8196 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 26.3% | |
| CVE-2020-8195 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 33.0% | |
| CVE-2020-8193 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 88.3% | |
| CVE-2020-7961 | Liferay Liferay Portal | 2021-11-03 | 99.9% | |
| CVE-2020-6820 | Mozilla Firefox and Thunderbird | 2021-11-03 | 7.1% | |
| CVE-2020-6819 | Mozilla Firefox and Thunderbird | 2021-11-03 | 3.0% | |
| CVE-2020-6418 | Google Chromium V8 | 2021-11-03 | 78.8% | |
| CVE-2020-6287 | SAP NetWeaver | 2021-11-03 | 94.7% | |
| CVE-2020-6207 | SAP Solution Manager | 2021-11-03 | 98.1% | |
| CVE-2020-5902 | F5 BIG-IP | 2021-11-03 | 100.0% | known |
| CVE-2020-5849 | Unraid Unraid | 2021-11-03 | 93.2% | |
| CVE-2020-5847 | Unraid Unraid | 2021-11-03 | 95.8% | |
| CVE-2020-5735 | Amcrest Cameras and Network Video Recorder (NVR) | 2021-11-03 | 36.2% | |
| CVE-2020-4430 | IBM Data Risk Manager | 2021-11-03 | 68.5% | |
| CVE-2020-4428 | IBM Data Risk Manager | 2021-11-03 | 61.7% | |
| CVE-2020-4427 | IBM Data Risk Manager | 2021-11-03 | 70.0% | |
| CVE-2020-4006 | VMware Multiple Products | 2021-11-03 | 17.3% | |
| CVE-2020-3992 | VMware ESXi | 2021-11-03 | 83.0% | known |
| CVE-2020-3952 | VMware vCenter Server | 2021-11-03 | 90.4% | |
| CVE-2020-3950 | VMware Multiple Products | 2021-11-03 | 7.3% | |
| CVE-2020-3580 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | 85.6% | known |
| CVE-2020-3569 | Cisco IOS XR | 2021-11-03 | 3.3% | |
| CVE-2020-3566 | Cisco IOS XR | 2021-11-03 | 3.7% | |
| CVE-2020-3452 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | 100.0% | |
| CVE-2020-3161 | Cisco Cisco IP Phones | 2021-11-03 | 83.9% | |
| CVE-2020-3118 | Cisco IOS XR | 2021-11-03 | 11.7% | |
| CVE-2020-29583 | Zyxel Multiple Products | 2021-11-03 | 90.2% | |
| CVE-2020-29557 | D-Link DIR-825 R1 Devices | 2021-11-03 | 55.7% | |
| CVE-2020-27950 | Apple Multiple Products | 2021-11-03 | 16.5% | |
| CVE-2020-27932 | Apple Multiple Products | 2021-11-03 | 10.3% | |
| CVE-2020-27930 | Apple Multiple Products | 2021-11-03 | 22.0% | |
| CVE-2020-26919 | NETGEAR JGS516PE Devices | 2021-11-03 | 57.5% | |
| CVE-2020-2555 | Oracle Multiple Products | 2021-11-03 | 97.1% | |
| CVE-2020-25506 | D-Link DNS-320 Device | 2021-11-03 | 100.0% | |
| CVE-2020-25213 | WordPress File Manager Plugin | 2021-11-03 | 97.3% | |
| CVE-2020-24557 | Trend Micro Apex One, OfficeScan, and Worry-Free Business Security | 2021-11-03 | 2.7% | |
| CVE-2020-17530 | Apache Struts | 2021-11-03 | 96.3% | |
| CVE-2020-17496 | vBulletin vBulletin | 2021-11-03 | 87.5% | |
| CVE-2020-17144 | Microsoft Exchange Server | 2021-11-03 | 36.5% | |
| CVE-2020-17087 | Microsoft Windows | 2021-11-03 | 5.4% | |
| CVE-2020-16846 | SaltStack Salt | 2021-11-03 | 99.6% | |
| CVE-2020-16017 | Google Chrome | 2021-11-03 | 2.7% | |
| CVE-2020-16013 | Google Chromium V8 | 2021-11-03 | 2.8% | |
| CVE-2020-16010 | Google Chrome for Android UI | 2021-11-03 | 6.4% | |
| CVE-2020-16009 | Google Chromium V8 | 2021-11-03 | 48.3% | |
| CVE-2020-15999 | Google Chrome FreeType | 2021-11-03 | 63.9% | |
| CVE-2020-15505 | Ivanti MobileIron Multiple Products | 2021-11-03 | 99.7% | |
| CVE-2020-14883 | Oracle WebLogic Server | 2021-11-03 | 97.7% | |
| CVE-2020-14882 | Oracle WebLogic Server | 2021-11-03 | 100.0% | |
| CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) | 2021-11-03 | 80.2% | |
| CVE-2020-14750 | Oracle WebLogic Server | 2021-11-03 | 99.2% | |
| CVE-2020-1472 | Microsoft Netlogon | 2021-11-03 | 99.4% | known |
| CVE-2020-1464 | Microsoft Windows | 2021-11-03 | 38.9% | |
| CVE-2020-1380 | Microsoft Internet Explorer | 2021-11-03 | 24.2% | |
| CVE-2020-1350 | Microsoft Windows | 2021-11-03 | 96.7% | |
| CVE-2020-12812 | Fortinet FortiOS | 2021-11-03 | 45.4% | known |
| CVE-2020-12271 | Sophos SFOS | 2021-11-03 | 42.4% | known |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin | 2021-11-03 | 97.8% | |
| CVE-2020-11652 | SaltStack Salt | 2021-11-03 | 86.2% | |
| CVE-2020-11651 | SaltStack Salt | 2021-11-03 | 96.6% | |
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, Visual Studio | 2021-11-03 | 95.8% | |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model | 2021-11-03 | 79.8% | |
| CVE-2020-1054 | Microsoft Win32k | 2021-11-03 | 53.9% | |
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX | 2021-11-03 | 7.6% | |
| CVE-2020-10221 | rConfig rConfig | 2021-11-03 | 77.1% | |
| CVE-2020-1020 | Microsoft Windows | 2021-11-03 | 65.0% | |
| CVE-2020-10199 | Sonatype Nexus Repository | 2021-11-03 | 99.1% | |
| CVE-2020-10189 | Zoho ManageEngine | 2021-11-03 | 99.9% | |
| CVE-2020-10181 | Sumavision Enhanced Multimedia Router (EMR) | 2021-11-03 | 14.9% | |
| CVE-2020-10148 | SolarWinds Orion | 2021-11-03 | 92.0% | |
| CVE-2020-0986 | Microsoft Windows | 2021-11-03 | 16.4% | |
| CVE-2020-0968 | Microsoft Internet Explorer | 2021-11-03 | 30.7% | known |
| CVE-2020-0938 | Microsoft Windows | 2021-11-03 | 69.0% | |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer | 2021-11-03 | 2.7% | known |
| CVE-2020-0688 | Microsoft Exchange Server | 2021-11-03 | 100.0% | known |
| CVE-2020-0683 | Microsoft Windows | 2021-11-03 | 7.7% | |
| CVE-2020-0674 | Microsoft Internet Explorer | 2021-11-03 | 86.9% | |
| CVE-2020-0646 | Microsoft .NET Framework | 2021-11-03 | 99.2% | |
| CVE-2020-0601 | Microsoft Windows | 2021-11-03 | 89.1% | |
| CVE-2020-0069 | MediaTek Multiple Chipsets | 2021-11-03 | 1.4% | |
| CVE-2020-0041 | Android Android Kernel | 2021-11-03 | 3.2% | |
| CVE-2019-9978 | WordPress Social Warfare Plugin | 2021-11-03 | 72.9% | |
| CVE-2019-9082 | ThinkPHP ThinkPHP | 2021-11-03 | 97.4% | |
| CVE-2019-8394 | Zoho ManageEngine | 2021-11-03 | 63.3% | |
| CVE-2019-7481 | SonicWall SMA100 | 2021-11-03 | 99.9% | known |
| CVE-2019-6223 | Apple iOS and macOS | 2021-11-03 | 2.6% | |
| CVE-2019-5591 | Fortinet FortiOS | 2021-11-03 | 18.6% | known |
| CVE-2019-5544 | VMware VMware ESXi and Horizon DaaS | 2021-11-03 | 98.1% | known |
| CVE-2019-4716 | IBM Planning Analytics | 2021-11-03 | 86.4% | |
| CVE-2019-3398 | Atlassian Confluence Server and Data Center | 2021-11-03 | 97.0% | |
| CVE-2019-3396 | Atlassian Confluence Server and Data Server | 2021-11-03 | 99.9% | known |
| CVE-2019-2215 | Android Android Kernel | 2021-11-03 | 72.1% | |
| CVE-2019-20085 | TVT NVMS-1000 | 2021-11-03 | 96.1% | |
| CVE-2019-19781 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 100.0% | known |
| CVE-2019-19356 | Netis WF2419 Devices | 2021-11-03 | 28.1% | |
| CVE-2019-18988 | TeamViewer Desktop | 2021-11-03 | 4.7% | |
| CVE-2019-18935 | Progress Telerik UI for ASP.NET AJAX | 2021-11-03 | 99.7% | known |
| CVE-2019-18187 | Trend Micro OfficeScan | 2021-11-03 | 25.1% | |
| CVE-2019-17558 | Apache Solr | 2021-11-03 | 98.6% | |
| CVE-2019-17026 | Mozilla Firefox and Thunderbird | 2021-11-03 | 46.3% | |
| CVE-2019-16759 | vBulletin vBulletin | 2021-11-03 | 99.7% | |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers | 2021-11-03 | 99.9% | |
| CVE-2019-16256 | SIMalliance Toolbox Browser | 2021-11-03 | 4.9% | |
| CVE-2019-15949 | Nagios Nagios XI | 2021-11-03 | 77.0% | |
| CVE-2019-15752 | Docker Desktop Community Edition | 2021-11-03 | 48.8% | |
| CVE-2019-1429 | Microsoft Internet Explorer | 2021-11-03 | 77.3% | |
| CVE-2019-1367 | Microsoft Internet Explorer | 2021-11-03 | 52.4% | known |
| CVE-2019-13608 | Citrix StoreFront Server | 2021-11-03 | 30.0% | known |
| CVE-2019-1215 | Microsoft Windows | 2021-11-03 | 19.3% | known |
| CVE-2019-1214 | Microsoft Windows | 2021-11-03 | 1.4% | |
| CVE-2019-11634 | Citrix Workspace Application and Receiver for Windows | 2021-11-03 | 8.1% | known |
| CVE-2019-11580 | Atlassian Crowd and Crowd Data Center | 2021-11-03 | 95.4% | known |
| CVE-2019-11539 | Ivanti Pulse Connect Secure and Pulse Policy Secure | 2021-11-03 | 98.5% | known |
| CVE-2019-11510 | Ivanti Pulse Connect Secure | 2021-11-03 | 100.0% | known |
| CVE-2019-0863 | Microsoft Windows | 2021-11-03 | 5.2% | |
| CVE-2019-0859 | Microsoft Win32k | 2021-11-03 | 4.2% | known |
| CVE-2019-0808 | Microsoft Win32k | 2021-11-03 | 53.0% | |
| CVE-2019-0803 | Microsoft Win32k | 2021-11-03 | 45.2% | known |
| CVE-2019-0797 | Microsoft Win32k | 2021-11-03 | 1.9% | |
| CVE-2019-0708 | Microsoft Remote Desktop Services | 2021-11-03 | 100.0% | known |
| CVE-2019-0604 | Microsoft SharePoint | 2021-11-03 | 99.9% | known |
| CVE-2019-0541 | Microsoft MSHTML | 2021-11-03 | 53.2% | |
| CVE-2019-0211 | Apache HTTP Server | 2021-11-03 | 65.0% | |
| CVE-2018-8653 | Microsoft Internet Explorer | 2021-11-03 | 29.6% | |
| CVE-2018-7600 | Drupal Drupal Core | 2021-11-03 | 100.0% | known |
| CVE-2018-6789 | Exim Exim | 2021-11-03 | 82.1% | known |
| CVE-2018-4939 | Adobe ColdFusion | 2021-11-03 | 61.8% | |
| CVE-2018-4878 | Adobe Flash Player | 2021-11-03 | 90.3% | known |
| CVE-2018-2380 | SAP Customer Relationship Management (CRM) | 2021-11-03 | 28.9% | known |
| CVE-2018-20062 | ThinkPHP noneCms | 2021-11-03 | 99.5% | |
| CVE-2018-18325 | DotNetNuke (DNN) DotNetNuke (DNN) | 2021-11-03 | 74.0% | |
| CVE-2018-15961 | Adobe ColdFusion | 2021-11-03 | 100.0% | |
| CVE-2018-15811 | DotNetNuke (DNN) DotNetNuke (DNN) | 2021-11-03 | 76.3% | |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers | 2021-11-03 | 8.5% | |
| CVE-2018-13379 | Fortinet FortiOS | 2021-11-03 | 100.0% | known |
| CVE-2018-11776 | Apache Struts | 2021-11-03 | 100.0% | |
| CVE-2018-0802 | Microsoft Office | 2021-11-03 | 93.3% | known |
| CVE-2018-0798 | Microsoft Office | 2021-11-03 | 95.1% | |
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) | 2021-11-03 | 99.9% | |
| CVE-2018-0171 | Cisco IOS and IOS XE | 2021-11-03 | 99.5% | |
| CVE-2017-9822 | DotNetNuke (DNN) DotNetNuke (DNN) | 2021-11-03 | 94.8% | known |
| CVE-2017-9805 | Apache Struts | 2021-11-03 | 99.4% | |
| CVE-2017-9248 | Progress ASP.NET AJAX and Sitefinity | 2021-11-03 | 75.1% | |
| CVE-2017-8759 | Microsoft .NET Framework | 2021-11-03 | 88.7% | |
| CVE-2017-7269 | Microsoft Internet Information Services (IIS) | 2021-11-03 | 99.8% | |
| CVE-2017-6327 | Symantec Symantec Messaging Gateway | 2021-11-03 | 35.9% | |
| CVE-2017-5638 | Apache Struts | 2021-11-03 | 100.0% | known |
| CVE-2017-16651 | Roundcube Roundcube Webmail | 2021-11-03 | 45.7% | |
| CVE-2017-11882 | Microsoft Office | 2021-11-03 | 99.9% | known |
| CVE-2017-11774 | Microsoft Office | 2021-11-03 | 59.6% | |
| CVE-2017-0199 | Microsoft Office and WordPad | 2021-11-03 | 99.5% | known |
| CVE-2017-0143 | Microsoft Windows | 2021-11-03 | 93.3% | known |
| CVE-2016-9563 | SAP NetWeaver | 2021-11-03 | 24.2% | |
| CVE-2016-7255 | Microsoft Win32k | 2021-11-03 | 81.0% | known |
| CVE-2016-4437 | Apache Shiro | 2021-11-03 | 93.0% | |
| CVE-2016-3976 | SAP NetWeaver | 2021-11-03 | 47.3% | |
| CVE-2016-3718 | ImageMagick ImageMagick | 2021-11-03 | 75.6% | |
| CVE-2016-3715 | ImageMagick ImageMagick | 2021-11-03 | 75.3% | |
| CVE-2016-3643 | SolarWinds Virtualization Manager | 2021-11-03 | 3.7% | |
| CVE-2016-3235 | Microsoft Office | 2021-11-03 | 43.3% | |
| CVE-2016-0185 | Microsoft Windows | 2021-11-03 | 69.8% | |
| CVE-2016-0167 | Microsoft Win32k | 2021-11-03 | 5.7% | known |
| CVE-2015-4852 | Oracle WebLogic Server | 2021-11-03 | 95.0% | |
| CVE-2015-1641 | Microsoft Office | 2021-11-03 | 97.2% | |
| CVE-2014-1812 | Microsoft Windows | 2021-11-03 | 65.1% | known |
| CVE-2012-3152 | Oracle Fusion Middleware | 2021-11-03 | 98.8% | |
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX | 2021-11-03 | 100.0% | known |
| CVE-2010-5326 | SAP NetWeaver | 2021-11-03 | 17.8% |
1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 · 9
Filters and the CSV cover the 169 rows on this page. The full catalog is free as a daily dataset.
🔔 Get a browser alert when CISA adds a new KEV entry (free, no email, one click to stop).
Kevscope: daily CISA KEV + EPSS datasetThe whole KEV catalog joined with daily EPSS and CVSS scores as CSV/Parquet, refreshed daily. Free to download.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.
Get the full file: Exploited Vulnerabilities Brief: Weekly Edition ($9/month): each week's KEV additions ranked by EPSS, ransomware use and due date, ready to hand to a patch team. Checkout by Polar.