Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Apr 9, 2025 | CVE-2024-53197 | Linux · Kernel | Linux Kernel Out-of-Bounds Access Vulnerability | High 7.8 | 4.1% | Apr 30, 2025 |
| Apr 9, 2025 | CVE-2024-53150 | Linux · Kernel | Linux Kernel Out-of-Bounds Read Vulnerability | High 7.1 | 1.4% | Apr 30, 2025 |
| Apr 8, 2025 | CVE-2025-30406 | Gladinet · CentreStack | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability | Critical 9.0 | 94.3% | Apr 29, 2025 |
| Apr 8, 2025 | CVE-2025-29824 Ransomware | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | High 7.8 | 19.3% | Apr 29, 2025 |
| Apr 7, 2025 | CVE-2025-31161 Ransomware | CrushFTP · CrushFTP | CrushFTP Authentication Bypass Vulnerability | Critical 9.8 | 100.0% | Apr 28, 2025 |
| Apr 4, 2025 | CVE-2025-22457 Ransomware | Ivanti · Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Critical 9.0 | 100.0% | Apr 11, 2025 |
| Apr 1, 2025 | CVE-2025-24813 | Apache · Tomcat | Apache Tomcat Path Equivalence Vulnerability | Critical 10.0 | 99.9% | Apr 22, 2025 |
| Mar 31, 2025 | CVE-2024-20439 | Cisco · Smart Licensing Utility | Cisco Smart Licensing Utility Static Credential Vulnerability | Critical 9.8 | 97.1% | Apr 21, 2025 |
| Mar 27, 2025 | CVE-2025-2783 | Google · Chromium Mojo | Google Chromium Mojo Sandbox Escape Vulnerability | High 8.3 | 9.2% | Apr 17, 2025 |
| Mar 26, 2025 | CVE-2019-9875 | Sitecore · CMS and Experience Platform (XP) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | High 8.8 | 25.4% | Apr 16, 2025 |
| Mar 26, 2025 | CVE-2019-9874 | Sitecore · CMS and Experience Platform (XP) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | Critical 9.8 | 83.7% | Apr 16, 2025 |
| Mar 24, 2025 | CVE-2025-30154 | reviewdog · action-setup GitHub Action | reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability | High 8.6 | 2.5% | Apr 14, 2025 |
| Mar 19, 2025 | CVE-2025-1316 | Edimax · IC-7100 IP Camera | Edimax IC-7100 IP Camera OS Command Injection Vulnerability | Critical 9.8 | 74.5% | Apr 9, 2025 |
| Mar 19, 2025 | CVE-2024-48248 | NAKIVO · Backup and Replication | NAKIVO Backup and Replication Absolute Path Traversal Vulnerability | High 8.6 | 94.4% | Apr 9, 2025 |
| Mar 19, 2025 | CVE-2017-12637 | SAP · NetWeaver | SAP NetWeaver Directory Traversal Vulnerability | High 7.5 | 95.1% | Apr 9, 2025 |
| Mar 18, 2025 | CVE-2025-30066 | tj-actions · changed-files GitHub Action | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability | High 8.6 | 72.1% | Apr 8, 2025 |
| Mar 18, 2025 | CVE-2025-24472 Ransomware | Fortinet · FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | High 8.1 | 7.2% | Apr 8, 2025 |
| Mar 13, 2025 | CVE-2025-24201 | Apple · Multiple Products | Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability | Critical 10.0 | 3.8% | Apr 3, 2025 |
| Mar 13, 2025 | CVE-2025-21590 | Juniper · Junos OS | Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability | Medium 4.4 | 1.7% | Apr 3, 2025 |
| Mar 11, 2025 | CVE-2025-26633 Ransomware | Microsoft · Windows | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability | High 7.0 | 30.4% | Apr 1, 2025 |
| Mar 11, 2025 | CVE-2025-24993 | Microsoft · Windows | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | High 7.8 | 2.2% | Apr 1, 2025 |
| Mar 11, 2025 | CVE-2025-24991 | Microsoft · Windows | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | Medium 5.5 | 2.0% | Apr 1, 2025 |
| Mar 11, 2025 | CVE-2025-24985 | Microsoft · Windows | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | High 7.8 | 3.9% | Apr 1, 2025 |
| Mar 11, 2025 | CVE-2025-24984 | Microsoft · Windows | Microsoft Windows NTFS Information Disclosure Vulnerability | Medium 4.6 | 2.0% | Apr 1, 2025 |
| Mar 11, 2025 | CVE-2025-24983 | Microsoft · Windows | Microsoft Windows Win32k Use-After-Free Vulnerability | High 7.0 | 1.9% | Apr 1, 2025 |
| Mar 10, 2025 | CVE-2025-25181 | Advantive · VeraCore | Advantive VeraCore SQL Injection Vulnerability | Medium 5.8 | 55.5% | Mar 31, 2025 |
| Mar 10, 2025 | CVE-2024-57968 | Advantive · VeraCore | Advantive VeraCore Unrestricted File Upload Vulnerability | Critical 9.9 | 32.3% | Mar 31, 2025 |
| Mar 10, 2025 | CVE-2024-13161 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Critical 9.8 | 89.8% | Mar 31, 2025 |
| Mar 10, 2025 | CVE-2024-13160 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Critical 9.8 | 91.0% | Mar 31, 2025 |
| Mar 10, 2025 | CVE-2024-13159 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | Critical 9.8 | 100.0% | Mar 31, 2025 |
| Mar 4, 2025 | CVE-2025-22226 | VMware · ESXi, Workstation, and Fusion | VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability | High 7.1 | 1.6% | Mar 25, 2025 |
| Mar 4, 2025 | CVE-2025-22225 Ransomware | VMware · ESXi | VMware ESXi Arbitrary Write Vulnerability | High 8.2 | 1.0% | Mar 25, 2025 |
| Mar 4, 2025 | CVE-2025-22224 | VMware · ESXi and Workstation | VMware ESXi and Workstation TOCTOU Race Condition Vulnerability | Critical 9.3 | 1.6% | Mar 25, 2025 |
| Mar 4, 2025 | CVE-2024-50302 | Linux · Kernel | Linux Kernel Use of Uninitialized Resource Vulnerability | Medium 5.5 | 0.8% | Mar 25, 2025 |
| Mar 3, 2025 | CVE-2024-4885 | Progress · WhatsUp Gold | Progress WhatsUp Gold Path Traversal Vulnerability | Critical 9.8 | 99.3% | Mar 24, 2025 |
| Mar 3, 2025 | CVE-2023-20118 | Cisco · Small Business RV Series Routers | Cisco Small Business RV Series Routers Command Injection Vulnerability | Medium 6.5 | 54.1% | Mar 24, 2025 |
| Mar 3, 2025 | CVE-2022-43939 | Hitachi Vantara · Pentaho Business Analytics (BA) Server | Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability | High 8.6 | 92.3% | Mar 24, 2025 |
| Mar 3, 2025 | CVE-2022-43769 | Hitachi Vantara · Pentaho Business Analytics (BA) Server | Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability | High 8.8 | 97.7% | Mar 24, 2025 |
| Mar 3, 2025 | CVE-2018-8639 Ransomware | Microsoft · Windows | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability | High 8.4 | 22.3% | Mar 24, 2025 |
| Feb 25, 2025 | CVE-2024-49035 | Microsoft · Partner Center | Microsoft Partner Center Improper Access Control Vulnerability | High 8.7 | 1.4% | Mar 18, 2025 |
| Feb 25, 2025 | CVE-2023-34192 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | Critical 9.0 | 77.3% | Mar 18, 2025 |
| Feb 24, 2025 | CVE-2024-20953 | Oracle · Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability | High 8.8 | 3.9% | Mar 17, 2025 |
| Feb 24, 2025 | CVE-2017-3066 | Adobe · ColdFusion | Adobe ColdFusion Deserialization Vulnerability | Critical 9.8 | 90.6% | Mar 17, 2025 |
| Feb 21, 2025 | CVE-2025-24989 | Microsoft · Power Pages | Microsoft Power Pages Improper Access Control Vulnerability | High 8.2 | 1.6% | Mar 14, 2025 |
| Feb 20, 2025 | CVE-2025-23209 | Craft CMS · Craft CMS | Craft CMS Code Injection Vulnerability | High 8.1 | 21.6% | Mar 13, 2025 |
| Feb 20, 2025 | CVE-2025-0111 | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS File Read Vulnerability | High 7.1 | 2.0% | Mar 13, 2025 |
| Feb 18, 2025 | CVE-2025-0108 | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | High 8.8 | 98.5% | Mar 11, 2025 |
| Feb 18, 2025 | CVE-2024-53704 Ransomware | SonicWall · SonicOS | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | High 8.2 | 95.3% | Mar 11, 2025 |
| Feb 13, 2025 | CVE-2024-57727 Ransomware | SimpleHelp · SimpleHelp | SimpleHelp Path Traversal Vulnerability | Critical 9.1 | 96.8% | Mar 6, 2025 |
| Feb 12, 2025 | CVE-2025-24200 | Apple · iOS and iPadOS | Apple iOS and iPadOS Incorrect Authorization Vulnerability | Medium 6.1 | 4.5% | Mar 5, 2025 |