Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Feb 12, 2025 | CVE-2024-41710 | Mitel · SIP Phones | Mitel SIP Phones Argument Injection Vulnerability | Medium 6.8 | 41.6% | Mar 5, 2025 |
| Feb 11, 2025 | CVE-2025-21418 | Microsoft · Windows | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | High 7.8 | 2.1% | Mar 4, 2025 |
| Feb 11, 2025 | CVE-2025-21391 | Microsoft · Windows | Microsoft Windows Storage Link Following Vulnerability | High 7.1 | 2.3% | Mar 4, 2025 |
| Feb 11, 2025 | CVE-2024-40891 | Zyxel · DSL CPE Devices | Zyxel DSL CPE OS Command Injection Vulnerability | High 8.8 | 22.9% | Mar 4, 2025 |
| Feb 11, 2025 | CVE-2024-40890 | Zyxel · DSL CPE Devices | Zyxel DSL CPE OS Command Injection Vulnerability | High 8.8 | 20.7% | Mar 4, 2025 |
| Feb 7, 2025 | CVE-2025-0994 | Trimble · Cityworks | Trimble Cityworks Deserialization Vulnerability | High 8.6 | 31.3% | Feb 28, 2025 |
| Feb 6, 2025 | CVE-2025-0411 | 7-Zip · 7-Zip | 7-Zip Mark of the Web Bypass Vulnerability | High 7.0 | 47.6% | Feb 27, 2025 |
| Feb 6, 2025 | CVE-2024-21413 | Microsoft · Office Outlook | Microsoft Outlook Improper Input Validation Vulnerability | Critical 9.8 | 94.7% | Feb 27, 2025 |
| Feb 6, 2025 | CVE-2022-23748 | Audinate · Dante Discovery | Dante Discovery Process Control Vulnerability | High 7.8 | 8.3% | Feb 27, 2025 |
| Feb 6, 2025 | CVE-2020-29574 Ransomware | Sophos · CyberoamOS | CyberoamOS (CROS) SQL Injection Vulnerability | Critical 9.8 | 4.7% | Feb 27, 2025 |
| Feb 6, 2025 | CVE-2020-15069 | Sophos · XG Firewall | Sophos XG Firewall Buffer Overflow Vulnerability | Critical 9.8 | 10.7% | Feb 27, 2025 |
| Feb 5, 2025 | CVE-2024-53104 | Linux · Kernel | Linux Kernel Out-of-Bounds Write Vulnerability | High 7.8 | 3.4% | Feb 26, 2025 |
| Feb 4, 2025 | CVE-2024-45195 | Apache · OFBiz | Apache OFBiz Forced Browsing Vulnerability | Critical 9.8 | 100.0% | Feb 25, 2025 |
| Feb 4, 2025 | CVE-2024-29059 | Microsoft · .NET Framework | Microsoft .NET Framework Information Disclosure Vulnerability | High 7.5 | 98.6% | Feb 25, 2025 |
| Feb 4, 2025 | CVE-2018-9276 | Paessler · PRTG Network Monitor | Paessler PRTG Network Monitor OS Command Injection Vulnerability | High 7.2 | 87.0% | Feb 25, 2025 |
| Feb 4, 2025 | CVE-2018-19410 | Paessler · PRTG Network Monitor | Paessler PRTG Network Monitor Local File Inclusion Vulnerability | Critical 9.8 | 97.9% | Feb 25, 2025 |
| Jan 29, 2025 | CVE-2025-24085 | Apple · Multiple Products | Apple Multiple Products Use-After-Free Vulnerability | Critical 10.0 | 17.4% | Feb 19, 2025 |
| Jan 24, 2025 | CVE-2025-23006 Ransomware | SonicWall · SMA1000 Appliances | SonicWall SMA1000 Appliances Deserialization Vulnerability | Critical 9.8 | 26.6% | Feb 14, 2025 |
| Jan 23, 2025 | CVE-2020-11023 | JQuery · JQuery | JQuery Cross-Site Scripting (XSS) Vulnerability | Medium 6.9 | 84.9% | Feb 13, 2025 |
| Jan 16, 2025 | CVE-2024-50603 | Aviatrix · Controllers | Aviatrix Controllers OS Command Injection Vulnerability | Critical 10.0 | 98.5% | Feb 6, 2025 |
| Jan 14, 2025 | CVE-2025-21335 | Microsoft · Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | High 7.8 | 1.4% | Feb 4, 2025 |
| Jan 14, 2025 | CVE-2025-21334 | Microsoft · Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | High 7.8 | 1.6% | Feb 4, 2025 |
| Jan 14, 2025 | CVE-2025-21333 | Microsoft · Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | High 7.8 | 10.1% | Feb 4, 2025 |
| Jan 14, 2025 | CVE-2024-55591 Ransomware | Fortinet · FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | Critical 9.6 | 94.3% | Jan 21, 2025 |
| Jan 13, 2025 | CVE-2024-12686 | BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability | Medium 6.6 | 32.6% | Feb 3, 2025 |
| Jan 13, 2025 | CVE-2023-48365 Ransomware | Qlik · Sense | Qlik Sense HTTP Tunneling Vulnerability | Critical 9.6 | 47.7% | Feb 3, 2025 |
| Jan 8, 2025 | CVE-2025-0282 Ransomware | Ivanti · Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability | Critical 9.0 | 100.0% | Jan 15, 2025 |
| Jan 7, 2025 | CVE-2024-55550 Ransomware | Mitel · MiCollab | Mitel MiCollab Path Traversal Vulnerability | Medium 4.4 | 38.2% | Jan 28, 2025 |
| Jan 7, 2025 | CVE-2024-41713 Ransomware | Mitel · MiCollab | Mitel MiCollab Path Traversal Vulnerability | Critical 9.1 | 97.2% | Jan 28, 2025 |
| Jan 7, 2025 | CVE-2020-2883 | Oracle · WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | Critical 9.8 | 94.6% | Jan 28, 2025 |
| Dec 30, 2024 | CVE-2024-3393 | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability | High 8.7 | 29.1% | Jan 20, 2025 |
| Dec 23, 2024 | CVE-2021-44207 | Acclaim Systems · USAHERDS | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability | High 8.1 | 17.6% | Jan 13, 2025 |
| Dec 19, 2024 | CVE-2024-12356 | BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS) | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability | Critical 9.8 | 87.4% | Dec 27, 2024 |
| Dec 18, 2024 | CVE-2022-23227 | NUUO · NVRmini2 Devices | NUUO NVRmini2 Devices Missing Authentication Vulnerability | Critical 9.8 | 48.5% | Jan 8, 2025 |
| Dec 18, 2024 | CVE-2021-40407 | Reolink · RLC-410W IP Camera | Reolink RLC-410W IP Camera OS Command Injection Vulnerability | Critical 9.1 | 47.6% | Jan 8, 2025 |
| Dec 18, 2024 | CVE-2019-11001 | Reolink · Multiple IP Cameras | Reolink Multiple IP Cameras OS Command Injection Vulnerability | High 7.2 | 37.5% | Jan 8, 2025 |
| Dec 18, 2024 | CVE-2018-14933 | NUUO · NVRmini Devices | NUUO NVRmini Devices OS Command Injection Vulnerability | Critical 9.8 | 94.8% | Jan 8, 2025 |
| Dec 17, 2024 | CVE-2024-55956 Ransomware | Cleo · Multiple Products | Cleo Multiple Products Unauthenticated File Upload Vulnerability | Critical 9.8 | 94.0% | Jan 7, 2025 |
| Dec 16, 2024 | CVE-2024-35250 | Microsoft · Windows | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | High 7.8 | 25.2% | Jan 6, 2025 |
| Dec 16, 2024 | CVE-2024-20767 | Adobe · ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | High 7.4 | 98.5% | Jan 6, 2025 |
| Dec 13, 2024 | CVE-2024-50623 Ransomware | Cleo · Multiple Products | Cleo Multiple Products Unrestricted File Upload Vulnerability | Critical 9.8 | 98.6% | Jan 3, 2025 |
| Dec 10, 2024 | CVE-2024-49138 | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | High 7.8 | 26.2% | Dec 31, 2024 |
| Dec 4, 2024 | CVE-2024-51378 Ransomware | CyberPersons · CyberPanel | CyberPanel Incorrect Default Permissions Vulnerability | Critical 10.0 | 94.7% | Dec 25, 2024 |
| Dec 3, 2024 | CVE-2024-11680 | ProjectSend · ProjectSend | ProjectSend Improper Authentication Vulnerability | Critical 9.8 | 91.8% | Dec 24, 2024 |
| Dec 3, 2024 | CVE-2024-11667 Ransomware | Zyxel · Multiple Firewalls | Zyxel Multiple Firewalls Path Traversal Vulnerability | High 7.5 | 3.0% | Dec 24, 2024 |
| Dec 3, 2024 | CVE-2023-45727 | North Grid · Proself | North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability | High 7.5 | 4.8% | Dec 24, 2024 |
| Nov 25, 2024 | CVE-2023-28461 Ransomware | Array Networks · AG/vxAG ArrayOS | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability | Critical 9.8 | 68.1% | Dec 16, 2024 |
| Nov 21, 2024 | CVE-2024-44309 | Apple · Multiple Products | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability | Medium 6.3 | 21.9% | Dec 12, 2024 |
| Nov 21, 2024 | CVE-2024-44308 | Apple · Multiple Products | Apple Multiple Products Code Execution Vulnerability | High 8.8 | 9.9% | Dec 12, 2024 |
| Nov 21, 2024 | CVE-2024-21287 | Oracle · Agile Product Lifecycle Management (PLM) | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability | High 7.5 | 1.7% | Dec 12, 2024 |