Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Sep 13, 2024 | CVE-2024-8190 | Ivanti · Cloud Services Appliance | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | High 7.2 | 88.5% | Oct 4, 2024 |
| Sep 10, 2024 | CVE-2024-38226 | Microsoft · Publisher | Microsoft Publisher Protection Mechanism Failure Vulnerability | High 7.3 | 2.7% | Oct 1, 2024 |
| Sep 10, 2024 | CVE-2024-38217 | Microsoft · Windows | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | Medium 5.4 | 10.0% | Oct 1, 2024 |
| Sep 10, 2024 | CVE-2024-38014 | Microsoft · Windows | Microsoft Windows Installer Improper Privilege Management Vulnerability | High 7.8 | 6.3% | Oct 1, 2024 |
| Sep 9, 2024 | CVE-2024-40766 Ransomware | SonicWall · SonicOS | SonicWall SonicOS Improper Access Control Vulnerability | Critical 9.3 | 18.4% | Sep 30, 2024 |
| Sep 9, 2024 | CVE-2017-1000253 Ransomware | Linux · Kernel | Linux Kernel PIE Stack Buffer Corruption Vulnerability | High 7.8 | 10.7% | Sep 30, 2024 |
| Sep 9, 2024 | CVE-2016-3714 | ImageMagick · ImageMagick | ImageMagick Improper Input Validation Vulnerability | High 8.4 | 97.5% | Sep 30, 2024 |
| Sep 3, 2024 | CVE-2024-7262 | Kingsoft · WPS Office | Kingsoft WPS Office Path Traversal Vulnerability | Critical 9.3 | 3.1% | Sep 24, 2024 |
| Sep 3, 2024 | CVE-2021-20124 | DrayTek · VigorConnect | Draytek VigorConnect Path Traversal Vulnerability | High 7.5 | 95.9% | Sep 24, 2024 |
| Sep 3, 2024 | CVE-2021-20123 | DrayTek · VigorConnect | Draytek VigorConnect Path Traversal Vulnerability | High 7.5 | 89.7% | Sep 24, 2024 |
| Aug 28, 2024 | CVE-2024-7965 | Google · Chromium V8 | Google Chromium V8 Inappropriate Implementation Vulnerability | High 8.8 | 18.5% | Sep 18, 2024 |
| Aug 27, 2024 | CVE-2024-38856 | Apache · OFBiz | Apache OFBiz Incorrect Authorization Vulnerability | High 8.1 | 99.4% | Sep 17, 2024 |
| Aug 26, 2024 | CVE-2024-7971 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 21.0% | Sep 16, 2024 |
| Aug 23, 2024 | CVE-2024-39717 | Versa · Director | Versa Director Dangerous File Type Upload Vulnerability | Medium 6.6 | 4.0% | Sep 13, 2024 |
| Aug 21, 2024 | CVE-2022-0185 | Linux · Kernel | Linux Kernel Heap-Based Buffer Overflow Vulnerability | High 8.4 | 25.2% | Sep 11, 2024 |
| Aug 21, 2024 | CVE-2021-33045 | Dahua · IP Camera Firmware | Dahua IP Camera Authentication Bypass Vulnerability | Critical 9.8 | 99.6% | Sep 11, 2024 |
| Aug 21, 2024 | CVE-2021-33044 | Dahua · IP Camera Firmware | Dahua IP Camera Authentication Bypass Vulnerability | Critical 9.8 | 100.0% | Sep 11, 2024 |
| Aug 21, 2024 | CVE-2021-31196 | Microsoft · Exchange Server | Microsoft Exchange Server Information Disclosure Vulnerability | High 7.2 | 54.1% | Sep 11, 2024 |
| Aug 19, 2024 | CVE-2024-23897 Ransomware | Jenkins · Jenkins Command Line Interface (CLI) | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability | Critical 9.8 | 100.0% | Sep 9, 2024 |
| Aug 15, 2024 | CVE-2024-28986 | SolarWinds · Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 84.6% | Sep 5, 2024 |
| Aug 13, 2024 | CVE-2024-38213 | Microsoft · Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | Medium 6.5 | 13.6% | Sep 3, 2024 |
| Aug 13, 2024 | CVE-2024-38193 | Microsoft · Windows | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | High 7.8 | 28.7% | Sep 3, 2024 |
| Aug 13, 2024 | CVE-2024-38189 | Microsoft · Project | Microsoft Project Remote Code Execution Vulnerability | High 8.8 | 8.2% | Sep 3, 2024 |
| Aug 13, 2024 | CVE-2024-38178 | Microsoft · Windows | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | High 7.5 | 41.4% | Sep 3, 2024 |
| Aug 13, 2024 | CVE-2024-38107 | Microsoft · Windows | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | High 7.8 | 1.6% | Sep 3, 2024 |
| Aug 13, 2024 | CVE-2024-38106 | Microsoft · Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | High 7.0 | 6.3% | Sep 3, 2024 |
| Aug 7, 2024 | CVE-2024-36971 | Android · Kernel | Android Kernel Remote Code Execution Vulnerability | High 7.8 | 2.7% | Aug 28, 2024 |
| Aug 7, 2024 | CVE-2024-32113 | Apache · OFBiz | Apache OFBiz Path Traversal Vulnerability | Critical 9.1 | 99.9% | Aug 28, 2024 |
| Aug 5, 2024 | CVE-2018-0824 | Microsoft · Windows | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | High 7.5 | 73.0% | Aug 26, 2024 |
| Jul 30, 2024 | CVE-2024-37085 Ransomware | VMware · ESXi | VMware ESXi Authentication Bypass Vulnerability | Medium 6.8 | 26.8% | Aug 20, 2024 |
| Jul 29, 2024 | CVE-2024-5217 | ServiceNow · Utah, Vancouver, and Washington DC Now Platform | ServiceNow Incomplete List of Disallowed Inputs Vulnerability | Critical 9.8 | 99.6% | Aug 19, 2024 |
| Jul 29, 2024 | CVE-2024-4879 | ServiceNow · Utah, Vancouver, and Washington DC Now Platform | ServiceNow Improper Input Validation Vulnerability | Critical 9.8 | 100.0% | Aug 19, 2024 |
| Jul 29, 2024 | CVE-2023-45249 | Acronis · Cyber Infrastructure (ACI) | Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability | Critical 9.8 | 53.5% | Aug 19, 2024 |
| Jul 23, 2024 | CVE-2024-39891 | Twilio · Authy | Twilio Authy Information Disclosure Vulnerability | Medium 5.3 | 1.7% | Aug 13, 2024 |
| Jul 23, 2024 | CVE-2012-4792 | Microsoft · Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | High 8.8 | 78.8% | Aug 13, 2024 |
| Jul 17, 2024 | CVE-2024-34102 | Adobe · Commerce and Magento Open Source | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | Critical 9.8 | 100.0% | Aug 7, 2024 |
| Jul 17, 2024 | CVE-2024-28995 | SolarWinds · Serv-U | SolarWinds Serv-U Path Traversal Vulnerability | High 8.6 | 99.6% | Aug 7, 2024 |
| Jul 17, 2024 | CVE-2022-22948 | VMware · vCenter Server | VMware vCenter Server Incorrect Default File Permissions Vulnerability | Medium 6.5 | 13.3% | Aug 7, 2024 |
| Jul 15, 2024 | CVE-2024-36401 | OSGeo · GeoServer | OSGeo GeoServer GeoTools Eval Injection Vulnerability | Critical 9.8 | 99.8% | Aug 5, 2024 |
| Jul 9, 2024 | CVE-2024-38112 | Microsoft · Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | High 7.5 | 84.2% | Jul 30, 2024 |
| Jul 9, 2024 | CVE-2024-38080 | Microsoft · Windows | Microsoft Windows Hyper-V Privilege Escalation Vulnerability | High 7.8 | 7.1% | Jul 30, 2024 |
| Jul 9, 2024 | CVE-2024-23692 Ransomware | Rejetto · HTTP File Server | Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | Critical 9.8 | 99.5% | Jul 30, 2024 |
| Jul 2, 2024 | CVE-2024-20399 | Cisco · NX-OS | Cisco NX-OS Command Injection Vulnerability | Medium 6.0 | 4.3% | Jul 23, 2024 |
| Jun 26, 2024 | CVE-2022-2586 | Linux · Kernel | Linux Kernel Use-After-Free Vulnerability | Medium 5.3 | 10.2% | Jul 17, 2024 |
| Jun 26, 2024 | CVE-2022-24816 | OSGeo · JAI-EXT | OSGeo GeoServer JAI-EXT Code Injection Vulnerability | Critical 10.0 | 99.9% | Jul 17, 2024 |
| Jun 26, 2024 | CVE-2020-13965 | Roundcube · Webmail | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | Medium 6.3 | 76.6% | Jul 17, 2024 |
| Jun 13, 2024 | CVE-2024-4358 | Progress · Telerik Report Server | Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability | Critical 9.8 | 97.5% | Jul 4, 2024 |
| Jun 13, 2024 | CVE-2024-32896 | Android · Pixel | Android Pixel Privilege Escalation Vulnerability | High 8.1 | 3.0% | Jul 4, 2024 |
| Jun 13, 2024 | CVE-2024-26169 Ransomware | Microsoft · Windows | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability | High 7.8 | 4.0% | Jul 4, 2024 |
| Jun 12, 2024 | CVE-2024-4610 | Arm · Mali GPU Kernel Driver | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | High 7.4 | 0.8% | Jul 3, 2024 |