Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Jun 12, 2024 | CVE-2024-4577 Ransomware | PHP Group · PHP | PHP-CGI OS Command Injection Vulnerability | Critical 9.8 | 100.0% | Jul 3, 2024 |
| Jun 3, 2024 | CVE-2017-3506 | Oracle · WebLogic Server | Oracle WebLogic Server OS Command Injection Vulnerability | High 7.4 | 96.0% | Jun 24, 2024 |
| May 30, 2024 | CVE-2024-24919 Ransomware | Check Point · Quantum Security Gateways | Check Point Quantum Security Gateways Information Disclosure Vulnerability | High 8.6 | 100.0% | Jun 20, 2024 |
| May 30, 2024 | CVE-2024-1086 Ransomware | Linux · Kernel | Linux Kernel Use-After-Free Vulnerability | High 7.8 | 28.1% | Jun 20, 2024 |
| May 29, 2024 | CVE-2024-4978 | Justice AV Solutions · Viewer | Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability | High 8.4 | 26.9% | Jun 19, 2024 |
| May 28, 2024 | CVE-2024-5274 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.3 | 7.7% | Jun 18, 2024 |
| May 23, 2024 | CVE-2020-17519 | Apache · Flink | Apache Flink Improper Access Control Vulnerability | Critical 9.1 | 98.0% | Jun 13, 2024 |
| May 20, 2024 | CVE-2024-4947 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | Critical 9.6 | 15.2% | Jun 10, 2024 |
| May 20, 2024 | CVE-2023-43208 Ransomware | NextGen Healthcare · Mirth Connect | NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 85.9% | Jun 10, 2024 |
| May 16, 2024 | CVE-2024-4761 | Google · Chromium V8 | Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | High 8.3 | 11.0% | Jun 6, 2024 |
| May 16, 2024 | CVE-2021-40655 | D-Link · DIR-605 Router | D-Link DIR-605 Router Information Disclosure Vulnerability | High 7.5 | 87.0% | Jun 6, 2024 |
| May 16, 2024 | CVE-2014-100005 | D-Link · DIR-600 Router | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability | High 8.0 | 43.5% | Jun 6, 2024 |
| May 14, 2024 | CVE-2024-30051 Ransomware | Microsoft · DWM Core Library | Microsoft DWM Core Library Privilege Escalation Vulnerability | High 7.8 | 5.7% | Jun 4, 2024 |
| May 14, 2024 | CVE-2024-30040 | Microsoft · Windows | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | High 8.8 | 3.9% | Jun 4, 2024 |
| May 13, 2024 | CVE-2024-4671 | Google · Chromium | Google Chromium Visuals Use-After-Free Vulnerability | Critical 9.6 | 8.3% | Jun 3, 2024 |
| May 1, 2024 | CVE-2023-7028 | GitLab · GitLab CE/EE | GitLab Community and Enterprise Editions Improper Access Control Vulnerability | Critical 10.0 | 94.5% | May 22, 2024 |
| Apr 30, 2024 | CVE-2024-29988 | Microsoft · SmartScreen Prompt | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | High 8.8 | 45.2% | May 21, 2024 |
| Apr 24, 2024 | CVE-2024-4040 | CrushFTP · CrushFTP | CrushFTP VFS Sandbox Escape Vulnerability | Critical 9.8 | 99.5% | May 1, 2024 |
| Apr 24, 2024 | CVE-2024-20359 | Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Privilege Escalation Vulnerability | Medium 6.0 | 18.8% | May 1, 2024 |
| Apr 24, 2024 | CVE-2024-20353 | Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Denial of Service Vulnerability | High 8.6 | 69.8% | May 1, 2024 |
| Apr 23, 2024 | CVE-2022-38028 | Microsoft · Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | High 7.8 | 14.9% | May 14, 2024 |
| Apr 12, 2024 | CVE-2024-3400 Ransomware | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Command Injection Vulnerability | Critical 10.0 | 100.0% | Apr 19, 2024 |
| Apr 11, 2024 | CVE-2024-3273 | D-Link · Multiple NAS Devices | D-Link Multiple NAS Devices Command Injection Vulnerability | High 7.3 | 100.0% | May 2, 2024 |
| Apr 11, 2024 | CVE-2024-3272 | D-Link · Multiple NAS Devices | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability | Critical 9.8 | 98.1% | May 2, 2024 |
| Apr 4, 2024 | CVE-2024-29748 | Android · Pixel | Android Pixel Privilege Escalation Vulnerability | High 7.8 | 0.7% | Apr 25, 2024 |
| Apr 4, 2024 | CVE-2024-29745 | Android · Pixel | Android Pixel Information Disclosure Vulnerability | Medium 5.5 | 0.5% | Apr 25, 2024 |
| Mar 26, 2024 | CVE-2023-24955 Ransomware | Microsoft · SharePoint Server | Microsoft SharePoint Server Code Injection Vulnerability | High 7.2 | 85.0% | Apr 16, 2024 |
| Mar 25, 2024 | CVE-2023-48788 Ransomware | Fortinet · FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | Critical 9.3 | 98.4% | Apr 15, 2024 |
| Mar 25, 2024 | CVE-2021-44529 Ransomware | Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA) | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | Critical 9.8 | 99.1% | Apr 15, 2024 |
| Mar 25, 2024 | CVE-2019-7256 | Nice · Linear eMerge E3-Series | Nice Linear eMerge E3-Series OS Command Injection Vulnerability | Critical 9.8 | 97.1% | Apr 15, 2024 |
| Mar 7, 2024 | CVE-2024-27198 Ransomware | JetBrains · TeamCity | JetBrains TeamCity Authentication Bypass Vulnerability | Critical 9.8 | 99.9% | Mar 28, 2024 |
| Mar 6, 2024 | CVE-2024-23296 | Apple · Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | High 7.8 | 1.4% | Mar 27, 2024 |
| Mar 6, 2024 | CVE-2024-23225 | Apple · Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | High 7.8 | 1.5% | Mar 27, 2024 |
| Mar 5, 2024 | CVE-2023-21237 | Android · Pixel | Android Pixel Information Disclosure Vulnerability | Medium 6.2 | 0.3% | Mar 26, 2024 |
| Mar 5, 2024 | CVE-2021-36380 | Sunhillo · SureLine | Sunhillo SureLine OS Command Injection Vulnerablity | Critical 9.8 | 97.8% | Mar 26, 2024 |
| Mar 4, 2024 | CVE-2024-21338 Ransomware | Microsoft · Windows | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability | High 7.8 | 59.8% | Mar 25, 2024 |
| Feb 29, 2024 | CVE-2023-29360 | Microsoft · Streaming Service | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | High 8.4 | 21.6% | Mar 21, 2024 |
| Feb 22, 2024 | CVE-2024-1709 Ransomware | ConnectWise · ScreenConnect | ConnectWise ScreenConnect Authentication Bypass Vulnerability | Critical 10.0 | 100.0% | Feb 29, 2024 |
| Feb 15, 2024 | CVE-2024-21410 | Microsoft · Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | Critical 9.8 | 12.7% | Mar 7, 2024 |
| Feb 15, 2024 | CVE-2020-3259 Ransomware | Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Cisco ASA and FTD Information Disclosure Vulnerability | High 7.5 | 71.5% | Mar 7, 2024 |
| Feb 13, 2024 | CVE-2024-21412 Ransomware | Microsoft · Windows | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability | High 8.1 | 99.4% | Mar 5, 2024 |
| Feb 13, 2024 | CVE-2024-21351 | Microsoft · Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | High 7.6 | 27.8% | Mar 5, 2024 |
| Feb 12, 2024 | CVE-2023-43770 | Roundcube · Webmail | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 63.7% | Mar 4, 2024 |
| Feb 9, 2024 | CVE-2024-21762 Ransomware | Fortinet · FortiOS | Fortinet FortiOS Out-of-Bound Write Vulnerability | Critical 9.6 | 84.6% | Feb 16, 2024 |
| Feb 6, 2024 | CVE-2023-4762 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 41.4% | Feb 27, 2024 |
| Jan 31, 2024 | CVE-2024-21893 Ransomware | Ivanti · Connect Secure, Policy Secure, and Neurons | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | High 8.2 | 100.0% | Feb 2, 2024 |
| Jan 31, 2024 | CVE-2022-48618 | Apple · Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | High 7.0 | 0.5% | Feb 21, 2024 |
| Jan 24, 2024 | CVE-2023-22527 Ransomware | Atlassian · Confluence Data Center and Server | Atlassian Confluence Data Center and Server Template Injection Vulnerability | Critical 10.0 | 100.0% | Feb 14, 2024 |
| Jan 23, 2024 | CVE-2024-23222 | Apple · Multiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability | High 8.8 | 10.6% | Feb 13, 2024 |
| Jan 22, 2024 | CVE-2023-34048 | VMware · vCenter Server | VMware vCenter Server Out-of-Bounds Write Vulnerability | Critical 9.8 | 99.2% | Feb 12, 2024 |