Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Jan 18, 2024 | CVE-2023-35082 Ransomware | Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Core | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | Critical 10.0 | 100.0% | Feb 8, 2024 |
| Jan 17, 2024 | CVE-2024-0519 | Google · Chromium V8 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | High 8.8 | 3.8% | Feb 7, 2024 |
| Jan 17, 2024 | CVE-2023-6549 | Citrix · NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | High 8.2 | 57.6% | Feb 7, 2024 |
| Jan 17, 2024 | CVE-2023-6548 | Citrix · NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | Medium 5.5 | 3.2% | Jan 24, 2024 |
| Jan 16, 2024 | CVE-2018-15133 | Laravel · Laravel Framework | Laravel Deserialization of Untrusted Data Vulnerability | High 8.1 | 76.6% | Feb 6, 2024 |
| Jan 10, 2024 | CVE-2024-21887 Ransomware | Ivanti · Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | Critical 9.1 | 100.0% | Jan 22, 2024 |
| Jan 10, 2024 | CVE-2023-46805 Ransomware | Ivanti · Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | High 8.2 | 100.0% | Jan 22, 2024 |
| Jan 10, 2024 | CVE-2023-29357 Ransomware | Microsoft · SharePoint Server | Microsoft SharePoint Server Privilege Escalation Vulnerability | Critical 9.8 | 100.0% | Jan 31, 2024 |
| Jan 8, 2024 | CVE-2023-41990 | Apple · Multiple Products | Apple Multiple Products Code Execution Vulnerability | High 7.8 | 1.4% | Jan 29, 2024 |
| Jan 8, 2024 | CVE-2023-38203 Ransomware | Adobe · ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 97.1% | Jan 29, 2024 |
| Jan 8, 2024 | CVE-2023-29300 Ransomware | Adobe · ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 100.0% | Jan 29, 2024 |
| Jan 8, 2024 | CVE-2023-27524 | Apache · Superset | Apache Superset Insecure Default Initialization of Resource Vulnerability | High 8.9 | 98.1% | Jan 29, 2024 |
| Jan 8, 2024 | CVE-2023-23752 | Joomla! · Joomla! | Joomla! Improper Access Control Vulnerability | Medium 5.3 | 99.8% | Jan 29, 2024 |
| Jan 8, 2024 | CVE-2016-20017 | D-Link · DSL-2750B Devices | D-Link DSL-2750B Devices Command Injection Vulnerability | Critical 9.8 | 65.8% | Jan 29, 2024 |
| Jan 2, 2024 | CVE-2023-7101 | Spreadsheet::ParseExcel · Spreadsheet::ParseExcel | Spreadsheet::ParseExcel Remote Code Execution Vulnerability | High 7.8 | 19.0% | Jan 23, 2024 |
| Jan 2, 2024 | CVE-2023-7024 | Google · Chromium WebRTC | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | High 8.8 | 6.7% | Jan 23, 2024 |
| Dec 21, 2023 | CVE-2023-49897 | FXC · AE1021, AE1021PE | FXC AE1021, AE1021PE OS Command Injection Vulnerability | High 8.8 | 50.4% | Jan 11, 2024 |
| Dec 21, 2023 | CVE-2023-47565 | QNAP · VioStor NVR | QNAP VioStor NVR OS Command Injection Vulnerability | High 8.0 | 73.3% | Jan 11, 2024 |
| Dec 11, 2023 | CVE-2023-6448 | Unitronics · Vision PLC and HMI | Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | Critical 9.8 | 2.1% | Dec 18, 2023 |
| Dec 7, 2023 | CVE-2023-41266 Ransomware | Qlik · Sense | Qlik Sense Path Traversal Vulnerability | High 8.2 | 84.8% | Dec 28, 2023 |
| Dec 7, 2023 | CVE-2023-41265 Ransomware | Qlik · Sense | Qlik Sense HTTP Tunneling Vulnerability | Critical 9.6 | 88.2% | Dec 28, 2023 |
| Dec 5, 2023 | CVE-2023-33107 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Integer Overflow Vulnerability | High 8.4 | 0.7% | Dec 26, 2023 |
| Dec 5, 2023 | CVE-2023-33106 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | High 8.4 | 0.8% | Dec 26, 2023 |
| Dec 5, 2023 | CVE-2023-33063 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | High 7.8 | 0.7% | Dec 26, 2023 |
| Dec 5, 2023 | CVE-2022-22071 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | High 8.4 | 0.4% | Dec 26, 2023 |
| Dec 4, 2023 | CVE-2023-42917 | Apple · Multiple Products | Apple Multiple Products WebKit Memory Corruption Vulnerability | High 8.8 | 9.3% | Dec 25, 2023 |
| Dec 4, 2023 | CVE-2023-42916 | Apple · Multiple Products | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | Medium 6.5 | 17.8% | Dec 25, 2023 |
| Nov 30, 2023 | CVE-2023-6345 | Google · Chromium Skia | Google Skia Integer Overflow Vulnerability | Critical 9.6 | 16.5% | Dec 21, 2023 |
| Nov 30, 2023 | CVE-2023-49103 | ownCloud · ownCloud graphapi | ownCloud graphapi Information Disclosure Vulnerability | Critical 10.0 | 77.8% | Dec 21, 2023 |
| Nov 21, 2023 | CVE-2023-4911 | GNU · GNU C Library | GNU C Library Buffer Overflow Vulnerability | High 7.8 | 63.8% | Dec 12, 2023 |
| Nov 16, 2023 | CVE-2023-36584 | Microsoft · Windows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | Medium 5.4 | 3.3% | Dec 7, 2023 |
| Nov 16, 2023 | CVE-2023-1671 | Sophos · Web Appliance | Sophos Web Appliance Command Injection Vulnerability | Critical 9.8 | 100.0% | Dec 7, 2023 |
| Nov 16, 2023 | CVE-2020-2551 | Oracle · Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | Critical 9.8 | 92.8% | Dec 7, 2023 |
| Nov 14, 2023 | CVE-2023-36036 | Microsoft · Windows | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | High 7.8 | 16.7% | Dec 5, 2023 |
| Nov 14, 2023 | CVE-2023-36033 | Microsoft · Windows | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | High 7.8 | 10.9% | Dec 5, 2023 |
| Nov 14, 2023 | CVE-2023-36025 | Microsoft · Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | High 8.8 | 88.2% | Dec 5, 2023 |
| Nov 13, 2023 | CVE-2023-47246 Ransomware | SysAid · SysAid Server | SysAid Server Path Traversal Vulnerability | Critical 9.8 | 98.9% | Dec 4, 2023 |
| Nov 13, 2023 | CVE-2023-36851 | Juniper · Junos OS | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | Medium 5.3 | 1.1% | Nov 17, 2023 |
| Nov 13, 2023 | CVE-2023-36847 | Juniper · Junos OS | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | Medium 5.3 | 83.5% | Nov 17, 2023 |
| Nov 13, 2023 | CVE-2023-36846 | Juniper · Junos OS | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | Medium 5.3 | 93.5% | Nov 17, 2023 |
| Nov 13, 2023 | CVE-2023-36845 | Juniper · Junos OS | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | Critical 9.8 | 95.1% | Nov 17, 2023 |
| Nov 13, 2023 | CVE-2023-36844 | Juniper · Junos OS | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | Medium 5.3 | 90.0% | Nov 17, 2023 |
| Nov 8, 2023 | CVE-2023-29552 | IETF · Service Location Protocol (SLP) | Service Location Protocol (SLP) Denial-of-Service Vulnerability | High 7.5 | 64.0% | Nov 29, 2023 |
| Nov 7, 2023 | CVE-2023-22518 Ransomware | Atlassian · Confluence Data Center and Server | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | Critical 10.0 | 100.0% | Nov 28, 2023 |
| Nov 2, 2023 | CVE-2023-46604 Ransomware | Apache · ActiveMQ | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability | Critical 10.0 | 100.0% | Nov 23, 2023 |
| Oct 31, 2023 | CVE-2023-46748 | F5 · BIG-IP Configuration Utility | F5 BIG-IP Configuration Utility SQL Injection Vulnerability | High 8.8 | 4.3% | Nov 21, 2023 |
| Oct 31, 2023 | CVE-2023-46747 Ransomware | F5 · BIG-IP Configuration Utility | F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | Critical 9.8 | 96.7% | Nov 21, 2023 |
| Oct 26, 2023 | CVE-2023-5631 | Roundcube · Webmail | Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 76.3% | Nov 16, 2023 |
| Oct 23, 2023 | CVE-2023-20273 | Cisco · Cisco IOS XE Web UI | Cisco IOS XE Web UI Command Injection Vulnerability | High 7.2 | 92.9% | Oct 27, 2023 |
| Oct 18, 2023 | CVE-2023-4966 Ransomware | Citrix · NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | Critical 9.4 | 100.0% | Nov 8, 2023 |