Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Oct 16, 2023 | CVE-2023-20198 | Cisco · IOS XE Web UI | Cisco IOS XE Web UI Privilege Escalation Vulnerability | Critical 10.0 | 99.8% | Oct 20, 2023 |
| Oct 10, 2023 | CVE-2023-44487 | IETF · HTTP/2 | HTTP/2 Rapid Reset Attack Vulnerability | High 7.5 | 100.0% | Oct 31, 2023 |
| Oct 10, 2023 | CVE-2023-41763 | Microsoft · Skype for Business | Microsoft Skype for Business Privilege Escalation Vulnerability | Medium 5.3 | 90.3% | Oct 31, 2023 |
| Oct 10, 2023 | CVE-2023-36563 | Microsoft · WordPad | Microsoft WordPad Information Disclosure Vulnerability | Medium 6.5 | 20.3% | Oct 31, 2023 |
| Oct 10, 2023 | CVE-2023-21608 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | High 7.8 | 59.4% | Oct 31, 2023 |
| Oct 10, 2023 | CVE-2023-20109 | Cisco · IOS and IOS XE | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | Medium 6.6 | 2.5% | Oct 31, 2023 |
| Oct 5, 2023 | CVE-2023-42824 | Apple · iOS and iPadOS | Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | High 7.8 | 1.0% | Oct 26, 2023 |
| Oct 5, 2023 | CVE-2023-40044 Ransomware | Progress · WS_FTP Server | Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability | Critical 10.0 | 90.4% | Oct 26, 2023 |
| Oct 5, 2023 | CVE-2023-22515 Ransomware | Atlassian · Confluence Data Center and Server | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | Critical 10.0 | 99.2% | Oct 13, 2023 |
| Oct 4, 2023 | CVE-2023-42793 Ransomware | JetBrains · TeamCity | JetBrains TeamCity Authentication Bypass Vulnerability | Critical 9.8 | 100.0% | Oct 25, 2023 |
| Oct 4, 2023 | CVE-2023-28229 | Microsoft · Windows CNG Key Isolation Service | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | High 7.0 | 1.7% | Oct 25, 2023 |
| Oct 3, 2023 | CVE-2023-4211 | Arm · Mali GPU Kernel Driver | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | Medium 5.5 | 1.0% | Oct 24, 2023 |
| Oct 2, 2023 | CVE-2023-5217 | Google · Chromium libvpx | Google Chromium libvpx Heap Buffer Overflow Vulnerability | High 8.8 | 49.0% | Oct 23, 2023 |
| Sep 28, 2023 | CVE-2018-14667 | Red Hat · JBoss RichFaces Framework | Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | Critical 9.8 | 74.2% | Oct 19, 2023 |
| Sep 25, 2023 | CVE-2023-41993 | Apple · Multiple Products | Apple Multiple Products WebKit Code Execution Vulnerability | High 8.8 | 23.7% | Oct 16, 2023 |
| Sep 25, 2023 | CVE-2023-41992 | Apple · Multiple Products | Apple Multiple Products Kernel Privilege Escalation Vulnerability | High 7.8 | 9.5% | Oct 16, 2023 |
| Sep 25, 2023 | CVE-2023-41991 | Apple · Multiple Products | Apple Multiple Products Improper Certificate Validation Vulnerability | Medium 5.5 | 13.4% | Oct 16, 2023 |
| Sep 21, 2023 | CVE-2023-41179 | Trend Micro · Apex One and Worry-Free Business Security | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | High 7.2 | 4.2% | Oct 12, 2023 |
| Sep 19, 2023 | CVE-2023-28434 | MinIO · MinIO | MinIO Security Feature Bypass Vulnerability | High 8.8 | 7.9% | Oct 10, 2023 |
| Sep 18, 2023 | CVE-2022-22265 | Samsung · Mobile Devices | Samsung Mobile Devices Use-After-Free Vulnerability | Medium 5.0 | 0.4% | Oct 9, 2023 |
| Sep 18, 2023 | CVE-2021-3129 Ransomware | Laravel · Ignition | Laravel Ignition File Upload Vulnerability | Critical 9.8 | 99.9% | Oct 9, 2023 |
| Sep 18, 2023 | CVE-2017-6884 Ransomware | Zyxel · EMG2926 Routers | Zyxel EMG2926 Routers Command Injection Vulnerability | High 8.8 | 33.0% | Oct 9, 2023 |
| Sep 18, 2023 | CVE-2014-8361 | Realtek · SDK | Realtek SDK Improper Input Validation Vulnerability | Critical 9.8 | 100.0% | Oct 9, 2023 |
| Sep 14, 2023 | CVE-2023-26369 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | High 7.8 | 7.5% | Oct 5, 2023 |
| Sep 13, 2023 | CVE-2023-4863 | Google · Chromium WebP | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | High 8.8 | 100.0% | Oct 4, 2023 |
| Sep 13, 2023 | CVE-2023-35674 | Android · Framework | Android Framework Privilege Escalation Vulnerability | High 8.8 | 2.6% | Oct 4, 2023 |
| Sep 13, 2023 | CVE-2023-20269 Ransomware | Cisco · Adaptive Security Appliance and Firepower Threat Defense | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | Medium 5.0 | 26.6% | Oct 4, 2023 |
| Sep 12, 2023 | CVE-2023-36802 | Microsoft · Streaming Service Proxy | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | High 7.8 | 27.9% | Oct 3, 2023 |
| Sep 12, 2023 | CVE-2023-36761 | Microsoft · Word | Microsoft Word Information Disclosure Vulnerability | Medium 6.5 | 19.6% | Oct 3, 2023 |
| Sep 11, 2023 | CVE-2023-41064 | Apple · iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | High 7.8 | 53.4% | Oct 2, 2023 |
| Sep 11, 2023 | CVE-2023-41061 | Apple · iOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | High 7.8 | 4.4% | Oct 2, 2023 |
| Sep 6, 2023 | CVE-2023-33246 | Apache · RocketMQ | Apache RocketMQ Command Execution Vulnerability | Critical 9.8 | 96.6% | Sep 27, 2023 |
| Aug 24, 2023 | CVE-2023-38831 Ransomware | RARLAB · WinRAR | RARLAB WinRAR Code Execution Vulnerability | High 7.8 | 99.8% | Sep 14, 2023 |
| Aug 24, 2023 | CVE-2023-32315 | Ignite Realtime · Openfire | Ignite Realtime Openfire Path Traversal Vulnerability | High 8.6 | 100.0% | Sep 14, 2023 |
| Aug 22, 2023 | CVE-2023-38035 Ransomware | Ivanti · Sentry | Ivanti Sentry Authentication Bypass Vulnerability | Critical 9.8 | 100.0% | Sep 12, 2023 |
| Aug 22, 2023 | CVE-2023-27532 Ransomware | Veeam · Backup & Replication | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability | High 7.5 | 80.6% | Sep 12, 2023 |
| Aug 21, 2023 | CVE-2023-26359 | Adobe · ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 17.0% | Sep 11, 2023 |
| Aug 16, 2023 | CVE-2023-24489 | Citrix · Content Collaboration | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | Critical 9.8 | 97.3% | Sep 6, 2023 |
| Aug 9, 2023 | CVE-2023-38180 | Microsoft · .NET Core and Visual Studio | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | High 7.5 | 14.1% | Aug 30, 2023 |
| Aug 7, 2023 | CVE-2017-18368 | Zyxel · P660HN-T1A Routers | Zyxel P660HN-T1A Routers Command Injection Vulnerability | Critical 9.8 | 94.5% | Aug 28, 2023 |
| Jul 31, 2023 | CVE-2023-35081 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | High 7.2 | 63.6% | Aug 21, 2023 |
| Jul 27, 2023 | CVE-2023-37580 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 49.1% | Aug 17, 2023 |
| Jul 26, 2023 | CVE-2023-38606 | Apple · Multiple Products | Apple Multiple Products Kernel Unspecified Vulnerability | Medium 5.5 | 2.9% | Aug 16, 2023 |
| Jul 25, 2023 | CVE-2023-35078 Ransomware | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | Critical 10.0 | 100.0% | Aug 15, 2023 |
| Jul 20, 2023 | CVE-2023-38205 | Adobe · ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | High 7.5 | 99.8% | Aug 10, 2023 |
| Jul 20, 2023 | CVE-2023-29298 | Adobe · ColdFusion | Adobe ColdFusion Improper Access Control Vulnerability | High 7.5 | 99.8% | Aug 10, 2023 |
| Jul 19, 2023 | CVE-2023-3519 Ransomware | Citrix · NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | Critical 9.8 | 99.7% | Aug 9, 2023 |
| Jul 17, 2023 | CVE-2023-36884 Ransomware | Microsoft · Windows | Microsoft Windows Search Remote Code Execution Vulnerability | High 7.5 | 99.4% | Aug 29, 2023 |
| Jul 13, 2023 | CVE-2023-37450 | Apple · Multiple Products | Apple Multiple Products WebKit Code Execution Vulnerability | High 8.8 | 18.9% | Aug 3, 2023 |
| Jul 13, 2023 | CVE-2022-29303 | SolarView · Compact | SolarView Compact Command Injection Vulnerability | Critical 9.8 | 98.0% | Aug 3, 2023 |