Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Jul 11, 2023 | CVE-2023-36874 | Microsoft · Windows | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | High 7.8 | 42.6% | Aug 1, 2023 |
| Jul 11, 2023 | CVE-2023-35311 | Microsoft · Outlook | Microsoft Outlook Security Feature Bypass Vulnerability | High 8.8 | 15.5% | Aug 1, 2023 |
| Jul 11, 2023 | CVE-2023-32049 | Microsoft · Windows | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | High 8.8 | 4.2% | Aug 1, 2023 |
| Jul 11, 2023 | CVE-2023-32046 | Microsoft · Windows | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | High 7.8 | 10.0% | Aug 1, 2023 |
| Jul 11, 2023 | CVE-2022-31199 Ransomware | Netwrix · Auditor | Netwrix Auditor Insecure Object Deserialization Vulnerability | Critical 9.8 | 36.0% | Aug 1, 2023 |
| Jul 7, 2023 | CVE-2021-29256 | Arm · Mali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | High 8.8 | 3.0% | Jul 28, 2023 |
| Jun 29, 2023 | CVE-2021-25489 | Samsung · Mobile Devices | Samsung Mobile Devices Improper Input Validation Vulnerability | Low 3.3 | 0.5% | Jul 20, 2023 |
| Jun 29, 2023 | CVE-2021-25487 | Samsung · Mobile Devices | Samsung Mobile Devices Out-of-Bounds Read Vulnerability | High 7.3 | 0.6% | Jul 20, 2023 |
| Jun 29, 2023 | CVE-2021-25395 | Samsung · Mobile Devices | Samsung Mobile Devices Race Condition Vulnerability | Medium 6.4 | 0.4% | Jul 20, 2023 |
| Jun 29, 2023 | CVE-2021-25394 | Samsung · Mobile Devices | Samsung Mobile Devices Race Condition Vulnerability | Medium 6.4 | 0.4% | Jul 20, 2023 |
| Jun 29, 2023 | CVE-2021-25372 | Samsung · Mobile Devices | Samsung Mobile Devices Improper Boundary Check Vulnerability | Medium 6.1 | 0.8% | Jul 20, 2023 |
| Jun 29, 2023 | CVE-2021-25371 | Samsung · Mobile Devices | Samsung Mobile Devices Unspecified Vulnerability | Medium 6.1 | 0.8% | Jul 20, 2023 |
| Jun 29, 2023 | CVE-2019-20500 | D-Link · DWL-2600AP Access Point | D-Link DWL-2600AP Access Point Command Injection Vulnerability | High 7.8 | 96.7% | Jul 20, 2023 |
| Jun 29, 2023 | CVE-2019-17621 | D-Link · DIR-859 Router | D-Link DIR-859 Router Command Execution Vulnerability | Critical 9.8 | 90.6% | Jul 20, 2023 |
| Jun 23, 2023 | CVE-2023-32439 | Apple · Multiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability | High 8.8 | 24.0% | Jul 14, 2023 |
| Jun 23, 2023 | CVE-2023-32435 | Apple · Multiple Products | Apple Multiple Products WebKit Memory Corruption Vulnerability | High 8.8 | 23.0% | Jul 14, 2023 |
| Jun 23, 2023 | CVE-2023-32434 | Apple · Multiple Products | Apple Multiple Products Integer Overflow Vulnerability | High 7.8 | 51.5% | Jul 14, 2023 |
| Jun 23, 2023 | CVE-2023-27992 | Zyxel · Multiple Network-Attached Storage (NAS) Devices | Zyxel Multiple NAS Devices Command Injection Vulnerability | Critical 9.8 | 82.3% | Jul 14, 2023 |
| Jun 23, 2023 | CVE-2023-20867 | VMware · Tools | VMware Tools Authentication Bypass Vulnerability | Low 3.9 | 13.6% | Jul 14, 2023 |
| Jun 22, 2023 | CVE-2023-20887 | VMware · Aria Operations for Networks | Vmware Aria Operations for Networks Command Injection Vulnerability | Critical 9.8 | 98.3% | Jul 13, 2023 |
| Jun 22, 2023 | CVE-2021-44026 | Roundcube · Roundcube Webmail | Roundcube Webmail SQL Injection Vulnerability | Critical 9.8 | 69.9% | Jul 13, 2023 |
| Jun 22, 2023 | CVE-2020-35730 | Roundcube · Roundcube Webmail | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 32.9% | Jul 13, 2023 |
| Jun 22, 2023 | CVE-2020-12641 | Roundcube · Roundcube Webmail | Roundcube Webmail Remote Code Execution Vulnerability | Critical 9.8 | 84.4% | Jul 13, 2023 |
| Jun 22, 2023 | CVE-2016-9079 | Mozilla · Firefox, Firefox ESR, and Thunderbird | Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability | High 7.5 | 87.4% | Jul 13, 2023 |
| Jun 22, 2023 | CVE-2016-0165 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 13.7% | Jul 13, 2023 |
| Jun 13, 2023 | CVE-2023-27997 Ransomware | Fortinet · FortiOS and FortiProxy SSL-VPN | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | Critical 9.2 | 85.7% | Jul 4, 2023 |
| Jun 7, 2023 | CVE-2023-3079 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 37.9% | Jun 28, 2023 |
| Jun 5, 2023 | CVE-2023-33010 | Zyxel · Multiple Firewalls | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | Critical 9.8 | 29.0% | Jun 26, 2023 |
| Jun 5, 2023 | CVE-2023-33009 | Zyxel · Multiple Firewalls | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | Critical 9.8 | 28.1% | Jun 26, 2023 |
| Jun 2, 2023 | CVE-2023-34362 Ransomware | Progress · MOVEit Transfer | Progress MOVEit Transfer SQL Injection Vulnerability | Critical 9.8 | 99.9% | Jun 23, 2023 |
| May 31, 2023 | CVE-2023-28771 | Zyxel · Multiple Firewalls | Zyxel Multiple Firewalls OS Command Injection Vulnerability | Critical 9.8 | 99.3% | Jun 21, 2023 |
| May 26, 2023 | CVE-2023-2868 | Barracuda Networks · Email Security Gateway (ESG) Appliance | Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | Critical 9.4 | 86.8% | Jun 16, 2023 |
| May 22, 2023 | CVE-2023-32409 | Apple · Multiple Products | Apple Multiple Products WebKit Sandbox Escape Vulnerability | High 8.6 | 16.5% | Jun 12, 2023 |
| May 22, 2023 | CVE-2023-32373 | Apple · Multiple Products | Apple Multiple Products WebKit Use-After-Free Vulnerability | High 8.8 | 12.2% | Jun 12, 2023 |
| May 22, 2023 | CVE-2023-28204 | Apple · Multiple Products | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | Medium 6.5 | 14.3% | Jun 12, 2023 |
| May 19, 2023 | CVE-2023-21492 | Samsung · Mobile Devices | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | Medium 4.4 | 2.6% | Jun 9, 2023 |
| May 19, 2023 | CVE-2016-6415 | Cisco · IOS, IOS XR, and IOS XE | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | High 7.5 | 87.7% | Jun 9, 2023 |
| May 19, 2023 | CVE-2004-1464 | Cisco · IOS | Cisco IOS Denial-of-Service Vulnerability | Medium 5.9 | 4.8% | Jun 9, 2023 |
| May 12, 2023 | CVE-2023-25717 | Ruckus Wireless · Multiple Products | Multiple Ruckus Wireless Products CSRF and RCE Vulnerability | Critical 9.8 | 98.1% | Jun 2, 2023 |
| May 12, 2023 | CVE-2021-3560 | Red Hat · Polkit | Red Hat Polkit Incorrect Authorization Vulnerability | High 7.8 | 22.2% | Jun 2, 2023 |
| May 12, 2023 | CVE-2016-8735 | Apache · Tomcat | Apache Tomcat Remote Code Execution Vulnerability | Critical 9.8 | 90.3% | Jun 2, 2023 |
| May 12, 2023 | CVE-2016-3427 | Oracle · Java SE and JRockit | Oracle Java SE and JRockit Unspecified Vulnerability | Critical 9.8 | 92.3% | Jun 2, 2023 |
| May 12, 2023 | CVE-2015-5317 | Jenkins · Jenkins User Interface (UI) | Jenkins User Interface (UI) Information Disclosure Vulnerability | High 7.5 | 23.0% | Jun 2, 2023 |
| May 12, 2023 | CVE-2014-0196 | Linux · Kernel | Linux Kernel Race Condition Vulnerability | Medium 5.5 | 20.3% | Jun 2, 2023 |
| May 12, 2023 | CVE-2010-3904 | Linux · Kernel | Linux Kernel Improper Input Validation Vulnerability | High 7.8 | 15.9% | Jun 2, 2023 |
| May 9, 2023 | CVE-2023-29336 | Microsoft · Win32k | Microsoft Win32K Privilege Escalation Vulnerability | High 7.8 | 41.2% | May 30, 2023 |
| May 1, 2023 | CVE-2023-21839 | Oracle · WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | High 7.5 | 99.9% | May 22, 2023 |
| May 1, 2023 | CVE-2023-1389 | TP-Link · Archer AX21 | TP-Link Archer AX-21 Command Injection Vulnerability | High 8.8 | 100.0% | May 22, 2023 |
| May 1, 2023 | CVE-2021-45046 Ransomware | Apache · Log4j2 | Apache Log4j2 Deserialization of Untrusted Data Vulnerability | Critical 9.0 | 100.0% | May 22, 2023 |
| Apr 21, 2023 | CVE-2023-28432 | MinIO · MinIO | MinIO Information Disclosure Vulnerability | High 7.5 | 84.0% | May 12, 2023 |