Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Apr 21, 2023 | CVE-2023-27350 Ransomware | PaperCut · MF/NG | PaperCut MF/NG Improper Access Control Vulnerability | Critical 9.8 | 100.0% | May 12, 2023 |
| Apr 21, 2023 | CVE-2023-2136 | Google · Chromium Skia | Google Chrome Skia Integer Overflow Vulnerability | Critical 9.6 | 5.8% | May 12, 2023 |
| Apr 19, 2023 | CVE-2017-6742 | Cisco · IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | High 8.8 | 21.3% | May 10, 2023 |
| Apr 17, 2023 | CVE-2023-2033 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 40.6% | May 8, 2023 |
| Apr 17, 2023 | CVE-2019-8526 | Apple · macOS | Apple macOS Use-After-Free Vulnerability | High 7.8 | 0.7% | May 8, 2023 |
| Apr 13, 2023 | CVE-2023-29492 | Novi Survey · Novi Survey | Novi Survey Insecure Deserialization Vulnerability | Critical 9.8 | 2.7% | May 4, 2023 |
| Apr 13, 2023 | CVE-2023-20963 | Android · Framework | Android Framework Privilege Escalation Vulnerability | High 7.8 | 1.5% | May 4, 2023 |
| Apr 11, 2023 | CVE-2023-28252 Ransomware | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | High 7.8 | 48.9% | May 2, 2023 |
| Apr 10, 2023 | CVE-2023-28206 | Apple · iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | High 8.6 | 23.2% | May 1, 2023 |
| Apr 10, 2023 | CVE-2023-28205 | Apple · Multiple Products | Apple Multiple Products WebKit Use-After-Free Vulnerability | High 8.8 | 27.1% | May 1, 2023 |
| Apr 7, 2023 | CVE-2023-26083 | Arm · Mali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver Information Disclosure Vulnerability | Low 3.3 | 1.2% | Apr 28, 2023 |
| Apr 7, 2023 | CVE-2021-27878 Ransomware | Veritas · Backup Exec Agent | Veritas Backup Exec Agent Command Execution Vulnerability | High 8.8 | 24.0% | Apr 28, 2023 |
| Apr 7, 2023 | CVE-2021-27877 Ransomware | Veritas · Backup Exec Agent | Veritas Backup Exec Agent Improper Authentication Vulnerability | High 8.2 | 64.9% | Apr 28, 2023 |
| Apr 7, 2023 | CVE-2021-27876 Ransomware | Veritas · Backup Exec Agent | Veritas Backup Exec Agent File Access Vulnerability | High 8.1 | 13.5% | Apr 28, 2023 |
| Apr 7, 2023 | CVE-2019-1388 Ransomware | Microsoft · Windows | Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability | High 7.8 | 8.6% | Apr 28, 2023 |
| Apr 3, 2023 | CVE-2022-27926 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 17.6% | Apr 24, 2023 |
| Mar 30, 2023 | CVE-2023-0266 | Linux · Kernel | Linux Kernel Use-After-Free Vulnerability | High 7.9 | 3.7% | Apr 20, 2023 |
| Mar 30, 2023 | CVE-2022-42948 | Fortra · Cobalt Strike | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | Critical 9.8 | 2.7% | Apr 20, 2023 |
| Mar 30, 2023 | CVE-2022-39197 | Fortra · Cobalt Strike | Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 44.1% | Apr 20, 2023 |
| Mar 30, 2023 | CVE-2022-38181 | Arm · Mali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | High 8.8 | 18.5% | Apr 20, 2023 |
| Mar 30, 2023 | CVE-2022-3038 | Google · Chromium Network Service | Google Chromium Network Service Use-After-Free Vulnerability | High 8.8 | 24.9% | Apr 20, 2023 |
| Mar 30, 2023 | CVE-2022-22706 | Arm · Mali Graphics Processing Unit (GPU) | Arm Mali GPU Kernel Driver Unspecified Vulnerability | High 7.8 | 1.1% | Apr 20, 2023 |
| Mar 30, 2023 | CVE-2021-30900 | Apple · iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | High 7.8 | 5.2% | Apr 20, 2023 |
| Mar 30, 2023 | CVE-2017-7494 Ransomware | Samba · Samba | Samba Remote Code Execution Vulnerability | Critical 9.8 | 99.4% | Apr 20, 2023 |
| Mar 30, 2023 | CVE-2013-3163 | Microsoft · Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | High 8.8 | 70.7% | Apr 20, 2023 |
| Mar 15, 2023 | CVE-2023-26360 | Adobe · ColdFusion | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | High 8.6 | 97.3% | Apr 5, 2023 |
| Mar 14, 2023 | CVE-2023-24880 Ransomware | Microsoft · Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | Medium 4.4 | 78.2% | Apr 4, 2023 |
| Mar 14, 2023 | CVE-2023-23397 | Microsoft · Office | Microsoft Office Outlook Privilege Escalation Vulnerability | Critical 9.8 | 97.2% | Apr 4, 2023 |
| Mar 14, 2023 | CVE-2022-41328 | Fortinet · FortiOS | Fortinet FortiOS Path Traversal Vulnerability | Medium 6.5 | 10.7% | Apr 4, 2023 |
| Mar 10, 2023 | CVE-2021-39144 | XStream · XStream | XStream Remote Code Execution Vulnerability | High 8.5 | 98.1% | Mar 31, 2023 |
| Mar 10, 2023 | CVE-2020-5741 | Plex · Media Server | Plex Media Server Remote Code Execution Vulnerability | High 7.2 | 72.9% | Mar 31, 2023 |
| Mar 7, 2023 | CVE-2022-35914 | Teclib · GLPI | Teclib GLPI Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | Mar 28, 2023 |
| Mar 7, 2023 | CVE-2022-33891 | Apache · Spark | Apache Spark Command Injection Vulnerability | High 8.8 | 93.2% | Mar 28, 2023 |
| Mar 7, 2023 | CVE-2022-28810 | Zoho · ManageEngine | Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability | Medium 6.8 | 71.0% | Mar 28, 2023 |
| Feb 27, 2023 | CVE-2022-36537 Ransomware | ZK Framework · AuUploader | ZK Framework AuUploader Unspecified Vulnerability | High 7.5 | 95.4% | Mar 20, 2023 |
| Feb 21, 2023 | CVE-2022-47986 Ransomware | IBM · Aspera Faspex | IBM Aspera Faspex Code Execution Vulnerability | Critical 9.8 | 100.0% | Mar 14, 2023 |
| Feb 21, 2023 | CVE-2022-41223 Ransomware | Mitel · MiVoice Connect | Mitel MiVoice Connect Code Injection Vulnerability | Medium 6.8 | 10.7% | Mar 14, 2023 |
| Feb 21, 2023 | CVE-2022-40765 Ransomware | Mitel · MiVoice Connect | Mitel MiVoice Connect Command Injection Vulnerability | Medium 6.8 | 10.6% | Mar 14, 2023 |
| Feb 16, 2023 | CVE-2022-46169 | Cacti · Cacti | Cacti Command Injection Vulnerability | Critical 9.8 | 99.8% | Mar 9, 2023 |
| Feb 14, 2023 | CVE-2023-23529 | Apple · Multiple Products | Apple Multiple Products WebKit Type Confusion Vulnerability | High 8.8 | 9.4% | Mar 7, 2023 |
| Feb 14, 2023 | CVE-2023-23376 Ransomware | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | High 7.8 | 10.9% | Mar 7, 2023 |
| Feb 14, 2023 | CVE-2023-21823 | Microsoft · Windows | Microsoft Windows Graphic Component Privilege Escalation Vulnerability | High 7.8 | 5.6% | Mar 7, 2023 |
| Feb 14, 2023 | CVE-2023-21715 | Microsoft · Office | Microsoft Office Publisher Security Feature Bypass Vulnerability | High 7.3 | 12.0% | Mar 7, 2023 |
| Feb 10, 2023 | CVE-2023-0669 Ransomware | Fortra · GoAnywhere MFT | Fortra GoAnywhere MFT Remote Code Execution Vulnerability | High 7.2 | 100.0% | Mar 3, 2023 |
| Feb 10, 2023 | CVE-2022-24990 Ransomware | TerraMaster · TerraMaster OS | TerraMaster OS Remote Command Execution Vulnerability | Critical 9.8 | 83.2% | Mar 3, 2023 |
| Feb 10, 2023 | CVE-2015-2291 Ransomware | Intel · Ethernet Diagnostics Driver for Windows | Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability | High 7.8 | 15.7% | Mar 3, 2023 |
| Feb 2, 2023 | CVE-2023-22952 | SugarCRM · Multiple Products | Multiple SugarCRM Products Remote Code Execution Vulnerability | High 8.8 | 80.1% | Feb 23, 2023 |
| Feb 2, 2023 | CVE-2022-21587 Ransomware | Oracle · E-Business Suite | Oracle E-Business Suite Unspecified Vulnerability | Critical 9.8 | 98.3% | Feb 23, 2023 |
| Jan 26, 2023 | CVE-2017-11357 Ransomware | Telerik · User Interface (UI) for ASP.NET AJAX | Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability | Critical 9.8 | 77.7% | Feb 16, 2023 |
| Jan 23, 2023 | CVE-2022-47966 Ransomware | Zoho · ManageEngine | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | Critical 9.8 | 99.8% | Feb 13, 2023 |