Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Jan 17, 2023 | CVE-2022-44877 | CWP · Control Web Panel | CWP Control Web Panel OS Command Injection Vulnerability | Critical 9.8 | 100.0% | Feb 7, 2023 |
| Jan 10, 2023 | CVE-2023-21674 | Microsoft · Windows | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | High 8.8 | 34.2% | Jan 31, 2023 |
| Jan 10, 2023 | CVE-2022-41080 Ransomware | Microsoft · Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | High 8.8 | 77.3% | Jan 31, 2023 |
| Dec 29, 2022 | CVE-2018-5430 | TIBCO · JasperReports | TIBCO JasperReports Server Information Disclosure Vulnerability | High 7.7 | 48.1% | Jan 19, 2023 |
| Dec 29, 2022 | CVE-2018-18809 | TIBCO · JasperReports | TIBCO JasperReports Library Directory Traversal Vulnerability | Critical 9.9 | 79.1% | Jan 19, 2023 |
| Dec 14, 2022 | CVE-2022-42856 | Apple · iOS | Apple iOS Type Confusion Vulnerability | High 8.8 | 8.5% | Jan 4, 2023 |
| Dec 13, 2022 | CVE-2022-44698 Ransomware | Microsoft · Defender | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | Medium 5.4 | 75.0% | Jan 3, 2023 |
| Dec 13, 2022 | CVE-2022-42475 Ransomware | Fortinet · FortiOS | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | Critical 9.3 | 99.5% | Jan 3, 2023 |
| Dec 13, 2022 | CVE-2022-27518 | Citrix · Application Delivery Controller (ADC) and Gateway | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | Critical 9.8 | 6.9% | Jan 3, 2023 |
| Dec 13, 2022 | CVE-2022-26501 Ransomware | Veeam · Backup & Replication | Veeam Backup & Replication Remote Code Execution Vulnerability | Critical 9.8 | 4.1% | Jan 3, 2023 |
| Dec 13, 2022 | CVE-2022-26500 Ransomware | Veeam · Backup & Replication | Veeam Backup & Replication Remote Code Execution Vulnerability | High 8.8 | 5.8% | Jan 3, 2023 |
| Dec 5, 2022 | CVE-2022-4262 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 23.5% | Dec 26, 2022 |
| Nov 28, 2022 | CVE-2022-4135 | Google · Chromium GPU | Google Chromium GPU Heap Buffer Overflow Vulnerability | Critical 9.6 | 31.9% | Dec 19, 2022 |
| Nov 28, 2022 | CVE-2021-35587 | Oracle · Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | Critical 9.8 | 96.3% | Dec 19, 2022 |
| Nov 14, 2022 | CVE-2022-41049 | Microsoft · Windows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | Medium 5.4 | 3.3% | Dec 9, 2022 |
| Nov 8, 2022 | CVE-2022-41128 | Microsoft · Windows | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | High 8.8 | 24.6% | Dec 9, 2022 |
| Nov 8, 2022 | CVE-2022-41125 | Microsoft · Windows | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | High 7.8 | 3.0% | Dec 9, 2022 |
| Nov 8, 2022 | CVE-2022-41091 Ransomware | Microsoft · Windows | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | Medium 5.4 | 2.3% | Dec 9, 2022 |
| Nov 8, 2022 | CVE-2022-41073 Ransomware | Microsoft · Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | High 7.8 | 2.6% | Dec 9, 2022 |
| Nov 8, 2022 | CVE-2021-25370 | Samsung · Mobile Devices | Samsung Mobile Devices Memory Corruption Vulnerability | Medium 6.1 | 0.9% | Nov 29, 2022 |
| Nov 8, 2022 | CVE-2021-25369 | Samsung · Mobile Devices | Samsung Mobile Devices Improper Access Control Vulnerability | Medium 6.2 | 1.1% | Nov 29, 2022 |
| Nov 8, 2022 | CVE-2021-25337 | Samsung · Mobile Devices | Samsung Mobile Devices Improper Access Control Vulnerability | Medium 4.4 | 2.8% | Nov 29, 2022 |
| Oct 28, 2022 | CVE-2022-3723 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 7.9% | Nov 18, 2022 |
| Oct 25, 2022 | CVE-2022-42827 | Apple · iOS and iPadOS | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | High 7.8 | 1.1% | Nov 15, 2022 |
| Oct 24, 2022 | CVE-2020-3433 Ransomware | Cisco · AnyConnect Secure | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | High 7.8 | 10.0% | Nov 14, 2022 |
| Oct 24, 2022 | CVE-2020-3153 Ransomware | Cisco · AnyConnect Secure | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | Medium 6.5 | 28.5% | Nov 14, 2022 |
| Oct 24, 2022 | CVE-2018-19323 Ransomware | GIGABYTE · Multiple Products | GIGABYTE Multiple Products Privilege Escalation Vulnerability | Critical 9.8 | 8.4% | Nov 14, 2022 |
| Oct 24, 2022 | CVE-2018-19322 Ransomware | GIGABYTE · Multiple Products | GIGABYTE Multiple Products Code Execution Vulnerability | High 7.8 | 1.8% | Nov 14, 2022 |
| Oct 24, 2022 | CVE-2018-19321 Ransomware | GIGABYTE · Multiple Products | GIGABYTE Multiple Products Privilege Escalation Vulnerability | High 7.8 | 3.7% | Nov 14, 2022 |
| Oct 24, 2022 | CVE-2018-19320 Ransomware | GIGABYTE · Multiple Products | GIGABYTE Multiple Products Unspecified Vulnerability | High 7.8 | 4.6% | Nov 14, 2022 |
| Oct 20, 2022 | CVE-2022-41352 Ransomware | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | Critical 9.8 | 95.5% | Nov 10, 2022 |
| Oct 20, 2022 | CVE-2021-3493 | Linux · Kernel | Linux Kernel Privilege Escalation Vulnerability | High 8.8 | 49.2% | Nov 10, 2022 |
| Oct 11, 2022 | CVE-2022-41033 | Microsoft · Windows COM+ Event System Service | Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | High 7.8 | 1.9% | Nov 1, 2022 |
| Oct 11, 2022 | CVE-2022-40684 Ransomware | Fortinet · Multiple Products | Fortinet Multiple Products Authentication Bypass Vulnerability | Critical 9.8 | 100.0% | Nov 1, 2022 |
| Sep 30, 2022 | CVE-2022-41082 Ransomware | Microsoft · Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | High 8.0 | 100.0% | Oct 21, 2022 |
| Sep 30, 2022 | CVE-2022-41040 Ransomware | Microsoft · Exchange Server | Microsoft Exchange Server Server-Side Request Forgery Vulnerability | High 8.8 | 100.0% | Oct 21, 2022 |
| Sep 30, 2022 | CVE-2022-36804 | Atlassian · Bitbucket Server and Data Center | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | High 8.8 | 99.1% | Oct 21, 2022 |
| Sep 23, 2022 | CVE-2022-3236 | Sophos · Firewall | Sophos Firewall Code Injection Vulnerability | Critical 9.8 | 98.9% | Oct 14, 2022 |
| Sep 22, 2022 | CVE-2022-35405 | Zoho · ManageEngine | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | Oct 13, 2022 |
| Sep 15, 2022 | CVE-2022-40139 | Trend Micro · Apex One and Apex One as a Service | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | High 7.2 | 3.4% | Oct 6, 2022 |
| Sep 15, 2022 | CVE-2013-6282 | Linux · Kernel | Linux Kernel Improper Input Validation Vulnerability | High 8.8 | 39.7% | Oct 6, 2022 |
| Sep 15, 2022 | CVE-2013-2597 | Code Aurora · ACDB Audio Driver | Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability | High 8.4 | 1.5% | Oct 6, 2022 |
| Sep 15, 2022 | CVE-2013-2596 | Linux · Kernel | Linux Kernel Integer Overflow Vulnerability | High 7.8 | 3.2% | Oct 6, 2022 |
| Sep 15, 2022 | CVE-2013-2094 | Linux · Kernel | Linux Kernel Privilege Escalation Vulnerability | High 8.4 | 47.7% | Oct 6, 2022 |
| Sep 15, 2022 | CVE-2010-2568 | Microsoft · Windows | Microsoft Windows Remote Code Execution Vulnerability | High 7.8 | 89.6% | Oct 6, 2022 |
| Sep 14, 2022 | CVE-2022-37969 Ransomware | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | High 7.8 | 28.5% | Oct 5, 2022 |
| Sep 14, 2022 | CVE-2022-32917 | Apple · iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | High 7.8 | 5.6% | Oct 5, 2022 |
| Sep 8, 2022 | CVE-2022-3075 | Google · Chromium Mojo | Google Chromium Mojo Insufficient Data Validation Vulnerability | Critical 9.6 | 5.8% | Sep 29, 2022 |
| Sep 8, 2022 | CVE-2022-27593 Ransomware | QNAP · Photo Station | QNAP Photo Station Externally Controlled Reference Vulnerability | Critical 10.0 | 87.9% | Sep 29, 2022 |
| Sep 8, 2022 | CVE-2022-26258 | D-Link · DIR-820L | D-Link DIR-820L Remote Code Execution Vulnerability | Critical 9.8 | 91.6% | Sep 29, 2022 |