Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
390 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Aug 12, 2025 | CVE-2013-3893 | Microsoft · Internet Explorer | Microsoft Internet Explorer Resource Management Errors Vulnerability | High 8.8 | 87.6% | Sep 2, 2025 |
| Aug 12, 2025 | CVE-2007-0671 | Microsoft · Office | Microsoft Office Excel Remote Code Execution Vulnerability | High 8.8 | 44.1% | Sep 2, 2025 |
| Jul 22, 2025 | CVE-2025-49706 Ransomware | Microsoft · SharePoint | Microsoft SharePoint Improper Authentication Vulnerability | Medium 6.5 | 99.1% | Jul 23, 2025 |
| Jul 22, 2025 | CVE-2025-49704 Ransomware | Microsoft · SharePoint | Microsoft SharePoint Code Injection Vulnerability | High 8.8 | 100.0% | Jul 23, 2025 |
| Jul 20, 2025 | CVE-2025-53770 Ransomware | Microsoft · SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 100.0% | Jul 21, 2025 |
| Jun 10, 2025 | CVE-2025-33053 | Microsoft · Windows | Microsoft Windows External Control of File Name or Path Vulnerability | High 8.8 | 87.1% | Jul 1, 2025 |
| May 13, 2025 | CVE-2025-32709 | Microsoft · Windows | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | High 7.8 | 1.8% | Jun 3, 2025 |
| May 13, 2025 | CVE-2025-32706 | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | High 7.8 | 2.3% | Jun 3, 2025 |
| May 13, 2025 | CVE-2025-32701 | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | High 7.8 | 1.4% | Jun 3, 2025 |
| May 13, 2025 | CVE-2025-30400 | Microsoft · Windows | Microsoft Windows DWM Core Library Use-After-Free Vulnerability | High 7.8 | 1.9% | Jun 3, 2025 |
| May 13, 2025 | CVE-2025-30397 | Microsoft · Windows | Microsoft Windows Scripting Engine Type Confusion Vulnerability | High 7.5 | 27.3% | Jun 3, 2025 |
| Apr 17, 2025 | CVE-2025-24054 | Microsoft · Windows | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | Medium 6.5 | 62.3% | May 8, 2025 |
| Apr 8, 2025 | CVE-2025-29824 Ransomware | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | High 7.8 | 19.3% | Apr 29, 2025 |
| Mar 11, 2025 | CVE-2025-26633 Ransomware | Microsoft · Windows | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability | High 7.0 | 30.4% | Apr 1, 2025 |
| Mar 11, 2025 | CVE-2025-24993 | Microsoft · Windows | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | High 7.8 | 2.2% | Apr 1, 2025 |
| Mar 11, 2025 | CVE-2025-24991 | Microsoft · Windows | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | Medium 5.5 | 2.0% | Apr 1, 2025 |
| Mar 11, 2025 | CVE-2025-24985 | Microsoft · Windows | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | High 7.8 | 3.9% | Apr 1, 2025 |
| Mar 11, 2025 | CVE-2025-24984 | Microsoft · Windows | Microsoft Windows NTFS Information Disclosure Vulnerability | Medium 4.6 | 2.0% | Apr 1, 2025 |
| Mar 11, 2025 | CVE-2025-24983 | Microsoft · Windows | Microsoft Windows Win32k Use-After-Free Vulnerability | High 7.0 | 1.9% | Apr 1, 2025 |
| Mar 3, 2025 | CVE-2018-8639 Ransomware | Microsoft · Windows | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability | High 8.4 | 22.3% | Mar 24, 2025 |
| Feb 25, 2025 | CVE-2024-49035 | Microsoft · Partner Center | Microsoft Partner Center Improper Access Control Vulnerability | High 8.7 | 1.4% | Mar 18, 2025 |
| Feb 21, 2025 | CVE-2025-24989 | Microsoft · Power Pages | Microsoft Power Pages Improper Access Control Vulnerability | High 8.2 | 1.6% | Mar 14, 2025 |
| Feb 11, 2025 | CVE-2025-21418 | Microsoft · Windows | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | High 7.8 | 2.1% | Mar 4, 2025 |
| Feb 11, 2025 | CVE-2025-21391 | Microsoft · Windows | Microsoft Windows Storage Link Following Vulnerability | High 7.1 | 2.3% | Mar 4, 2025 |
| Feb 6, 2025 | CVE-2024-21413 | Microsoft · Office Outlook | Microsoft Outlook Improper Input Validation Vulnerability | Critical 9.8 | 94.7% | Feb 27, 2025 |
| Feb 4, 2025 | CVE-2024-29059 | Microsoft · .NET Framework | Microsoft .NET Framework Information Disclosure Vulnerability | High 7.5 | 98.6% | Feb 25, 2025 |
| Jan 14, 2025 | CVE-2025-21335 | Microsoft · Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | High 7.8 | 1.4% | Feb 4, 2025 |
| Jan 14, 2025 | CVE-2025-21334 | Microsoft · Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | High 7.8 | 1.6% | Feb 4, 2025 |
| Jan 14, 2025 | CVE-2025-21333 | Microsoft · Windows | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | High 7.8 | 10.1% | Feb 4, 2025 |
| Dec 16, 2024 | CVE-2024-35250 | Microsoft · Windows | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | High 7.8 | 25.2% | Jan 6, 2025 |
| Dec 10, 2024 | CVE-2024-49138 | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | High 7.8 | 26.2% | Dec 31, 2024 |
| Nov 12, 2024 | CVE-2024-49039 Ransomware | Microsoft · Windows | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | High 8.8 | 14.2% | Dec 3, 2024 |
| Nov 12, 2024 | CVE-2024-43451 | Microsoft · Windows | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | Medium 6.5 | 84.3% | Dec 3, 2024 |
| Oct 22, 2024 | CVE-2024-38094 Ransomware | Microsoft · SharePoint | Microsoft SharePoint Deserialization Vulnerability | High 7.2 | 50.9% | Nov 12, 2024 |
| Oct 15, 2024 | CVE-2024-30088 Ransomware | Microsoft · Windows | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | High 7.0 | 68.2% | Nov 5, 2024 |
| Oct 8, 2024 | CVE-2024-43573 | Microsoft · Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | Medium 6.5 | 46.1% | Oct 29, 2024 |
| Oct 8, 2024 | CVE-2024-43572 | Microsoft · Windows | Microsoft Windows Management Console Remote Code Execution Vulnerability | High 7.8 | 66.7% | Oct 29, 2024 |
| Sep 18, 2024 | CVE-2020-0618 Ransomware | Microsoft · SQL Server | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | Critical 9.8 | 99.0% | Oct 9, 2024 |
| Sep 16, 2024 | CVE-2024-43461 | Microsoft · Windows | Microsoft Windows MSHTML Platform Spoofing Vulnerability | High 8.8 | 54.5% | Oct 7, 2024 |
| Sep 10, 2024 | CVE-2024-38226 | Microsoft · Publisher | Microsoft Publisher Protection Mechanism Failure Vulnerability | High 7.3 | 2.7% | Oct 1, 2024 |
| Sep 10, 2024 | CVE-2024-38217 | Microsoft · Windows | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | Medium 5.4 | 10.0% | Oct 1, 2024 |
| Sep 10, 2024 | CVE-2024-38014 | Microsoft · Windows | Microsoft Windows Installer Improper Privilege Management Vulnerability | High 7.8 | 6.3% | Oct 1, 2024 |
| Aug 21, 2024 | CVE-2021-31196 | Microsoft · Exchange Server | Microsoft Exchange Server Information Disclosure Vulnerability | High 7.2 | 54.1% | Sep 11, 2024 |
| Aug 13, 2024 | CVE-2024-38213 | Microsoft · Windows | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | Medium 6.5 | 13.6% | Sep 3, 2024 |
| Aug 13, 2024 | CVE-2024-38193 | Microsoft · Windows | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | High 7.8 | 28.7% | Sep 3, 2024 |
| Aug 13, 2024 | CVE-2024-38189 | Microsoft · Project | Microsoft Project Remote Code Execution Vulnerability | High 8.8 | 8.2% | Sep 3, 2024 |
| Aug 13, 2024 | CVE-2024-38178 | Microsoft · Windows | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | High 7.5 | 41.4% | Sep 3, 2024 |
| Aug 13, 2024 | CVE-2024-38107 | Microsoft · Windows | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | High 7.8 | 1.6% | Sep 3, 2024 |
| Aug 13, 2024 | CVE-2024-38106 | Microsoft · Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | High 7.0 | 6.3% | Sep 3, 2024 |
| Aug 5, 2024 | CVE-2018-0824 | Microsoft · Windows | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | High 7.5 | 73.0% | Aug 26, 2024 |