Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Sep 8, 2022 | CVE-2020-9934 | Apple · iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Input Validation Vulnerability | Medium 5.5 | 3.2% | Sep 29, 2022 |
| Sep 8, 2022 | CVE-2018-7445 | MikroTik · RouterOS | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability | Critical 9.8 | 65.8% | Sep 29, 2022 |
| Sep 8, 2022 | CVE-2018-6530 Ransomware | D-Link · Multiple Routers | D-Link Multiple Routers OS Command Injection Vulnerability | Critical 9.8 | 96.7% | Sep 29, 2022 |
| Sep 8, 2022 | CVE-2018-2628 | Oracle · WebLogic Server | Oracle WebLogic Server Unspecified Vulnerability | Critical 9.8 | 100.0% | Sep 29, 2022 |
| Sep 8, 2022 | CVE-2018-13374 Ransomware | Fortinet · FortiOS and FortiADC | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | Medium 4.3 | 38.1% | Sep 29, 2022 |
| Sep 8, 2022 | CVE-2017-5521 | NETGEAR · Multiple Devices | NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability | High 8.1 | 89.4% | Sep 29, 2022 |
| Sep 8, 2022 | CVE-2011-4723 | D-Link · DIR-300 Router | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | Medium 5.7 | 3.1% | Sep 29, 2022 |
| Sep 8, 2022 | CVE-2011-1823 | Android · Android OS | Android OS Privilege Escalation Vulnerability | High 7.8 | 41.4% | Sep 29, 2022 |
| Aug 25, 2022 | CVE-2022-26352 Ransomware | dotCMS · dotCMS | dotCMS Unrestricted Upload of File Vulnerability | Critical 9.8 | 91.2% | Sep 15, 2022 |
| Aug 25, 2022 | CVE-2022-24706 | Apache · CouchDB | Apache CouchDB Insecure Default Initialization of Resource Vulnerability | Critical 9.8 | 92.5% | Sep 15, 2022 |
| Aug 25, 2022 | CVE-2022-24112 | Apache · APISIX | Apache APISIX Authentication Bypass Vulnerability | Critical 9.8 | 96.1% | Sep 15, 2022 |
| Aug 25, 2022 | CVE-2022-22963 | VMware Tanzu · Spring Cloud | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | Sep 15, 2022 |
| Aug 25, 2022 | CVE-2022-2294 Ransomware | WebRTC · WebRTC | WebRTC Heap Buffer Overflow Vulnerability | High 8.8 | 70.8% | Sep 15, 2022 |
| Aug 25, 2022 | CVE-2021-39226 | Grafana Labs · Grafana | Grafana Authentication Bypass Vulnerability | Critical 9.8 | 99.9% | Sep 15, 2022 |
| Aug 25, 2022 | CVE-2021-38406 | Delta Electronics · DOPSoft 2 | Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | High 7.8 | 76.4% | Sep 15, 2022 |
| Aug 25, 2022 | CVE-2021-31010 | Apple · iOS, macOS, watchOS | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | High 7.5 | 3.7% | Sep 15, 2022 |
| Aug 25, 2022 | CVE-2020-36193 | PEAR · Archive_Tar | PEAR Archive_Tar Improper Link Resolution Vulnerability | High 7.5 | 70.6% | Sep 15, 2022 |
| Aug 25, 2022 | CVE-2020-28949 | PEAR · Archive_Tar | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | High 7.8 | 84.6% | Sep 15, 2022 |
| Aug 22, 2022 | CVE-2022-0028 | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | High 8.6 | 2.7% | Sep 12, 2022 |
| Aug 18, 2022 | CVE-2022-32894 | Apple · iOS and macOS | Apple iOS and macOS Out-of-Bounds Write Vulnerability | High 7.8 | 3.3% | Sep 8, 2022 |
| Aug 18, 2022 | CVE-2022-32893 | Apple · iOS and macOS | Apple iOS and macOS Out-of-Bounds Write Vulnerability | High 8.8 | 9.9% | Sep 8, 2022 |
| Aug 18, 2022 | CVE-2022-2856 | Google · Chromium Intents | Google Chromium Intents Insufficient Input Validation Vulnerability | Medium 6.5 | 4.6% | Sep 8, 2022 |
| Aug 18, 2022 | CVE-2022-26923 | Microsoft · Active Directory | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | High 8.8 | 83.5% | Sep 8, 2022 |
| Aug 18, 2022 | CVE-2022-22536 | SAP · Multiple Products | SAP Multiple Products HTTP Request Smuggling Vulnerability | Critical 9.8 | 97.9% | Sep 8, 2022 |
| Aug 18, 2022 | CVE-2022-21971 | Microsoft · Windows | Microsoft Windows Runtime Remote Code Execution Vulnerability | High 7.8 | 53.9% | Sep 8, 2022 |
| Aug 18, 2022 | CVE-2017-15944 | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | Critical 9.8 | 98.3% | Sep 8, 2022 |
| Aug 11, 2022 | CVE-2022-37042 Ransomware | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | Critical 9.8 | 92.1% | Sep 1, 2022 |
| Aug 11, 2022 | CVE-2022-27925 Ransomware | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | High 7.2 | 98.7% | Sep 1, 2022 |
| Aug 9, 2022 | CVE-2022-34713 | Microsoft · Windows | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | High 7.8 | 67.8% | Aug 30, 2022 |
| Aug 9, 2022 | CVE-2022-30333 Ransomware | RARLAB · UnRAR | RARLAB UnRAR Directory Traversal Vulnerability | Critical 9.8 | 99.2% | Aug 30, 2022 |
| Aug 4, 2022 | CVE-2022-27924 Ransomware | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability | Critical 9.8 | 93.9% | Aug 25, 2022 |
| Jul 29, 2022 | CVE-2022-26138 | Atlassian · Confluence | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | Critical 9.8 | 98.2% | Aug 19, 2022 |
| Jul 12, 2022 | CVE-2022-22047 | Microsoft · Windows | Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | High 7.8 | 18.8% | Aug 2, 2022 |
| Jul 1, 2022 | CVE-2022-26925 | Microsoft · Windows | Microsoft Windows LSA Spoofing Vulnerability | High 8.1 | 10.5% | Jul 22, 2022 |
| Jun 27, 2022 | CVE-2022-29499 Ransomware | Mitel · MiVoice Connect | Mitel MiVoice Connect Data Validation Vulnerability | Critical 9.8 | 55.2% | Jul 18, 2022 |
| Jun 27, 2022 | CVE-2021-4034 Ransomware | Red Hat · Polkit | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | High 7.8 | 94.9% | Jul 18, 2022 |
| Jun 27, 2022 | CVE-2021-30983 | Apple · iOS and iPadOS | Apple iOS and iPadOS Buffer Overflow Vulnerability | High 7.8 | 2.9% | Jul 18, 2022 |
| Jun 27, 2022 | CVE-2021-30533 | Google · Chromium PopupBlocker | Google Chromium PopupBlocker Security Bypass Vulnerability | Medium 6.5 | 16.7% | Jul 18, 2022 |
| Jun 27, 2022 | CVE-2020-9907 | Apple · Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | High 7.8 | 3.2% | Jul 18, 2022 |
| Jun 27, 2022 | CVE-2020-3837 | Apple · Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | High 7.8 | 14.8% | Jul 18, 2022 |
| Jun 27, 2022 | CVE-2019-8605 | Apple · Multiple Products | Apple Multiple Products Use-After-Free Vulnerability | High 7.8 | 17.6% | Jul 18, 2022 |
| Jun 27, 2022 | CVE-2018-4344 | Apple · Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | High 7.8 | 2.4% | Jul 18, 2022 |
| Jun 14, 2022 | CVE-2022-30190 Ransomware | Microsoft · Windows | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | High 7.8 | 99.2% | Jul 5, 2022 |
| Jun 9, 2022 | CVE-2021-38163 | SAP · NetWeaver | SAP NetWeaver Unrestricted File Upload Vulnerability | Critical 9.9 | 36.9% | Jun 30, 2022 |
| Jun 9, 2022 | CVE-2016-2388 | SAP · NetWeaver | SAP NetWeaver Information Disclosure Vulnerability | Medium 5.3 | 52.2% | Jun 30, 2022 |
| Jun 9, 2022 | CVE-2016-2386 | SAP · NetWeaver | SAP NetWeaver SQL Injection Vulnerability | Critical 9.8 | 71.5% | Jun 30, 2022 |
| Jun 8, 2022 | CVE-2019-7195 Ransomware | QNAP · Photo Station | QNAP Photo Station Path Traversal Vulnerability | Critical 9.8 | 89.3% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2019-7194 Ransomware | QNAP · Photo Station | QNAP Photo Station Path Traversal Vulnerability | Critical 9.8 | 82.7% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2019-7193 Ransomware | QNAP · QTS | QNAP QTS Improper Input Validation Vulnerability | Critical 9.8 | 14.4% | Jun 22, 2022 |
| Jun 8, 2022 | CVE-2019-7192 Ransomware | QNAP · Photo Station | QNAP Photo Station Improper Access Control Vulnerability | Critical 9.8 | 88.1% | Jun 22, 2022 |