Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| May 23, 2022 | CVE-2019-11707 | Mozilla · Firefox and Thunderbird | Mozilla Firefox and Thunderbird Type Confusion Vulnerability | High 8.8 | 38.0% | Jun 13, 2022 |
| May 23, 2022 | CVE-2019-1130 Ransomware | Microsoft · Windows | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability | High 7.8 | 1.7% | Jun 13, 2022 |
| May 23, 2022 | CVE-2019-0880 | Microsoft · Windows | Microsoft Windows Privilege Escalation Vulnerability | High 7.8 | 2.3% | Jun 13, 2022 |
| May 23, 2022 | CVE-2019-0703 | Microsoft · Windows | Microsoft Windows SMB Information Disclosure Vulnerability | Medium 6.5 | 9.4% | Jun 13, 2022 |
| May 23, 2022 | CVE-2019-0676 | Microsoft · Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | Medium 6.5 | 8.1% | Jun 13, 2022 |
| May 23, 2022 | CVE-2018-8589 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 3.0% | Jun 13, 2022 |
| May 23, 2022 | CVE-2018-5002 | Adobe · Flash Player | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | High 7.8 | 24.4% | Jun 13, 2022 |
| May 16, 2022 | CVE-2022-30525 | Zyxel · Multiple Firewalls | Zyxel Multiple Firewalls OS Command Injection Vulnerability | Critical 9.8 | 99.9% | Jun 6, 2022 |
| May 16, 2022 | CVE-2022-22947 | VMware · Spring Cloud Gateway | VMware Spring Cloud Gateway Code Injection Vulnerability | Critical 10.0 | 98.3% | Jun 6, 2022 |
| May 10, 2022 | CVE-2022-1388 Ransomware | F5 · BIG-IP | F5 BIG-IP Missing Authentication Vulnerability | Critical 9.8 | 100.0% | May 31, 2022 |
| May 4, 2022 | CVE-2021-1789 | Apple · Multiple Products | Apple Multiple Products Type Confusion Vulnerability | High 8.8 | 14.0% | May 25, 2022 |
| May 4, 2022 | CVE-2019-8506 | Apple · Multiple Products | Apple Multiple Products Type Confusion Vulnerability | High 8.8 | 16.2% | May 25, 2022 |
| May 4, 2022 | CVE-2014-4113 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 86.6% | May 25, 2022 |
| May 4, 2022 | CVE-2014-0322 | Microsoft · Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | High 8.8 | 85.1% | May 25, 2022 |
| May 4, 2022 | CVE-2014-0160 | OpenSSL · OpenSSL | OpenSSL Information Disclosure Vulnerability | High 7.5 | 100.0% | May 25, 2022 |
| Apr 25, 2022 | CVE-2022-29464 Ransomware | WSO2 · Multiple Products | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | Critical 9.8 | 100.0% | May 16, 2022 |
| Apr 25, 2022 | CVE-2022-26904 | Microsoft · Windows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | High 7.0 | 16.9% | May 16, 2022 |
| Apr 25, 2022 | CVE-2022-21919 | Microsoft · Windows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | High 7.0 | 2.6% | May 16, 2022 |
| Apr 25, 2022 | CVE-2022-0847 | Linux · Kernel | Linux Kernel Privilege Escalation Vulnerability | High 7.8 | 92.8% | May 16, 2022 |
| Apr 25, 2022 | CVE-2021-41357 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 1.6% | May 16, 2022 |
| Apr 25, 2022 | CVE-2021-40450 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 1.6% | May 16, 2022 |
| Apr 25, 2022 | CVE-2019-1003029 | Jenkins · Script Security Plugin | Jenkins Script Security Plugin Sandbox Bypass Vulnerability | Critical 9.9 | 74.4% | May 16, 2022 |
| Apr 19, 2022 | CVE-2022-22718 | Microsoft · Windows | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | High 7.8 | 18.5% | May 10, 2022 |
| Apr 19, 2022 | CVE-2019-3568 | Meta Platforms · WhatsApp | WhatsApp VOIP Stack Buffer Overflow Vulnerability | Critical 9.8 | 30.1% | May 10, 2022 |
| Apr 19, 2022 | CVE-2018-6882 Ransomware | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 29.8% | May 10, 2022 |
| Apr 15, 2022 | CVE-2022-22960 | VMware · Multiple Products | VMware Multiple Products Privilege Escalation Vulnerability | High 7.8 | 35.5% | May 6, 2022 |
| Apr 15, 2022 | CVE-2022-1364 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 13.9% | May 6, 2022 |
| Apr 15, 2022 | CVE-2019-3929 | Crestron · Multiple Products | Crestron Multiple Products Command Injection Vulnerability | Critical 9.8 | 99.0% | May 6, 2022 |
| Apr 15, 2022 | CVE-2019-16057 Ransomware | D-Link · DNS-320 Storage Device | D-Link DNS-320 Remote Code Execution Vulnerability | Critical 9.8 | 86.5% | May 6, 2022 |
| Apr 15, 2022 | CVE-2018-7841 | Schneider Electric · U.motion Builder | Schneider Electric U.motion Builder SQL Injection Vulnerability | Critical 9.8 | 72.5% | May 6, 2022 |
| Apr 15, 2022 | CVE-2016-4523 | Trihedral · VTScada (formerly VTS) | Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability | High 7.5 | 31.2% | May 6, 2022 |
| Apr 15, 2022 | CVE-2014-0780 | InduSoft · Web Studio | InduSoft Web Studio NTWebServer Directory Traversal Vulnerability | Critical 9.8 | 74.7% | May 6, 2022 |
| Apr 15, 2022 | CVE-2010-5330 | Ubiquiti · AirOS | Ubiquiti AirOS Command Injection Vulnerability | Critical 9.8 | 40.2% | May 6, 2022 |
| Apr 15, 2022 | CVE-2007-3010 | Alcatel · OmniPCX Enterprise | Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability | Critical 9.8 | 97.4% | May 6, 2022 |
| Apr 14, 2022 | CVE-2022-22954 Ransomware | VMware · Workspace ONE Access and Identity Manager | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | Critical 9.8 | 100.0% | May 5, 2022 |
| Apr 13, 2022 | CVE-2022-24521 Ransomware | Microsoft · Windows | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability | High 7.8 | 7.1% | May 4, 2022 |
| Apr 13, 2022 | CVE-2018-7602 Ransomware | Drupal · Core | Drupal Core Remote Code Execution Vulnerability | High 8.1 | 99.2% | May 4, 2022 |
| Apr 13, 2022 | CVE-2018-20753 Ransomware | Kaseya · Virtual System/Server Administrator (VSA) | Kaseya VSA Remote Code Execution Vulnerability | Critical 9.8 | 29.6% | May 4, 2022 |
| Apr 13, 2022 | CVE-2015-5123 | Adobe · Flash Player | Adobe Flash Player Use-After-Free Vulnerability | High 7.8 | 18.8% | May 4, 2022 |
| Apr 13, 2022 | CVE-2015-5122 | Adobe · Flash Player | Adobe Flash Player Use-After-Free Vulnerability | High 7.8 | 87.0% | May 4, 2022 |
| Apr 13, 2022 | CVE-2015-3113 | Adobe · Flash Player | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | High 7.8 | 99.8% | May 4, 2022 |
| Apr 13, 2022 | CVE-2015-2502 | Microsoft · Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | High 8.8 | 51.0% | May 4, 2022 |
| Apr 13, 2022 | CVE-2015-0313 | Adobe · Flash Player | Adobe Flash Player Use-After-Free Vulnerability | High 7.8 | 95.3% | May 4, 2022 |
| Apr 13, 2022 | CVE-2015-0311 | Adobe · Flash Player | Adobe Flash Player Remote Code Execution Vulnerability | High 7.8 | 85.6% | May 4, 2022 |
| Apr 13, 2022 | CVE-2014-9163 | Adobe · Flash Player | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | High 7.8 | 44.9% | May 4, 2022 |
| Apr 11, 2022 | CVE-2022-23176 | WatchGuard · Firebox and XTM | WatchGuard Firebox and XTM Privilege Escalation Vulnerability | High 8.8 | 10.9% | May 2, 2022 |
| Apr 11, 2022 | CVE-2021-42287 Ransomware | Microsoft · Active Directory | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | High 7.5 | 77.2% | May 2, 2022 |
| Apr 11, 2022 | CVE-2021-42278 Ransomware | Microsoft · Active Directory | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | High 7.5 | 73.3% | May 2, 2022 |
| Apr 11, 2022 | CVE-2021-39793 | Google · Pixel | Google Pixel Out-of-Bounds Write Vulnerability | High 7.8 | 0.7% | May 2, 2022 |
| Apr 11, 2022 | CVE-2021-27852 | Checkbox · Checkbox Survey | Checkbox Survey Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 30.3% | May 2, 2022 |