Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Apr 11, 2022 | CVE-2021-22600 | Linux · Kernel | Linux Kernel Privilege Escalation Vulnerability | Medium 6.6 | 6.6% | May 2, 2022 |
| Apr 11, 2022 | CVE-2020-2509 | QNAP · QNAP Network-Attached Storage (NAS) | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability | Critical 9.8 | 34.0% | May 2, 2022 |
| Apr 11, 2022 | CVE-2017-11317 | Telerik · User Interface (UI) for ASP.NET AJAX | Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability | Critical 9.8 | 84.2% | May 2, 2022 |
| Apr 6, 2022 | CVE-2021-3156 | Sudo · Sudo | Sudo Heap-Based Buffer Overflow Vulnerability | High 7.8 | 100.0% | Apr 27, 2022 |
| Apr 6, 2022 | CVE-2021-31166 | Microsoft · HTTP Protocol Stack | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | Apr 27, 2022 |
| Apr 6, 2022 | CVE-2017-0148 Ransomware | Microsoft · SMBv1 server | Microsoft SMBv1 Server Remote Code Execution Vulnerability | High 8.1 | 99.4% | Apr 27, 2022 |
| Apr 4, 2022 | CVE-2022-22965 | VMware · Spring Framework | Spring Framework JDK 9+ Remote Code Execution Vulnerability | Critical 9.8 | 99.6% | Apr 25, 2022 |
| Apr 4, 2022 | CVE-2022-22675 | Apple · macOS | Apple macOS Out-of-Bounds Write Vulnerability | High 7.8 | 12.5% | Apr 25, 2022 |
| Apr 4, 2022 | CVE-2022-22674 | Apple · macOS | Apple macOS Out-of-Bounds Read Vulnerability | Medium 5.5 | 1.1% | Apr 25, 2022 |
| Apr 4, 2022 | CVE-2021-45382 | D-Link · Multiple Routers | D-Link Multiple Routers Remote Code Execution Vulnerability | Critical 9.8 | 97.8% | Apr 25, 2022 |
| Mar 31, 2022 | CVE-2022-26871 | Trend Micro · Apex Central | Trend Micro Apex Central Arbitrary File Upload Vulnerability | Critical 9.8 | 19.5% | Apr 21, 2022 |
| Mar 31, 2022 | CVE-2022-1040 | Sophos · Firewall | Sophos Firewall Authentication Bypass Vulnerability | Critical 9.8 | 99.8% | Apr 21, 2022 |
| Mar 31, 2022 | CVE-2021-34484 | Microsoft · Windows | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | High 7.8 | 21.8% | Apr 21, 2022 |
| Mar 31, 2022 | CVE-2021-28799 Ransomware | QNAP · Network Attached Storage (NAS) | QNAP NAS Improper Authorization Vulnerability | Critical 10.0 | 78.2% | Apr 21, 2022 |
| Mar 31, 2022 | CVE-2021-21551 | Dell · dbutil Driver | Dell dbutil Driver Insufficient Access Control Vulnerability | High 8.8 | 79.6% | Apr 21, 2022 |
| Mar 31, 2022 | CVE-2018-10562 Ransomware | Dasan · Gigabit Passive Optical Network (GPON) Routers | Dasan GPON Routers Command Injection Vulnerability | Critical 9.8 | 99.9% | Apr 21, 2022 |
| Mar 31, 2022 | CVE-2018-10561 | Dasan · Gigabit Passive Optical Network (GPON) Routers | Dasan GPON Routers Authentication Bypass Vulnerability | Critical 9.8 | 92.8% | Apr 21, 2022 |
| Mar 28, 2022 | CVE-2022-1096 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 24.7% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2022-0543 | Redis · Debian-specific Redis Servers | Debian-specific Redis Server Lua Sandbox Escape Vulnerability | Critical 10.0 | 99.4% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2021-38646 Ransomware | Microsoft · Office | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | High 7.8 | 8.0% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2021-34486 | Microsoft · Windows | Microsoft Windows Event Tracing Privilege Escalation Vulnerability | High 7.8 | 9.3% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2021-26085 Ransomware | Atlassian · Confluence Server | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability | Medium 5.3 | 99.9% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2021-20028 Ransomware | SonicWall · Secure Remote Access (SRA) | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | Critical 9.8 | 30.1% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2019-7483 | SonicWall · SMA100 | SonicWall SMA100 Directory Traversal Vulnerability | High 7.5 | 4.0% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2018-8440 Ransomware | Microsoft · Windows | Microsoft Windows Privilege Escalation Vulnerability | High 7.8 | 18.5% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2018-8406 Ransomware | Microsoft · DirectX Graphics Kernel (DXGKRNL) | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | High 7.8 | 3.4% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2018-8405 Ransomware | Microsoft · DirectX Graphics Kernel (DXGKRNL) | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability | High 7.8 | 3.4% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2017-0213 Ransomware | Microsoft · Windows | Microsoft Windows Privilege Escalation Vulnerability | High 7.3 | 84.3% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2017-0059 | Microsoft · Internet Explorer | Microsoft Internet Explorer Information Disclosure Vulnerability | Medium 4.3 | 62.0% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2017-0037 | Microsoft · Edge and Internet Explorer | Microsoft Edge and Internet Explorer Type Confusion Vulnerability | High 8.1 | 80.4% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2016-7201 | Microsoft · Edge | Microsoft Edge Memory Corruption Vulnerability | High 8.8 | 80.0% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2016-7200 | Microsoft · Edge | Microsoft Edge Memory Corruption Vulnerability | High 8.8 | 82.8% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2016-0189 Ransomware | Microsoft · Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | High 7.5 | 94.1% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2016-0151 Ransomware | Microsoft · Client-Server Run-time Subsystem (CSRSS) | Microsoft Windows CSRSS Security Feature Bypass Vulnerability | High 7.8 | 62.8% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2016-0040 | Microsoft · Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | High 7.8 | 24.3% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2015-2426 | Microsoft · Windows | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | High 8.8 | 86.6% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2015-2419 | Microsoft · Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | High 8.8 | 53.0% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2015-1770 | Microsoft · Office | Microsoft Office Uninitialized Memory Use Vulnerability | High 8.8 | 35.0% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2013-3660 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 39.3% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2013-2729 | Adobe · Reader and Acrobat | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability | High 8.8 | 66.6% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2013-2551 Ransomware | Microsoft · Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | High 8.8 | 74.1% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2013-2465 Ransomware | Oracle · Java SE | Oracle Java SE Unspecified Vulnerability | Critical 9.8 | 98.8% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2013-1690 | Mozilla · Firefox and Thunderbird | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability | High 8.8 | 69.0% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2012-5076 | Oracle · Java SE | Oracle Java SE Sandbox Bypass Vulnerability | Critical 9.8 | 91.2% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2012-2539 | Microsoft · Word | Microsoft Word Remote Code Execution Vulnerability | High 7.8 | 53.0% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2012-2034 | Adobe · Flash Player | Adobe Flash Player Memory Corruption Vulnerability | High 7.5 | 7.7% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2012-0518 | Oracle · Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | Medium 4.7 | 4.7% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2011-2005 | Microsoft · Ancillary Function Driver (afd.sys) | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | High 7.8 | 31.8% | Apr 18, 2022 |
| Mar 28, 2022 | CVE-2010-4398 | Microsoft · Windows | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | High 7.8 | 8.7% | Apr 21, 2022 |
| Mar 25, 2022 | CVE-2022-26318 | WatchGuard · Firebox and XTM Appliances | WatchGuard Firebox and XTM Appliances Arbitrary Code Execution | Critical 9.8 | 78.2% | Apr 15, 2022 |