Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Jan 10, 2022 | CVE-2019-1579 Ransomware | Palo Alto Networks · PAN-OS | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | High 8.1 | 44.2% | Jul 10, 2022 |
| Jan 10, 2022 | CVE-2019-1458 Ransomware | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 74.4% | Jul 10, 2022 |
| Jan 10, 2022 | CVE-2019-10149 | Exim · Mail Transfer Agent (MTA) | Exim Mail Transfer Agent (MTA) Improper Input Validation | Critical 9.0 | 100.0% | Jul 10, 2022 |
| Jan 10, 2022 | CVE-2018-13383 Ransomware | Fortinet · FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Out-of-bounds Write | Medium 4.3 | 32.5% | Jul 10, 2022 |
| Jan 10, 2022 | CVE-2018-13382 Ransomware | Fortinet · FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Improper Authorization | Critical 9.1 | 81.7% | Jul 10, 2022 |
| Jan 10, 2022 | CVE-2017-1000486 | Primetek · Primefaces Application | Primetek Primefaces Remote Code Execution Vulnerability | Critical 9.8 | 94.1% | Jul 10, 2022 |
| Jan 10, 2022 | CVE-2015-7450 | IBM · WebSphere Application Server and Server Hypervisor Edition | IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. | Critical 9.8 | 97.8% | Jul 10, 2022 |
| Jan 10, 2022 | CVE-2013-3900 | Microsoft · WinVerifyTrust function | Microsoft WinVerifyTrust function Remote Code Execution | Medium 5.5 | 44.6% | Jul 10, 2022 |
| Dec 15, 2021 | CVE-2021-43890 Ransomware | Microsoft · Windows | Microsoft Windows AppX Installer Spoofing Vulnerability | High 7.1 | 11.3% | Dec 29, 2021 |
| Dec 15, 2021 | CVE-2021-4102 | Google · Chromium V8 | Google Chromium V8 Use-After-Free Vulnerability | High 8.8 | 7.8% | Dec 29, 2021 |
| Dec 10, 2021 | CVE-2021-44515 | Zoho · Desktop Central | Zoho Desktop Central Authentication Bypass Vulnerability | Critical 9.8 | 99.9% | Dec 24, 2021 |
| Dec 10, 2021 | CVE-2021-44228 Ransomware | Apache · Log4j2 | Apache Log4j2 Remote Code Execution Vulnerability | Critical 10.0 | 100.0% | Dec 24, 2021 |
| Dec 10, 2021 | CVE-2021-44168 | Fortinet · FortiOS | Fortinet FortiOS Arbitrary File Download | Low 3.3 | 0.9% | Dec 24, 2021 |
| Dec 10, 2021 | CVE-2021-35394 | Realtek · Jungle Software Development Kit (SDK) | Realtek Jungle SDK Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | Dec 24, 2021 |
| Dec 10, 2021 | CVE-2020-8816 | Pi-hole · AdminLTE | Pi-Hole AdminLTE Remote Code Execution Vulnerability | Critical 9.1 | 78.3% | Jun 10, 2022 |
| Dec 10, 2021 | CVE-2020-17463 | Fuel CMS · Fuel CMS | Fuel CMS SQL Injection Vulnerability | Critical 9.8 | 89.7% | Jun 10, 2022 |
| Dec 10, 2021 | CVE-2019-7238 | Sonatype · Nexus Repository Manager | Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability | Critical 9.8 | 76.6% | Jun 10, 2022 |
| Dec 10, 2021 | CVE-2019-13272 | Linux · Kernel | Linux Kernel Improper Privilege Management Vulnerability | High 7.8 | 52.2% | Jun 10, 2022 |
| Dec 10, 2021 | CVE-2019-10758 | MongoDB · mongo-express | MongoDB mongo-express Remote Code Execution Vulnerability | Critical 9.9 | 84.7% | Jun 10, 2022 |
| Dec 10, 2021 | CVE-2019-0193 | Apache · Solr | Apache Solr DataImportHandler Code Injection Vulnerability | High 7.2 | 83.5% | Jun 10, 2022 |
| Dec 10, 2021 | CVE-2017-17562 | Embedthis · GoAhead | Embedthis GoAhead Remote Code Execution Vulnerability | High 8.1 | 97.1% | Jun 10, 2022 |
| Dec 10, 2021 | CVE-2017-12149 Ransomware | Red Hat · JBoss Application Server | Red Hat JBoss Application Server Remote Code Execution Vulnerability | Critical 9.8 | 90.7% | Jun 10, 2022 |
| Dec 10, 2021 | CVE-2010-1871 | Red Hat · JBoss Seam 2 | Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | High 8.8 | 83.4% | Jun 10, 2022 |
| Dec 1, 2021 | CVE-2021-44077 | Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability | Critical 9.8 | 93.3% | Dec 15, 2021 |
| Dec 1, 2021 | CVE-2021-40438 Ransomware | Apache · Apache | Apache HTTP Server-Side Request Forgery (SSRF) | Critical 9.0 | 100.0% | Dec 15, 2021 |
| Dec 1, 2021 | CVE-2021-37415 | Zoho · ManageEngine ServiceDesk Plus (SDP) | Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability | Critical 9.8 | 99.8% | Dec 15, 2021 |
| Dec 1, 2021 | CVE-2020-11261 | Qualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | Qualcomm Multiple Chipsets Improper Input Validation Vulnerability | High 7.8 | 1.5% | Jun 1, 2022 |
| Dec 1, 2021 | CVE-2018-14847 | MikroTik · RouterOS | MikroTik Router OS Directory Traversal Vulnerability | Critical 9.1 | 96.0% | Jun 1, 2022 |
| Nov 17, 2021 | CVE-2021-42321 Ransomware | Microsoft · Exchange | Microsoft Exchange Server Remote Code Execution Vulnerability | High 8.8 | 91.7% | Dec 1, 2021 |
| Nov 17, 2021 | CVE-2021-42292 | Microsoft · Office | Microsoft Excel Security Feature Bypass | High 7.8 | 43.0% | Dec 1, 2021 |
| Nov 17, 2021 | CVE-2021-40449 Ransomware | Microsoft · Windows | Microsoft Windows Win32k Privilege Escalation Vulnerability | High 7.8 | 81.9% | Dec 1, 2021 |
| Nov 17, 2021 | CVE-2021-22204 | Perl · Exiftool | ExifTool Remote Code Execution Vulnerability | Medium 6.8 | 100.0% | Dec 1, 2021 |
| Nov 3, 2021 | CVE-2021-42258 Ransomware | BQE · BillQuick Web Suite | BQE BillQuick Web Suite SQL Injection Vulnerability | Critical 9.8 | 75.2% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-42013 Ransomware | Apache · HTTP Server | Apache HTTP Server Path Traversal Vulnerability | Critical 9.8 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-41773 Ransomware | Apache · HTTP Server | Apache HTTP Server Path Traversal Vulnerability | High 7.5 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-40539 Ransomware | Zoho · ManageEngine | Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | Critical 9.8 | 99.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-40444 Ransomware | Microsoft · MSHTML | Microsoft MSHTML Remote Code Execution Vulnerability | High 8.8 | 97.8% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-38649 | Microsoft · Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | High 7.0 | 2.9% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-38648 | Microsoft · Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | High 7.8 | 11.4% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-38647 Ransomware | Microsoft · Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-38645 | Microsoft · Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | High 7.8 | 2.7% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-38003 | Google · Chromium V8 | Google Chromium V8 Memory Corruption Vulnerability | High 8.8 | 38.6% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-38000 | Google · Chromium Intents | Google Chromium Intents Improper Input Validation Vulnerability | Medium 6.1 | 4.9% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-37976 | Google · Chromium | Google Chromium Information Disclosure Vulnerability | Medium 6.5 | 19.9% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-37975 | Google · Chromium V8 | Google Chromium V8 Use-After-Free Vulnerability | High 8.8 | 34.9% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-37973 | Google · Chromium Portals | Google Chromium Portals Use-After-Free Vulnerability | Critical 9.6 | 11.7% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-36955 Ransomware | Microsoft · Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | High 7.8 | 4.1% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-36948 | Microsoft · Windows | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | High 7.8 | 23.3% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-36942 Ransomware | Microsoft · Windows | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | High 7.5 | 66.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-36742 | Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security | Trend Micro Multiple Products Improper Input Validation Vulnerability | High 7.8 | 1.5% | Nov 17, 2021 |