Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Nov 3, 2021 | CVE-2021-26857 Ransomware | Microsoft · Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | High 7.8 | 95.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2021-26855 Ransomware | Microsoft · Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | Critical 9.1 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2021-26411 Ransomware | Microsoft · Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | High 8.8 | 81.7% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-26084 Ransomware | Atlassian · Confluence Server and Data Center | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | Critical 9.8 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-23874 | McAfee · McAfee Total Protection (MTP) | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | High 8.2 | 1.1% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-22986 Ransomware | F5 · BIG-IP and BIG-IQ Centralized Management | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-22900 | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | High 7.2 | 14.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2021-22899 | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Command Injection Vulnerability | High 8.8 | 22.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2021-22894 | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | High 8.8 | 41.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2021-22893 Ransomware | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | Critical 10.0 | 47.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2021-22506 | Micro Focus · Micro Focus Access Manager | Micro Focus Access Manager Information Leakage Vulnerability | High 7.5 | 25.7% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-22502 | Micro Focus · Operation Bridge Reporter (OBR) | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | Critical 9.8 | 96.7% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-22205 Ransomware | GitLab · Community and Enterprise Editions | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability | Critical 10.0 | 99.7% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-22005 Ransomware | VMware · vCenter Server | VMware vCenter Server File Upload Vulnerability | Critical 9.8 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-21985 Ransomware | VMware · vCenter Server | VMware vCenter Server Improper Input Validation Vulnerability | Critical 9.8 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-21972 Ransomware | VMware · vCenter Server | VMware vCenter Server Remote Code Execution Vulnerability | Critical 9.8 | 99.9% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-21224 | Google · Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | High 8.8 | 84.2% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-21220 | Google · Chromium V8 | Google Chromium V8 Improper Input Validation Vulnerability | High 8.8 | 70.4% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-21206 | Google · Chromium Blink | Google Chromium Blink Use-After-Free Vulnerability | High 8.8 | 9.3% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-21193 | Google · Chromium Blink | Google Chromium Blink Use-After-Free Vulnerability | High 8.8 | 10.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-21166 | Google · Chromium | Google Chromium Race Condition Vulnerability | High 8.8 | 24.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-21148 | Google · Chromium V8 | Google Chromium V8 Heap Buffer Overflow Vulnerability | High 8.8 | 20.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-21017 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | High 8.8 | 86.3% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-20090 | Arcadyan · Buffalo Firmware | Arcadyan Buffalo Firmware Path Traversal Vulnerability | Critical 9.8 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-20023 Ransomware | SonicWall · SonicWall Email Security | SonicWall Email Security Path Traversal Vulnerability | Medium 4.9 | 51.7% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-20022 Ransomware | SonicWall · SonicWall Email Security | SonicWall Email Security Unrestricted Upload of File Vulnerability | High 7.2 | 16.6% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-20021 Ransomware | SonicWall · SonicWall Email Security | SonicWall Email Security Improper Privilege Management Vulnerability | Critical 9.8 | 88.8% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-20016 Ransomware | SonicWall · SSLVPN SMA100 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | Critical 9.8 | 40.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-1906 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | Medium 6.2 | 0.5% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-1905 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | High 8.4 | 1.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2021-1879 | Apple · iOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 7.1% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-1871 | Apple · iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | Critical 9.8 | 7.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-1870 | Apple · iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | Critical 9.8 | 7.7% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-1782 | Apple · Multiple Products | Apple Multiple Products Race Condition Vulnerability | High 7.0 | 2.2% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-1732 Ransomware | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 78.4% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-1675 Ransomware | Microsoft · Windows | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | High 7.8 | 85.3% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-1647 | Microsoft · Defender | Microsoft Defender Remote Code Execution Vulnerability | High 7.8 | 39.7% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-1498 | Cisco · HyperFlex HX | Cisco HyperFlex HX Data Platform Command Injection Vulnerability | Critical 9.8 | 100.0% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2021-1497 | Cisco · HyperFlex HX | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | Critical 9.8 | 99.9% | Nov 17, 2021 |
| Nov 3, 2021 | CVE-2020-9859 | Apple · Multiple Products | Apple Multiple Products Code Execution Vulnerability | High 7.8 | 0.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-9819 | Apple · iOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | Medium 4.3 | 2.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-9818 | Apple · iOS, iPadOS, and watchOS | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | High 8.8 | 2.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8657 | EyesOfNetwork · EyesOfNetwork | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | Critical 9.8 | 91.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8655 | EyesOfNetwork · EyesOfNetwork | EyesOfNetwork Improper Privilege Management Vulnerability | High 7.8 | 59.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8644 | PlaySMS · PlaySMS | PlaySMS Server-Side Template Injection Vulnerability | Critical 9.8 | 86.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8599 | Trend Micro · Apex One and OfficeScan | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | Critical 9.8 | 11.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8515 | DrayTek · Multiple Vigor Routers | Multiple DrayTek Vigor Routers Web Management Page Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8468 | Trend Micro · Apex One, OfficeScan and Worry-Free Business Security Agents | Trend Micro Multiple Products Content Validation Escape Vulnerability | High 8.8 | 6.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8467 | Trend Micro · Apex One and OfficeScan | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | High 8.8 | 10.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-8260 | Ivanti · Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | High 7.2 | 96.5% | May 3, 2022 |