Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Nov 3, 2021 | CVE-2020-14871 | Oracle · Solaris and Zettabyte File System (ZFS) | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | Critical 10.0 | 80.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-14750 | Oracle · WebLogic Server | Oracle WebLogic Server Remote Code Execution Vulnerability | Critical 9.8 | 99.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-1472 Ransomware | Microsoft · Netlogon | Microsoft Netlogon Privilege Escalation Vulnerability | Medium 5.5 | 99.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-1464 | Microsoft · Windows | Microsoft Windows Spoofing Vulnerability | High 7.8 | 38.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-1380 | Microsoft · Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | High 7.8 | 24.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-1350 | Microsoft · Windows | Microsoft Windows DNS Server Remote Code Execution Vulnerability | Critical 10.0 | 96.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-12812 Ransomware | Fortinet · FortiOS | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | High 7.5 | 45.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-12271 Ransomware | Sophos · SFOS | Sophos SFOS SQL Injection Vulnerability | Critical 10.0 | 43.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-11738 | WordPress · Snap Creek Duplicator Plugin | WordPress Snap Creek Duplicator Plugin File Download Vulnerability | High 7.5 | 97.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-11652 | SaltStack · Salt | SaltStack Salt Path Traversal Vulnerability | Medium 6.5 | 86.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-11651 | SaltStack · Salt | SaltStack Salt Authentication Bypass Vulnerability | Critical 9.8 | 96.6% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-1147 | Microsoft · .NET Framework, SharePoint, Visual Studio | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | High 7.8 | 95.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-10987 | Tenda · AC1900 Router AC15 Model | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | Critical 9.8 | 79.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-1054 | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.0 | 53.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-1040 | Microsoft · Hyper-V RemoteFX | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | Critical 9.0 | 7.6% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-10221 | rConfig · rConfig | rConfig OS Command Injection Vulnerability | High 8.8 | 77.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-1020 | Microsoft · Windows | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | High 8.8 | 65.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-10199 | Sonatype · Nexus Repository | Sonatype Nexus Repository Remote Code Execution Vulnerability | High 8.8 | 99.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-10189 | Zoho · ManageEngine | Zoho ManageEngine Desktop Central File Upload Vulnerability | Critical 9.8 | 99.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-10181 | Sumavision · Enhanced Multimedia Router (EMR) | Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | Critical 9.8 | 14.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-10148 | SolarWinds · Orion | SolarWinds Orion Authentication Bypass Vulnerability | Critical 9.8 | 92.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-0986 | Microsoft · Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | High 7.8 | 16.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-0968 Ransomware | Microsoft · Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | High 7.5 | 30.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-0938 | Microsoft · Windows | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | High 7.8 | 69.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-0878 Ransomware | Microsoft · Edge and Internet Explorer | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | Medium 4.2 | 2.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-0688 Ransomware | Microsoft · Exchange Server | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability | High 8.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-0683 | Microsoft · Windows | Microsoft Windows Installer Privilege Escalation Vulnerability | High 7.8 | 7.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-0674 | Microsoft · Internet Explorer | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | High 7.5 | 86.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-0646 | Microsoft · .NET Framework | Microsoft .NET Framework Remote Code Execution Vulnerability | Critical 9.8 | 99.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-0601 | Microsoft · Windows | Microsoft Windows CryptoAPI Spoofing Vulnerability | High 8.1 | 89.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-0069 | MediaTek · Multiple Chipsets | Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability | High 7.8 | 1.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2020-0041 | Android · Android Kernel | Android Kernel Out-of-Bounds Write Vulnerability | High 7.8 | 3.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-9978 | WordPress · Social Warfare Plugin | WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | Medium 6.1 | 72.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-9082 | ThinkPHP · ThinkPHP | ThinkPHP Remote Code Execution Vulnerability | High 8.8 | 97.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-8394 | Zoho · ManageEngine | Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | High 7.5 | 63.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-7481 Ransomware | SonicWall · SMA100 | SonicWall SMA100 SQL Injection Vulnerability | High 7.5 | 99.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-6223 | Apple · iOS and macOS | Apple iOS and macOS Group Facetime Vulnerability | High 7.5 | 2.6% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-5591 Ransomware | Fortinet · FortiOS | Fortinet FortiOS Default Configuration Vulnerability | Medium 6.5 | 18.6% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-5544 Ransomware | VMware · VMware ESXi and Horizon DaaS | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability | Critical 9.8 | 98.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-4716 | IBM · Planning Analytics | IBM Planning Analytics Remote Code Execution Vulnerability | Critical 10.0 | 86.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-3398 | Atlassian · Confluence Server and Data Center | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | High 8.8 | 97.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-3396 Ransomware | Atlassian · Confluence Server and Data Server | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | Critical 9.8 | 99.9% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-2215 | Android · Android Kernel | Android Kernel Use-After-Free Vulnerability | High 7.8 | 72.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-20085 | TVT · NVMS-1000 | TVT NVMS-1000 Directory Traversal Vulnerability | High 7.5 | 96.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-19781 Ransomware | Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | Critical 9.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-19356 | Netis · WF2419 Devices | Netis WF2419 Devices Remote Code Execution Vulnerability | High 7.5 | 28.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-18988 | TeamViewer · Desktop | TeamViewer Desktop Bypass Remote Login Vulnerability | High 7.0 | 4.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-18935 Ransomware | Progress · Telerik UI for ASP.NET AJAX | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 99.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-18187 | Trend Micro · OfficeScan | Trend Micro OfficeScan Directory Traversal Vulnerability | High 8.8 | 25.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-17558 | Apache · Solr | Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability | High 7.5 | 98.6% | May 3, 2022 |