Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Nov 3, 2021 | CVE-2017-11774 | Microsoft · Office | Microsoft Office Outlook Security Feature Bypass Vulnerability | High 7.8 | 59.6% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-0199 Ransomware | Microsoft · Office and WordPad | Microsoft Office and WordPad Remote Code Execution Vulnerability | High 7.8 | 99.5% | May 3, 2022 |
| Nov 3, 2021 | CVE-2017-0143 Ransomware | Microsoft · Windows | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability | High 8.8 | 93.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-9563 | SAP · NetWeaver | SAP NetWeaver XML External Entity (XXE) Vulnerability | Medium 6.5 | 24.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-7255 Ransomware | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 81.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-4437 | Apache · Shiro | Apache Shiro Code Execution Vulnerability | Critical 9.8 | 93.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-3976 | SAP · NetWeaver | SAP NetWeaver Directory Traversal Vulnerability | High 7.5 | 47.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-3718 | ImageMagick · ImageMagick | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability | Medium 5.5 | 75.6% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-3715 | ImageMagick · ImageMagick | ImageMagick Arbitrary File Deletion Vulnerability | Medium 5.5 | 75.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-3643 | SolarWinds · Virtualization Manager | SolarWinds Virtualization Manager Privilege Escalation Vulnerability | High 7.8 | 3.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-3235 | Microsoft · Office | Microsoft Office OLE DLL Side Loading Vulnerability | High 7.8 | 43.3% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-0185 | Microsoft · Windows | Microsoft Windows Media Center Remote Code Execution Vulnerability | High 7.8 | 69.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2016-0167 Ransomware | Microsoft · Win32k | Microsoft Win32k Privilege Escalation Vulnerability | High 7.8 | 5.7% | May 3, 2022 |
| Nov 3, 2021 | CVE-2015-4852 | Oracle · WebLogic Server | Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 95.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2015-1641 | Microsoft · Office | Microsoft Office Memory Corruption Vulnerability | High 7.8 | 97.2% | May 3, 2022 |
| Nov 3, 2021 | CVE-2014-1812 Ransomware | Microsoft · Windows | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | High 8.8 | 65.1% | May 3, 2022 |
| Nov 3, 2021 | CVE-2012-3152 | Oracle · Fusion Middleware | Oracle Fusion Middleware Unspecified Vulnerability | Critical 9.1 | 98.8% | May 3, 2022 |
| Nov 3, 2021 | CVE-2012-0158 Ransomware | Microsoft · MSCOMCTL.OCX | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability | High 8.8 | 100.0% | May 3, 2022 |
| Nov 3, 2021 | CVE-2010-5326 | SAP · NetWeaver | SAP NetWeaver Remote Code Execution Vulnerability | Critical 10.0 | 17.8% | May 3, 2022 |