Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
1769 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Apr 16, 2026 | CVE-2026-34197 | Apache · ActiveMQ | Apache ActiveMQ Improper Input Validation Vulnerability | High 8.8 | 98.3% | Apr 30, 2026 |
| Apr 14, 2026 | CVE-2026-32201 | Microsoft · SharePoint Server | Microsoft SharePoint Server Improper Input Validation Vulnerability | Medium 6.5 | 43.4% | Apr 28, 2026 |
| Apr 14, 2026 | CVE-2009-0238 | Microsoft · Office | Microsoft Office Remote Code Execution | High 8.8 | 42.9% | Apr 28, 2026 |
| Apr 13, 2026 | CVE-2026-34621 | Adobe · Acrobat and Reader | Adobe Acrobat and Reader Prototype Pollution Vulnerability | High 8.6 | 7.2% | Apr 27, 2026 |
| Apr 13, 2026 | CVE-2026-21643 | Fortinet · FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | Critical 9.1 | 97.7% | Apr 16, 2026 |
| Apr 13, 2026 | CVE-2025-60710 Ransomware | Microsoft · Windows | Microsoft Windows Link Following Vulnerability | High 7.8 | 4.6% | Apr 27, 2026 |
| Apr 13, 2026 | CVE-2023-36424 | Microsoft · Windows | Microsoft Windows Out-of-Bounds Read Vulnerability | High 7.8 | 12.1% | Apr 27, 2026 |
| Apr 13, 2026 | CVE-2023-21529 Ransomware | Microsoft · Exchange Server | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | High 8.8 | 59.3% | Apr 27, 2026 |
| Apr 13, 2026 | CVE-2020-9715 | Adobe · Acrobat | Adobe Acrobat Use-After-Free Vulnerability | High 7.8 | 33.3% | Apr 27, 2026 |
| Apr 13, 2026 | CVE-2012-1854 | Microsoft · Visual Basic for Applications (VBA) | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | High 7.8 | 20.9% | Apr 27, 2026 |
| Apr 8, 2026 | CVE-2026-1340 | Ivanti · Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | Critical 9.8 | 98.6% | Apr 11, 2026 |
| Apr 6, 2026 | CVE-2026-35616 | Fortinet · FortiClient EMS | Fortinet FortiClient EMS Improper Access Control Vulnerability | Critical 9.1 | 94.0% | Apr 9, 2026 |
| Apr 2, 2026 | CVE-2026-3502 | TrueConf · Client | TrueConf Client Download of Code Without Integrity Check Vulnerability | High 7.8 | 5.8% | Apr 16, 2026 |
| Apr 1, 2026 | CVE-2026-5281 | Google · Dawn | Google Dawn Use-After-Free Vulnerability | High 8.8 | 13.7% | Apr 15, 2026 |
| Mar 30, 2026 | CVE-2026-3055 | Citrix · NetScaler | Citrix NetScaler Out-of-Bounds Read Vulnerability | Critical 9.3 | 91.5% | Apr 2, 2026 |
| Mar 27, 2026 | CVE-2025-53521 | F5 · BIG-IP | F5 BIG-IP Stack-Based Buffer Overflow Vulnerability | Critical 9.8 | 2.3% | Mar 30, 2026 |
| Mar 26, 2026 | CVE-2026-33634 | Aquasecurity · Trivy | Aquasecurity Trivy Embedded Malicious Code Vulnerability | Critical 9.4 | 59.7% | Apr 9, 2026 |
| Mar 25, 2026 | CVE-2026-33017 | Langflow · Langflow | Langflow Code Injection Vulnerability | Critical 9.3 | 96.4% | Apr 8, 2026 |
| Mar 20, 2026 | CVE-2025-54068 | Laravel · Livewire | Laravel Livewire Code Injection Vulnerability | Critical 9.2 | 96.3% | Apr 3, 2026 |
| Mar 20, 2026 | CVE-2025-43520 | Apple · Multiple Products | Apple Multiple Products Classic Buffer Overflow Vulnerability | Medium 5.5 | 0.4% | Apr 3, 2026 |
| Mar 20, 2026 | CVE-2025-43510 | Apple · Multiple Products | Apple Multiple Products Improper Locking Vulnerability | High 7.8 | 0.4% | Apr 3, 2026 |
| Mar 20, 2026 | CVE-2025-32432 | Craft CMS · Craft CMS | Craft CMS Code Injection Vulnerability | Critical 10.0 | 99.8% | Apr 3, 2026 |
| Mar 20, 2026 | CVE-2025-31277 | Apple · Multiple Products | Apple Multiple Products Buffer Overflow Vulnerability | High 8.8 | 1.7% | Apr 3, 2026 |
| Mar 19, 2026 | CVE-2026-20131 Ransomware | Cisco · Secure Firewall Management Center (FMC) | Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability | Critical 10.0 | 44.4% | Mar 22, 2026 |
| Mar 18, 2026 | CVE-2026-20963 | Microsoft · SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 29.2% | Mar 21, 2026 |
| Mar 18, 2026 | CVE-2025-66376 | Synacor · Zimbra Collaboration Suite (ZCS) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability | High 7.2 | 20.2% | Apr 1, 2026 |
| Mar 16, 2026 | CVE-2025-47813 | Wing FTP Server · Wing FTP Server | Wing FTP Server Information Disclosure Vulnerability | Medium 4.3 | 62.5% | Mar 30, 2026 |
| Mar 13, 2026 | CVE-2026-3910 | Google · Chromium V8 | Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | High 8.8 | 2.7% | Mar 27, 2026 |
| Mar 13, 2026 | CVE-2026-3909 | Google · Skia | Google Skia Out-of-Bounds Write Vulnerability | High 8.8 | 2.3% | Mar 27, 2026 |
| Mar 11, 2026 | CVE-2025-68613 | n8n · n8n | n8n Improper Control of Dynamically-Managed Code Resources Vulnerability | Critical 10.0 | 99.0% | Mar 25, 2026 |
| Mar 9, 2026 | CVE-2026-1603 | Ivanti · Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | High 8.6 | 88.3% | Mar 23, 2026 |
| Mar 9, 2026 | CVE-2025-26399 Ransomware | SolarWinds · Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 90.6% | Mar 12, 2026 |
| Mar 9, 2026 | CVE-2021-22054 | Omnissa · Workspace One UEM | Omnissa Workspace ONE Server-Side Request Forgery | High 7.5 | 99.7% | Mar 23, 2026 |
| Mar 5, 2026 | CVE-2023-43000 | Apple · Multiple Products | Apple Multiple products Use-After-Free Vulnerability | High 8.8 | 4.0% | Mar 26, 2026 |
| Mar 5, 2026 | CVE-2023-41974 | Apple · iOS and iPadOS | Apple iOS and iPadOS Use-After-Free Vulnerability | High 7.8 | 2.0% | Mar 26, 2026 |
| Mar 5, 2026 | CVE-2021-30952 | Apple · Multiple Products | Apple Multiple Products Integer Overflow or Wraparound Vulnerability | High 8.8 | 7.0% | Mar 26, 2026 |
| Mar 5, 2026 | CVE-2021-22681 | Rockwell · Multiple Products | Rockwell Multiple Products Insufficient Protected Credentials Vulnerability | Critical 9.8 | 63.6% | Mar 26, 2026 |
| Mar 5, 2026 | CVE-2017-7921 | Hikvision · Multiple Products | Hikvision Multiple Products Improper Authentication Vulnerability | Critical 9.8 | 100.0% | Mar 26, 2026 |
| Mar 3, 2026 | CVE-2026-22719 | Broadcom · VMware Aria Operations | Broadcom VMware Aria Operations Command Injection Vulnerability | High 8.1 | 18.3% | Mar 24, 2026 |
| Mar 3, 2026 | CVE-2026-21385 | Qualcomm · Multiple Chipsets | Qualcomm Multiple Chipsets Memory Corruption Vulnerability | High 7.8 | 1.3% | Mar 24, 2026 |
| Feb 25, 2026 | CVE-2026-20127 | Cisco · Catalyst SD-WAN Controller and Manager | Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability | Critical 10.0 | 87.6% | Feb 27, 2026 |
| Feb 25, 2026 | CVE-2022-20775 | Cisco · SD-WAN | Cisco SD-WAN Path Traversal Vulnerability | High 7.8 | 12.0% | Feb 27, 2026 |
| Feb 24, 2026 | CVE-2026-25108 | Soliton Systems K.K · FileZen | Soliton Systems K.K FileZen OS Command Injection Vulnerability | High 8.8 | 5.2% | Mar 17, 2026 |
| Feb 20, 2026 | CVE-2025-68461 | Roundcube · Webmail | RoundCube Webmail Cross-site Scripting Vulnerability | High 7.2 | 27.4% | Mar 13, 2026 |
| Feb 20, 2026 | CVE-2025-49113 | Roundcube · Webmail | RoundCube Webmail Deserialization of Untrusted Data Vulnerability | Critical 9.9 | 99.5% | Mar 13, 2026 |
| Feb 18, 2026 | CVE-2026-22769 | Dell · RecoverPoint for Virtual Machines (RP4VMs) | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability | Critical 10.0 | 13.5% | Feb 21, 2026 |
| Feb 18, 2026 | CVE-2021-22175 | GitLab · GitLab | GitLab Server-Side Request Forgery (SSRF) Vulnerability | Medium 6.8 | 53.4% | Mar 11, 2026 |
| Feb 17, 2026 | CVE-2026-2441 | Google · Chromium | Google Chromium CSS Use-After-Free Vulnerability | High 8.8 | 55.0% | Mar 10, 2026 |
| Feb 17, 2026 | CVE-2024-7694 | TeamT5 · ThreatSonar Anti-Ransomware | TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability | High 7.2 | 1.8% | Mar 10, 2026 |
| Feb 17, 2026 | CVE-2020-7796 | Synacor · Zimbra Collaboration Suite | Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability | Critical 9.8 | 93.6% | Mar 10, 2026 |