Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
390 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Oct 13, 2026 | CVE-2026-96951 | Microsoft · Windows | Microsoft Windows Command Injection Vulnerability | High 8.8 | 9.8% | Oct 16, 2026 |
| Sep 25, 2026 | CVE-2026-65660 | Microsoft · SharePoint | Microsoft SharePoint Code Injection Vulnerability | High 8.8 | 8.2% | Sep 28, 2026 |
| Sep 8, 2026 | CVE-2026-85880 | Microsoft · Windows | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | High 7.8 | 0.4% | Sep 22, 2026 |
| Sep 8, 2026 | CVE-2026-81963 | Microsoft · Windows | Microsoft Windows Link Following Vulnerability | High 7.8 | 0.4% | Sep 22, 2026 |
| Aug 26, 2026 | CVE-2019-1068 | Microsoft · SQL Server | Microsoft SQL Server Remote Code Execution Vulnerability | High 8.8 | 57.3% | Aug 29, 2026 |
| Aug 18, 2026 | CVE-2026-55040 | Microsoft · SharePoint | Microsoft SharePoint Weak Authentication Vulnerability | Critical 9.1 | 69.5% | Aug 21, 2026 |
| Aug 18, 2026 | CVE-2026-33824 | Microsoft · Internet Key Exchange (IKE) Service Extensions | Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability | Critical 9.8 | 77.1% | Aug 21, 2026 |
| Aug 11, 2026 | CVE-2026-68820 | Microsoft · Windows Ancillary Function Driver for WinSock | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | High 7.0 | 8.6% | Aug 25, 2026 |
| Jul 22, 2026 | CVE-2026-50522 | Microsoft · SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 3.0% | Jul 25, 2026 |
| Jul 16, 2026 | CVE-2026-58644 | Microsoft · SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 15.9% | Jul 19, 2026 |
| Jul 14, 2026 | CVE-2026-56164 | Microsoft · SharePoint Server | Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability | Medium 5.3 | 1.0% | Jul 17, 2026 |
| Jul 14, 2026 | CVE-2026-56155 | Microsoft · Active Directory Federation Services | Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability | High 7.8 | 0.3% | Jul 28, 2026 |
| Jul 1, 2026 | CVE-2026-45659 Ransomware | Microsoft · SharePoint Server | Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability | High 8.8 | 80.2% | Jul 4, 2026 |
| May 20, 2026 | CVE-2026-45498 | Microsoft · Defender | Microsoft Defender Denial of Service Vulnerability | Medium 4.0 | 63.1% | Jun 3, 2026 |
| May 20, 2026 | CVE-2026-41091 | Microsoft · Defender | Microsoft Defender Link Following Vulnerability | High 7.8 | 8.2% | Jun 3, 2026 |
| May 20, 2026 | CVE-2010-0806 | Microsoft · Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | High 8.8 | 82.1% | Jun 3, 2026 |
| May 20, 2026 | CVE-2010-0249 | Microsoft · Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | High 8.8 | 91.9% | Jun 3, 2026 |
| May 20, 2026 | CVE-2009-1537 | Microsoft · DirectX | Microsoft DirectX NULL Byte Overwrite Vulnerability | High 8.8 | 51.1% | Jun 3, 2026 |
| May 20, 2026 | CVE-2008-4250 | Microsoft · Windows | Microsoft Windows Buffer Overflow Vulnerability | Critical 9.8 | 98.8% | Jun 3, 2026 |
| May 15, 2026 | CVE-2026-42897 | Microsoft · Microsoft | Microsoft Exchange Server Cross-Site Scripting Vulnerability | High 8.1 | 70.7% | May 29, 2026 |
| Apr 28, 2026 | CVE-2026-32202 | Microsoft · Windows | Microsoft Windows Protection Mechanism Failure Vulnerability | Medium 4.3 | 70.9% | May 12, 2026 |
| Apr 22, 2026 | CVE-2026-33825 Ransomware | Microsoft · Defender | Microsoft Defender Insufficient Granularity of Access Control Vulnerability | High 7.8 | 6.7% | May 6, 2026 |
| Apr 14, 2026 | CVE-2026-32201 | Microsoft · SharePoint Server | Microsoft SharePoint Server Improper Input Validation Vulnerability | Medium 6.5 | 43.4% | Apr 28, 2026 |
| Apr 14, 2026 | CVE-2009-0238 | Microsoft · Office | Microsoft Office Remote Code Execution | High 8.8 | 42.9% | Apr 28, 2026 |
| Apr 13, 2026 | CVE-2025-60710 Ransomware | Microsoft · Windows | Microsoft Windows Link Following Vulnerability | High 7.8 | 4.6% | Apr 27, 2026 |
| Apr 13, 2026 | CVE-2023-36424 | Microsoft · Windows | Microsoft Windows Out-of-Bounds Read Vulnerability | High 7.8 | 12.1% | Apr 27, 2026 |
| Apr 13, 2026 | CVE-2023-21529 Ransomware | Microsoft · Exchange Server | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | High 8.8 | 59.3% | Apr 27, 2026 |
| Apr 13, 2026 | CVE-2012-1854 | Microsoft · Visual Basic for Applications (VBA) | Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability | High 7.8 | 20.9% | Apr 27, 2026 |
| Mar 18, 2026 | CVE-2026-20963 | Microsoft · SharePoint | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 29.2% | Mar 21, 2026 |
| Feb 17, 2026 | CVE-2008-0015 | Microsoft · Windows | Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability | High 8.8 | 76.6% | Mar 10, 2026 |
| Feb 12, 2026 | CVE-2024-43468 | Microsoft · Configuration Manager | Microsoft Configuration Manager SQL Injection Vulnerability | Critical 9.8 | 81.0% | Mar 5, 2026 |
| Feb 10, 2026 | CVE-2026-21533 | Microsoft · Windows | Microsoft Windows Improper Privilege Management Vulnerability | High 7.8 | 4.3% | Mar 3, 2026 |
| Feb 10, 2026 | CVE-2026-21525 | Microsoft · Windows | Microsoft Windows NULL Pointer Dereference Vulnerability | Medium 6.2 | 5.0% | Mar 3, 2026 |
| Feb 10, 2026 | CVE-2026-21519 | Microsoft · Windows | Microsoft Windows Type Confusion Vulnerability | High 7.8 | 2.6% | Mar 3, 2026 |
| Feb 10, 2026 | CVE-2026-21514 | Microsoft · Office | Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | High 7.8 | 1.6% | Mar 3, 2026 |
| Feb 10, 2026 | CVE-2026-21513 | Microsoft · Windows | Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability | High 8.8 | 15.9% | Mar 3, 2026 |
| Feb 10, 2026 | CVE-2026-21510 | Microsoft · Windows | Microsoft Windows Shell Protection Mechanism Failure Vulnerability | High 8.8 | 61.2% | Mar 3, 2026 |
| Jan 26, 2026 | CVE-2026-21509 | Microsoft · Office | Microsoft Office Security Feature Bypass Vulnerability | High 7.8 | 70.8% | Feb 16, 2026 |
| Jan 13, 2026 | CVE-2026-20805 | Microsoft · Windows | Microsoft Windows Information Disclosure Vulnerability | Medium 5.5 | 7.5% | Feb 3, 2026 |
| Jan 7, 2026 | CVE-2009-0556 | Microsoft · Office | Microsoft Office PowerPoint Code Injection Vulnerability | High 8.8 | 67.3% | Jan 28, 2026 |
| Dec 9, 2025 | CVE-2025-62221 | Microsoft · Windows | Microsoft Windows Use After Free Vulnerability | High 7.8 | 2.5% | Dec 30, 2025 |
| Nov 12, 2025 | CVE-2025-62215 | Microsoft · Windows | Microsoft Windows Race Condition Vulnerability | High 7.0 | 4.5% | Dec 3, 2025 |
| Oct 24, 2025 | CVE-2025-59287 | Microsoft · Windows | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | Critical 9.8 | 100.0% | Nov 14, 2025 |
| Oct 20, 2025 | CVE-2025-33073 | Microsoft · Windows | Microsoft Windows SMB Client Improper Access Control Vulnerability | High 8.8 | 82.8% | Nov 10, 2025 |
| Oct 14, 2025 | CVE-2025-59230 | Microsoft · Windows | Microsoft Windows Improper Access Control Vulnerability | High 7.8 | 2.7% | Nov 4, 2025 |
| Oct 14, 2025 | CVE-2025-24990 | Microsoft · Windows | Microsoft Windows Untrusted Pointer Dereference Vulnerability | High 7.8 | 6.5% | Nov 4, 2025 |
| Oct 6, 2025 | CVE-2021-43226 Ransomware | Microsoft · Windows | Microsoft Windows Privilege Escalation Vulnerability | High 7.8 | 3.3% | Oct 27, 2025 |
| Oct 6, 2025 | CVE-2013-3918 | Microsoft · Windows | Microsoft Windows Out-of-Bounds Write Vulnerability | High 8.8 | 73.7% | Oct 27, 2025 |
| Oct 6, 2025 | CVE-2011-3402 | Microsoft · Windows | Microsoft Windows Remote Code Execution Vulnerability | High 8.8 | 78.1% | Oct 27, 2025 |
| Oct 6, 2025 | CVE-2010-3962 | Microsoft · Internet Explorer | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | High 8.1 | 96.8% | Oct 27, 2025 |