Known exploited vulnerabilities
From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.
- In the catalogue
- 1781
- Added in the last 7 days
- 12
- Used in ransomware
- 361
The catalogue, newest first
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2021-21973 | VMware | vCenter Server and Cloud Foundation | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability | 7 Mar 2022 | 21 Mar 2022 | Unknown |
| CVE-2022-26485 | Mozilla | Firefox | Mozilla Firefox Use-After-Free Vulnerability | 7 Mar 2022 | 21 Mar 2022 | Unknown |
| CVE-2022-26486 | Mozilla | Firefox | Mozilla Firefox Use-After-Free Vulnerability | 7 Mar 2022 | 21 Mar 2022 | Unknown |
| CVE-2002-0367 | Microsoft | Windows | Microsoft Windows Privilege Escalation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2004-0210 | Microsoft | Windows | Microsoft Windows Privilege Escalation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2008-2992 | Adobe | Acrobat and Reader | Adobe Reader and Acrobat Input Validation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2008-3431 | Oracle | VirtualBox | Oracle VirtualBox Insufficient Input Validation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2009-1123 | Microsoft | Windows | Microsoft Windows Improper Input Validation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2009-3129 | Microsoft | Excel | Microsoft Excel Featheader Record Memory Corruption Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2010-0188 | Adobe | Reader and Acrobat | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2010-0232 | Microsoft | Windows | Microsoft Windows Kernel Exception Handler Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2010-3333 | Microsoft | Office | Microsoft Office Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2011-0611 | Adobe | Flash Player | Adobe Flash Player Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2011-1889 | Microsoft | Forefront Threat Management Gateway (TMG) | Microsoft Forefront TMG Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2011-3544 | Oracle | Java SE JDK and JRE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2012-0507 | Oracle | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2012-1535 | Adobe | Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2012-1723 | Oracle | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2012-1856 | Microsoft | Office | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2012-4681 | Oracle | Java SE | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2013-0632 | Adobe | ColdFusion | Adobe ColdFusion Authentication Bypass Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2013-0640 | Adobe | Reader and Acrobat | Adobe Reader and Acrobat Memory Corruption Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2013-0641 | Adobe | Reader | Adobe Reader Buffer Overflow Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2013-1347 | Microsoft | Internet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2013-1675 | Mozilla | Firefox | Mozilla Firefox Information Disclosure Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2013-3346 | Adobe | Reader and Acrobat | Adobe Reader and Acrobat Memory Corruption Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2013-3897 | Microsoft | Internet Explorer | Microsoft Internet Explorer Use-After-Free Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2013-5065 | Microsoft | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2014-0496 | Adobe | Reader and Acrobat | Adobe Reader and Acrobat Use-After-Free Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2014-4114 | Microsoft | Windows | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-1642 | Microsoft | Office | Microsoft Office Memory Corruption Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-1701 | Microsoft | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2015-2387 | Microsoft | ATM Font Driver | Microsoft ATM Font Driver Privilege Escalation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-2424 | Microsoft | PowerPoint | Microsoft PowerPoint Memory Corruption Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-2545 | Microsoft | Office | Microsoft Office Malformed EPS File Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-2590 | Oracle | Java SE | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-3043 | Adobe | Flash Player | Adobe Flash Player Memory Corruption Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-4902 | Oracle | Java SE | Oracle Java SE Integrity Check Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-5119 | Adobe | Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2015-7645 | Adobe | Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2016-0099 | Microsoft | Windows | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2016-1019 | Adobe | Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2016-4117 | Adobe | Flash Player | Adobe Flash Player Arbitrary Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Known |
| CVE-2016-5195 | Linux | Kernel | Linux Kernel Race Condition Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2016-7193 | Microsoft | Office | Microsoft Office Memory Corruption Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2016-7262 | Microsoft | Excel | Microsoft Office Security Feature Bypass Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2016-7855 | Adobe | Flash Player | Adobe Flash Player Use-After-Free Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2016-8562 | Siemens | SIMATIC CP | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-0001 | Microsoft | Graphics Device Interface (GDI) | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-0261 | Microsoft | Office | Microsoft Office Use-After-Free Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-11292 | Adobe | Flash Player | Adobe Flash Player Type Confusion Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-11826 | Microsoft | Office | Microsoft Office Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-12231 | Cisco | IOS software | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-12232 | Cisco | IOS software | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-12233 | Cisco | IOS software | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-12234 | Cisco | IOS software | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-12235 | Cisco | IOS software | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-12237 | Cisco | IOS and IOS XE Software | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-12238 | Cisco | Catalyst 6800 Series Switches | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-12240 | Cisco | IOS and IOS XE Software | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-12319 | Cisco | IOS XE Software | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-6627 | Cisco | IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-6663 | Cisco | IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-6736 | Cisco | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-6737 | Cisco | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-6738 | Cisco | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-6739 | Cisco | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-6740 | Cisco | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-6743 | Cisco | IOS and IOS XE Software | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-6744 | Cisco | IOS software | Cisco IOS Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2017-8540 | Microsoft | Malware Protection Engine | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | 3 Mar 2022 | 24 Mar 2022 | Unknown |
| CVE-2018-0151 | Cisco | IOS and IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0154 | Cisco | IOS Software | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0155 | Cisco | Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0156 | Cisco | IOS Software and Cisco IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0158 | Cisco | IOS Software and Cisco IOS XE Software | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0159 | Cisco | IOS Software and Cisco IOS XE Software | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0161 | Cisco | IOS Software | Cisco IOS Software Resource Management Errors Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0167 | Cisco | IOS, XR, and XE Software | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0172 | Cisco | IOS and IOS XE Software | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0173 | Cisco | IOS and IOS XE Software | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0174 | Cisco | IOS XE Software | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0175 | Cisco | IOS, XR, and XE Software | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0179 | Cisco | IOS Software | Cisco IOS Software Denial-of-Service Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-0180 | Cisco | IOS Software | Cisco IOS Software Denial-of-Service Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-8298 | ChakraCore | ChakraCore scripting engine | ChakraCore Scripting Engine Type Confusion Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2018-8581 | Microsoft | Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Known |
| CVE-2019-1297 | Microsoft | Excel | Microsoft Excel Remote Code Execution Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2019-1652 | Cisco | Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | Cisco Small Business Routers Improper Input Validation Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2019-16928 | Exim | Exim Internet Mailer | Exim Out-of-bounds Write Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2020-11899 | Treck TCP/IP stack | IPv6 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2020-1938 | Apache | Tomcat | Apache Tomcat Improper Privilege Management Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2021-41379 | Microsoft | Windows | Microsoft Windows Installer Privilege Escalation Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Known |
| CVE-2022-20699 | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2022-20700 | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2022-20701 | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2022-20703 | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2022-20708 | Cisco | Small Business RV160, RV260, RV340, and RV345 Series Routers | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 | 17 Mar 2022 | Unknown |
| CVE-2014-6352 | Microsoft | Windows | Microsoft Windows Code Injection Vulnerability | 25 Feb 2022 | 25 Aug 2022 | Unknown |
| CVE-2017-0222 | Microsoft | Internet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | 25 Feb 2022 | 25 Aug 2022 | Unknown |