Known Exploited Vulnerabilities
The CISA KEV catalog lists 1,779 CVEs with evidence of exploitation in the wild, newest first. Catalog version 2026.11.10. Source: sources and licenses.
| CVE | Vulnerability | Added | Federal due date | Ransomware |
|---|---|---|---|---|
| CVE-2024-49035 | Microsoft Partner Center Improper Access Control Vulnerability Microsoft / Partner Center | Feb 25, 2025 | Mar 18, 2025 | |
| CVE-2017-3066 | Adobe ColdFusion Deserialization Vulnerability Adobe / ColdFusion | Feb 24, 2025 | Mar 17, 2025 | |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability Oracle / Agile Product Lifecycle Management (PLM) | Feb 24, 2025 | Mar 17, 2025 | |
| CVE-2025-24989 | Microsoft Power Pages Improper Access Control Vulnerability Microsoft / Power Pages | Feb 21, 2025 | Mar 14, 2025 | |
| CVE-2025-0111 | Palo Alto Networks PAN-OS File Read Vulnerability Palo Alto Networks / PAN-OS | Feb 20, 2025 | Mar 13, 2025 | |
| CVE-2025-23209 | Craft CMS Code Injection Vulnerability Craft CMS / Craft CMS | Feb 20, 2025 | Mar 13, 2025 | |
| CVE-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability SonicWall / SonicOS | Feb 18, 2025 | Mar 11, 2025 | Known |
| CVE-2025-0108 | Palo Alto Networks PAN-OS Authentication Bypass Vulnerability Palo Alto Networks / PAN-OS | Feb 18, 2025 | Mar 11, 2025 | |
| CVE-2024-57727 | SimpleHelp Path Traversal Vulnerability SimpleHelp / SimpleHelp | Feb 13, 2025 | Mar 6, 2025 | Known |
| CVE-2024-41710 | Mitel SIP Phones Argument Injection Vulnerability Mitel / SIP Phones | Feb 12, 2025 | Mar 5, 2025 | |
| CVE-2025-24200 | Apple iOS and iPadOS Incorrect Authorization Vulnerability Apple / iOS and iPadOS | Feb 12, 2025 | Mar 5, 2025 | |
| CVE-2024-40890 | Zyxel DSL CPE OS Command Injection Vulnerability Zyxel / DSL CPE Devices | Feb 11, 2025 | Mar 4, 2025 | |
| CVE-2024-40891 | Zyxel DSL CPE OS Command Injection Vulnerability Zyxel / DSL CPE Devices | Feb 11, 2025 | Mar 4, 2025 | |
| CVE-2025-21391 | Microsoft Windows Storage Link Following Vulnerability Microsoft / Windows | Feb 11, 2025 | Mar 4, 2025 | |
| CVE-2025-21418 | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability Microsoft / Windows | Feb 11, 2025 | Mar 4, 2025 | |
| CVE-2025-0994 | Trimble Cityworks Deserialization Vulnerability Trimble / Cityworks | Feb 7, 2025 | Feb 28, 2025 | |
| CVE-2020-15069 | Sophos XG Firewall Buffer Overflow Vulnerability Sophos / XG Firewall | Feb 6, 2025 | Feb 27, 2025 | |
| CVE-2020-29574 | CyberoamOS (CROS) SQL Injection Vulnerability Sophos / CyberoamOS | Feb 6, 2025 | Feb 27, 2025 | Known |
| CVE-2022-23748 | Dante Discovery Process Control Vulnerability Audinate / Dante Discovery | Feb 6, 2025 | Feb 27, 2025 | |
| CVE-2024-21413 | Microsoft Outlook Improper Input Validation Vulnerability Microsoft / Office Outlook | Feb 6, 2025 | Feb 27, 2025 | |
| CVE-2025-0411 | 7-Zip Mark of the Web Bypass Vulnerability 7-Zip / 7-Zip | Feb 6, 2025 | Feb 27, 2025 | |
| CVE-2024-53104 | Linux Kernel Out-of-Bounds Write Vulnerability Linux / Kernel | Feb 5, 2025 | Feb 26, 2025 | |
| CVE-2018-19410 | Paessler PRTG Network Monitor Local File Inclusion Vulnerability Paessler / PRTG Network Monitor | Feb 4, 2025 | Feb 25, 2025 | |
| CVE-2018-9276 | Paessler PRTG Network Monitor OS Command Injection Vulnerability Paessler / PRTG Network Monitor | Feb 4, 2025 | Feb 25, 2025 | |
| CVE-2024-29059 | Microsoft .NET Framework Information Disclosure Vulnerability Microsoft / .NET Framework | Feb 4, 2025 | Feb 25, 2025 | |
| CVE-2024-45195 | Apache OFBiz Forced Browsing Vulnerability Apache / OFBiz | Feb 4, 2025 | Feb 25, 2025 | |
| CVE-2025-24085 | Apple Multiple Products Use-After-Free Vulnerability Apple / Multiple Products | Jan 29, 2025 | Feb 19, 2025 | |
| CVE-2025-23006 | SonicWall SMA1000 Appliances Deserialization Vulnerability SonicWall / SMA1000 Appliances | Jan 24, 2025 | Feb 14, 2025 | Known |
| CVE-2020-11023 | JQuery Cross-Site Scripting (XSS) Vulnerability JQuery / JQuery | Jan 23, 2025 | Feb 13, 2025 | |
| CVE-2024-50603 | Aviatrix Controllers OS Command Injection Vulnerability Aviatrix / Controllers | Jan 16, 2025 | Feb 6, 2025 | |
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Fortinet / FortiOS and FortiProxy | Jan 14, 2025 | Jan 21, 2025 | Known |
| CVE-2025-21333 | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability Microsoft / Windows | Jan 14, 2025 | Feb 4, 2025 | |
| CVE-2025-21334 | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft / Windows | Jan 14, 2025 | Feb 4, 2025 | |
| CVE-2025-21335 | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability Microsoft / Windows | Jan 14, 2025 | Feb 4, 2025 | |
| CVE-2023-48365 | Qlik Sense HTTP Tunneling Vulnerability Qlik / Sense | Jan 13, 2025 | Feb 3, 2025 | Known |
| CVE-2024-12686 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability BeyondTrust / Privileged Remote Access (PRA) and Remote Support (RS) | Jan 13, 2025 | Feb 3, 2025 | |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability Ivanti / Connect Secure, Policy Secure, and ZTA Gateways | Jan 8, 2025 | Jan 15, 2025 | Known |
| CVE-2020-2883 | Oracle WebLogic Server Unspecified Vulnerability Oracle / WebLogic Server | Jan 7, 2025 | Jan 28, 2025 | |
| CVE-2024-41713 | Mitel MiCollab Path Traversal Vulnerability Mitel / MiCollab | Jan 7, 2025 | Jan 28, 2025 | Known |
| CVE-2024-55550 | Mitel MiCollab Path Traversal Vulnerability Mitel / MiCollab | Jan 7, 2025 | Jan 28, 2025 | Known |
| CVE-2024-3393 | Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability Palo Alto Networks / PAN-OS | Dec 30, 2024 | Jan 20, 2025 | |
| CVE-2021-44207 | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability Acclaim Systems / USAHERDS | Dec 23, 2024 | Jan 13, 2025 | |
| CVE-2024-12356 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability BeyondTrust / Privileged Remote Access (PRA) and Remote Support (RS) | Dec 19, 2024 | Dec 27, 2024 | |
| CVE-2018-14933 | NUUO NVRmini Devices OS Command Injection Vulnerability NUUO / NVRmini Devices | Dec 18, 2024 | Jan 8, 2025 | |
| CVE-2019-11001 | Reolink Multiple IP Cameras OS Command Injection Vulnerability Reolink / Multiple IP Cameras | Dec 18, 2024 | Jan 8, 2025 | |
| CVE-2021-40407 | Reolink RLC-410W IP Camera OS Command Injection Vulnerability Reolink / RLC-410W IP Camera | Dec 18, 2024 | Jan 8, 2025 | |
| CVE-2022-23227 | NUUO NVRmini2 Devices Missing Authentication Vulnerability NUUO / NVRmini2 Devices | Dec 18, 2024 | Jan 8, 2025 | |
| CVE-2024-55956 | Cleo Multiple Products Unauthenticated File Upload Vulnerability Cleo / Multiple Products | Dec 17, 2024 | Jan 7, 2025 | Known |
| CVE-2024-20767 | Adobe ColdFusion Improper Access Control Vulnerability Adobe / ColdFusion | Dec 16, 2024 | Jan 6, 2025 | |
| CVE-2024-35250 | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability Microsoft / Windows | Dec 16, 2024 | Jan 6, 2025 | |
| CVE-2024-50623 | Cleo Multiple Products Unrestricted File Upload Vulnerability Cleo / Multiple Products | Dec 13, 2024 | Jan 3, 2025 | Known |
| CVE-2024-49138 | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability Microsoft / Windows | Dec 10, 2024 | Dec 31, 2024 | |
| CVE-2024-51378 | CyberPanel Incorrect Default Permissions Vulnerability CyberPersons / CyberPanel | Dec 4, 2024 | Dec 25, 2024 | Known |
| CVE-2023-45727 | North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability North Grid / Proself | Dec 3, 2024 | Dec 24, 2024 | |
| CVE-2024-11667 | Zyxel Multiple Firewalls Path Traversal Vulnerability Zyxel / Multiple Firewalls | Dec 3, 2024 | Dec 24, 2024 | Known |
| CVE-2024-11680 | ProjectSend Improper Authentication Vulnerability ProjectSend / ProjectSend | Dec 3, 2024 | Dec 24, 2024 | |
| CVE-2023-28461 | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability Array Networks / AG/vxAG ArrayOS | Nov 25, 2024 | Dec 16, 2024 | Known |
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability Oracle / Agile Product Lifecycle Management (PLM) | Nov 21, 2024 | Dec 12, 2024 | |
| CVE-2024-44308 | Apple Multiple Products Code Execution Vulnerability Apple / Multiple Products | Nov 21, 2024 | Dec 12, 2024 | |
| CVE-2024-44309 | Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability Apple / Multiple Products | Nov 21, 2024 | Dec 12, 2024 | |
| CVE-2024-38812 | VMware vCenter Server Heap-Based Buffer Overflow Vulnerability VMware / vCenter Server | Nov 20, 2024 | Dec 11, 2024 | |
| CVE-2024-38813 | VMware vCenter Server Privilege Escalation Vulnerability VMware / vCenter Server | Nov 20, 2024 | Dec 11, 2024 | |
| CVE-2024-0012 | Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability Palo Alto Networks / PAN-OS | Nov 18, 2024 | Dec 9, 2024 | Known |
| CVE-2024-1212 | Progress Kemp LoadMaster OS Command Injection Vulnerability Progress / Kemp LoadMaster | Nov 18, 2024 | Dec 9, 2024 | |
| CVE-2024-9474 | Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability Palo Alto Networks / PAN-OS | Nov 18, 2024 | Dec 9, 2024 | Known |
| CVE-2024-9463 | Palo Alto Networks Expedition OS Command Injection Vulnerability Palo Alto Networks / Expedition | Nov 14, 2024 | Dec 5, 2024 | |
| CVE-2024-9465 | Palo Alto Networks Expedition SQL Injection Vulnerability Palo Alto Networks / Expedition | Nov 14, 2024 | Dec 5, 2024 | |
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability Cisco / Adaptive Security Appliance (ASA) | Nov 12, 2024 | Dec 3, 2024 | |
| CVE-2021-26086 | Atlassian Jira Server and Data Center Path Traversal Vulnerability Atlassian / Jira Server and Data Center | Nov 12, 2024 | Dec 3, 2024 | |
| CVE-2021-41277 | Metabase GeoJSON API Local File Inclusion Vulnerability Metabase / Metabase | Nov 12, 2024 | Dec 3, 2024 | |
| CVE-2024-43451 | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability Microsoft / Windows | Nov 12, 2024 | Dec 3, 2024 | |
| CVE-2024-49039 | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability Microsoft / Windows | Nov 12, 2024 | Dec 3, 2024 | Known |
| CVE-2019-16278 | Nostromo nhttpd Directory Traversal Vulnerability Nostromo / nhttpd | Nov 7, 2024 | Nov 28, 2024 | |
| CVE-2024-43093 | Android Framework Privilege Escalation Vulnerability Android / Framework | Nov 7, 2024 | Nov 28, 2024 | |
| CVE-2024-51567 | CyberPanel Incorrect Default Permissions Vulnerability CyberPersons / CyberPanel | Nov 7, 2024 | Nov 28, 2024 | Known |
| CVE-2024-5910 | Palo Alto Networks Expedition Missing Authentication Vulnerability Palo Alto Networks / Expedition | Nov 7, 2024 | Nov 28, 2024 | |
| CVE-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability PTZOptics / PT30X-SDI/NDI Cameras | Nov 4, 2024 | Nov 25, 2024 | |
| CVE-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability PTZOptics / PT30X-SDI/NDI Cameras | Nov 4, 2024 | Nov 25, 2024 | |
| CVE-2024-20481 | Cisco ASA and FTD Denial-of-Service Vulnerability Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Oct 24, 2024 | Nov 14, 2024 | |
| CVE-2024-37383 | RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube / Webmail | Oct 24, 2024 | Nov 14, 2024 | |
| CVE-2024-47575 | Fortinet FortiManager Missing Authentication Vulnerability Fortinet / FortiManager | Oct 23, 2024 | Nov 13, 2024 | |
| CVE-2024-38094 | Microsoft SharePoint Deserialization Vulnerability Microsoft / SharePoint | Oct 22, 2024 | Nov 12, 2024 | Known |
| CVE-2024-9537 | ScienceLogic SL1 Unspecified Vulnerability ScienceLogic / SL1 | Oct 21, 2024 | Nov 11, 2024 | |
| CVE-2024-40711 | Veeam Backup and Replication Deserialization Vulnerability Veeam / Backup & Replication | Oct 17, 2024 | Nov 7, 2024 | Known |
| CVE-2024-28987 | SolarWinds Web Help Desk Hardcoded Credential Vulnerability SolarWinds / Web Help Desk | Oct 15, 2024 | Nov 5, 2024 | |
| CVE-2024-30088 | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability Microsoft / Windows | Oct 15, 2024 | Nov 5, 2024 | Known |
| CVE-2024-9680 | Mozilla Firefox Use-After-Free Vulnerability Mozilla / Firefox | Oct 15, 2024 | Nov 5, 2024 | Known |
| CVE-2024-23113 | Fortinet Multiple Products Format String Vulnerability Fortinet / Multiple Products | Oct 9, 2024 | Oct 30, 2024 | |
| CVE-2024-9379 | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability Ivanti / Cloud Services Appliance (CSA) | Oct 9, 2024 | Oct 30, 2024 | |
| CVE-2024-9380 | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability Ivanti / Cloud Services Appliance (CSA) | Oct 9, 2024 | Oct 30, 2024 | |
| CVE-2024-43047 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm / Multiple Chipsets | Oct 8, 2024 | Oct 29, 2024 | |
| CVE-2024-43572 | Microsoft Windows Management Console Remote Code Execution Vulnerability Microsoft / Windows | Oct 8, 2024 | Oct 29, 2024 | |
| CVE-2024-43573 | Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft / Windows | Oct 8, 2024 | Oct 29, 2024 | |
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Oct 3, 2024 | Oct 24, 2024 | |
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability Ivanti / Endpoint Manager (EPM) | Oct 2, 2024 | Oct 23, 2024 | |
| CVE-2019-0344 | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability SAP / Commerce Cloud | Sep 30, 2024 | Oct 21, 2024 | |
| CVE-2020-15415 | DrayTek Multiple Vigor Routers OS Command Injection Vulnerability DrayTek / Multiple Vigor Routers | Sep 30, 2024 | Oct 21, 2024 | |
| CVE-2023-25280 | D-Link DIR-820 Router OS Command Injection Vulnerability D-Link / DIR-820 Router | Sep 30, 2024 | Oct 21, 2024 | |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability Ivanti / Virtual Traffic Manager | Sep 24, 2024 | Oct 15, 2024 | |
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability Ivanti / Cloud Services Appliance (CSA) | Sep 19, 2024 | Oct 10, 2024 |
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Sources and licenses