Known Exploited Vulnerabilities
The CISA KEV catalog lists 1,779 CVEs with evidence of exploitation in the wild, newest first. Catalog version 2026.11.10. Source: sources and licenses.
| CVE | Vulnerability | Added | Federal due date | Ransomware |
|---|---|---|---|---|
| CVE-2020-0618 | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability Microsoft / SQL Server | Sep 18, 2024 | Oct 9, 2024 | Known |
| CVE-2020-14644 | Oracle WebLogic Server Remote Code Execution Vulnerability Oracle / WebLogic Server | Sep 18, 2024 | Oct 9, 2024 | |
| CVE-2022-21445 | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability Oracle / ADF Faces | Sep 18, 2024 | Oct 9, 2024 | |
| CVE-2024-27348 | Apache HugeGraph-Server Improper Access Control Vulnerability Apache / HugeGraph-Server | Sep 18, 2024 | Oct 9, 2024 | |
| CVE-2013-0643 | Adobe Flash Player Incorrect Default Permissions Vulnerability Adobe / Flash Player | Sep 17, 2024 | Oct 8, 2024 | |
| CVE-2013-0648 | Adobe Flash Player Code Execution Vulnerability Adobe / Flash Player | Sep 17, 2024 | Oct 8, 2024 | |
| CVE-2014-0497 | Adobe Flash Player Integer Underflow Vulnerablity Adobe / Flash Player | Sep 17, 2024 | Oct 8, 2024 | |
| CVE-2014-0502 | Adobe Flash Player Double Free Vulnerablity Adobe / Flash Player | Sep 17, 2024 | Oct 8, 2024 | |
| CVE-2024-43461 | Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft / Windows | Sep 16, 2024 | Oct 7, 2024 | |
| CVE-2024-6670 | Progress WhatsUp Gold SQL Injection Vulnerability Progress / WhatsUp Gold | Sep 16, 2024 | Oct 7, 2024 | Known |
| CVE-2024-8190 | Ivanti Cloud Services Appliance OS Command Injection Vulnerability Ivanti / Cloud Services Appliance | Sep 13, 2024 | Oct 4, 2024 | |
| CVE-2024-38014 | Microsoft Windows Installer Improper Privilege Management Vulnerability Microsoft / Windows | Sep 10, 2024 | Oct 1, 2024 | |
| CVE-2024-38217 | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability Microsoft / Windows | Sep 10, 2024 | Oct 1, 2024 | |
| CVE-2024-38226 | Microsoft Publisher Protection Mechanism Failure Vulnerability Microsoft / Publisher | Sep 10, 2024 | Oct 1, 2024 | |
| CVE-2016-3714 | ImageMagick Improper Input Validation Vulnerability ImageMagick / ImageMagick | Sep 9, 2024 | Sep 30, 2024 | |
| CVE-2017-1000253 | Linux Kernel PIE Stack Buffer Corruption Vulnerability Linux / Kernel | Sep 9, 2024 | Sep 30, 2024 | Known |
| CVE-2024-40766 | SonicWall SonicOS Improper Access Control Vulnerability SonicWall / SonicOS | Sep 9, 2024 | Sep 30, 2024 | Known |
| CVE-2021-20123 | Draytek VigorConnect Path Traversal Vulnerability DrayTek / VigorConnect | Sep 3, 2024 | Sep 24, 2024 | |
| CVE-2021-20124 | Draytek VigorConnect Path Traversal Vulnerability DrayTek / VigorConnect | Sep 3, 2024 | Sep 24, 2024 | |
| CVE-2024-7262 | Kingsoft WPS Office Path Traversal Vulnerability Kingsoft / WPS Office | Sep 3, 2024 | Sep 24, 2024 | |
| CVE-2024-7965 | Google Chromium V8 Inappropriate Implementation Vulnerability Google / Chromium V8 | Aug 28, 2024 | Sep 18, 2024 | |
| CVE-2024-38856 | Apache OFBiz Incorrect Authorization Vulnerability Apache / OFBiz | Aug 27, 2024 | Sep 17, 2024 | |
| CVE-2024-7971 | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Aug 26, 2024 | Sep 16, 2024 | |
| CVE-2024-39717 | Versa Director Dangerous File Type Upload Vulnerability Versa / Director | Aug 23, 2024 | Sep 13, 2024 | |
| CVE-2021-31196 | Microsoft Exchange Server Information Disclosure Vulnerability Microsoft / Exchange Server | Aug 21, 2024 | Sep 11, 2024 | |
| CVE-2021-33044 | Dahua IP Camera Authentication Bypass Vulnerability Dahua / IP Camera Firmware | Aug 21, 2024 | Sep 11, 2024 | |
| CVE-2021-33045 | Dahua IP Camera Authentication Bypass Vulnerability Dahua / IP Camera Firmware | Aug 21, 2024 | Sep 11, 2024 | |
| CVE-2022-0185 | Linux Kernel Heap-Based Buffer Overflow Vulnerability Linux / Kernel | Aug 21, 2024 | Sep 11, 2024 | |
| CVE-2024-23897 | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability Jenkins / Jenkins Command Line Interface (CLI) | Aug 19, 2024 | Sep 9, 2024 | Known |
| CVE-2024-28986 | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds / Web Help Desk | Aug 15, 2024 | Sep 5, 2024 | |
| CVE-2024-38106 | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | Aug 13, 2024 | Sep 3, 2024 | |
| CVE-2024-38107 | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability Microsoft / Windows | Aug 13, 2024 | Sep 3, 2024 | |
| CVE-2024-38178 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft / Windows | Aug 13, 2024 | Sep 3, 2024 | |
| CVE-2024-38189 | Microsoft Project Remote Code Execution Vulnerability Microsoft / Project | Aug 13, 2024 | Sep 3, 2024 | |
| CVE-2024-38193 | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability Microsoft / Windows | Aug 13, 2024 | Sep 3, 2024 | |
| CVE-2024-38213 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft / Windows | Aug 13, 2024 | Sep 3, 2024 | |
| CVE-2024-32113 | Apache OFBiz Path Traversal Vulnerability Apache / OFBiz | Aug 7, 2024 | Aug 28, 2024 | |
| CVE-2024-36971 | Android Kernel Remote Code Execution Vulnerability Android / Kernel | Aug 7, 2024 | Aug 28, 2024 | |
| CVE-2018-0824 | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability Microsoft / Windows | Aug 5, 2024 | Aug 26, 2024 | |
| CVE-2024-37085 | VMware ESXi Authentication Bypass Vulnerability VMware / ESXi | Jul 30, 2024 | Aug 20, 2024 | Known |
| CVE-2023-45249 | Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability Acronis / Cyber Infrastructure (ACI) | Jul 29, 2024 | Aug 19, 2024 | |
| CVE-2024-4879 | ServiceNow Improper Input Validation Vulnerability ServiceNow / Utah, Vancouver, and Washington DC Now Platform | Jul 29, 2024 | Aug 19, 2024 | |
| CVE-2024-5217 | ServiceNow Incomplete List of Disallowed Inputs Vulnerability ServiceNow / Utah, Vancouver, and Washington DC Now Platform | Jul 29, 2024 | Aug 19, 2024 | |
| CVE-2012-4792 | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | Jul 23, 2024 | Aug 13, 2024 | |
| CVE-2024-39891 | Twilio Authy Information Disclosure Vulnerability Twilio / Authy | Jul 23, 2024 | Aug 13, 2024 | |
| CVE-2022-22948 | VMware vCenter Server Incorrect Default File Permissions Vulnerability VMware / vCenter Server | Jul 17, 2024 | Aug 7, 2024 | |
| CVE-2024-28995 | SolarWinds Serv-U Path Traversal Vulnerability SolarWinds / Serv-U | Jul 17, 2024 | Aug 7, 2024 | |
| CVE-2024-34102 | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability Adobe / Commerce and Magento Open Source | Jul 17, 2024 | Aug 7, 2024 | |
| CVE-2024-36401 | OSGeo GeoServer GeoTools Eval Injection Vulnerability OSGeo / GeoServer | Jul 15, 2024 | Aug 5, 2024 | |
| CVE-2024-23692 | Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Rejetto / HTTP File Server | Jul 9, 2024 | Jul 30, 2024 | Known |
| CVE-2024-38080 | Microsoft Windows Hyper-V Privilege Escalation Vulnerability Microsoft / Windows | Jul 9, 2024 | Jul 30, 2024 | |
| CVE-2024-38112 | Microsoft Windows MSHTML Platform Spoofing Vulnerability Microsoft / Windows | Jul 9, 2024 | Jul 30, 2024 | |
| CVE-2024-20399 | Cisco NX-OS Command Injection Vulnerability Cisco / NX-OS | Jul 2, 2024 | Jul 23, 2024 | |
| CVE-2020-13965 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube / Webmail | Jun 26, 2024 | Jul 17, 2024 | |
| CVE-2022-24816 | OSGeo GeoServer JAI-EXT Code Injection Vulnerability OSGeo / JAI-EXT | Jun 26, 2024 | Jul 17, 2024 | |
| CVE-2022-2586 | Linux Kernel Use-After-Free Vulnerability Linux / Kernel | Jun 26, 2024 | Jul 17, 2024 | |
| CVE-2024-26169 | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability Microsoft / Windows | Jun 13, 2024 | Jul 4, 2024 | Known |
| CVE-2024-32896 | Android Pixel Privilege Escalation Vulnerability Android / Pixel | Jun 13, 2024 | Jul 4, 2024 | |
| CVE-2024-4358 | Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Progress / Telerik Report Server | Jun 13, 2024 | Jul 4, 2024 | |
| CVE-2024-4577 | PHP-CGI OS Command Injection Vulnerability PHP Group / PHP | Jun 12, 2024 | Jul 3, 2024 | Known |
| CVE-2024-4610 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm / Mali GPU Kernel Driver | Jun 12, 2024 | Jul 3, 2024 | |
| CVE-2017-3506 | Oracle WebLogic Server OS Command Injection Vulnerability Oracle / WebLogic Server | Jun 3, 2024 | Jun 24, 2024 | |
| CVE-2024-1086 | Linux Kernel Use-After-Free Vulnerability Linux / Kernel | May 30, 2024 | Jun 20, 2024 | Known |
| CVE-2024-24919 | Check Point Quantum Security Gateways Information Disclosure Vulnerability Check Point / Quantum Security Gateways | May 30, 2024 | Jun 20, 2024 | Known |
| CVE-2024-4978 | Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability Justice AV Solutions / Viewer | May 29, 2024 | Jun 19, 2024 | |
| CVE-2024-5274 | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | May 28, 2024 | Jun 18, 2024 | |
| CVE-2020-17519 | Apache Flink Improper Access Control Vulnerability Apache / Flink | May 23, 2024 | Jun 13, 2024 | |
| CVE-2023-43208 | NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability NextGen Healthcare / Mirth Connect | May 20, 2024 | Jun 10, 2024 | Known |
| CVE-2024-4947 | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | May 20, 2024 | Jun 10, 2024 | |
| CVE-2014-100005 | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability D-Link / DIR-600 Router | May 16, 2024 | Jun 6, 2024 | |
| CVE-2021-40655 | D-Link DIR-605 Router Information Disclosure Vulnerability D-Link / DIR-605 Router | May 16, 2024 | Jun 6, 2024 | |
| CVE-2024-4761 | Google Chromium V8 Out-of-Bounds Memory Write Vulnerability Google / Chromium V8 | May 16, 2024 | Jun 6, 2024 | |
| CVE-2024-30040 | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Microsoft / Windows | May 14, 2024 | Jun 4, 2024 | |
| CVE-2024-30051 | Microsoft DWM Core Library Privilege Escalation Vulnerability Microsoft / DWM Core Library | May 14, 2024 | Jun 4, 2024 | Known |
| CVE-2024-4671 | Google Chromium Visuals Use-After-Free Vulnerability Google / Chromium | May 13, 2024 | Jun 3, 2024 | |
| CVE-2023-7028 | GitLab Community and Enterprise Editions Improper Access Control Vulnerability GitLab / GitLab CE/EE | May 1, 2024 | May 22, 2024 | |
| CVE-2024-29988 | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability Microsoft / SmartScreen Prompt | Apr 30, 2024 | May 21, 2024 | |
| CVE-2024-20353 | Cisco ASA and FTD Denial of Service Vulnerability Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Apr 24, 2024 | May 1, 2024 | |
| CVE-2024-20359 | Cisco ASA and FTD Privilege Escalation Vulnerability Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Apr 24, 2024 | May 1, 2024 | |
| CVE-2024-4040 | CrushFTP VFS Sandbox Escape Vulnerability CrushFTP / CrushFTP | Apr 24, 2024 | May 1, 2024 | |
| CVE-2022-38028 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft / Windows | Apr 23, 2024 | May 14, 2024 | |
| CVE-2024-3400 | Palo Alto Networks PAN-OS Command Injection Vulnerability Palo Alto Networks / PAN-OS | Apr 12, 2024 | Apr 19, 2024 | Known |
| CVE-2024-3272 | D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability D-Link / Multiple NAS Devices | Apr 11, 2024 | May 2, 2024 | |
| CVE-2024-3273 | D-Link Multiple NAS Devices Command Injection Vulnerability D-Link / Multiple NAS Devices | Apr 11, 2024 | May 2, 2024 | |
| CVE-2024-29745 | Android Pixel Information Disclosure Vulnerability Android / Pixel | Apr 4, 2024 | Apr 25, 2024 | |
| CVE-2024-29748 | Android Pixel Privilege Escalation Vulnerability Android / Pixel | Apr 4, 2024 | Apr 25, 2024 | |
| CVE-2023-24955 | Microsoft SharePoint Server Code Injection Vulnerability Microsoft / SharePoint Server | Mar 26, 2024 | Apr 16, 2024 | Known |
| CVE-2019-7256 | Nice Linear eMerge E3-Series OS Command Injection Vulnerability Nice / Linear eMerge E3-Series | Mar 25, 2024 | Apr 15, 2024 | |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ivanti / Endpoint Manager Cloud Service Appliance (EPM CSA) | Mar 25, 2024 | Apr 15, 2024 | Known |
| CVE-2023-48788 | Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet / FortiClient EMS | Mar 25, 2024 | Apr 15, 2024 | Known |
| CVE-2024-27198 | JetBrains TeamCity Authentication Bypass Vulnerability JetBrains / TeamCity | Mar 7, 2024 | Mar 28, 2024 | Known |
| CVE-2024-23225 | Apple Multiple Products Memory Corruption Vulnerability Apple / Multiple Products | Mar 6, 2024 | Mar 27, 2024 | |
| CVE-2024-23296 | Apple Multiple Products Memory Corruption Vulnerability Apple / Multiple Products | Mar 6, 2024 | Mar 27, 2024 | |
| CVE-2021-36380 | Sunhillo SureLine OS Command Injection Vulnerablity Sunhillo / SureLine | Mar 5, 2024 | Mar 26, 2024 | |
| CVE-2023-21237 | Android Pixel Information Disclosure Vulnerability Android / Pixel | Mar 5, 2024 | Mar 26, 2024 | |
| CVE-2024-21338 | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability Microsoft / Windows | Mar 4, 2024 | Mar 25, 2024 | Known |
| CVE-2023-29360 | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability Microsoft / Streaming Service | Feb 29, 2024 | Mar 21, 2024 | |
| CVE-2024-1709 | ConnectWise ScreenConnect Authentication Bypass Vulnerability ConnectWise / ScreenConnect | Feb 22, 2024 | Feb 29, 2024 | Known |
| CVE-2020-3259 | Cisco ASA and FTD Information Disclosure Vulnerability Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Feb 15, 2024 | Mar 7, 2024 | Known |
| CVE-2024-21410 | Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft / Exchange Server | Feb 15, 2024 | Mar 7, 2024 |
Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. Sources and licenses