Known exploited vulnerabilities

Under attack, per CISA.

• microsoft windows, windows 7, windows 8 +7 more +9 more win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2,... CVE-2014-4148 In KEV EPSS 59.9% 8.8 HighOctober 15, 2014
• microsoft internet explorer Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted... CVE-2014-4123 In KEV EPSS 47.1% 8.8 HighOctober 15, 2014
• microsoft internet explorer Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted... CVE-2014-2817 In KEV EPSS 26.3% 8.8 HighAugust 12, 2014
• adobe acrobat, reader and acrobat, acrobat reader +2 more Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers... CVE-2014-0546 In KEV EPSS 22.3% 9.8 CriticalAugust 12, 2014
• ibm infosphere biginsights IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended... CVE-2013-3993 In KEV 3.5 LowJuly 7, 2014
• microsoft internet explorer The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers... CVE-2013-7331 In KEV EPSS 50.2% 4.3 MediumFebruary 26, 2014
• microsoft silverlight Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to... CVE-2013-3896 In KEVPublic exploit EPSS 68.0% 5.5 MediumOctober 9, 2013
• oracle java runtime environment (jre), jre, canonical ubuntu linux +1 more +3 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... CVE-2013-2423 In KEVPublic exploit EPSS 85.2% 4.3 MediumApril 17, 2013
• microsoft silverlight Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate... CVE-2013-0074 In KEVPublic exploit EPSS 78.9% 7.8 HighMarch 13, 2013
• oracle java runtime environment (jre), jre, openjdk +2 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... CVE-2013-0431 In KEVPublic exploit EPSS 90.1% 5.0 MediumJanuary 31, 2013
• canonical ubuntu linux, opensuse, oracle java runtime environment (jre) +2 more +4 more Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute... CVE-2013-0422 In KEVPublic exploit EPSS 97.1% 10.0 HighJanuary 10, 2013
• oracle fusion middleware Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion... CVE-2012-1710 In KEV 9.8 CriticalMay 3, 2012
• linux kernel, oracle linux, canonical ubuntu linux +6 more +8 more The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure... CVE-2014-3153 In KEVPublic exploitFix available EPSS 37.2% 7.8 HighApril 24, 2012
• red hat jboss, redhat jboss enterprise application platform +1 more The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform ... CVE-2010-1428 In KEV EPSS 52.7% 7.5 HighApril 28, 2010
• red hat jboss, redhat jboss enterprise application platform +1 more The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka... CVE-2010-0738 In KEVPublic exploit EPSS 73.8% 5.3 MediumApril 28, 2010
• oracle java runtime environment (jre), jre, canonical ubuntu linux +1 more +3 more Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java... CVE-2010-0840 In KEVPublic exploit EPSS 96.3% 9.8 CriticalApril 1, 2010
• qnap qts, network attached storage (nas) +1 more If exploited, this cross-site scripting vulnerability could allow remote attackers to inject... CVE-2018-19953 In KEV EPSS 30.5% 6.1 MediumOctober 28, 2020
• qnap qts, network attached storage (nas) +1 more If exploited, this command injection vulnerability could allow remote attackers to run arbitrary... CVE-2018-19949 In KEV EPSS 30.2% 9.8 CriticalOctober 28, 2020
• qnap qts, network attached storage (nas) +1 more If exploited, this cross-site scripting vulnerability could allow remote attackers to inject... CVE-2018-19943 In KEV EPSS 22.7% 8.0 HighOctober 28, 2020
• connectwise manageditsync, kaseya virtual system/server administrator (vsa) +1 more ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to... CVE-2017-18362 In KEV EPSS 86.8% 9.8 CriticalFebruary 5, 2019
• microsoft windows, windows 10, windows 10 servers +14 more +16 more An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle... CVE-2018-8611 In KEVPublic exploit 7.8 HighDecember 12, 2018
• microsoft windows, windows 7, windows 8.1 +8 more +10 more Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7... CVE-2017-8543 In KEVPublic exploit EPSS 74.2% 9.8 CriticalJune 15, 2017
• artifex ghostscript, debian linux, redhat enterprise linux desktop +5 more +7 more Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via ... CVE-2017-8291 In KEVPublic exploitFix available EPSS 97.0% 7.8 HighApril 26, 2017
• microsoft internet explorer An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce... CVE-2017-0210 In KEV EPSS 22.3% 8.8 HighApril 12, 2017
• microsoft internet explorer Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or... CVE-2017-0149 In KEV EPSS 28.5% 8.8 HighMarch 17, 2017
• microsoft smbv1 server, windows 7, windows 8.1 +17 more +19 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... CVE-2017-0147 In KEVPublic exploit EPSS 99.7% 7.5 HighMarch 17, 2017
• microsoft windows 8.1, windows server 2008, windows server 2012 +1 more +3 more Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8... CVE-2017-0022 In KEV EPSS 18.1% 6.5 MediumMarch 17, 2017
• microsoft windows, windows 7, windows 8.1 +9 more +11 more The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and... CVE-2017-0005 In KEVPublic exploit EPSS 11.0% 7.8 HighMarch 17, 2017
• microsoft internet explorer, windows 7, windows server 2008 +1 more +3 more Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2,... CVE-2016-3298 In KEV EPSS 33.3% 6.5 MediumOctober 14, 2016
• microsoft edge, internet explorer, internet explorer and edge +2 more Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain... CVE-2016-3351 In KEV EPSS 26.5% 6.5 MediumSeptember 14, 2016
• apple ios, iphone os +1 more The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged... CVE-2016-4656 In KEVPublic exploit EPSS 23.6% 7.8 HighAugust 25, 2016
• apple ios, iphone os +1 more The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory... CVE-2016-4655 In KEVPublic exploit EPSS 33.4% 5.5 MediumAugust 25, 2016
• apple ios, iphone os +1 more WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a... CVE-2016-4657 In KEVPublic exploitFix available EPSS 66.8% 8.8 HighAugust 25, 2016
• cisco adaptive security appliance (asa), adaptive security appliance software +1 more Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and... CVE-2016-6367 In KEVPublic exploit EPSS 22.6% 7.8 HighAugust 18, 2016
• cisco adaptive security appliance (asa), adaptive security appliance software, asa 1000v cloud firewall software +1 more +3 more Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500,... CVE-2016-6366 In KEVPublic exploit EPSS 87.6% 8.8 HighAugust 18, 2016
• microsoft internet explorer Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of... CVE-2016-0162 In KEV EPSS 21.9% 4.3 MediumApril 12, 2016
• cisco ios xr software, ios xr +1 more Cisco IOS XR Software Health Check Open Port Vulnerability CVE-2022-20821 In KEV EPSS 11.5% 6.5 MediumMay 26, 2022
• android kernel, google android +1 more In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use... CVE-2021-1048 In KEVFix available 7.8 HighNovember 1, 2021
• android kernel, google android, debian linux +2 more In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition.... CVE-2021-0920 In KEVFix available 6.4 MediumNovember 1, 2021
• apple ipados, macos, multiple products +4 more +6 more Apple Multiple Products Memory Corruption Vulnerability CVE-2021-30883 In KEV EPSS 14.7% 7.8 HighAugust 24, 2021
• microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +24 more +26 more An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects... CVE-2020-1027 In KEV 7.8 HighApril 15, 2020
• facebook whatsapp desktop, meta platforms whatsapp +1 more A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for... CVE-2019-18426 In KEVPublic exploit EPSS 67.9% 8.2 HighJanuary 21, 2020
• microsoft update notification manager, windows, windows 10 version 1903 for 32-bit systems +17 more +19 more An elevation of privilege vulnerability exists in the way the Update Notification Manager handles... CVE-2020-0638 In KEV 7.8 HighJanuary 14, 2020
• apple ios, macos, iphone os +2 more +4 more A memory corruption issue was addressed with improved input validation. This issue is fixed in... CVE-2019-7286 In KEVPublic exploit EPSS 15.9% 7.8 HighDecember 18, 2019
• apple ios, iphone os +1 more A memory corruption issue was addressed with improved input validation. This issue is fixed in... CVE-2019-7287 In KEV 7.8 HighDecember 18, 2019
• microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +9 more +11 more An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions... CVE-2019-1385 In KEV 7.8 HighNovember 12, 2019
• google chrome, chrome webaudio, opensuse leap +2 more Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to... CVE-2019-13720 In KEVPublic exploitFix available EPSS 49.4% 8.8 HighNovember 2, 2019
• redhat codeready linux builder, codeready linux builder eus, codeready linux builder for arm64 eus +20 more +22 more A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted... CVE-2019-8720 In KEVFix available 8.8 HighNovember 1, 2019
• microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +17 more +19 more An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC)... CVE-2019-1130 In KEV 7.8 HighJuly 15, 2019
• microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +16 more +18 more A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls,... CVE-2019-0880 In KEV 7.8 HighJuly 15, 2019
• Show olderLoading…