Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
389 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2021-1732 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2021-26857 | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2021-26858 | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2021-27065 | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2021-28310 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2021-31956 | Microsoft | Microsoft Windows NTFS Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2021-31979 | Microsoft | Microsoft Windows Kernel Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2021-33771 | Microsoft | Microsoft Windows Kernel Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2021-36948 | Microsoft | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2021-36955 | Microsoft | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2021-38645 | Microsoft | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2021-38648 | Microsoft | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2021-27059 | Microsoft | Microsoft Office Remote Code Execution Vulnerability | Severity: High CVSS 7.6 | Nov 3, 2021 | Not known |
| CVE-2018-8653 | Microsoft | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Severity: High CVSS 7.5 | Nov 3, 2021 | Not known |
| CVE-2019-1367 | Microsoft | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Severity: High CVSS 7.5 | Nov 3, 2021 | Known |
| CVE-2019-1429 | Microsoft | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Severity: High CVSS 7.5 | Nov 3, 2021 | Not known |
| CVE-2020-0674 | Microsoft | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Severity: High CVSS 7.5 | Nov 3, 2021 | Not known |
| CVE-2020-0968 | Microsoft | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Severity: High CVSS 7.5 | Nov 3, 2021 | Known |
| CVE-2021-33742 | Microsoft | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | Severity: High CVSS 7.5 | Nov 3, 2021 | Not known |
| CVE-2021-36942 | Microsoft | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | Severity: High CVSS 7.5 | Nov 3, 2021 | Known |
| CVE-2020-1054 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.0 | Nov 3, 2021 | Not known |
| CVE-2021-38649 | Microsoft | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | Severity: High CVSS 7.0 | Nov 3, 2021 | Not known |
| CVE-2021-34448 | Microsoft | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | Severity: Elevated CVSS 6.8 | Nov 3, 2021 | Not known |
| CVE-2021-31207 | Microsoft | Microsoft Exchange Server Security Feature Bypass Vulnerability | Severity: Elevated CVSS 6.6 | Nov 3, 2021 | Known |
| CVE-2020-1472 | Microsoft | Microsoft Netlogon Privilege Escalation Vulnerability | Severity: Elevated CVSS 5.5 | Nov 3, 2021 | Known |
| CVE-2021-31955 | Microsoft | Microsoft Windows Kernel Information Disclosure Vulnerability | Severity: Elevated CVSS 5.5 | Nov 3, 2021 | Not known |
| CVE-2021-31199 | Microsoft | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | Severity: Elevated CVSS 5.2 | Nov 3, 2021 | Not known |
| CVE-2021-31201 | Microsoft | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | Severity: Elevated CVSS 5.2 | Nov 3, 2021 | Not known |
| CVE-2020-0878 | Microsoft | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | Severity: Elevated CVSS 4.2 | Nov 3, 2021 | Known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.