Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
82 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2016-1010 | Adobe | Adobe Flash Player and AIR Integer Overflow Vulnerability | Severity: High CVSS 8.8 | May 25, 2022 | Not known |
| CVE-2015-0310 | Adobe | Adobe Flash Player ASLR Bypass Vulnerability | Severity: High CVSS 7.8 | May 25, 2022 | Not known |
| CVE-2018-5002 | Adobe | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | May 23, 2022 | Not known |
| CVE-2015-0311 | Adobe | Adobe Flash Player Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Apr 13, 2022 | Not known |
| CVE-2015-0313 | Adobe | Adobe Flash Player Use-After-Free Vulnerability | Severity: Critical CVSS 9.8 | Apr 13, 2022 | Not known |
| CVE-2015-3113 | Adobe | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | Severity: Critical CVSS 9.8 | Apr 13, 2022 | Not known |
| CVE-2015-5122 | Adobe | Adobe Flash Player Use-After-Free Vulnerability | Severity: Critical CVSS 9.8 | Apr 13, 2022 | Not known |
| CVE-2015-5123 | Adobe | Adobe Flash Player Use-After-Free Vulnerability | Severity: Critical CVSS 9.8 | Apr 13, 2022 | Not known |
| CVE-2014-9163 | Adobe | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Apr 13, 2022 | Not known |
| CVE-2013-2729 | Adobe | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability | Severity: Critical CVSS 9.8 | Mar 28, 2022 | Not known |
| CVE-2012-2034 | Adobe | Adobe Flash Player Memory Corruption Vulnerability | Severity: High CVSS 7.5 | Mar 28, 2022 | Not known |
| CVE-2010-2861 | Adobe | Adobe ColdFusion Directory Traversal Vulnerability | Severity: Critical CVSS 9.8 | Mar 25, 2022 | Known |
| CVE-2016-4171 | Adobe | Adobe Flash Player Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Mar 25, 2022 | Not known |
| CVE-2009-0927 | Adobe | Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | Severity: High CVSS 8.8 | Mar 25, 2022 | Not known |
| CVE-2016-7892 | Adobe | Adobe Flash Player Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Mar 25, 2022 | Not known |
| CVE-2013-0625 | Adobe | Adobe ColdFusion Authentication Bypass Vulnerability | Severity: Critical CVSS 9.8 | Mar 7, 2022 | Not known |
| CVE-2013-0629 | Adobe | Adobe ColdFusion Directory Traversal Vulnerability | Severity: High CVSS 7.5 | Mar 7, 2022 | Not known |
| CVE-2013-0631 | Adobe | Adobe ColdFusion Information Disclosure Vulnerability | Severity: High CVSS 7.5 | Mar 7, 2022 | Not known |
| CVE-2009-3960 | Adobe | Adobe BlazeDS Information Disclosure Vulnerability | Severity: Elevated CVSS 6.5 | Mar 7, 2022 | Known |
| CVE-2013-0632 | Adobe | Adobe ColdFusion Authentication Bypass Vulnerability | Severity: Critical CVSS 9.8 | Mar 3, 2022 | Not known |
| CVE-2013-3346 | Adobe | Adobe Reader and Acrobat Memory Corruption Vulnerability | Severity: Critical CVSS 9.8 | Mar 3, 2022 | Not known |
| CVE-2015-3043 | Adobe | Adobe Flash Player Memory Corruption Vulnerability | Severity: Critical CVSS 9.8 | Mar 3, 2022 | Not known |
| CVE-2015-5119 | Adobe | Adobe Flash Player Use-After-Free Vulnerability | Severity: Critical CVSS 9.8 | Mar 3, 2022 | Not known |
| CVE-2016-1019 | Adobe | Adobe Flash Player Arbitrary Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Mar 3, 2022 | Known |
| CVE-2016-4117 | Adobe | Adobe Flash Player Arbitrary Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Mar 3, 2022 | Known |
| CVE-2011-0611 | Adobe | Adobe Flash Player Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2014-0496 | Adobe | Adobe Reader and Acrobat Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2016-7855 | Adobe | Adobe Flash Player Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2017-11292 | Adobe | Adobe Flash Player Type Confusion Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2008-2992 | Adobe | Adobe Reader and Acrobat Input Validation Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Known |
| CVE-2010-0188 | Adobe | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Known |
| CVE-2012-1535 | Adobe | Adobe Flash Player Arbitrary Code Execution Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2013-0640 | Adobe | Adobe Reader and Acrobat Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2013-0641 | Adobe | Adobe Reader Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2015-7645 | Adobe | Adobe Flash Player Arbitrary Code Execution Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Known |
| CVE-2022-24086 | Adobe | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | Severity: Critical CVSS 9.8 | Feb 15, 2022 | Not known |
| CVE-2018-15982 | Adobe | Adobe Flash Player Use-After-Free Vulnerability | Severity: High CVSS 7.8 | Feb 15, 2022 | Known |
| CVE-2018-15961 | Adobe | Adobe ColdFusion Unrestricted File Upload Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Not known |
| CVE-2018-4939 | Adobe | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Not known |
| CVE-2021-21017 | Adobe | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.