Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
95 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2023-28204 | Apple | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | Severity: Elevated CVSS 6.5 | May 22, 2023 | Not known |
| CVE-2019-8526 | Apple | Apple macOS Use-After-Free Vulnerability | Severity: High CVSS 7.8 | Apr 17, 2023 | Not known |
| CVE-2023-28205 | Apple | Apple Multiple Products WebKit Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Apr 10, 2023 | Not known |
| CVE-2023-28206 | Apple | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | Severity: High CVSS 8.6 | Apr 10, 2023 | Not known |
| CVE-2021-30900 | Apple | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | Severity: High CVSS 7.8 | Mar 30, 2023 | Not known |
| CVE-2023-23529 | Apple | Apple Multiple Products WebKit Type Confusion Vulnerability | Severity: High CVSS 8.8 | Feb 14, 2023 | Not known |
| CVE-2022-42856 | Apple | Apple iOS Type Confusion Vulnerability | Severity: High CVSS 8.8 | Dec 14, 2022 | Not known |
| CVE-2022-42827 | Apple | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | Severity: High CVSS 7.8 | Oct 25, 2022 | Not known |
| CVE-2022-32917 | Apple | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Sep 14, 2022 | Not known |
| CVE-2020-9934 | Apple | Apple iOS, iPadOS, and macOS Input Validation Vulnerability | Severity: Elevated CVSS 5.5 | Sep 8, 2022 | Not known |
| CVE-2021-31010 | Apple | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | Severity: High CVSS 7.5 | Aug 25, 2022 | Not known |
| CVE-2022-32893 | Apple | Apple iOS and macOS Out-of-Bounds Write Vulnerability | Severity: High CVSS 8.8 | Aug 18, 2022 | Not known |
| CVE-2022-32894 | Apple | Apple iOS and macOS Out-of-Bounds Write Vulnerability | Severity: High CVSS 7.8 | Aug 18, 2022 | Not known |
| CVE-2018-4344 | Apple | Apple Multiple Products Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Jun 27, 2022 | Not known |
| CVE-2019-8605 | Apple | Apple Multiple Products Use-After-Free Vulnerability | Severity: High CVSS 7.8 | Jun 27, 2022 | Not known |
| CVE-2020-3837 | Apple | Apple Multiple Products Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Jun 27, 2022 | Not known |
| CVE-2020-9907 | Apple | Apple Multiple Products Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Jun 27, 2022 | Not known |
| CVE-2021-30983 | Apple | Apple iOS and iPadOS Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Jun 27, 2022 | Not known |
| CVE-2016-4657 | Apple | Apple iOS Webkit Memory Corruption Vulnerability | Severity: High CVSS 8.8 | May 24, 2022 | Not known |
| CVE-2016-4656 | Apple | Apple iOS Memory Corruption Vulnerability | Severity: High CVSS 7.8 | May 24, 2022 | Not known |
| CVE-2016-4655 | Apple | Apple iOS Information Disclosure Vulnerability | Severity: Elevated CVSS 5.5 | May 24, 2022 | Not known |
| CVE-2019-7286 | Apple | Apple Multiple Products Memory Corruption Vulnerability | Severity: High CVSS 7.8 | May 23, 2022 | Not known |
| CVE-2019-7287 | Apple | Apple iOS Memory Corruption Vulnerability | Severity: High CVSS 7.8 | May 23, 2022 | Not known |
| CVE-2021-30883 | Apple | Apple Multiple Products Memory Corruption Vulnerability | Severity: High CVSS 7.8 | May 23, 2022 | Not known |
| CVE-2019-8506 | Apple | Apple Multiple Products Type Confusion Vulnerability | Severity: High CVSS 8.8 | May 4, 2022 | Not known |
| CVE-2021-1789 | Apple | Apple Multiple Products Type Confusion Vulnerability | Severity: High CVSS 8.8 | May 4, 2022 | Not known |
| CVE-2022-22675 | Apple | Apple macOS Out-of-Bounds Write Vulnerability | Severity: High CVSS 7.8 | Apr 4, 2022 | Not known |
| CVE-2022-22674 | Apple | Apple macOS Out-of-Bounds Read Vulnerability | Severity: Elevated CVSS 5.5 | Apr 4, 2022 | Not known |
| CVE-2022-22620 | Apple | Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Feb 11, 2022 | Not known |
| CVE-2014-4404 | Apple | Apple OS X Heap-Based Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Feb 10, 2022 | Not known |
| CVE-2015-1130 | Apple | Apple OS X Authentication Bypass Vulnerability | Severity: High CVSS 7.8 | Feb 10, 2022 | Not known |
| CVE-2022-22587 | Apple | Apple Memory Corruption Vulnerability | Severity: Critical CVSS 9.8 | Jan 28, 2022 | Not known |
| CVE-2021-1870 | Apple | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Not known |
| CVE-2021-1871 | Apple | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Not known |
| CVE-2020-9818 | Apple | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30661 | Apple | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30663 | Apple | Apple Multiple Products WebKit Integer Overflow Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30665 | Apple | Apple Multiple Products WebKit Memory Corruption Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30666 | Apple | Apple iOS WebKit Buffer Overflow Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30761 | Apple | Apple iOS WebKit Memory Corruption Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.