Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,733
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
389 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2025-62215 | Microsoft | Microsoft Windows Race Condition Vulnerability | Severity: High CVSS 7.0 | Nov 12, 2025 | Not known |
| CVE-2025-59287 | Microsoft | Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability | Severity: Critical CVSS 9.8 | Oct 24, 2025 | Not known |
| CVE-2025-33073 | Microsoft | Microsoft Windows SMB Client Improper Access Control Vulnerability | Severity: High CVSS 8.8 | Oct 20, 2025 | Not known |
| CVE-2025-24990 | Microsoft | Microsoft Windows Untrusted Pointer Dereference Vulnerability | Severity: High CVSS 7.8 | Oct 14, 2025 | Not known |
| CVE-2025-59230 | Microsoft | Microsoft Windows Improper Access Control Vulnerability | Severity: High CVSS 7.8 | Oct 14, 2025 | Not known |
| CVE-2011-3402 | Microsoft | Microsoft Windows Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Oct 6, 2025 | Not known |
| CVE-2013-3918 | Microsoft | Microsoft Windows Out-of-Bounds Write Vulnerability | Severity: High CVSS 8.8 | Oct 6, 2025 | Not known |
| CVE-2010-3962 | Microsoft | Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability | Severity: High CVSS 8.1 | Oct 6, 2025 | Not known |
| CVE-2021-43226 | Microsoft | Microsoft Windows Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Oct 6, 2025 | Known |
| CVE-2007-0671 | Microsoft | Microsoft Office Excel Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Aug 12, 2025 | Not known |
| CVE-2013-3893 | Microsoft | Microsoft Internet Explorer Resource Management Errors Vulnerability | Severity: High CVSS 8.8 | Aug 12, 2025 | Not known |
| CVE-2025-49704 | Microsoft | Microsoft SharePoint Code Injection Vulnerability | Severity: High CVSS 8.8 | Jul 22, 2025 | Known |
| CVE-2025-49706 | Microsoft | Microsoft SharePoint Improper Authentication Vulnerability | Severity: Elevated CVSS 6.5 | Jul 22, 2025 | Known |
| CVE-2025-53770 | Microsoft | Microsoft SharePoint Deserialization of Untrusted Data Vulnerability | Severity: Critical CVSS 9.8 | Jul 20, 2025 | Known |
| CVE-2025-33053 | Microsoft | Microsoft Windows External Control of File Name or Path Vulnerability | Severity: High CVSS 8.8 | Jun 10, 2025 | Not known |
| CVE-2025-30400 | Microsoft | Microsoft Windows DWM Core Library Use-After-Free Vulnerability | Severity: High CVSS 7.8 | May 13, 2025 | Not known |
| CVE-2025-32701 | Microsoft | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | Severity: High CVSS 7.8 | May 13, 2025 | Not known |
| CVE-2025-32706 | Microsoft | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | May 13, 2025 | Not known |
| CVE-2025-32709 | Microsoft | Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability | Severity: High CVSS 7.8 | May 13, 2025 | Not known |
| CVE-2025-30397 | Microsoft | Microsoft Windows Scripting Engine Type Confusion Vulnerability | Severity: High CVSS 7.5 | May 13, 2025 | Not known |
| CVE-2025-24054 | Microsoft | Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability | Severity: Elevated CVSS 5.4 | Apr 17, 2025 | Not known |
| CVE-2025-29824 | Microsoft | Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability | Severity: High CVSS 7.8 | Apr 8, 2025 | Known |
| CVE-2025-24985 | Microsoft | Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability | Severity: High CVSS 7.8 | Mar 11, 2025 | Not known |
| CVE-2025-24993 | Microsoft | Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Mar 11, 2025 | Not known |
| CVE-2025-24983 | Microsoft | Microsoft Windows Win32k Use-After-Free Vulnerability | Severity: High CVSS 7.0 | Mar 11, 2025 | Not known |
| CVE-2025-26633 | Microsoft | Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability | Severity: High CVSS 7.0 | Mar 11, 2025 | Known |
| CVE-2025-24991 | Microsoft | Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability | Severity: Elevated CVSS 5.5 | Mar 11, 2025 | Not known |
| CVE-2025-24984 | Microsoft | Microsoft Windows NTFS Information Disclosure Vulnerability | Severity: Elevated CVSS 4.6 | Mar 11, 2025 | Not known |
| CVE-2018-8639 | Microsoft | Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2025 | Known |
| CVE-2024-49035 | Microsoft | Microsoft Partner Center Improper Access Control Vulnerability | Severity: Critical CVSS 9.8 | Feb 25, 2025 | Not known |
| CVE-2025-24989 | Microsoft | Microsoft Power Pages Improper Access Control Vulnerability | Severity: Critical CVSS 9.8 | Feb 21, 2025 | Not known |
| CVE-2025-21418 | Microsoft | Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Feb 11, 2025 | Not known |
| CVE-2025-21391 | Microsoft | Microsoft Windows Storage Link Following Vulnerability | Severity: High CVSS 7.1 | Feb 11, 2025 | Not known |
| CVE-2024-21413 | Microsoft | Microsoft Outlook Improper Input Validation Vulnerability | Severity: Critical CVSS 9.8 | Feb 6, 2025 | Not known |
| CVE-2024-29059 | Microsoft | Microsoft .NET Framework Information Disclosure Vulnerability | Severity: High CVSS 7.5 | Feb 4, 2025 | Not known |
| CVE-2025-21333 | Microsoft | Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Jan 14, 2025 | Not known |
| CVE-2025-21334 | Microsoft | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | Severity: High CVSS 7.8 | Jan 14, 2025 | Not known |
| CVE-2025-21335 | Microsoft | Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | Severity: High CVSS 7.8 | Jan 14, 2025 | Not known |
| CVE-2024-35250 | Microsoft | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | Severity: High CVSS 7.8 | Dec 16, 2024 | Not known |
| CVE-2024-49138 | Microsoft | Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Dec 10, 2024 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.