Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,733
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
389 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2024-49039 | Microsoft | Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | Severity: High CVSS 8.8 | Nov 12, 2024 | Known |
| CVE-2024-43451 | Microsoft | Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability | Severity: Elevated CVSS 6.5 | Nov 12, 2024 | Not known |
| CVE-2024-38094 | Microsoft | Microsoft SharePoint Deserialization Vulnerability | Severity: High CVSS 7.2 | Oct 22, 2024 | Known |
| CVE-2024-30088 | Microsoft | Microsoft Windows Kernel TOCTOU Race Condition Vulnerability | Severity: High CVSS 7.0 | Oct 15, 2024 | Known |
| CVE-2024-43573 | Microsoft | Microsoft Windows MSHTML Platform Spoofing Vulnerability | Severity: High CVSS 8.1 | Oct 8, 2024 | Not known |
| CVE-2024-43572 | Microsoft | Microsoft Windows Management Console Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Oct 8, 2024 | Not known |
| CVE-2020-0618 | Microsoft | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Sep 18, 2024 | Known |
| CVE-2024-43461 | Microsoft | Microsoft Windows MSHTML Platform Spoofing Vulnerability | Severity: High CVSS 8.8 | Sep 16, 2024 | Not known |
| CVE-2024-38014 | Microsoft | Microsoft Windows Installer Improper Privilege Management Vulnerability | Severity: High CVSS 7.8 | Sep 10, 2024 | Not known |
| CVE-2024-38226 | Microsoft | Microsoft Publisher Protection Mechanism Failure Vulnerability | Severity: High CVSS 7.3 | Sep 10, 2024 | Not known |
| CVE-2024-38217 | Microsoft | Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability | Severity: Elevated CVSS 5.4 | Sep 10, 2024 | Not known |
| CVE-2021-31196 | Microsoft | Microsoft Exchange Server Information Disclosure Vulnerability | Severity: High CVSS 7.2 | Aug 21, 2024 | Not known |
| CVE-2024-38189 | Microsoft | Microsoft Project Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Aug 13, 2024 | Not known |
| CVE-2024-38107 | Microsoft | Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Aug 13, 2024 | Not known |
| CVE-2024-38193 | Microsoft | Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Aug 13, 2024 | Not known |
| CVE-2024-38178 | Microsoft | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | Severity: High CVSS 7.5 | Aug 13, 2024 | Not known |
| CVE-2024-38106 | Microsoft | Microsoft Windows Kernel Privilege Escalation Vulnerability | Severity: High CVSS 7.0 | Aug 13, 2024 | Not known |
| CVE-2024-38213 | Microsoft | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | Severity: Elevated CVSS 6.5 | Aug 13, 2024 | Not known |
| CVE-2018-0824 | Microsoft | Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability | Severity: High CVSS 8.8 | Aug 5, 2024 | Not known |
| CVE-2012-4792 | Microsoft | Microsoft Internet Explorer Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Jul 23, 2024 | Not known |
| CVE-2024-38080 | Microsoft | Microsoft Windows Hyper-V Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Jul 9, 2024 | Not known |
| CVE-2024-38112 | Microsoft | Microsoft Windows MSHTML Platform Spoofing Vulnerability | Severity: High CVSS 7.5 | Jul 9, 2024 | Not known |
| CVE-2024-26169 | Microsoft | Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability | Severity: High CVSS 7.8 | Jun 13, 2024 | Known |
| CVE-2024-30040 | Microsoft | Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability | Severity: High CVSS 8.8 | May 14, 2024 | Not known |
| CVE-2024-30051 | Microsoft | Microsoft DWM Core Library Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | May 14, 2024 | Known |
| CVE-2024-29988 | Microsoft | Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability | Severity: High CVSS 8.8 | Apr 30, 2024 | Not known |
| CVE-2022-38028 | Microsoft | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Apr 23, 2024 | Not known |
| CVE-2023-24955 | Microsoft | Microsoft SharePoint Server Code Injection Vulnerability | Severity: High CVSS 7.2 | Mar 26, 2024 | Known |
| CVE-2024-21338 | Microsoft | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability | Severity: High CVSS 7.8 | Mar 4, 2024 | Known |
| CVE-2023-29360 | Microsoft | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | Severity: High CVSS 8.4 | Feb 29, 2024 | Not known |
| CVE-2024-21410 | Microsoft | Microsoft Exchange Server Privilege Escalation Vulnerability | Severity: Critical CVSS 9.8 | Feb 15, 2024 | Not known |
| CVE-2024-21412 | Microsoft | Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability | Severity: High CVSS 8.1 | Feb 13, 2024 | Known |
| CVE-2024-21351 | Microsoft | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | Severity: High CVSS 7.6 | Feb 13, 2024 | Not known |
| CVE-2023-29357 | Microsoft | Microsoft SharePoint Server Privilege Escalation Vulnerability | Severity: Critical CVSS 9.8 | Jan 10, 2024 | Known |
| CVE-2023-36584 | Microsoft | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | Severity: Elevated CVSS 5.4 | Nov 16, 2023 | Not known |
| CVE-2023-36025 | Microsoft | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | Severity: High CVSS 8.8 | Nov 14, 2023 | Not known |
| CVE-2023-36033 | Microsoft | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 14, 2023 | Not known |
| CVE-2023-36036 | Microsoft | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 14, 2023 | Not known |
| CVE-2023-36563 | Microsoft | Microsoft WordPad Information Disclosure Vulnerability | Severity: Elevated CVSS 5.5 | Oct 10, 2023 | Not known |
| CVE-2023-41763 | Microsoft | Microsoft Skype for Business Privilege Escalation Vulnerability | Severity: Elevated CVSS 5.3 | Oct 10, 2023 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.