Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
1,734 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2015-2424 | Microsoft | Microsoft PowerPoint Memory Corruption Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2016-7855 | Adobe | Adobe Flash Player Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2017-11292 | Adobe | Adobe Flash Player Type Confusion Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2017-6736 | Cisco | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2017-6737 | Cisco | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2017-6738 | Cisco | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2017-6739 | Cisco | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2017-6740 | Cisco | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2017-6743 | Cisco | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2017-6744 | Cisco | Cisco IOS Software SNMP Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2018-0167 | Cisco | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2019-1297 | Microsoft | Microsoft Excel Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Mar 3, 2022 | Not known |
| CVE-2018-0155 | Cisco | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability | Severity: High CVSS 8.6 | Mar 3, 2022 | Not known |
| CVE-2018-0158 | Cisco | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability | Severity: High CVSS 8.6 | Mar 3, 2022 | Not known |
| CVE-2018-0172 | Cisco | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | Severity: High CVSS 8.6 | Mar 3, 2022 | Not known |
| CVE-2018-0173 | Cisco | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | Severity: High CVSS 8.6 | Mar 3, 2022 | Not known |
| CVE-2018-0174 | Cisco | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | Severity: High CVSS 8.6 | Mar 3, 2022 | Not known |
| CVE-2018-0175 | Cisco | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | Severity: High CVSS 8.0 | Mar 3, 2022 | Not known |
| CVE-2022-20703 | Cisco | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Severity: High CVSS 8.0 | Mar 3, 2022 | Not known |
| CVE-2022-20708 | Cisco | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Severity: High CVSS 8.0 | Mar 3, 2022 | Not known |
| CVE-2002-0367 | Microsoft | Microsoft Windows Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2004-0210 | Microsoft | Microsoft Windows Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2008-2992 | Adobe | Adobe Reader and Acrobat Input Validation Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Known |
| CVE-2009-1123 | Microsoft | Microsoft Windows Improper Input Validation Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2009-3129 | Microsoft | Microsoft Excel Featheader Record Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2010-0188 | Adobe | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Known |
| CVE-2010-0232 | Microsoft | Microsoft Windows Kernel Exception Handler Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2010-3333 | Microsoft | Microsoft Office Stack-based Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2012-1535 | Adobe | Adobe Flash Player Arbitrary Code Execution Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2013-0640 | Adobe | Adobe Reader and Acrobat Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2013-0641 | Adobe | Adobe Reader Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2013-5065 | Microsoft | Microsoft Windows Kernel Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2014-4114 | Microsoft | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2015-1642 | Microsoft | Microsoft Office Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2015-1701 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Known |
| CVE-2015-2387 | Microsoft | Microsoft ATM Font Driver Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2015-2545 | Microsoft | Microsoft Office Malformed EPS File Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2015-7645 | Adobe | Adobe Flash Player Arbitrary Code Execution Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Known |
| CVE-2016-0099 | Microsoft | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Known |
| CVE-2016-7193 | Microsoft | Microsoft Office Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.