Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
1,734 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2016-7262 | Microsoft | Microsoft Office Security Feature Bypass Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2017-0001 | Microsoft | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2017-0261 | Microsoft | Microsoft Office Use-After-Free Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2017-11826 | Microsoft | Microsoft Office Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2017-8540 | Microsoft | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2022-20701 | Cisco | Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2016-8562 | Siemens | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability | Severity: High CVSS 7.5 | Mar 3, 2022 | Not known |
| CVE-2017-12231 | Cisco | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability | Severity: High CVSS 7.5 | Mar 3, 2022 | Not known |
| CVE-2017-12233 | Cisco | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | Severity: High CVSS 7.5 | Mar 3, 2022 | Not known |
| CVE-2017-12234 | Cisco | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | Severity: High CVSS 7.5 | Mar 3, 2022 | Not known |
| CVE-2017-12235 | Cisco | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability | Severity: High CVSS 7.5 | Mar 3, 2022 | Not known |
| CVE-2017-12237 | Cisco | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability | Severity: High CVSS 7.5 | Mar 3, 2022 | Not known |
| CVE-2017-6627 | Cisco | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability | Severity: High CVSS 7.5 | Mar 3, 2022 | Not known |
| CVE-2018-0154 | Cisco | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability | Severity: High CVSS 7.5 | Mar 3, 2022 | Not known |
| CVE-2018-0156 | Cisco | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability | Severity: High CVSS 7.5 | Mar 3, 2022 | Not known |
| CVE-2018-0159 | Cisco | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability | Severity: High CVSS 7.5 | Mar 3, 2022 | Not known |
| CVE-2018-8298 | ChakraCore | ChakraCore Scripting Engine Type Confusion Vulnerability | Severity: High CVSS 7.5 | Mar 3, 2022 | Not known |
| CVE-2018-8581 | Microsoft | Microsoft Exchange Server Privilege Escalation Vulnerability | Severity: High CVSS 7.4 | Mar 3, 2022 | Known |
| CVE-2019-1652 | Cisco | Cisco Small Business Routers Improper Input Validation Vulnerability | Severity: High CVSS 7.2 | Mar 3, 2022 | Not known |
| CVE-2016-5195 | Linux | Linux Kernel Race Condition Vulnerability | Severity: High CVSS 7.0 | Mar 3, 2022 | Not known |
| CVE-2013-1675 | Mozilla | Mozilla Firefox Information Disclosure Vulnerability | Severity: Elevated CVSS 6.5 | Mar 3, 2022 | Not known |
| CVE-2017-12232 | Cisco | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability | Severity: Elevated CVSS 6.5 | Mar 3, 2022 | Not known |
| CVE-2017-12238 | Cisco | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability | Severity: Elevated CVSS 6.5 | Mar 3, 2022 | Not known |
| CVE-2017-6663 | Cisco | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability | Severity: Elevated CVSS 6.5 | Mar 3, 2022 | Not known |
| CVE-2018-0161 | Cisco | Cisco IOS Software Resource Management Errors Vulnerability | Severity: Elevated CVSS 6.3 | Mar 3, 2022 | Not known |
| CVE-2017-12319 | Cisco | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability | Severity: Elevated CVSS 5.9 | Mar 3, 2022 | Not known |
| CVE-2018-0179 | Cisco | Cisco IOS Software Denial-of-Service Vulnerability | Severity: Elevated CVSS 5.9 | Mar 3, 2022 | Not known |
| CVE-2018-0180 | Cisco | Cisco IOS Software Denial-of-Service Vulnerability | Severity: Elevated CVSS 5.9 | Mar 3, 2022 | Not known |
| CVE-2021-41379 | Microsoft | Microsoft Windows Installer Privilege Escalation Vulnerability | Severity: Elevated CVSS 5.5 | Mar 3, 2022 | Known |
| CVE-2020-11899 | Treck TCP/IP stack | Treck TCP/IP stack Out-of-Bounds Read Vulnerability | Severity: Elevated CVSS 5.4 | Mar 3, 2022 | Not known |
| CVE-2015-4902 | Oracle | Oracle Java SE Integrity Check Vulnerability | Severity: Elevated CVSS 5.3 | Mar 3, 2022 | Not known |
| CVE-2017-0222 | Microsoft | Microsoft Internet Explorer Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Feb 25, 2022 | Not known |
| CVE-2014-6352 | Microsoft | Microsoft Windows Code Injection Vulnerability | Severity: High CVSS 7.8 | Feb 25, 2022 | Not known |
| CVE-2017-8570 | Microsoft | Microsoft Office Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Feb 25, 2022 | Not known |
| CVE-2022-24682 | Synacor | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability | Severity: Elevated CVSS 6.1 | Feb 25, 2022 | Known |
| CVE-2022-23131 | Zabbix | Zabbix Frontend Authentication Bypass Vulnerability | Severity: Critical CVSS 9.8 | Feb 22, 2022 | Not known |
| CVE-2022-23134 | Zabbix | Zabbix Frontend Improper Access Control Vulnerability | Severity: Elevated CVSS 5.3 | Feb 22, 2022 | Not known |
| CVE-2017-9841 | PHPUnit | PHPUnit Command Injection Vulnerability | Severity: Critical CVSS 9.8 | Feb 15, 2022 | Not known |
| CVE-2022-24086 | Adobe | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | Severity: Critical CVSS 9.8 | Feb 15, 2022 | Not known |
| CVE-2022-0609 | Google Chromium Animation Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Feb 15, 2022 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.