Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
1,734 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2020-0688 | Microsoft | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Known |
| CVE-2020-10199 | Sonatype | Sonatype Nexus Repository Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2020-1020 | Microsoft | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2020-10221 | rConfig | rConfig OS Command Injection Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2020-16009 | Google Chromium V8 Type Confusion Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2020-16013 | Google Chromium V8 Incorrect Implementation Vulnerabililty | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2020-3118 | Cisco | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2020-5735 | Amcrest | Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2020-6418 | Google Chromium V8 Type Confusion Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2020-8467 | Trend Micro | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2020-8468 | Trend Micro | Trend Micro Multiple Products Content Validation Escape Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2020-9818 | Apple | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-21017 | Adobe | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-21148 | Google Chromium V8 Heap Buffer Overflow Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2021-21166 | Google Chromium Race Condition Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2021-21193 | Google Chromium Blink Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2021-21206 | Google Chromium Blink Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2021-21220 | Google Chromium V8 Improper Input Validation Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2021-21224 | Google Chromium V8 Type Confusion Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2021-22894 | Ivanti | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-22899 | Ivanti | Ivanti Pulse Connect Secure Command Injection Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-26411 | Microsoft | Microsoft Internet Explorer Memory Corruption Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Known |
| CVE-2021-27085 | Microsoft | Microsoft Internet Explorer Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-28550 | Adobe | Adobe Acrobat and Reader Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-28663 | Arm | Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-28664 | Arm | Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30551 | Google Chromium V8 Type Confusion Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2021-30554 | Google Chromium WebGL Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2021-30563 | Google Chromium V8 Type Confusion Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2021-30632 | Google Chromium V8 Out-of-Bounds Write Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2021-30661 | Apple | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30663 | Apple | Apple Multiple Products WebKit Integer Overflow Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30665 | Apple | Apple Multiple Products WebKit Memory Corruption Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30666 | Apple | Apple iOS WebKit Buffer Overflow Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30761 | Apple | Apple iOS WebKit Memory Corruption Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30762 | Apple | Apple iOS WebKit Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-30858 | Apple | Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-34527 | Microsoft | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Known |
| CVE-2021-36741 | Trend Micro | Trend Micro Multiple Products Improper Input Validation Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-37975 | Google Chromium V8 Use-After-Free Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.