Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
1,734 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2021-38003 | Google Chromium V8 Memory Corruption Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known | |
| CVE-2021-40444 | Microsoft | Microsoft MSHTML Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Known |
| CVE-2020-3566 | Cisco | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | Severity: High CVSS 8.6 | Nov 3, 2021 | Not known |
| CVE-2020-3569 | Cisco | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | Severity: High CVSS 8.6 | Nov 3, 2021 | Not known |
| CVE-2020-17144 | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability | Severity: High CVSS 8.4 | Nov 3, 2021 | Not known |
| CVE-2021-33739 | Microsoft | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | Severity: High CVSS 8.4 | Nov 3, 2021 | Not known |
| CVE-2017-9805 | Apache | Apache Struts Deserialization of Untrusted Data Vulnerability | Severity: High CVSS 8.1 | Nov 3, 2021 | Not known |
| CVE-2018-11776 | Apache | Apache Struts Remote Code Execution Vulnerability | Severity: High CVSS 8.1 | Nov 3, 2021 | Not known |
| CVE-2020-0601 | Microsoft | Microsoft Windows CryptoAPI Spoofing Vulnerability | Severity: High CVSS 8.1 | Nov 3, 2021 | Not known |
| CVE-2020-6819 | Mozilla | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | Severity: High CVSS 8.1 | Nov 3, 2021 | Not known |
| CVE-2020-6820 | Mozilla | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | Severity: High CVSS 8.1 | Nov 3, 2021 | Not known |
| CVE-2015-1641 | Microsoft | Microsoft Office Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2016-0167 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2016-0185 | Microsoft | Microsoft Windows Media Center Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2016-3235 | Microsoft | Microsoft Office OLE DLL Side Loading Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2016-3643 | SolarWinds | SolarWinds Virtualization Manager Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2016-7255 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2017-0199 | Microsoft | Microsoft Office and WordPad Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2017-11774 | Microsoft | Microsoft Office Outlook Security Feature Bypass Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2017-11882 | Microsoft | Microsoft Office Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2017-16651 | Roundcube | Roundcube Webmail File Disclosure Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2017-8759 | Microsoft | Microsoft .NET Framework Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2018-0802 | Microsoft | Microsoft Office Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2018-4878 | Adobe | Adobe Flash Player Use-After-Free Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2019-0211 | Apache | Apache HTTP Server Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2019-0797 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2019-0803 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2019-0808 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2019-0859 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2019-0863 | Microsoft | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2019-1214 | Microsoft | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2019-1215 | Microsoft | Microsoft Windows Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2019-15752 | Docker | Docker Desktop Community Edition Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2019-2215 | Android | Android Kernel Use-After-Free Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-0041 | Android | Android Kernel Out-of-Bounds Write Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-0069 | MediaTek | Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-0683 | Microsoft | Microsoft Windows Installer Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-0938 | Microsoft | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-0986 | Microsoft | Microsoft Windows Kernel Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-1147 | Microsoft | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.