Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
389 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2017-11826 | Microsoft | Microsoft Office Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2017-8540 | Microsoft | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | Severity: High CVSS 7.8 | Mar 3, 2022 | Not known |
| CVE-2018-8581 | Microsoft | Microsoft Exchange Server Privilege Escalation Vulnerability | Severity: High CVSS 7.4 | Mar 3, 2022 | Known |
| CVE-2021-41379 | Microsoft | Microsoft Windows Installer Privilege Escalation Vulnerability | Severity: Elevated CVSS 5.5 | Mar 3, 2022 | Known |
| CVE-2017-0222 | Microsoft | Microsoft Internet Explorer Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Feb 25, 2022 | Not known |
| CVE-2014-6352 | Microsoft | Microsoft Windows Code Injection Vulnerability | Severity: High CVSS 7.8 | Feb 25, 2022 | Not known |
| CVE-2017-8570 | Microsoft | Microsoft Office Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Feb 25, 2022 | Not known |
| CVE-2013-3906 | Microsoft | Microsoft Graphics Component Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Feb 15, 2022 | Not known |
| CVE-2014-1761 | Microsoft | Microsoft Word Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Feb 15, 2022 | Not known |
| CVE-2018-8174 | Microsoft | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability | Severity: High CVSS 7.5 | Feb 15, 2022 | Known |
| CVE-2019-0752 | Microsoft | Microsoft Internet Explorer Type Confusion Vulnerability | Severity: High CVSS 7.5 | Feb 15, 2022 | Known |
| CVE-2020-0796 | Microsoft | Microsoft SMBv3 Remote Code Execution Vulnerability | Severity: Critical CVSS 10.0 | Feb 10, 2022 | Known |
| CVE-2015-1635 | Microsoft | Microsoft HTTP.sys Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Feb 10, 2022 | Not known |
| CVE-2017-0144 | Microsoft | Microsoft SMBv1 Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Feb 10, 2022 | Known |
| CVE-2017-0145 | Microsoft | Microsoft SMBv1 Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Feb 10, 2022 | Known |
| CVE-2017-8464 | Microsoft | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Feb 10, 2022 | Not known |
| CVE-2017-0262 | Microsoft | Microsoft Office Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Feb 10, 2022 | Not known |
| CVE-2017-0263 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Feb 10, 2022 | Not known |
| CVE-2021-36934 | Microsoft | Microsoft Windows SAM Local Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Feb 10, 2022 | Not known |
| CVE-2022-21882 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Feb 4, 2022 | Known |
| CVE-2014-1776 | Microsoft | Microsoft Internet Explorer Memory Corruption Vulnerability | Severity: Critical CVSS 9.8 | Jan 28, 2022 | Not known |
| CVE-2020-0787 | Microsoft | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability | Severity: High CVSS 7.8 | Jan 28, 2022 | Known |
| CVE-2018-8453 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Jan 21, 2022 | Known |
| CVE-2021-33766 | Microsoft | Microsoft Exchange Server Information Disclosure | Severity: High CVSS 7.3 | Jan 18, 2022 | Not known |
| CVE-2019-1458 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Jan 10, 2022 | Known |
| CVE-2013-3900 | Microsoft | Microsoft WinVerifyTrust function Remote Code Execution | Severity: Elevated CVSS 5.5 | Jan 10, 2022 | Not known |
| CVE-2021-43890 | Microsoft | Microsoft Windows AppX Installer Spoofing Vulnerability | Severity: High CVSS 7.1 | Dec 15, 2021 | Known |
| CVE-2021-42321 | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 17, 2021 | Known |
| CVE-2021-40449 | Microsoft | Microsoft Windows Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 17, 2021 | Known |
| CVE-2021-42292 | Microsoft | Microsoft Excel Security Feature Bypass | Severity: High CVSS 7.8 | Nov 17, 2021 | Not known |
| CVE-2020-1350 | Microsoft | Microsoft Windows DNS Server Remote Code Execution Vulnerability | Severity: Critical CVSS 10.0 | Nov 3, 2021 | Not known |
| CVE-2017-7269 | Microsoft | Microsoft Windows Server Buffer Overflow Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Not known |
| CVE-2019-0604 | Microsoft | Microsoft SharePoint Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Known |
| CVE-2019-0708 | Microsoft | Microsoft Remote Desktop Services Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Known |
| CVE-2020-0646 | Microsoft | Microsoft .NET Framework Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Not known |
| CVE-2021-38647 | Microsoft | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | Severity: Critical CVSS 9.8 | Nov 3, 2021 | Known |
| CVE-2021-26855 | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability | Severity: Critical CVSS 9.1 | Nov 3, 2021 | Known |
| CVE-2021-34473 | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability | Severity: Critical CVSS 9.1 | Nov 3, 2021 | Known |
| CVE-2020-1040 | Microsoft | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | Severity: Critical CVSS 9.0 | Nov 3, 2021 | Not known |
| CVE-2021-34523 | Microsoft | Microsoft Exchange Server Privilege Escalation Vulnerability | Severity: Critical CVSS 9.0 | Nov 3, 2021 | Known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.