Exploitation dashboard
Actively exploited vulnerabilities
Every vulnerability here has reliable evidence of exploitation in the wild, based on the CISA Known Exploited Vulnerabilities catalog. If you run an affected product, patch or mitigate it first.
1,734
Known exploited (all time)
39
Added in last 30 days
361
Used by ransomware
389 matching vulnerabilities
| CVE | Vendor / product | Vulnerability | Severity | Added | Ransomware |
|---|---|---|---|---|---|
| CVE-2012-0158 | Microsoft | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Known |
| CVE-2014-1812 | Microsoft | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Known |
| CVE-2017-0143 | Microsoft | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Known |
| CVE-2018-0798 | Microsoft | Microsoft Office Memory Corruption Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2019-0541 | Microsoft | Microsoft MSHTML Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2020-0688 | Microsoft | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Known |
| CVE-2020-1020 | Microsoft | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-26411 | Microsoft | Microsoft Internet Explorer Memory Corruption Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Known |
| CVE-2021-27085 | Microsoft | Microsoft Internet Explorer Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Not known |
| CVE-2021-34527 | Microsoft | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Known |
| CVE-2021-40444 | Microsoft | Microsoft MSHTML Remote Code Execution Vulnerability | Severity: High CVSS 8.8 | Nov 3, 2021 | Known |
| CVE-2020-17144 | Microsoft | Microsoft Exchange Server Remote Code Execution Vulnerability | Severity: High CVSS 8.4 | Nov 3, 2021 | Not known |
| CVE-2021-33739 | Microsoft | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | Severity: High CVSS 8.4 | Nov 3, 2021 | Not known |
| CVE-2020-0601 | Microsoft | Microsoft Windows CryptoAPI Spoofing Vulnerability | Severity: High CVSS 8.1 | Nov 3, 2021 | Not known |
| CVE-2015-1641 | Microsoft | Microsoft Office Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2016-0167 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2016-0185 | Microsoft | Microsoft Windows Media Center Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2016-3235 | Microsoft | Microsoft Office OLE DLL Side Loading Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2016-7255 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2017-0199 | Microsoft | Microsoft Office and WordPad Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2017-11774 | Microsoft | Microsoft Office Outlook Security Feature Bypass Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2017-11882 | Microsoft | Microsoft Office Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2017-8759 | Microsoft | Microsoft .NET Framework Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2018-0802 | Microsoft | Microsoft Office Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2019-0797 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2019-0803 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2019-0808 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2019-0859 | Microsoft | Microsoft Win32k Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2019-0863 | Microsoft | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2019-1214 | Microsoft | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2019-1215 | Microsoft | Microsoft Windows Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
| CVE-2020-0683 | Microsoft | Microsoft Windows Installer Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-0938 | Microsoft | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-0986 | Microsoft | Microsoft Windows Kernel Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-1147 | Microsoft | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-1380 | Microsoft | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-1464 | Microsoft | Microsoft Windows Spoofing Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2020-17087 | Microsoft | Microsoft Windows Kernel Privilege Escalation Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2021-1647 | Microsoft | Microsoft Defender Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Not known |
| CVE-2021-1675 | Microsoft | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | Severity: High CVSS 7.8 | Nov 3, 2021 | Known |
Source: CISA Known Exploited Vulnerabilities catalog (US government, public domain), refreshed hourly. CVSS scores from the NIST National Vulnerability Database are added as they are fetched.