Library of exploited vulnerabilities
Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.
- 1,762exploited vulnerabilities
- 361used by ransomware
- 291vendors
1,762 vulnerabilities
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jun 8, 2022 | Type Confusion | Google Chromium V8 | High 8.8 | 32% |
| Jun 8, 2022 | Memory Corruption | Google Chromium V8 | High 8.8 | 41% |
| Jun 8, 2022 | Out-of-Bounds Memory | Google Chromium V8 | High 8.8 | 34% |
| Jun 8, 2022 | Out-of-Bounds Read | Google Chromium V8 | High 8.8 | 48% |
| Jun 8, 2022 | Buffer Overflow | Microsoft Office | High 7.8 | 80% |
| Jun 8, 2022 | Integer Overflow | Adobe Flash Player | High 8.8 | 21% |
| Jun 8, 2022 | Use-After-Free | Microsoft Internet Explorer | High 8.1 | 80% |
| Jun 8, 2022 | Memory Corruption | Microsoft XML Core Services | High 8.8 | 84% |
| Jun 8, 2022 | Cross-Site Scripting (XSS) | Adobe Flash Player | Medium 6.1 | 6.2% |
| Jun 8, 2022 | Memory Corruption | Adobe Flash Player | High 7.8 | 91% |
| Jun 8, 2022 | Authenticode Signature Verification Remote Code Execution | Microsoft Windows | High 7.8 | 88% |
| Jun 8, 2022 | Universal 3D Memory Corruption | Adobe Reader and Acrobat | High 8.8 | 89% |
| Jun 8, 2022 | Unspecified | Adobe Flash Player | High 7.8 | 64% |
| Jun 8, 2022 | Stack-Based Buffer Overflow | Adobe Acrobat and Reader | High 7.3 | 81% |
| Jun 8, 2022 | Buffer Overflow | Microsoft PowerPoint | High 7.8 | 59% |
| Jun 8, 2022 | Memory Corruption | Adobe Flash Player | High 7.8 | 83% |
| Jun 8, 2022 | Use-After-Free | Adobe Acrobat and Reader | High 7.8 | 82% |
| Jun 8, 2022 | Universal 3D Remote Code Execution | Adobe Acrobat and Reader | High 8.8 | 83% |
| Jun 8, 2022 | Unspecified | Adobe Acrobat and Reader, Flash Player | High 7.8 | 21% |
| Jun 8, 2022 | Buffer Overflow | Microsoft Office | High 7.8 | 60% |
| Jun 8, 2022 | Object Record Corruption | Microsoft Office | High 7.8 | 53% |
| Jun 8, 2022 | Unspecified | Adobe Acrobat and Reader | High 8.8 | 38% |
| Jun 8, 2022 | Buffer Overflow | Adobe Acrobat and Reader | High 7.8 | 87% |
| Jun 8, 2022 | Malformed Object Pointer | Microsoft Word | High 8.8 | 48% |
| Jun 2, 2022 | Confluence Server and Data Center Remote Code Execution | Atlassian Confluence Server/Data Center | Critical 9.8 | >99.9% |
| May 25, 2022 | Privilege Escalation | Oracle Solaris | High 8.8 | 13% |
| May 25, 2022 | Open Type Font Remote Code Execution | Microsoft Windows | High 8.8 | 65% |
| May 25, 2022 | Graphics Device Interface (GDI) Remote Code Execution | Microsoft Windows | High 7.8 | 68% |
| May 25, 2022 | Integer Overflow | Adobe Flash Player and AIR | High 8.8 | 19% |
| May 25, 2022 | Use-After-Free | Adobe Flash Player and AIR | High 8.8 | 55% |
| May 25, 2022 | Runtime Remote Code Execution | Microsoft Silverlight | High 8.8 | 69% |
| May 25, 2022 | Integer Overflow | Adobe Flash Player | High 8.8 | 68% |
| May 25, 2022 | Kernel Privilege Escalation | Microsoft Windows | High 7.8 | 5.3% |
| May 25, 2022 | Security Feature Bypass | Mozilla Firefox | High 8.8 | 69% |
| May 25, 2022 | Memory Corruption | Microsoft Internet Explorer | High 8.8 | 45% |
| May 25, 2022 | Privilege Escalation | Microsoft Win32k | High 8.8 | 15% |
| May 25, 2022 | Mount Manager Privilege Escalation | Microsoft Windows | Medium 6.6 | 4.1% |
| May 25, 2022 | Remote Code Execution | Microsoft Windows | High 7.8 | 49% |
| May 25, 2022 | ASLR Bypass | Adobe Flash Player | High 7.8 | 15% |
| May 25, 2022 | ASLR Bypass | Microsoft Internet Explorer | Medium 6.5 | 34% |
| May 25, 2022 | TS WebProxy Directory Traversal | Microsoft Windows | High 7.8 | 76% |
| May 25, 2022 | Dereferenced Pointer | Adobe Flash Player | High 8.8 | 20% |
| May 25, 2022 | Remote Code Execution | Microsoft Windows | High 8.8 | 60% |
| May 25, 2022 | Privilege Escalation | Microsoft Internet Explorer | High 8.8 | 47% |
| May 25, 2022 | IME Japanese Privilege Escalation | Microsoft Input Method Editor (IME) Japanese | High 7.8 | 55% |
| May 25, 2022 | Privilege Escalation | Linux Kernel | High 7.8 | 37% |
| May 25, 2022 | Privilege Escalation | Microsoft Internet Explorer | High 8.8 | 26% |
| May 25, 2022 | Sandbox Bypass | Adobe Reader and Acrobat | High 8.8 | 22% |
| May 25, 2022 | Information Disclosure | Microsoft Internet Explorer | Medium 6.5 | 50% |
| May 25, 2022 | Invalid Input | IBM InfoSphere BigInsights | Medium 6.5 | 4.8% |
Most targeted vendors
- Microsoft 390
- Cisco 101
- Apple 95
- Adobe 83
- Google 76
- Oracle 46
- Apache 41
- Ivanti 36
- Fortinet 32
- Linux 32
- Citrix 27
- D-Link 26
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.