Library of exploited vulnerabilities
Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.
- 1,762exploited vulnerabilities
- 361used by ransomware
- 291vendors
1,762 vulnerabilities
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| May 25, 2022 | Information Disclosure | Microsoft Silverlight | Medium 5.5 | 68% |
| May 25, 2022 | JRE Unspecified | Oracle Java Runtime Environment (JRE) | Low 3.7 | 85% |
| May 25, 2022 | JRE Sandbox Bypass | Oracle Java Runtime Environment (JRE) | Low 3.7 | 90% |
| May 25, 2022 | JRE Remote Code Execution | Oracle Java Runtime Environment (JRE) | Critical 9.8 | 97% |
| May 25, 2022 | Double Dereference | Microsoft Silverlight | High 7.8 | 79% |
| May 25, 2022 | Unspecified | Oracle Fusion Middleware | Critical 9.8 | 7.8% |
| May 25, 2022 | Information Disclosure | Red Hat JBoss | Medium 5.9 | 53% |
| May 25, 2022 | JRE Unspecified | Oracle Java Runtime Environment (JRE) | Critical 9.8 | 96% |
| May 25, 2022 | Authentication Bypass | Red Hat JBoss | Low 3.7 | 74% |
| May 24, 2022 | Kernel Privilege Escalation | Microsoft Windows | High 7.8 | 4.2% |
| May 24, 2022 | NAS File Station Cross-Site Scripting | QNAP Network Attached Storage (NAS) | Medium 6.1 | 31% |
| May 24, 2022 | NAS File Station Command Injection | QNAP Network Attached Storage (NAS) | Critical 9.8 | 30% |
| May 24, 2022 | NAS File Station Cross-Site Scripting | QNAP Network Attached Storage (NAS) | High 8.0 | 23% |
| May 24, 2022 | Search Remote Code Execution | Microsoft Windows | Critical 9.8 | 74% |
| May 24, 2022 | Type Confusion | Artifex Ghostscript | High 7.8 | 97% |
| May 24, 2022 | VSA SQL Injection | Kaseya Virtual System/Server Administrator (VSA) | Critical 9.8 | 87% |
| May 24, 2022 | Privilege Escalation | Microsoft Internet Explorer | High 8.8 | 22% |
| May 24, 2022 | Memory Corruption | Microsoft Internet Explorer | High 8.8 | 29% |
| May 24, 2022 | Windows SMBv1 Information Disclosure | Microsoft SMBv1 server | High 7.5 | 99.7% |
| May 24, 2022 | Information Disclosure | Microsoft XML Core Services | Medium 6.5 | 18% |
| May 24, 2022 | Graphics Device Interface (GDI) Privilege Escalation | Microsoft Windows | High 7.8 | 11% |
| May 24, 2022 | CLI Remote Code Execution | Cisco Adaptive Security Appliance (ASA) | High 7.8 | 23% |
| May 24, 2022 | SNMP Buffer Overflow | Cisco Adaptive Security Appliance (ASA) | High 8.8 | 88% |
| May 24, 2022 | Webkit Memory Corruption | Apple iOS | High 8.8 | 67% |
| May 24, 2022 | Memory Corruption | Apple iOS | High 7.8 | 24% |
| May 24, 2022 | Information Disclosure | Apple iOS | Medium 5.5 | 33% |
| May 24, 2022 | Information Disclosure | Microsoft Internet Explorer and Edge | Medium 6.5 | 26% |
| May 24, 2022 | Messaging API Information Disclosure | Microsoft Internet Explorer | Medium 6.5 | 33% |
| May 24, 2022 | Information Disclosure | Microsoft Internet Explorer | Medium 4.3 | 22% |
| May 23, 2022 | Open Port | Cisco IOS XR | Medium 6.5 | 11% |
| May 23, 2022 | Memory Corruption | Apple Multiple Products | High 7.8 | 15% |
| May 23, 2022 | Use-After-Free | Android Kernel | High 7.8 | 1.1% |
| May 23, 2022 | Race Condition | Android Kernel | Medium 6.4 | 0.9% |
| May 23, 2022 | Kernel Privilege Escalation | Microsoft Windows | High 7.8 | 4.7% |
| May 23, 2022 | Privilege Escalation | Microsoft Update Notification Manager | High 7.8 | 2.4% |
| May 23, 2022 | Memory Corruption | WebKitGTK WebKitGTK | High 8.8 | 1.6% |
| May 23, 2022 | Memory Corruption | Apple iOS | High 7.8 | 4.6% |
| May 23, 2022 | Memory Corruption | Apple Multiple Products | High 7.8 | 16% |
| May 23, 2022 | Use-After-Free | Google Chrome Blink | Medium 6.5 | 61% |
| May 23, 2022 | Cross-Site Scripting | Meta Platforms WhatsApp | High 8.2 | 68% |
| May 23, 2022 | AppX Deployment Extensions Privilege Escalation | Microsoft Windows | High 7.8 | 3.6% |
| May 23, 2022 | Use-After-Free | Google Chrome WebAudio | High 8.8 | 49% |
| May 23, 2022 | Sandbox Escape | Mozilla Firefox and Thunderbird | Critical 10.0 | 56% |
| May 23, 2022 | Type Confusion | Mozilla Firefox and Thunderbird | High 8.8 | 38% |
| May 23, 2022 | AppX Deployment Service Privilege Escalation | Microsoft Windows | High 7.8 | 1.7% |
| May 23, 2022 | Privilege Escalation | Microsoft Windows | High 7.8 | 2.3% |
| May 23, 2022 | SMB Information Disclosure | Microsoft Windows | Medium 6.5 | 9.4% |
| May 23, 2022 | Information Disclosure | Microsoft Internet Explorer | Medium 6.5 | 8.1% |
| May 23, 2022 | Privilege Escalation | Microsoft Win32k | High 7.8 | 3.0% |
| May 23, 2022 | Stack-based Buffer Overflow | Adobe Flash Player | High 7.8 | 25% |
Most targeted vendors
- Microsoft 390
- Cisco 101
- Apple 95
- Adobe 83
- Google 76
- Oracle 46
- Apache 41
- Ivanti 36
- Linux 32
- Fortinet 32
- Citrix 27
- VMware 26
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.