Library of exploited vulnerabilities
Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.
- 1,762exploited vulnerabilities
- 361used by ransomware
- 291vendors
1,762 vulnerabilities
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Apr 4, 2022 | Out-of-Bounds Write | Apple macOS | High 7.8 | 12% |
| Apr 4, 2022 | Out-of-Bounds Read | Apple macOS | Medium 5.5 | 1.1% |
| Apr 4, 2022 | Remote Code Execution | D-Link Multiple Routers | Critical 9.8 | 98% |
| Mar 31, 2022 | Arbitrary File Upload | Trend Micro Apex Central | Critical 9.8 | 19% |
| Mar 31, 2022 | Authentication Bypass | Sophos Firewall | Critical 9.8 | 99.8% |
| Mar 31, 2022 | User Profile Service Privilege Escalation | Microsoft Windows | High 7.8 | 22% |
| Mar 31, 2022 | NAS Improper Authorization | QNAP Network Attached Storage (NAS) | Critical 10.0 | 78% |
| Mar 31, 2022 | Insufficient Access Control | Dell dbutil Driver | High 8.8 | 80% |
| Mar 31, 2022 | GPON Routers Command Injection | Dasan Gigabit Passive Optical Network (GPON) Routers | Critical 9.8 | 99.9% |
| Mar 31, 2022 | GPON Routers Authentication Bypass | Dasan Gigabit Passive Optical Network (GPON) Routers | Critical 9.8 | 93% |
| Mar 28, 2022 | Type Confusion | Google Chromium V8 | High 8.8 | 25% |
| Mar 28, 2022 | Debian-specific Redis Server Lua Sandbox Escape | Redis Debian-specific Redis Servers | Critical 10.0 | 99.4% |
| Mar 28, 2022 | Access Connectivity Engine Remote Code Execution | Microsoft Office | High 7.8 | 8.0% |
| Mar 28, 2022 | Event Tracing Privilege Escalation | Microsoft Windows | High 7.8 | 9.3% |
| Mar 28, 2022 | Pre-Authorization Arbitrary File Read | Atlassian Confluence Server | Medium 5.3 | 99.9% |
| Mar 28, 2022 | SQL Injection | SonicWall Secure Remote Access (SRA) | Critical 9.8 | 30% |
| Mar 28, 2022 | Directory Traversal | SonicWall SMA100 | High 7.5 | 4.0% |
| Mar 28, 2022 | Privilege Escalation | Microsoft Windows | High 7.8 | 19% |
| Mar 28, 2022 | DirectX Graphics Kernel Privilege Escalation | Microsoft DirectX Graphics Kernel (DXGKRNL) | High 7.8 | 3.4% |
| Mar 28, 2022 | DirectX Graphics Kernel Privilege Escalation | Microsoft DirectX Graphics Kernel (DXGKRNL) | High 7.8 | 3.4% |
| Mar 28, 2022 | Privilege Escalation | Microsoft Windows | High 7.3 | 84% |
| Mar 28, 2022 | Information Disclosure | Microsoft Internet Explorer | Medium 4.3 | 62% |
| Mar 28, 2022 | Type Confusion | Microsoft Edge and Internet Explorer | High 8.1 | 80% |
| Mar 28, 2022 | Memory Corruption | Microsoft Edge | High 8.8 | 80% |
| Mar 28, 2022 | Memory Corruption | Microsoft Edge | High 8.8 | 83% |
| Mar 28, 2022 | Memory Corruption | Microsoft Internet Explorer | High 7.5 | 94% |
| Mar 28, 2022 | Windows CSRSS Security Feature Bypass | Microsoft Client-Server Run-time Subsystem (CSRSS) | High 7.8 | 63% |
| Mar 28, 2022 | Kernel Privilege Escalation | Microsoft Windows | High 7.8 | 24% |
| Mar 28, 2022 | Adobe Type Manager Library Remote Code Execution | Microsoft Windows | High 8.8 | 87% |
| Mar 28, 2022 | Memory Corruption | Microsoft Internet Explorer | High 8.8 | 53% |
| Mar 28, 2022 | Uninitialized Memory Use | Microsoft Office | High 8.8 | 35% |
| Mar 28, 2022 | Privilege Escalation | Microsoft Win32k | High 7.8 | 39% |
| Mar 28, 2022 | Arbitrary Integer Overflow | Adobe Reader and Acrobat | High 8.8 | 67% |
| Mar 28, 2022 | Use-After-Free | Microsoft Internet Explorer | High 8.8 | 74% |
| Mar 28, 2022 | Unspecified | Oracle Java SE | Critical 9.8 | 99% |
| Mar 28, 2022 | Denial-of-Service | Mozilla Firefox and Thunderbird | High 8.8 | 69% |
| Mar 28, 2022 | Sandbox Bypass | Oracle Java SE | Critical 9.8 | 91% |
| Mar 28, 2022 | Remote Code Execution | Microsoft Word | High 7.8 | 53% |
| Mar 28, 2022 | Memory Corruption | Adobe Flash Player | High 7.5 | 7.7% |
| Mar 28, 2022 | Unspecified | Oracle Fusion Middleware | Medium 4.7 | 4.7% |
| Mar 28, 2022 | Improper Input Validation | Microsoft Ancillary Function Driver (afd.sys) | High 7.8 | 32% |
| Mar 28, 2022 | Kernel Stack-Based Buffer Overflow | Microsoft Windows | High 7.8 | 8.7% |
| Mar 25, 2022 | Arbitrary Code Execution | WatchGuard Firebox and XTM Appliances | Critical 9.8 | 78% |
| Mar 25, 2022 | Access Control | Mitel MiCollab, MiVoice Business Express | Critical 9.8 | 87% |
| Mar 25, 2022 | Print Spooler Privilege Escalation | Microsoft Windows | High 7.8 | 41% |
| Mar 25, 2022 | Remote Command Execution | Sitecore XP | Critical 9.8 | 98% |
| Mar 25, 2022 | Improper Access Control | Citrix ShareFile | Critical 9.8 | 54% |
| Mar 25, 2022 | Remote Command Execution | D-Link DIR-610 Devices | High 8.8 | 22% |
| Mar 25, 2022 | Multiple NAS Devices OS Command Injection | Zyxel Multiple Network-Attached Storage (NAS) Devices | Critical 9.8 | >99.9% |
| Mar 25, 2022 | Remote Code Execution | OpenBSD OpenSMTPD | Critical 9.8 | 99% |
Most targeted vendors
- Microsoft 390
- Cisco 101
- Apple 95
- Adobe 83
- Google 76
- Oracle 46
- Apache 41
- Ivanti 36
- Fortinet 32
- Linux 32
- Citrix 27
- VMware 26
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.