Library of exploited vulnerabilities
Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.
- 1,764exploited vulnerabilities
- 361used by ransomware
- 291vendors
1,764 vulnerabilities
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Mar 3, 2022 | Memory Corruption | Microsoft PowerPoint | High 8.8 | 40% |
| Mar 3, 2022 | Privilege Escalation | Microsoft ATM Font Driver | High 7.8 | 35% |
| Mar 3, 2022 | Privilege Escalation | Microsoft Win32k | High 7.8 | 56% |
| Mar 3, 2022 | Memory Corruption | Microsoft Office | High 7.8 | 53% |
| Mar 3, 2022 | Object Linking & Embedding (OLE) Remote Code Execution | Microsoft Windows | High 7.8 | 82% |
| Mar 3, 2022 | Use-After-Free | Adobe Reader and Acrobat | High 8.8 | 40% |
| Mar 3, 2022 | Kernel Privilege Escalation | Microsoft Windows | High 7.8 | 35% |
| Mar 3, 2022 | Use-After-Free | Microsoft Internet Explorer | High 8.8 | 77% |
| Mar 3, 2022 | Memory Corruption | Adobe Reader and Acrobat | High 8.8 | 79% |
| Mar 3, 2022 | Information Disclosure | Mozilla Firefox | Medium 6.5 | 6.7% |
| Mar 3, 2022 | Remote Code Execution | Microsoft Internet Explorer | High 8.8 | 78% |
| Mar 3, 2022 | Buffer Overflow | Adobe Reader | High 7.8 | 32% |
| Mar 3, 2022 | Memory Corruption | Adobe Reader and Acrobat | High 7.8 | 87% |
| Mar 3, 2022 | Authentication Bypass | Adobe ColdFusion | Critical 9.8 | 93% |
| Mar 3, 2022 | Runtime Environment (JRE) Arbitrary Code Execution | Oracle Java SE | Critical 9.8 | 99% |
| Mar 3, 2022 | MSCOMCTL.OCX Remote Code Execution | Microsoft Office | High 8.8 | 72% |
| Mar 3, 2022 | Runtime Environment (JRE) Arbitrary Code Execution | Oracle Java SE | Critical 9.8 | 94% |
| Mar 3, 2022 | Arbitrary Code Execution | Adobe Flash Player | High 7.8 | 70% |
| Mar 3, 2022 | Runtime Environment (JRE) Arbitrary Code Execution | Oracle Java SE | Critical 9.8 | 98% |
| Mar 3, 2022 | Java SE Runtime Environment (JRE) Arbitrary Code Execution | Oracle Java SE JDK and JRE | Critical 9.8 | 97% |
| Mar 3, 2022 | Forefront TMG Remote Code Execution | Microsoft Forefront Threat Management Gateway (TMG) | Critical 9.8 | 49% |
| Mar 3, 2022 | Remote Code Execution | Adobe Flash Player | High 8.8 | 99.4% |
| Mar 3, 2022 | Stack-based Buffer Overflow | Microsoft Office | High 7.8 | 89% |
| Mar 3, 2022 | Kernel Exception Handler | Microsoft Windows | High 7.8 | 29% |
| Mar 3, 2022 | Arbitrary Code Execution | Adobe Reader and Acrobat | High 7.8 | 88% |
| Mar 3, 2022 | Featheader Record Memory Corruption | Microsoft Excel | High 7.8 | 84% |
| Mar 3, 2022 | Improper Input Validation | Microsoft Windows | High 7.8 | 4.9% |
| Mar 3, 2022 | Insufficient Input Validation | Oracle VirtualBox | High 8.8 | 6.9% |
| Mar 3, 2022 | Reader and Acrobat Input Validation | Adobe Acrobat and Reader | High 7.8 | 99.8% |
| Mar 3, 2022 | Privilege Escalation | Microsoft Windows | High 7.8 | 7.2% |
| Mar 3, 2022 | Privilege Escalation | Microsoft Windows | High 7.8 | 4.9% |
| Feb 25, 2022 | Cross-Site Scripting | Synacor Zimbra Collaborate Suite (ZCS) | Medium 6.1 | 31% |
| Feb 25, 2022 | Remote Code Execution | Microsoft Office | High 7.8 | 90% |
| Feb 25, 2022 | Remote Code Execution | Microsoft Internet Explorer | High 8.8 | 30% |
| Feb 25, 2022 | Code Injection | Microsoft Windows | High 7.8 | 77% |
| Feb 22, 2022 | Improper Access Control | Zabbix Frontend | Low 3.7 | 95% |
| Feb 22, 2022 | Authentication Bypass | Zabbix Frontend | Critical 9.1 | 96% |
| Feb 15, 2022 | Improper Input Validation | Adobe Commerce and Magento Open Source | Critical 9.8 | 99.2% |
| Feb 15, 2022 | Use-After-Free | Google Chromium Animation | High 8.8 | 22% |
| Feb 15, 2022 | Type Confusion | Microsoft Internet Explorer | High 7.5 | 82% |
| Feb 15, 2022 | VBScript Engine Out-of-Bounds Write | Microsoft Windows | High 7.5 | 88% |
| Feb 15, 2022 | Absolute Path Traversal | RARLAB WinRAR | High 7.8 | 96% |
| Feb 15, 2022 | Use-After-Free | Adobe Flash Player | High 7.8 | 90% |
| Feb 15, 2022 | Command Injection | PHPUnit PHPUnit | Critical 9.8 | >99.9% |
| Feb 15, 2022 | Memory Corruption | Microsoft Word | High 7.8 | 78% |
| Feb 15, 2022 | Memory Corruption | Microsoft Graphics Component | High 7.8 | 85% |
| Feb 11, 2022 | Webkit Use-After-Free | Apple iOS, iPadOS, and macOS | High 8.8 | 16% |
| Feb 10, 2022 | SAM Local Privilege Escalation | Microsoft Windows | High 7.8 | 67% |
| Feb 10, 2022 | Remote Code Execution | Microsoft SMBv3 | Critical 10.0 | 99.8% |
| Feb 10, 2022 | Stapler Web Framework Deserialization of Untrusted Data | Jenkins Jenkins Stapler Web Framework | Critical 9.8 | 98% |
Most targeted vendors
- Microsoft 390
- Cisco 102
- Apple 95
- Adobe 83
- Google 76
- Oracle 46
- Apache 41
- Ivanti 36
- Fortinet 32
- Linux 32
- Citrix 27
- VMware 26
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.