BLACKOUT MAP

Library of exploited vulnerabilities

Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.

1,764 vulnerabilities

AddedVulnerabilityProductSeverityAttack chance
Nov 3, 2021Privilege EscalationCVE-2021-34523used by ransomwareMicrosoft Exchange ServerCritical 9.0>99.9%
Nov 3, 2021Remote Code ExecutionCVE-2021-34473used by ransomwareMicrosoft Exchange ServerCritical 9.1>99.9%
Nov 3, 2021Scripting Engine Memory CorruptionCVE-2021-34448Microsoft WindowsMedium 6.840%
Nov 3, 2021Kernel Privilege EscalationCVE-2021-33771Microsoft WindowsHigh 7.810%
Nov 3, 2021MSHTML Platform Remote Code ExecutionCVE-2021-33742Microsoft WindowsHigh 7.559%
Nov 3, 2021Desktop Window Manager (DWM) Core Library Privilege EscalationCVE-2021-33739Microsoft WindowsHigh 8.46.6%
Nov 3, 2021Kernel Privilege EscalationCVE-2021-31979Microsoft WindowsHigh 7.84.5%
Nov 3, 2021NTFS Privilege EscalationCVE-2021-31956Microsoft WindowsHigh 7.822%
Nov 3, 2021Kernel Information DisclosureCVE-2021-31955Microsoft WindowsMedium 5.581%
Nov 3, 2021Stack Buffer OverflowCVE-2021-31755Tenda AC11 RouterCritical 9.887%
Nov 3, 2021Security Feature BypassCVE-2021-31207used by ransomwareMicrosoft Exchange ServerMedium 6.699.8%
Nov 3, 2021Privilege EscalationCVE-2021-31201Microsoft Enhanced Cryptographic ProviderMedium 5.22.6%
Nov 3, 2021Privilege EscalationCVE-2021-31199Microsoft Enhanced Cryptographic ProviderMedium 5.23.0%
Nov 3, 2021Type ConfusionCVE-2021-30869Apple iOS, iPadOS, and macOSHigh 7.84.1%
Nov 3, 2021Integer OverflowCVE-2021-30860Apple Multiple ProductsHigh 7.876%
Nov 3, 2021iOS, iPadOS, macOS Use-After-FreeCVE-2021-30858Apple iOS, iPadOS, and macOSHigh 8.813%
Nov 3, 2021Memory CorruptionCVE-2021-30807Apple Multiple ProductsHigh 7.829%
Nov 3, 2021WebKit Use-After-FreeCVE-2021-30762Apple iOSHigh 8.811%
Nov 3, 2021WebKit Memory CorruptionCVE-2021-30761Apple iOSHigh 8.811%
Nov 3, 2021UnspecifiedCVE-2021-30713Apple macOSHigh 7.87.0%
Nov 3, 2021WebKit Buffer OverflowCVE-2021-30666Apple iOSHigh 8.83.0%
Nov 3, 2021WebKit Memory CorruptionCVE-2021-30665Apple Multiple ProductsHigh 8.83.7%
Nov 3, 2021WebKit Integer OverflowCVE-2021-30663Apple Multiple ProductsHigh 7.83.5%
Nov 3, 2021WebKit Storage Use-After-FreeCVE-2021-30661Apple Multiple ProductsHigh 8.84.5%
Nov 3, 2021UnspecifiedCVE-2021-30657Apple macOSMedium 5.569%
Nov 3, 2021Use-After-FreeCVE-2021-30633Google Chromium Indexed DB APICritical 9.633%
Nov 3, 2021Out-of-Bounds WriteCVE-2021-30632Google Chromium V8High 8.863%
Nov 3, 2021Type ConfusionCVE-2021-30563Google Chromium V8High 8.89.0%
Nov 3, 2021Use-After-FreeCVE-2021-30554Google Chromium WebGLHigh 8.87.4%
Nov 3, 2021Type ConfusionCVE-2021-30551Google Chromium V8High 8.865%
Nov 3, 2021Information DisclosureCVE-2021-30116used by ransomwareKaseya Virtual System/Server Administrator (VSA)Critical 10.086%
Nov 3, 2021UnspecifiedCVE-2021-28664Arm Mali Graphics Processing Unit (GPU)High 8.85.4%
Nov 3, 2021Use-After-FreeCVE-2021-28663Arm Mali Graphics Processing Unit (GPU)High 8.812%
Nov 3, 2021Use-After-FreeCVE-2021-28550Adobe Acrobat and ReaderCritical 9.652%
Nov 3, 2021Privilege EscalationCVE-2021-28310Microsoft Win32kHigh 7.88.4%
Nov 3, 2021Out-of-Bounds WriteCVE-2021-27562Arm Trusted FirmwareMedium 5.53.1%
Nov 3, 2021Server-Side Request Forgery (SSRF)CVE-2021-27561Yealink Device ManagementCritical 9.883%
Nov 3, 2021OS Command InjectionCVE-2021-27104used by ransomwareAccellion FTACritical 9.857%
Nov 3, 2021Server-Side Request Forgery (SSRF)CVE-2021-27103used by ransomwareAccellion FTACritical 9.811%
Nov 3, 2021OS Command InjectionCVE-2021-27102used by ransomwareAccellion FTAHigh 7.83.7%
Nov 3, 2021SQL InjectionCVE-2021-27101used by ransomwareAccellion FTACritical 9.86.0%
Nov 3, 2021Remote Code ExecutionCVE-2021-27085Microsoft Internet ExplorerHigh 8.85.4%
Nov 3, 2021Remote Code ExecutionCVE-2021-27065used by ransomwareMicrosoft Exchange ServerHigh 7.899.9%
Nov 3, 2021Remote Code ExecutionCVE-2021-27059Microsoft OfficeHigh 7.66.1%
Nov 3, 2021Remote Code ExecutionCVE-2021-26858used by ransomwareMicrosoft Exchange ServerHigh 7.894%
Nov 3, 2021Remote Code ExecutionCVE-2021-26857used by ransomwareMicrosoft Exchange ServerHigh 7.896%
Nov 3, 2021Remote Code ExecutionCVE-2021-26855used by ransomwareMicrosoft Exchange ServerCritical 9.1>99.9%
Nov 3, 2021Memory CorruptionCVE-2021-26411used by ransomwareMicrosoft Internet ExplorerHigh 8.882%
Nov 3, 2021Object-Graph Navigation Language (OGNL) InjectionCVE-2021-26084used by ransomwareAtlassian Confluence Server and Data CenterCritical 9.8>99.9%
Nov 3, 2021Total Protection (MTP) Improper Privilege ManagementCVE-2021-23874McAfee McAfee Total Protection (MTP)High 8.21.0%

Most targeted vendors

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.