Library of exploited vulnerabilities
Every software flaw that attackers are known to have used, from the catalogue the US Cybersecurity and Infrastructure Security Agency (CISA) keeps since November 2021. Updated every hour.
- 1,762exploited vulnerabilities
- 361used by ransomware
- 291vendors
1,762 vulnerabilities
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 4, 2025 | Use-After-Free | Android Runtime | High 8.8 | 0.6% |
| Sep 4, 2025 | Time-of-Check Time-of-Use (TOCTOU) Race Condition | Linux Kernel | High 7.8 | 1.4% |
| Sep 3, 2025 | Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection | TP-Link Multiple Routers | High 8.6 | 38% |
| Sep 3, 2025 | Authentication Bypass by Spoofing | TP-Link TL-WR841N | Medium 6.5 | 20% |
| Sep 2, 2025 | Incorrect Authorization | Meta Platforms WhatsApp | Medium 5.4 | 13% |
| Sep 2, 2025 | Missing Authentication for Critical Function | TP-Link TL-WA855RE | High 8.8 | 22% |
| Aug 29, 2025 | Authentication Bypass | Sangoma FreePBX | Critical 10.0 | 95% |
| Aug 26, 2025 | Memory Overflow | Citrix NetScaler | Critical 9.2 | 21% |
| Aug 25, 2025 | Link Following | Git Git | High 8.1 | 4.4% |
| Aug 25, 2025 | Deserialization of Untrusted Data | Citrix Session Recording | Medium 5.1 | 21% |
| Aug 25, 2025 | Improper Privilege Management | Citrix Session Recording | Medium 5.1 | 3.5% |
| Aug 21, 2025 | Out-of-Bounds Write | Apple iOS, iPadOS, and macOS | Critical 10.0 | 65% |
| Aug 18, 2025 | OS Command Injection | Trend Micro Apex One | Critical 9.4 | 25% |
| Aug 13, 2025 | Command Injection | N-able N-Central | Critical 9.4 | 3.4% |
| Aug 13, 2025 | Insecure Deserialization | N-able N-Central | Critical 9.4 | 1.9% |
| Aug 12, 2025 | Path Traversal | RARLAB WinRAR | High 8.4 | 95% |
| Aug 12, 2025 | Resource Management Errors | Microsoft Internet Explorer | High 8.8 | 88% |
| Aug 12, 2025 | Excel Remote Code Execution | Microsoft Office | High 8.8 | 43% |
| Aug 5, 2025 | Download of Code Without Integrity Check | D-Link DNR-322L | High 8.8 | 34% |
| Aug 5, 2025 | DCS-2530L and DCS-2670L Command Injection | D-Link DCS-2530L and DCS-2670L Devices | High 8.8 | 54% |
| Aug 5, 2025 | Unspecified | D-Link DCS-2530L and DCS-2670L Devices | High 7.5 | 98% |
| Jul 28, 2025 | Injection | Cisco Identity Services Engine | Critical 10.0 | 74% |
| Jul 28, 2025 | Injection | Cisco Identity Services Engine | Critical 10.0 | 98% |
| Jul 28, 2025 | Cross-Site Request Forgery (CSRF) | PaperCut NG/MF | High 8.4 | 29% |
| Jul 22, 2025 | ANGLE and GPU Improper Input Validation | Google Chromium | High 8.8 | 11% |
| Jul 22, 2025 | CrushFTP Unprotected Alternate Channel | CrushFTP CrushFTP | Critical 9.0 | 93% |
| Jul 22, 2025 | Improper Authentication | Microsoft SharePoint | Medium 6.5 | 99.1% |
| Jul 22, 2025 | Code Injection | Microsoft SharePoint | High 8.8 | >99.9% |
| Jul 22, 2025 | On-Prem Improper Restriction of XML External Entity Reference | SysAid SysAid On-Prem | Critical 9.3 | 65% |
| Jul 22, 2025 | On-Prem Improper Restriction of XML External Entity Reference | SysAid SysAid On-Prem | Critical 9.3 | 43% |
| Jul 20, 2025 | Deserialization of Untrusted Data | Microsoft SharePoint | Critical 9.8 | >99.9% |
| Jul 18, 2025 | SQL Injection | Fortinet FortiWeb | Critical 9.6 | 99.9% |
| Jul 14, 2025 | Improper Neutralization of Null Byte or NUL Character | Wing FTP Server Wing FTP Server | Critical 10.0 | 94% |
| Jul 10, 2025 | Out-of-Bounds Read | Citrix NetScaler ADC and Gateway | Critical 9.3 | >99.9% |
| Jul 7, 2025 | Server-Side Request Forgery (SSRF) | Synacor Zimbra Collaboration Suite (ZCS) | High 7.5 | 81% |
| Jul 7, 2025 | Path Traversal | Rails Ruby on Rails | High 7.5 | 99% |
| Jul 7, 2025 | Command Injection | PHP PHPMailer | Critical 9.8 | 99.7% |
| Jul 7, 2025 | Buffer Overflow | Looking Glass Multi-Router Looking Glass (MRLG) | Critical 9.8 | 29% |
| Jul 2, 2025 | Type Confusion | Google Chromium V8 | High 8.1 | 14% |
| Jul 1, 2025 | Exposure of Core Dump File to an Unauthorized Control Sphere | TeleMessage TM SGNL | Medium 4.0 | 0.6% |
| Jul 1, 2025 | Initialization of a Resource with an Insecure Default | TeleMessage TM SGNL | Medium 5.3 | 12% |
| Jun 30, 2025 | Buffer Overflow | Citrix NetScaler ADC and Gateway | Critical 9.2 | 10% |
| Jun 25, 2025 | Authentication Bypass by Spoofing | AMI MegaRAC SPx | Critical 10.0 | 61% |
| Jun 25, 2025 | D-Link DIR-859 Router Path Traversal | D-Link DIR-859 Router | Medium 5.3 | 83% |
| Jun 25, 2025 | Use of Hard-Coded Credentials | Fortinet FortiOS | Medium 6.5 | 6.6% |
| Jun 17, 2025 | Improper Ownership Management | Linux Kernel | High 7.8 | 7.9% |
| Jun 16, 2025 | Unspecified | Apple Multiple Products | Medium 4.2 | 1.2% |
| Jun 16, 2025 | Command Injection | TP-Link Multiple Routers | High 8.8 | 42% |
| Jun 10, 2025 | Microsoft Windows External Control of File Name or Path | Microsoft Windows | High 8.8 | 87% |
| Jun 10, 2025 | Server Deserialization of Untrusted Data | Wazuh Wazuh Server | Critical 9.9 | 94% |
Most targeted vendors
- Microsoft 390
- Cisco 101
- Apple 95
- Adobe 83
- Google 76
- Oracle 46
- Apache 41
- Ivanti 36
- Fortinet 32
- Linux 32
- Citrix 27
- VMware 26
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.