Known exploited vulnerabilities

Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.

Known exploited vulnerabilities, newest first
CVEProductCVSS AddedReport
CVE-2024-38080 Microsoft Windows – –
CVE-2024-23692 Rejetto HTTP File Server – –
CVE-2024-20399 Cisco NX-OS – –
CVE-2022-2586 Linux Kernel – –
CVE-2022-24816 OSGeo JAI-EXT – –
CVE-2020-13965 Roundcube Webmail – –
CVE-2024-4358 Progress Telerik Report Server – –
CVE-2024-32896 Android Pixel – –
CVE-2024-26169 Microsoft Windows – –
CVE-2024-4610 Arm Mali GPU Kernel Driver – –
CVE-2024-4577 PHP Group PHP – –
CVE-2017-3506 Oracle WebLogic Server – –
CVE-2024-24919 Check Point Quantum Security Gateways – –
CVE-2024-1086 Linux Kernel – –
CVE-2024-4978 Justice AV Solutions Viewer – –
CVE-2024-5274 Google Chromium V8 – –
CVE-2020-17519 Apache Flink – –
CVE-2024-4947 Google Chromium V8 – –
CVE-2023-43208 NextGen Healthcare Mirth Connect – –
CVE-2024-4761 Google Chromium V8 – –
CVE-2021-40655 D-Link DIR-605 Router – –
CVE-2014-100005 D-Link DIR-600 Router – –
CVE-2024-30051 Microsoft DWM Core Library – –
CVE-2024-30040 Microsoft Windows – –
CVE-2024-4671 Google Chromium – –
CVE-2023-7028 GitLab CE/EE – –
CVE-2024-29988 Microsoft SmartScreen Prompt – –
CVE-2024-4040 CrushFTP – –
CVE-2024-20359 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) – –
CVE-2024-20353 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) – –
CVE-2022-38028 Microsoft Windows – –
CVE-2024-3400 Palo Alto Networks PAN-OS – –
CVE-2024-3273 D-Link Multiple NAS Devices – –
CVE-2024-3272 D-Link Multiple NAS Devices – –
CVE-2024-29748 Android Pixel – –
CVE-2024-29745 Android Pixel – –
CVE-2023-24955 Microsoft SharePoint Server – –
CVE-2023-48788 Fortinet FortiClient EMS – –
CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) – –
CVE-2019-7256 Nice Linear eMerge E3-Series – –
CVE-2024-27198 JetBrains TeamCity – –
CVE-2024-23296 Apple Multiple Products – –
CVE-2024-23225 Apple Multiple Products – –
CVE-2023-21237 Android Pixel – –
CVE-2021-36380 Sunhillo SureLine – –
CVE-2024-21338 Microsoft Windows – –
CVE-2023-29360 Microsoft Streaming Service – –
CVE-2024-1709 ConnectWise ScreenConnect – –
CVE-2024-21410 Microsoft Exchange Server – –
CVE-2020-3259 Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) – –