Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2023-36845 | Juniper Junos OS | – | – | |
| CVE-2023-36844 | Juniper Junos OS | – | – | |
| CVE-2023-29552 | IETF Service Location Protocol (SLP) | – | – | |
| CVE-2023-22518 | Atlassian Confluence Data Center and Server | – | – | |
| CVE-2023-46604 | Apache ActiveMQ | – | – | |
| CVE-2023-46748 | F5 BIG-IP Configuration Utility | – | – | |
| CVE-2023-46747 | F5 BIG-IP Configuration Utility | – | – | |
| CVE-2023-5631 | Roundcube Webmail | – | – | |
| CVE-2023-20273 | Cisco IOS XE Web UI | – | – | |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | – | – | |
| CVE-2023-20198 | Cisco IOS XE Web UI | – | – | |
| CVE-2023-44487 | IETF HTTP/2 | – | – | |
| CVE-2023-41763 | Microsoft Skype for Business | – | – | |
| CVE-2023-36563 | Microsoft WordPad | – | – | |
| CVE-2023-21608 | Adobe Acrobat and Reader | – | – | |
| CVE-2023-20109 | Cisco IOS and IOS XE | – | – | |
| CVE-2023-42824 | Apple iOS and iPadOS | – | – | |
| CVE-2023-40044 | Progress WS_FTP Server | – | – | |
| CVE-2023-22515 | Atlassian Confluence Data Center and Server | – | – | |
| CVE-2023-42793 | JetBrains TeamCity | – | – | |
| CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service | – | – | |
| CVE-2023-4211 | Arm Mali GPU Kernel Driver | – | – | |
| CVE-2023-5217 | Google Chromium libvpx | – | – | |
| CVE-2018-14667 | Red Hat JBoss RichFaces Framework | – | – | |
| CVE-2023-41993 | Apple Multiple Products | – | – | |
| CVE-2023-41992 | Apple Multiple Products | – | – | |
| CVE-2023-41991 | Apple Multiple Products | – | – | |
| CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security | – | – | |
| CVE-2023-28434 | MinIO | – | – | |
| CVE-2022-22265 | Samsung Mobile Devices | – | – | |
| CVE-2021-3129 | Laravel Ignition | – | – | |
| CVE-2017-6884 | Zyxel EMG2926 Routers | – | – | |
| CVE-2014-8361 | Realtek SDK | – | – | |
| CVE-2023-26369 | Adobe Acrobat and Reader | – | – | |
| CVE-2023-4863 | Google Chromium WebP | – | – | |
| CVE-2023-35674 | Android Framework | – | – | |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense | – | – | |
| CVE-2023-36802 | Microsoft Streaming Service Proxy | – | – | |
| CVE-2023-36761 | Microsoft Word | – | – | |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS | – | – | |
| CVE-2023-41061 | Apple iOS, iPadOS, and watchOS | – | – | |
| CVE-2023-33246 | Apache RocketMQ | – | – | |
| CVE-2023-38831 | RARLAB WinRAR | – | – | |
| CVE-2023-32315 | Ignite Realtime Openfire | – | – | |
| CVE-2023-38035 | Ivanti Sentry | – | – | |
| CVE-2023-27532 | Veeam Backup & Replication | – | – | |
| CVE-2023-26359 | Adobe ColdFusion | – | – | |
| CVE-2023-24489 | Citrix Content Collaboration | – | – | |
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio | 7.5 | – | |
| CVE-2017-18368 | Zyxel P660HN-T1A Routers | – | – |