Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) | – | – | |
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2023-38606 | Apple Multiple Products | – | – | |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile (EPMM) | – | – | |
| CVE-2023-38205 | Adobe ColdFusion | – | – | |
| CVE-2023-29298 | Adobe ColdFusion | – | – | |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway | – | – | |
| CVE-2023-36884 | Microsoft Windows | – | – | |
| CVE-2023-37450 | Apple Multiple Products | – | – | |
| CVE-2022-29303 | SolarView Compact | – | – | |
| CVE-2023-36874 | Microsoft Windows | – | – | |
| CVE-2023-35311 | Microsoft Outlook | – | – | |
| CVE-2023-32049 | Microsoft Windows | – | – | |
| CVE-2023-32046 | Microsoft Windows | – | – | |
| CVE-2022-31199 | Netwrix Auditor | – | – | |
| CVE-2021-29256 | Arm Mali Graphics Processing Unit (GPU) | – | – | |
| CVE-2021-25489 | Samsung Mobile Devices | – | – | |
| CVE-2021-25487 | Samsung Mobile Devices | – | – | |
| CVE-2021-25395 | Samsung Mobile Devices | – | – | |
| CVE-2021-25394 | Samsung Mobile Devices | – | – | |
| CVE-2021-25372 | Samsung Mobile Devices | – | – | |
| CVE-2021-25371 | Samsung Mobile Devices | – | – | |
| CVE-2019-20500 | D-Link DWL-2600AP Access Point | – | – | |
| CVE-2019-17621 | D-Link DIR-859 Router | – | – | |
| CVE-2023-32439 | Apple Multiple Products | – | – | |
| CVE-2023-32435 | Apple Multiple Products | – | – | |
| CVE-2023-32434 | Apple Multiple Products | – | – | |
| CVE-2023-27992 | Zyxel Multiple Network-Attached Storage (NAS) Devices | – | – | |
| CVE-2023-20867 | VMware Tools | – | – | |
| CVE-2023-20887 | VMware Aria Operations for Networks | – | – | |
| CVE-2021-44026 | Roundcube Webmail | – | – | |
| CVE-2020-35730 | Roundcube Webmail | – | – | |
| CVE-2020-12641 | Roundcube Webmail | – | – | |
| CVE-2016-9079 | Mozilla Firefox, Firefox ESR, and Thunderbird | – | – | |
| CVE-2016-0165 | Microsoft Win32k | – | – | |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN | – | – | |
| CVE-2023-3079 | Google Chromium V8 | – | – | |
| CVE-2023-33010 | Zyxel Multiple Firewalls | – | – | |
| CVE-2023-33009 | Zyxel Multiple Firewalls | – | – | |
| CVE-2023-34362 | Progress MOVEit Transfer | – | – | |
| CVE-2023-28771 | Zyxel Multiple Firewalls | – | – | |
| CVE-2023-2868 | Barracuda Networks Email Security Gateway (ESG) Appliance | – | – | |
| CVE-2023-32409 | Apple Multiple Products | – | – | |
| CVE-2023-32373 | Apple Multiple Products | – | – | |
| CVE-2023-28204 | Apple Multiple Products | – | – | |
| CVE-2023-21492 | Samsung Mobile Devices | – | – | |
| CVE-2016-6415 | Cisco IOS, IOS XR, and IOS XE | – | – | |
| CVE-2004-1464 | Cisco IOS | – | – | |
| CVE-2023-25717 | Ruckus Wireless Multiple Products | – | – | |
| CVE-2021-3560 | Red Hat Polkit | – | – |