Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2016-8735 | Apache Tomcat | – | – | |
| CVE-2016-3427 | Oracle Java SE and JRockit | – | – | |
| CVE-2015-5317 | Jenkins User Interface (UI) | – | – | |
| CVE-2014-0196 | Linux Kernel | – | – | |
| CVE-2010-3904 | Linux Kernel | – | – | |
| CVE-2023-29336 | Microsoft Win32k | – | – | |
| CVE-2023-21839 | Oracle WebLogic Server | – | – | |
| CVE-2023-1389 | TP-Link Archer AX21 | – | – | |
| CVE-2021-45046 | Apache Log4j2 | – | – | |
| CVE-2023-28432 | MinIO | – | – | |
| CVE-2023-27350 | PaperCut MF/NG | – | – | |
| CVE-2023-2136 | Google Chromium Skia | – | – | |
| CVE-2017-6742 | Cisco IOS and IOS XE Software | – | – | |
| CVE-2023-2033 | Google Chromium V8 | – | – | |
| CVE-2019-8526 | Apple macOS | – | – | |
| CVE-2023-29492 | Novi Survey | – | – | |
| CVE-2023-20963 | Android Framework | – | – | |
| CVE-2023-28252 | Microsoft Windows | – | – | |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS | – | – | |
| CVE-2023-28205 | Apple Multiple Products | – | – | |
| CVE-2023-26083 | Arm Mali Graphics Processing Unit (GPU) | – | – | |
| CVE-2021-27878 | Veritas Backup Exec Agent | – | – | |
| CVE-2021-27877 | Veritas Backup Exec Agent | – | – | |
| CVE-2021-27876 | Veritas Backup Exec Agent | – | – | |
| CVE-2019-1388 | Microsoft Windows | – | – | |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2023-0266 | Linux Kernel | – | – | |
| CVE-2022-42948 | Fortra Cobalt Strike | – | – | |
| CVE-2022-39197 | Fortra Cobalt Strike | – | – | |
| CVE-2022-38181 | Arm Mali Graphics Processing Unit (GPU) | – | – | |
| CVE-2022-3038 | Google Chromium Network Service | – | – | |
| CVE-2022-22706 | Arm Mali Graphics Processing Unit (GPU) | – | – | |
| CVE-2021-30900 | Apple iOS, iPadOS, and macOS | – | – | |
| CVE-2017-7494 | Samba | – | – | |
| CVE-2013-3163 | Microsoft Internet Explorer | – | – | |
| CVE-2023-26360 | Adobe ColdFusion | – | – | |
| CVE-2023-24880 | Microsoft Windows | – | – | |
| CVE-2023-23397 | Microsoft Office | – | – | |
| CVE-2022-41328 | Fortinet FortiOS | – | – | |
| CVE-2021-39144 | XStream | – | – | |
| CVE-2020-5741 | Plex Media Server | – | – | |
| CVE-2022-35914 | Teclib GLPI | – | – | |
| CVE-2022-33891 | Apache Spark | – | – | |
| CVE-2022-28810 | Zoho ManageEngine | – | – | |
| CVE-2022-36537 | ZK Framework AuUploader | – | – | |
| CVE-2022-47986 | IBM Aspera Faspex | – | – | |
| CVE-2022-41223 | Mitel MiVoice Connect | – | – | |
| CVE-2022-40765 | Mitel MiVoice Connect | – | – | |
| CVE-2022-46169 | Cacti | – | – | |
| CVE-2023-23529 | Apple Multiple Products | – | – |