Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2023-23376 | Microsoft Windows | – | – | |
| CVE-2023-21823 | Microsoft Windows | – | – | |
| CVE-2023-21715 | Microsoft Office | – | – | |
| CVE-2023-0669 | Fortra GoAnywhere MFT | – | – | |
| CVE-2022-24990 | TerraMaster OS | – | – | |
| CVE-2015-2291 | Intel Ethernet Diagnostics Driver for Windows | – | – | |
| CVE-2023-22952 | SugarCRM Multiple Products | – | – | |
| CVE-2022-21587 | Oracle E-Business Suite | – | – | |
| CVE-2017-11357 | Telerik User Interface (UI) for ASP.NET AJAX | – | – | |
| CVE-2022-47966 | Zoho ManageEngine | – | – | |
| CVE-2022-44877 | CWP Control Web Panel | – | – | |
| CVE-2023-21674 | Microsoft Windows | – | – | |
| CVE-2022-41080 | Microsoft Exchange Server | – | – | |
| CVE-2018-5430 | TIBCO JasperReports | – | – | |
| CVE-2018-18809 | TIBCO JasperReports | – | – | |
| CVE-2022-42856 | Apple iOS | – | – | |
| CVE-2022-44698 | Microsoft Defender | – | – | |
| CVE-2022-42475 | Fortinet FortiOS | – | – | |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway | – | – | |
| CVE-2022-26501 | Veeam Backup & Replication | – | – | |
| CVE-2022-26500 | Veeam Backup & Replication | – | – | |
| CVE-2022-4262 | Google Chromium V8 | – | – | |
| CVE-2022-4135 | Google Chromium GPU | – | – | |
| CVE-2021-35587 | Oracle Fusion Middleware | – | – | |
| CVE-2022-41049 | Microsoft Windows | – | – | |
| CVE-2022-41128 | Microsoft Windows | – | – | |
| CVE-2022-41125 | Microsoft Windows | – | – | |
| CVE-2022-41091 | Microsoft Windows | – | – | |
| CVE-2022-41073 | Microsoft Windows | – | – | |
| CVE-2021-25370 | Samsung Mobile Devices | – | – | |
| CVE-2021-25369 | Samsung Mobile Devices | – | – | |
| CVE-2021-25337 | Samsung Mobile Devices | – | – | |
| CVE-2022-3723 | Google Chromium V8 | – | – | |
| CVE-2022-42827 | Apple iOS and iPadOS | – | – | |
| CVE-2020-3433 | Cisco AnyConnect Secure | – | – | |
| CVE-2020-3153 | Cisco AnyConnect Secure | – | – | |
| CVE-2018-19323 | GIGABYTE Multiple Products | – | – | |
| CVE-2018-19322 | GIGABYTE Multiple Products | – | – | |
| CVE-2018-19321 | GIGABYTE Multiple Products | – | – | |
| CVE-2018-19320 | GIGABYTE Multiple Products | – | – | |
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2021-3493 | Linux Kernel | – | – | |
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service | – | – | |
| CVE-2022-40684 | Fortinet Multiple Products | – | – | |
| CVE-2022-41082 | Microsoft Exchange Server | – | – | |
| CVE-2022-41040 | Microsoft Exchange Server | – | – | |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | – | – | |
| CVE-2022-3236 | Sophos Firewall | – | – | |
| CVE-2022-35405 | Zoho ManageEngine | – | – | |
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service | – | – |