Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2015-4495 | Mozilla Firefox | – | – | |
| CVE-2015-2425 | Microsoft Internet Explorer | – | – | |
| CVE-2015-2360 | Microsoft Win32k | – | – | |
| CVE-2015-1769 | Microsoft Windows | – | – | |
| CVE-2015-1671 | Microsoft Windows | – | – | |
| CVE-2015-0310 | Adobe Flash Player | – | – | |
| CVE-2015-0071 | Microsoft Internet Explorer | – | – | |
| CVE-2015-0016 | Microsoft Windows | – | – | |
| CVE-2014-8439 | Adobe Flash Player | – | – | |
| CVE-2014-4148 | Microsoft Windows | – | – | |
| CVE-2014-4123 | Microsoft Internet Explorer | – | – | |
| CVE-2014-4077 | Microsoft Input Method Editor (IME) Japanese | – | – | |
| CVE-2014-3153 | Linux Kernel | – | – | |
| CVE-2014-2817 | Microsoft Internet Explorer | – | – | |
| CVE-2014-0546 | Adobe Reader and Acrobat | – | – | |
| CVE-2013-7331 | Microsoft Internet Explorer | – | – | |
| CVE-2013-3993 | IBM InfoSphere BigInsights | – | – | |
| CVE-2013-3896 | Microsoft Silverlight | – | – | |
| CVE-2013-2423 | Oracle Java Runtime Environment (JRE) | – | – | |
| CVE-2013-0431 | Oracle Java Runtime Environment (JRE) | – | – | |
| CVE-2013-0422 | Oracle Java Runtime Environment (JRE) | – | – | |
| CVE-2013-0074 | Microsoft Silverlight | – | – | |
| CVE-2012-1710 | Oracle Fusion Middleware | – | – | |
| CVE-2010-1428 | Red Hat JBoss | – | – | |
| CVE-2010-0840 | Oracle Java Runtime Environment (JRE) | – | – | |
| CVE-2010-0738 | Red Hat JBoss | – | – | |
| CVE-2018-8611 | Microsoft Windows | – | – | |
| CVE-2018-19953 | QNAP Network Attached Storage (NAS) | – | – | |
| CVE-2018-19949 | QNAP Network Attached Storage (NAS) | – | – | |
| CVE-2018-19943 | QNAP Network Attached Storage (NAS) | – | – | |
| CVE-2017-8543 | Microsoft Windows | – | – | |
| CVE-2017-8291 | Artifex Ghostscript | – | – | |
| CVE-2017-18362 | Kaseya Virtual System/Server Administrator (VSA) | – | – | |
| CVE-2017-0210 | Microsoft Internet Explorer | – | – | |
| CVE-2017-0149 | Microsoft Internet Explorer | – | – | |
| CVE-2017-0147 | Microsoft SMBv1 server | – | – | |
| CVE-2017-0022 | Microsoft XML Core Services | – | – | |
| CVE-2017-0005 | Microsoft Windows | – | – | |
| CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) | – | – | |
| CVE-2016-6366 | Cisco Adaptive Security Appliance (ASA) | – | – | |
| CVE-2016-4657 | Apple iOS | – | – | |
| CVE-2016-4656 | Apple iOS | – | – | |
| CVE-2016-4655 | Apple iOS | – | – | |
| CVE-2016-3351 | Microsoft Internet Explorer and Edge | – | – | |
| CVE-2016-3298 | Microsoft Internet Explorer | – | – | |
| CVE-2016-0162 | Microsoft Internet Explorer | – | – | |
| CVE-2022-20821 | Cisco IOS XR | – | – | |
| CVE-2021-30883 | Apple Multiple Products | – | – | |
| CVE-2021-1048 | Android Kernel | – | – | |
| CVE-2021-0920 | Android Kernel | – | – |