Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2020-1027 | Microsoft Windows | – | – | |
| CVE-2020-0638 | Microsoft Update Notification Manager | – | – | |
| CVE-2019-8720 | WebKitGTK | – | – | |
| CVE-2019-7287 | Apple iOS | – | – | |
| CVE-2019-7286 | Apple Multiple Products | – | – | |
| CVE-2019-5786 | Google Chrome Blink | – | – | |
| CVE-2019-18426 | Meta Platforms WhatsApp | – | – | |
| CVE-2019-1385 | Microsoft Windows | – | – | |
| CVE-2019-13720 | Google Chrome WebAudio | – | – | |
| CVE-2019-11708 | Mozilla Firefox and Thunderbird | – | – | |
| CVE-2019-11707 | Mozilla Firefox and Thunderbird | – | – | |
| CVE-2019-1130 | Microsoft Windows | – | – | |
| CVE-2019-0880 | Microsoft Windows | – | – | |
| CVE-2019-0703 | Microsoft Windows | – | – | |
| CVE-2019-0676 | Microsoft Internet Explorer | – | – | |
| CVE-2018-8589 | Microsoft Win32k | – | – | |
| CVE-2018-5002 | Adobe Flash Player | – | – | |
| CVE-2022-30525 | Zyxel Multiple Firewalls | – | – | |
| CVE-2022-22947 | VMware Spring Cloud Gateway | – | – | |
| CVE-2022-1388 | F5 BIG-IP | – | – | |
| CVE-2021-1789 | Apple Multiple Products | – | – | |
| CVE-2019-8506 | Apple Multiple Products | – | – | |
| CVE-2014-4113 | Microsoft Win32k | – | – | |
| CVE-2014-0322 | Microsoft Internet Explorer | – | – | |
| CVE-2014-0160 | OpenSSL | – | – | |
| CVE-2022-29464 | WSO2 Multiple Products | – | – | |
| CVE-2022-26904 | Microsoft Windows | – | – | |
| CVE-2022-21919 | Microsoft Windows | – | – | |
| CVE-2022-0847 | Linux Kernel | – | – | |
| CVE-2021-41357 | Microsoft Win32k | – | – | |
| CVE-2021-40450 | Microsoft Win32k | – | – | |
| CVE-2019-1003029 | Jenkins Script Security Plugin | – | – | |
| CVE-2022-22718 | Microsoft Windows | – | – | |
| CVE-2019-3568 | Meta Platforms WhatsApp | – | – | |
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) | – | – | |
| CVE-2022-22960 | VMware Multiple Products | – | – | |
| CVE-2022-1364 | Google Chromium V8 | – | – | |
| CVE-2019-3929 | Crestron Multiple Products | – | – | |
| CVE-2019-16057 | D-Link DNS-320 Storage Device | – | – | |
| CVE-2018-7841 | Schneider Electric U.motion Builder | – | – | |
| CVE-2016-4523 | Trihedral VTScada (formerly VTS) | – | – | |
| CVE-2014-0780 | InduSoft Web Studio | – | – | |
| CVE-2010-5330 | Ubiquiti AirOS | – | – | |
| CVE-2007-3010 | Alcatel OmniPCX Enterprise | – | – | |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager | – | – | |
| CVE-2022-24521 | Microsoft Windows | – | – | |
| CVE-2018-7602 | Drupal Core | – | – | |
| CVE-2018-20753 | Kaseya Virtual System/Server Administrator (VSA) | – | – | |
| CVE-2015-5123 | Adobe Flash Player | – | – | |
| CVE-2015-5122 | Adobe Flash Player | – | – |