Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2015-3113 | Adobe Flash Player | – | – | |
| CVE-2015-2502 | Microsoft Internet Explorer | – | – | |
| CVE-2015-0313 | Adobe Flash Player | – | – | |
| CVE-2015-0311 | Adobe Flash Player | – | – | |
| CVE-2014-9163 | Adobe Flash Player | – | – | |
| CVE-2022-23176 | WatchGuard Firebox and XTM | – | – | |
| CVE-2021-42287 | Microsoft Active Directory | – | – | |
| CVE-2021-42278 | Microsoft Active Directory | – | – | |
| CVE-2021-39793 | Google Pixel | – | – | |
| CVE-2021-27852 | Checkbox Survey | – | – | |
| CVE-2021-22600 | Linux Kernel | – | – | |
| CVE-2020-2509 | QNAP Network-Attached Storage (NAS) | – | – | |
| CVE-2017-11317 | Telerik User Interface (UI) for ASP.NET AJAX | – | – | |
| CVE-2021-3156 | Sudo | – | – | |
| CVE-2021-31166 | Microsoft HTTP Protocol Stack | – | – | |
| CVE-2017-0148 | Microsoft SMBv1 server | – | – | |
| CVE-2022-22965 | VMware Spring Framework | – | – | |
| CVE-2022-22675 | Apple macOS | – | – | |
| CVE-2022-22674 | Apple macOS | – | – | |
| CVE-2021-45382 | D-Link Multiple Routers | – | – | |
| CVE-2022-26871 | Trend Micro Apex Central | – | – | |
| CVE-2022-1040 | Sophos Firewall | – | – | |
| CVE-2021-34484 | Microsoft Windows | – | – | |
| CVE-2021-28799 | QNAP Network Attached Storage (NAS) | – | – | |
| CVE-2021-21551 | Dell dbutil Driver | – | – | |
| CVE-2018-10562 | Dasan Gigabit Passive Optical Network (GPON) Routers | – | – | |
| CVE-2018-10561 | Dasan Gigabit Passive Optical Network (GPON) Routers | – | – | |
| CVE-2022-1096 | Google Chromium V8 | – | – | |
| CVE-2022-0543 | Redis Debian-specific Redis Servers | – | – | |
| CVE-2021-38646 | Microsoft Office | – | – | |
| CVE-2021-34486 | Microsoft Windows | – | – | |
| CVE-2021-26085 | Atlassian Confluence Server | – | – | |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) | – | – | |
| CVE-2019-7483 | SonicWall SMA100 | – | – | |
| CVE-2018-8440 | Microsoft Windows | – | – | |
| CVE-2018-8406 | Microsoft DirectX Graphics Kernel (DXGKRNL) | – | – | |
| CVE-2018-8405 | Microsoft DirectX Graphics Kernel (DXGKRNL) | – | – | |
| CVE-2017-0213 | Microsoft Windows | – | – | |
| CVE-2017-0059 | Microsoft Internet Explorer | – | – | |
| CVE-2017-0037 | Microsoft Edge and Internet Explorer | – | – | |
| CVE-2016-7201 | Microsoft Edge | – | – | |
| CVE-2016-7200 | Microsoft Edge | – | – | |
| CVE-2016-0189 | Microsoft Internet Explorer | – | – | |
| CVE-2016-0151 | Microsoft Client-Server Run-time Subsystem (CSRSS) | – | – | |
| CVE-2016-0040 | Microsoft Windows | – | – | |
| CVE-2015-2426 | Microsoft Windows | – | – | |
| CVE-2015-2419 | Microsoft Internet Explorer | – | – | |
| CVE-2015-1770 | Microsoft Office | – | – | |
| CVE-2013-3660 | Microsoft Win32k | – | – | |
| CVE-2013-2729 | Adobe Reader and Acrobat | – | – |