Known exploited vulnerabilities
Every vulnerability that CISA lists as actively exploited, with vendor, CVSS score and the date it was added. Look up any CVE id below.
| CVE | Product | CVSS | Added | Report |
|---|---|---|---|---|
| CVE-2020-17087 | Microsoft Windows | – | – | |
| CVE-2020-16846 | SaltStack Salt | – | – | |
| CVE-2020-16017 | Google Chrome | – | – | |
| CVE-2020-16013 | Google Chromium V8 | – | – | |
| CVE-2020-16010 | Google Chrome for Android UI | – | – | |
| CVE-2020-16009 | Google Chromium V8 | – | – | |
| CVE-2020-15999 | Google Chrome FreeType | – | – | |
| CVE-2020-15505 | Ivanti MobileIron Multiple Products | – | – | |
| CVE-2020-14883 | Oracle WebLogic Server | – | – | |
| CVE-2020-14882 | Oracle WebLogic Server | – | – | |
| CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) | – | – | |
| CVE-2020-14750 | Oracle WebLogic Server | – | – | |
| CVE-2020-1472 | Microsoft Netlogon | – | – | |
| CVE-2020-1464 | Microsoft Windows | – | – | |
| CVE-2020-1380 | Microsoft Internet Explorer | – | – | |
| CVE-2020-1350 | Microsoft Windows | – | – | |
| CVE-2020-12812 | Fortinet FortiOS | – | – | |
| CVE-2020-12271 | Sophos SFOS | – | – | |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin | – | – | |
| CVE-2020-11652 | SaltStack Salt | – | – | |
| CVE-2020-11651 | SaltStack Salt | – | – | |
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, Visual Studio | – | – | |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model | – | – | |
| CVE-2020-1054 | Microsoft Win32k | – | – | |
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX | – | – | |
| CVE-2020-10221 | rConfig | – | – | |
| CVE-2020-1020 | Microsoft Windows | – | – | |
| CVE-2020-10199 | Sonatype Nexus Repository | – | – | |
| CVE-2020-10189 | Zoho ManageEngine | – | – | |
| CVE-2020-10181 | Sumavision Enhanced Multimedia Router (EMR) | – | – | |
| CVE-2020-10148 | SolarWinds Orion | – | – | |
| CVE-2020-0986 | Microsoft Windows | – | – | |
| CVE-2020-0968 | Microsoft Internet Explorer | – | – | |
| CVE-2020-0938 | Microsoft Windows | – | – | |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer | – | – | |
| CVE-2020-0688 | Microsoft Exchange Server | – | – | |
| CVE-2020-0683 | Microsoft Windows | – | – | |
| CVE-2020-0674 | Microsoft Internet Explorer | – | – | |
| CVE-2020-0646 | Microsoft .NET Framework | – | – | |
| CVE-2020-0601 | Microsoft Windows | – | – | |
| CVE-2020-0069 | MediaTek Multiple Chipsets | – | – | |
| CVE-2020-0041 | Android Kernel | – | – | |
| CVE-2019-9978 | WordPress Social Warfare Plugin | – | – | |
| CVE-2019-9082 | ThinkPHP | – | – | |
| CVE-2019-8394 | Zoho ManageEngine | – | – | |
| CVE-2019-7481 | SonicWall SMA100 | – | – | |
| CVE-2019-6223 | Apple iOS and macOS | – | – | |
| CVE-2019-5591 | Fortinet FortiOS | – | – | |
| CVE-2019-5544 | VMware ESXi and Horizon DaaS | – | – | |
| CVE-2019-4716 | IBM Planning Analytics | – | – |