1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 4 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2026-32202Microsoft / WindowsMicrosoft Windows Protection Mechanism Failure Vulnerability2026-04-28
4.9%
CVE-2024-57726SimpleHelp / SimpleHelpSimpleHelp Missing Authorization Vulnerability2026-04-24
66.6%
CVE-2024-57728SimpleHelp / SimpleHelpSimpleHelp Path Traversal Vulnerability2026-04-24
64.7%
CVE-2024-7399Samsung / MagicINFO 9 ServerSamsung MagicINFO 9 Server Path Traversal Vulnerability2026-04-24
91.9%
CVE-2025-29635D-Link / DIR-823XD-Link DIR-823X Command Injection Vulnerability2026-04-24
87.9%
CVE-2026-39987Marimo / MarimoMarimo Remote Code Execution Vulnerability2026-04-23
37.9%
CVE-2026-33825Microsoft / DefenderMicrosoft Defender Insufficient Granularity of Access Control Vulnerability2026-04-22
0.4%
CVE-2023-27351PaperCut / NG/MFPaperCut NG/MF Improper Authentication Vulnerability2026-04-20
78.1%
CVE-2024-27199JetBrains / TeamCityJetBrains TeamCity Relative Path Traversal Vulnerability2026-04-20
100.0%
CVE-2025-2749Kentico / Kentico XperienceKentico Xperience Path Traversal Vulnerability2026-04-20
4.1%
CVE-2025-32975Quest / KACE Systems Management Appliance (SMA)Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnera…2026-04-20
2.5%
CVE-2025-48700Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability2026-04-20
1.7%
CVE-2026-20122Cisco / Catalyst SD-WAN MangerCisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability2026-04-20
25.0%
CVE-2026-20128Cisco / Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulne…2026-04-20
7.1%
CVE-2026-20133Cisco / Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unautho…2026-04-20
31.8%
CVE-2026-34197Apache / ActiveMQApache ActiveMQ Improper Input Validation Vulnerability2026-04-16
15.5%
CVE-2009-0238Microsoft / OfficeMicrosoft Office Remote Code Execution2026-04-14
43.2%
CVE-2026-32201Microsoft / SharePoint ServerMicrosoft SharePoint Server Improper Input Validation Vulnerability2026-04-14
43.4%
CVE-2012-1854Microsoft / Visual Basic for Applications (VBA)Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability2026-04-13
21.0%
CVE-2020-9715Adobe / AcrobatAdobe Acrobat Use-After-Free Vulnerability2026-04-13
48.6%
CVE-2023-21529Microsoft / Exchange ServerMicrosoft Exchange Server Deserialization of Untrusted Data Vulnerability2026-04-13
59.3%
CVE-2023-36424Microsoft / WindowsMicrosoft Windows Out-of-Bounds Read Vulnerability2026-04-13
12.2%
CVE-2025-60710Microsoft / WindowsMicrosoft Windows Link Following Vulnerability2026-04-13
4.6%
CVE-2026-21643Fortinet / FortiClient EMSFortinet FortiClient EMS SQL Injection Vulnerability2026-04-13
93.9%
CVE-2026-34621Adobe / Acrobat and ReaderAdobe Acrobat and Reader Prototype Pollution Vulnerability2026-04-13
2.2%
CVE-2026-1340Ivanti / Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability2026-04-08
98.6%
CVE-2026-35616Fortinet / FortiClient EMSFortinet FortiClient EMS Improper Access Control Vulnerability2026-04-06
9.1%
CVE-2026-3502TrueConf / ClientTrueConf Client Download of Code Without Integrity Check Vulnerability2026-04-02
0.3%
CVE-2026-5281Google / DawnGoogle Dawn Use-After-Free Vulnerability2026-04-01
0.7%
CVE-2026-3055Citrix / NetScalerCitrix NetScaler Out-of-Bounds Read Vulnerability2026-03-30
4.0%
CVE-2025-53521F5 / BIG-IPF5 BIG-IP Stack-Based Buffer Overflow Vulnerability2026-03-27
2.3%
CVE-2026-33634Aquasecurity / TrivyAquasecurity Trivy Embedded Malicious Code Vulnerability2026-03-26
1.7%
CVE-2026-33017Langflow / LangflowLangflow Code Injection Vulnerability2026-03-25
24.8%
CVE-2025-31277Apple / Multiple ProductsApple Multiple Products Buffer Overflow Vulnerability2026-03-20
1.6%
CVE-2025-32432Craft CMS / Craft CMSCraft CMS Code Injection Vulnerability2026-03-20
99.8%
CVE-2025-43510Apple / Multiple ProductsApple Multiple Products Improper Locking Vulnerability2026-03-20
0.4%
CVE-2025-43520Apple / Multiple ProductsApple Multiple Products Classic Buffer Overflow Vulnerability2026-03-20
0.4%
CVE-2025-54068Laravel / LivewireLaravel Livewire Code Injection Vulnerability2026-03-20
97.1%
CVE-2026-20131Cisco / Secure Firewall Management Center (FMC)Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Clo…2026-03-19
43.2%
CVE-2025-66376Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability2026-03-18
20.2%
CVE-2026-20963Microsoft / SharePointMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability2026-03-18
29.6%
CVE-2025-47813Wing FTP Server / Wing FTP ServerWing FTP Server Information Disclosure Vulnerability2026-03-16
63.1%
CVE-2026-3909Google / SkiaGoogle Skia Out-of-Bounds Write Vulnerability2026-03-13
2.3%
CVE-2026-3910Google / Chromium V8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a …2026-03-13
1.0%
CVE-2025-68613n8n / n8nn8n Improper Control of Dynamically-Managed Code Resources Vulnerability2026-03-11
99.0%
CVE-2021-22054Omnissa / Workspace One UEMOmnissa Workspace ONE Server-Side Request Forgery2026-03-09
99.7%
CVE-2025-26399SolarWinds / Web Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability2026-03-09
89.5%
CVE-2026-1603Ivanti / Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability2026-03-09
87.9%
CVE-2017-7921Hikvision / Multiple ProductsHikvision Multiple Products Improper Authentication Vulnerability2026-03-05
100.0%
CVE-2021-22681Rockwell / Multiple ProductsRockwell Multiple Products Insufficient Protected Credentials Vulnerability2026-03-05
63.6%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.