1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 5 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2021-30952Apple / Multiple ProductsApple Multiple Products Integer Overflow or Wraparound Vulnerability2026-03-05
7.0%
CVE-2023-41974Apple / iOS and iPadOSApple iOS and iPadOS Use-After-Free Vulnerability2026-03-05
2.0%
CVE-2023-43000Apple / Multiple ProductsApple Multiple products Use-After-Free Vulnerability2026-03-05
3.9%
CVE-2026-21385Qualcomm / Multiple ChipsetsQualcomm Multiple Chipsets Memory Corruption Vulnerability2026-03-03
1.3%
CVE-2026-22719Broadcom / VMware Aria OperationsBroadcom VMware Aria Operations Command Injection Vulnerability2026-03-03
17.7%
CVE-2022-20775Cisco / SD-WANCisco SD-WAN Path Traversal Vulnerability2026-02-25
12.5%
CVE-2026-20127Cisco / Catalyst SD-WAN Controller and ManagerCisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability2026-02-25
88.5%
CVE-2026-25108Soliton Systems K.K / FileZenSoliton Systems K.K FileZen OS Command Injection Vulnerability2026-02-24
5.2%
CVE-2025-49113Roundcube / WebmailRoundCube Webmail Deserialization of Untrusted Data Vulnerability2026-02-20
98.9%
CVE-2025-68461Roundcube / WebmailRoundCube Webmail Cross-site Scripting Vulnerability2026-02-20
26.8%
CVE-2021-22175GitLab / GitLabGitLab Server-Side Request Forgery (SSRF) Vulnerability2026-02-18
53.4%
CVE-2026-22769Dell / RecoverPoint for Virtual Machines (RP4VMs)Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials…2026-02-18
13.3%
CVE-2008-0015Microsoft / Windows Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability2026-02-17
76.6%
CVE-2020-7796Synacor / Zimbra Collaboration SuiteSynacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerab…2026-02-17
84.4%
CVE-2024-7694TeamT5 / ThreatSonar Anti-RansomwareTeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous…2026-02-17
1.8%
CVE-2026-2441Google / ChromiumGoogle Chromium CSS Use-After-Free Vulnerability2026-02-17
55.1%
CVE-2026-1731BeyondTrust / Remote Support (RS) and Privileged Remote Access (PRA)BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command…2026-02-13
90.9%
CVE-2024-43468Microsoft / Configuration ManagerMicrosoft Configuration Manager SQL Injection Vulnerability2026-02-12
80.9%
CVE-2025-15556Notepad++ / Notepad++Notepad++ Download of Code Without Integrity Check Vulnerability2026-02-12
1.8%
CVE-2025-40536SolarWinds / Web Help DeskSolarWinds Web Help Desk Security Control Bypass Vulnerability2026-02-12
73.6%
CVE-2026-20700Apple / Multiple ProductsApple Multiple Buffer Overflow Vulnerability2026-02-12
1.4%
CVE-2026-21510Microsoft / WindowsMicrosoft Windows Shell Protection Mechanism Failure Vulnerability2026-02-10
24.2%
CVE-2026-21513Microsoft / WindowsMicrosoft MSHTML Framework Protection Mechanism Failure Vulnerability2026-02-10
15.6%
CVE-2026-21514Microsoft / OfficeMicrosoft Office Word Reliance on Untrusted Inputs in a Security Decision Vul…2026-02-10
1.6%
CVE-2026-21519Microsoft / WindowsMicrosoft Windows Type Confusion Vulnerability2026-02-10
2.5%
CVE-2026-21525Microsoft / WindowsMicrosoft Windows NULL Pointer Dereference Vulnerability2026-02-10
4.8%
CVE-2026-21533Microsoft / WindowsMicrosoft Windows Improper Privilege Management Vulnerability2026-02-10
4.1%
CVE-2025-11953React Native Community / CLIReact Native Community CLI OS Command Injection Vulnerability2026-02-05
94.0%
CVE-2026-24423SmarterTools / SmarterMailSmarterTools SmarterMail Missing Authentication for Critical Function Vulnera…2026-02-05
88.2%
CVE-2019-19006Sangoma / FreePBX Sangoma FreePBX Improper Authentication Vulnerability2026-02-03
55.9%
CVE-2021-39935GitLab / Community and Enterprise EditionsGitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) V…2026-02-03
35.6%
CVE-2025-40551SolarWinds / Web Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability2026-02-03
84.2%
CVE-2025-64328Sangoma / FreePBX Sangoma FreePBX OS Command Injection Vulnerability2026-02-03
84.6%
CVE-2026-1281Ivanti / Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability2026-01-29
98.7%
CVE-2026-24858Fortinet / Multiple ProductsFortinet Multiple Products Authentication Bypass Using an Alternate Path or C…2026-01-27
85.8%
CVE-2018-14634Linux / KernelLinux Kernel Integer Overflow Vulnerability2026-01-26
14.7%
CVE-2025-52691SmarterTools / SmarterMailSmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vuln…2026-01-26
85.7%
CVE-2026-21509Microsoft / OfficeMicrosoft Office Security Feature Bypass Vulnerability2026-01-26
70.8%
CVE-2026-23760SmarterTools / SmarterMailSmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Cha…2026-01-26
96.5%
CVE-2026-24061GNU / InetUtilsGNU InetUtils Argument Injection Vulnerability2026-01-26
99.0%
CVE-2024-37079Broadcom / VMware vCenter ServerBroadcom VMware vCenter Server Out-of-bounds Write Vulnerability2026-01-23
22.4%
CVE-2025-31125Vite / VitejsVite Vitejs Improper Access Control Vulnerability2026-01-22
65.2%
CVE-2025-34026Versa / ConcertoVersa Concerto Improper Authentication Vulnerability2026-01-22
81.9%
CVE-2025-54313Prettier / eslint-config-prettierPrettier eslint-config-prettier Embedded Malicious Code Vulnerability2026-01-22
4.5%
CVE-2025-68645Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability2026-01-22
48.9%
CVE-2026-20045Cisco / Unified Communications ManagerCisco Unified Communications Products Code Injection Vulnerability2026-01-21
4.5%
CVE-2026-20805Microsoft / WindowsMicrosoft Windows Information Disclosure Vulnerability2026-01-13
7.2%
CVE-2025-8110Gogs / GogsGogs Path Traversal Vulnerability2026-01-12
85.2%
CVE-2009-0556Microsoft / OfficeMicrosoft Office PowerPoint Code Injection Vulnerability2026-01-07
67.3%
CVE-2025-37164Hewlett Packard Enterprise (HPE) / OneViewHewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability2026-01-07
90.2%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.