Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 11:09 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2025-21391WI
Windows
Microsoft
7.1Feb 11Mar 4Windows Storage Elevation of Privilege Vulnerability
CVE-2025-0994CI
Cityworks
Trimble
8.8Feb 7Feb 28Trimble Cityworks Deserialization Vulnerability
CVE-2020-15069XF
XG Firewall Firmware
Sophos
9.8Feb 6Feb 27Sophos XG Firewall Buffer Overflow Vulnerability
CVE-2024-21413OF
Office
Microsoft
9.8Feb 6Feb 27Microsoft Outlook Remote Code Execution Vulnerability
CVE-2020-29574
Ransomware
CY
Cyberoamos
Sophos
9.8Feb 6Feb 27CyberoamOS (CROS) SQL Injection Vulnerability
CVE-2022-23748AD
Audinate Dante Application Library for Windows
7.8Feb 6Feb 27Dante Discovery Process Control Vulnerability
CVE-2025-04117Z
7-Zip
7-Zip
7.0Feb 6Feb 277-Zip Mark-of-the-Web Bypass Vulnerability
CVE-2024-53104KE
Kernel
Linux
7.8Feb 5Feb 26media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
CVE-2018-19410PN
Prtg Network Monitor
Paessler
9.8Feb 4Feb 25Paessler PRTG Network Monitor Local File Inclusion Vulnerability
CVE-2024-29059MN
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft
7.5Feb 4Feb 25.NET Framework Information Disclosure Vulnerability
CVE-2024-45195OF
OFBiz
Apache
7.5Feb 4Feb 25Apache OFBiz: Confused controller-view authorization logic (forced browsing)
CVE-2018-9276PN
Prtg Network Monitor
Paessler
7.2Feb 4Feb 25Paessler PRTG Network Monitor OS Command Injection Vulnerability
CVE-2025-24085IO
iOS
Apple
10.0Jan 29Feb 19Apple Multiple Products Use-After-Free Vulnerability
CVE-2025-23006
Ransomware
SM
SMA1000
SonicWall
9.8Jan 24Feb 14SonicWall SMA1000 Appliances Deserialization Vulnerability
CVE-2020-11023DR
Drupal
Drupal
6.1Jan 23Feb 13Potential XSS vulnerability in jQuery
CVE-2024-50603CO
Controller
Aviatrix
9.8Jan 16Feb 6Aviatrix Controllers OS Command Injection Vulnerability
CVE-2024-55591
Ransomware
FO
FortiOS
Fortinet
9.8Jan 14Jan 21Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVE-2025-21333WI
Windows
Microsoft
7.8Jan 14Feb 4Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21334WI
Windows
Microsoft
7.8Jan 14Feb 4Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21335WI
Windows
Microsoft
7.8Jan 14Feb 4Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2023-48365
Ransomware
QS
Qlik Sense
Qlik
9.9Jan 13Feb 3Qlik Sense HTTP Tunneling Vulnerability
CVE-2024-12686RS
Remote Support
BeyondTrust
7.2Jan 13Feb 3Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
CVE-2025-0282
Ransomware
CS
Connect Secure
Ivanti
9.0Jan 8Jan 15Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVE-2020-2883WS
WebLogic Server
Oracle
9.8Jan 7Jan 28Oracle WebLogic Server Unspecified Vulnerability
CVE-2024-41713
Ransomware
MI
Micollab
Mitel
9.1Jan 7Jan 28Mitel MiCollab Path Traversal Vulnerability
CVE-2024-55550
Ransomware
MI
Micollab
Mitel
2.7Jan 7Jan 28Mitel MiCollab Path Traversal Vulnerability
CVE-2024-3393PA
PAN-OS
Palo Alto Networks
7.5Dec 30Jan 20PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
CVE-2021-44207US
Usaherds
Acclaimsystems
8.1Dec 23Jan 13Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
CVE-2024-12356RS
Remote Support
BeyondTrust
9.8Dec 19Dec 27Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
CVE-2018-14933NF
Nvrmini Firmware
Nuuo
9.8Dec 18Jan 8NUUO NVRmini Devices OS Command Injection Vulnerability
CVE-2022-23227NF
Nvrmini2 Firmware
Nuuo
9.8Dec 18Jan 8NUUO NVRmini2 Devices Missing Authentication Vulnerability
CVE-2019-11001CP
C1 Pro Firmware
Reolink
7.2Dec 18Jan 8Reolink Multiple IP Cameras OS Command Injection Vulnerability
CVE-2021-40407RF
Rlc-410w Firmware
Reolink
7.2Dec 18Jan 8Reolink RLC-410W IP Camera OS Command Injection Vulnerability
CVE-2024-55956
Ransomware
HA
Harmony
Cleo
9.8Dec 17Jan 7Cleo Multiple Products Unauthenticated File Upload Vulnerability
CVE-2024-35250WI
Windows
Microsoft
7.8Dec 16Jan 6Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-20767CO
ColdFusion
Adobe
7.4Dec 16Jan 6ColdFusion | Improper Access Control (CWE-284)
CVE-2024-50623
Ransomware
HA
Harmony
Cleo
9.8Dec 13Jan 3Cleo Multiple Products Unrestricted File Upload Vulnerability
CVE-2024-49138WI
Windows
Microsoft
7.8Dec 10Dec 31Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-51378
Ransomware
CY
Cyberpanel
Cyberpanel
9.8Dec 4Dec 25CyberPanel Incorrect Default Permissions Vulnerability
CVE-2024-11667
Ransomware
AS
ATP series firmware
Zyxel
9.8Dec 3Dec 24Zyxel Multiple Firewalls Path Traversal Vulnerability
CVE-2024-11680PR
ProjectSend
ProjectSend
9.8Dec 3Dec 24ProjectSend Unauthenticated Configuration Modification
CVE-2023-45727PE
Proself Enterprise/Standard Edition
North Grid Corporation
7.5Dec 3Dec 24North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
CVE-2023-28461
Ransomware
AA
Arrayos AG
Arraynetworks
9.8Nov 25Dec 16Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
CVE-2024-44308MA
macOS
Apple
8.8Nov 21Dec 12Apple Multiple Products Code Execution Vulnerability
CVE-2024-21287OA
Oracle Agile PLM Framework
Oracle Corporation
7.5Nov 21Dec 12Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
CVE-2024-44309MA
macOS
Apple
6.3Nov 21Dec 12Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
CVE-2024-38812VS
vCenter Server
VMware
9.8Nov 20Dec 11Heap-overflow vulnerability
CVE-2024-38813VS
vCenter Server
VMware
9.8Nov 20Dec 11Privilege escalation vulnerability
CVE-2024-1212LO
LoadMaster
Progress Software
9.8Nov 18Dec 9LoadMaster Pre-Authenticated OS Command Injection
CVE-2024-0012
Ransomware
PA
PAN-OS
Palo Alto Networks
9.8Nov 18Dec 9PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
Page 11 of 36 · 1,765 total
1…101112…36