Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 13:23 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2024-40766
Ransomware
SO
SonicOS
SonicWall
9.8Sep 9Sep 30SonicWall SonicOS Improper Access Control Vulnerability
CVE-2016-3714UL
Ubuntu Linux
Canonical
8.4Sep 9Sep 30ImageMagick Improper Input Validation Vulnerability
CVE-2017-1000253
Ransomware
KE
Kernel
Linux
7.8Sep 9Sep 30Linux Kernel PIE Stack Buffer Corruption Vulnerability
CVE-2024-7262WO
WPS Office
Kingsoft
7.8Sep 3Sep 24Arbitrary Code Execution in WPS Office
CVE-2021-20123DV
Draytek VigorConnect
7.5Sep 3Sep 24Draytek VigorConnect Path Traversal Vulnerability
CVE-2021-20124DV
Draytek VigorConnect
7.5Sep 3Sep 24Draytek VigorConnect Path Traversal Vulnerability
CVE-2024-7965CH
Chrome
Google
8.8Aug 28Sep 18Google Chromium V8 Inappropriate Implementation Vulnerability
CVE-2024-38856OF
OFBiz
Apache
9.8Aug 27Sep 17Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code
CVE-2024-7971CH
Chrome
Google
9.6Aug 26Sep 16Google Chromium V8 Type Confusion Vulnerability
CVE-2024-39717DI
Director
Versa
7.2Aug 23Sep 13Versa Director Dangerous File Type Upload Vulnerability
CVE-2021-33045SD
Some Dahua IP Camera, Video Intercom, NVR, XVR devices
9.8Aug 21Sep 11Dahua IP Camera Authentication Bypass Vulnerability
CVE-2021-33044SD
Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal Camera devices
9.8Aug 21Sep 11Dahua IP Camera Authentication Bypass Vulnerability
CVE-2022-0185KE
Kernel
Linux
8.4Aug 21Sep 11Linux Kernel Heap-Based Buffer Overflow Vulnerability
CVE-2021-31196ES
Exchange Server
Microsoft
7.2Aug 21Sep 11Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2024-23897
Ransomware
JE
Jenkins
Jenkins
9.8Aug 19Sep 9Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
CVE-2024-28986WH
Web Help Desk
SolarWinds
9.8Aug 15Sep 5SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
CVE-2024-38189OF
Office
Microsoft
8.8Aug 13Sep 3Microsoft Project Remote Code Execution Vulnerability
CVE-2024-38107WI
Windows
Microsoft
7.8Aug 13Sep 3Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
CVE-2024-38193WI
Windows
Microsoft
7.8Aug 13Sep 3Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2024-38178WI
Windows
Microsoft
7.5Aug 13Sep 3Scripting Engine Memory Corruption Vulnerability
CVE-2024-38106WI
Windows
Microsoft
7.0Aug 13Sep 3Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-38213WI
Windows
Microsoft
6.5Aug 13Sep 3Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2024-32113OF
OFBiz
Apache
9.8Aug 7Aug 28Apache OFBiz: Path traversal leading to RCE
CVE-2024-36971KE
Kernel
Linux
7.8Aug 7Aug 28net: fix __dst_negative_advice() race
CVE-2018-0824WI
Windows
Microsoft
8.8Aug 5Aug 26Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
CVE-2024-37085
Ransomware
ES
ESXi
VMware
7.2Jul 30Aug 20VMware ESXi Authentication Bypass Vulnerability
CVE-2024-5217NP
Now Platform
ServiceNow
9.8Jul 29Aug 19Incomplete Input Validation in GlideExpression Script
CVE-2024-4879NP
Now Platform
ServiceNow
9.8Jul 29Aug 19Jelly Template Injection Vulnerability in ServiceNow UI Macros
CVE-2023-45249AC
Acronis Cyber Infrastructure
Acronis
9.8Jul 29Aug 19Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
CVE-2012-4792IE
Internet Explorer
Microsoft
8.8Jul 23Aug 13Microsoft Internet Explorer Use-After-Free Vulnerability
CVE-2024-39891AU
Authy
Twilio
5.3Jul 23Aug 13Twilio Authy Information Disclosure Vulnerability
CVE-2024-34102CO
Commerce
Adobe
9.8Jul 17Aug 7XXE can expose crypt key and other secrets granting full admin access
CVE-2024-28995SE
Serv-U
SolarWinds
7.5Jul 17Aug 7SolarWinds Serv-U L Directory Transversal Vulnerability
CVE-2022-22948VS
vCenter Server
VMware
6.5Jul 17Aug 7VMware vCenter Server Incorrect Default File Permissions Vulnerability
CVE-2024-36401GE
geoserver
geoserver
9.8Jul 15Aug 5Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
CVE-2024-23692
Ransomware
HF
HTTP File Server
Rejetto
9.8Jul 9Jul 30Rejetto HTTP File Server 2.3m Unauthenticated RCE
CVE-2024-38080WI
Windows
Microsoft
7.8Jul 9Jul 30Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2024-38112WI
Windows
Microsoft
7.5Jul 9Jul 30Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-20399CN
Cisco NX-OS Software
Cisco
6.7Jul 2Jul 23Cisco NX-OS Software CLI Command Injection Vulnerability
CVE-2022-24816JA
jai-ext
geosolutions-it
10.0Jun 26Jul 17Improper Control of Generation of Code in jai-ext
CVE-2022-2586KE
Kernel
Linux
7.8Jun 26Jul 17Linux Kernel Use-After-Free Vulnerability
CVE-2020-13965DL
Debian Linux
Debian
6.1Jun 26Jul 17Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
CVE-2024-4358TR
Telerik Report Server
Progress Software Corporation
9.8Jun 13Jul 4Registration Authentication Bypass Vulnerability
CVE-2024-26169
Ransomware
WI
Windows
Microsoft
7.8Jun 13Jul 4Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2024-32896AN
Android
Google
7.8Jun 13Jul 4Android Pixel Privilege Escalation Vulnerability
CVE-2024-4577
Ransomware
PH
PHP
PHP
9.8Jun 12Jul 3Argument Injection in PHP-CGI
CVE-2024-4610BG
Bifrost GPU Kernel Driver
Arm Ltd
7.8Jun 12Jul 3Mali GPU Kernel Driver allows improper GPU memory processing operations
CVE-2017-3506WS
WebLogic Server
Oracle
7.4Jun 3Jun 24Oracle WebLogic Server OS Command Injection Vulnerability
CVE-2024-24919
Ransomware
CP
Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
checkpoint
8.6May 30Jun 20Information disclosure
CVE-2024-1086
Ransomware
KE
Kernel
Linux
7.8May 30Jun 20Use-after-free in Linux kernel's netfilter: nf_tables component
Page 13 of 36 · 1,765 total
1…121314…36