Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 16:10 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2024-4978VI
Viewer
Justice AV Solutions
8.4May 29Jun 19Malicious Code in Justice AV Solutions (JAVS) Viewer
CVE-2024-5274CH
Chrome
Google
9.6May 28Jun 18Google Chromium V8 Type Confusion Vulnerability
CVE-2020-17519AF
Apache Flink
Apache Software Foundation
7.5May 23Jun 13Apache Flink directory traversal attack: reading remote files through the REST API
CVE-2023-43208
Ransomware
MC
Mirth Connect
Nextgen
9.8May 20Jun 10NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
CVE-2024-4947CH
Chrome
Google
9.6May 20Jun 10Google Chromium V8 Type Confusion Vulnerability
CVE-2024-4761CH
Chrome
Google
8.8May 16Jun 6Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
CVE-2014-100005DF
Dir-600 Firmware
Dlink
8.0May 16Jun 6D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
CVE-2021-40655DF
Dir-605l Firmware
Dlink
7.5May 16Jun 6D-Link DIR-605 Router Information Disclosure Vulnerability
CVE-2024-30040WI
Windows
Microsoft
8.8May 14Jun 4Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2024-30051
Ransomware
W1
Windows 10 Version 1507
Microsoft
7.8May 14Jun 4Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2024-4671CH
Chrome
Google
9.6May 13Jun 3Google Chromium Visuals Use-After-Free Vulnerability
CVE-2023-7028GI
GitLab
GitLab
9.8May 1May 22Weak Password Recovery Mechanism for Forgotten Password in GitLab
CVE-2024-29988W1
Windows 10 Version 1809
Microsoft
8.8Apr 30May 21SmartScreen Prompt Security Feature Bypass Vulnerability
CVE-2024-4040CR
CrushFTP
CrushFTP
10.0Apr 24May 1Unauthenticated arbitrary file read and remote code execution in CrushFTP
CVE-2024-20353AS
Adaptive Security Appliance
Cisco
8.6Apr 24May 1Cisco ASA and FTD Denial of Service Vulnerability
CVE-2024-20359AS
Adaptive Security Appliance
Cisco
6.0Apr 24May 1Cisco ASA and FTD Privilege Escalation Vulnerability
CVE-2022-38028WI
Windows
Microsoft
7.8Apr 23May 14Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2024-3400
Ransomware
PA
PAN-OS
Palo Alto Networks
10.0Apr 12Apr 19PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
CVE-2024-3272DN
DNS-320L
D-Link
9.8Apr 11May 2D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials
CVE-2024-3273DN
DNS-320L
D-Link
9.8Apr 11May 2D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
CVE-2024-29748AN
Android
Google
7.8Apr 4Apr 25Android Pixel Privilege Escalation Vulnerability
CVE-2024-29745AN
Android
Google
5.5Apr 4Apr 25Android Pixel Information Disclosure Vulnerability
CVE-2023-24955
Ransomware
SH
SharePoint
Microsoft
7.2Mar 26Apr 16Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-48788
Ransomware
FO
FortiClientEMS
Fortinet
9.8Mar 25Apr 15Fortinet FortiClient EMS SQL Injection Vulnerability
CVE-2021-44529
Ransomware
IE
Ivanti EPM
9.8Mar 25Apr 15Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
CVE-2019-7256LE
Linear Emerge Elite Firmware
Nortekcontrol
9.8Mar 25Apr 15Nice Linear eMerge E3-Series OS Command Injection Vulnerability
CVE-2024-27198
Ransomware
TE
TeamCity
JetBrains
9.8Mar 7Mar 28JetBrains TeamCity Authentication Bypass Vulnerability
CVE-2024-23296MA
macOS
Apple
7.8Mar 6Mar 27Apple Multiple Products Memory Corruption Vulnerability
CVE-2024-23225MA
macOS
Apple
7.8Mar 6Mar 27Apple Multiple Products Memory Corruption Vulnerability
CVE-2021-36380SU
Sureline
Sunhillo
9.8Mar 5Mar 26Sunhillo SureLine OS Command Injection Vulnerablity
CVE-2023-21237AN
Android
Google
5.5Mar 5Mar 26Android Pixel Information Disclosure Vulnerability
CVE-2024-21338
Ransomware
WI
Windows
Microsoft
7.8Mar 4Mar 25Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-29360W1
Windows 10 Version 1607
Microsoft
8.4Feb 29Mar 21Microsoft Streaming Service Elevation of Privilege Vulnerability
CVE-2024-1709
Ransomware
SC
ScreenConnect
ConnectWise
10.0Feb 22Feb 29Authentication bypass using an alternate path or channel
CVE-2024-21410ES
Exchange Server
Microsoft
9.8Feb 15Mar 7Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2020-3259
Ransomware
CA
Cisco Adaptive Security Appliance (ASA) Software
Cisco
7.5Feb 15Mar 7Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability
CVE-2024-21412
Ransomware
WI
Windows
Microsoft
8.1Feb 13Mar 5Internet Shortcut Files Security Feature Bypass Vulnerability
CVE-2024-21351WI
Windows
Microsoft
7.6Feb 13Mar 5Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-43770DL
Debian Linux
Debian
6.1Feb 12Mar 4Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
CVE-2024-21762
Ransomware
FO
FortiOS
Fortinet
9.8Feb 9Feb 16Fortinet FortiOS Out-of-Bound Write Vulnerability
CVE-2023-4762CH
Chrome
Google
8.8Feb 6Feb 27Google Chromium V8 Type Confusion Vulnerability
CVE-2024-21893
Ransomware
CS
Connect Secure
Ivanti
8.2Jan 31Feb 2Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
CVE-2022-48618MA
macOS
Apple
7.0Jan 31Feb 21Apple Multiple Products Memory Corruption Vulnerability
CVE-2023-22527
Ransomware
CO
Confluence
Atlassian
9.8Jan 24Feb 14Atlassian Confluence Data Center and Server Template Injection Vulnerability
CVE-2024-23222MA
macOS
Apple
8.8Jan 23Feb 13Apple Multiple Products WebKit Type Confusion Vulnerability
CVE-2023-34048VS
vCenter Server
VMware
9.8Jan 22Feb 12VMware vCenter Server Out-of-Bounds Write Vulnerability
CVE-2023-35082
Ransomware
EM
Endpoint Manager Mobile
Ivanti
9.8Jan 18Feb 8Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
CVE-2023-6548NA
NetScaler ADC
Citrix
8.8Jan 17Jan 24Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
CVE-2024-0519CH
Chrome
Google
8.8Jan 17Feb 7Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
CVE-2023-6549NA
NetScaler ADC
Citrix
7.5Jan 17Feb 7Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
Page 14 of 36 · 1,765 total
1…131415…36