CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 13:47 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
CVEProductCVSSAddedDue dateSummary
CVE-2015-0666PD
Prime Data Center Network Manager
Cisco
7.5Mar 25Apr 15Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
CVE-2018-8373IE
Internet Explorer 10
Microsoft
7.5Mar 25Apr 15Microsoft Scripting Engine Memory Corruption Vulnerability
CVE-2010-3035IX
Ios XR
Cisco
7.5Mar 25Apr 15Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
CVE-2014-0130EL
Enterprise Linux Server
Redhat
7.5Mar 25Apr 15Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x…
CVE-2020-5410SC
Spring Cloud Config
Spring by VMware
7.5Mar 25Apr 15Directory Traversal with spring-cloud-config-server
CVE-2015-3035AC
Archer C5 Firmware
Tp-link
7.5Mar 25Apr 15TP-Link Multiple Archer Devices Directory Traversal Vulnerability
CVE-2016-0752DL
Debian Linux
Debian
7.5Mar 25Apr 15Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows…
CVE-2019-2616BP
BI Publisher (formerly XML Publisher)
Oracle Corporation
7.2Mar 25Apr 15Oracle BI Publisher Unauthorized Access Vulnerability
CVE-2016-11021DF
Dcs-930l Firmware
Dlink
7.2Mar 25Apr 15D-Link DCS-930L Devices OS Command Injection Vulnerability
CVE-2009-2055IX
Ios XR
Cisco
5.9Mar 25Apr 15Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
CVE-2013-5223DF
Dsl-2760u Firmware
Dlink
5.4Mar 25Apr 15D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
CVE-2020-5135
Ransomware
SO
SonicOS
SonicWall
9.8Mar 15Apr 5SonicWall SonicOS Buffer Overflow Vulnerability
CVE-2015-2546
Ransomware
W1
Windows 10 1507
Microsoft
8.2Mar 15Apr 5Microsoft Win32k Memory Corruption Vulnerability
CVE-2019-1322
Ransomware
WI
Windows
Microsoft
7.8Mar 15Apr 5Microsoft Windows Privilege Escalation Vulnerability
CVE-2019-1315
Ransomware
WI
Windows
Microsoft
7.8Mar 15Apr 5Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
CVE-2019-1129
Ransomware
WI
Windows
Microsoft
7.8Mar 15Apr 5Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
CVE-2019-1405
Ransomware
WI
Windows
Microsoft
7.8Mar 15Apr 5Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
CVE-2017-0101
Ransomware
WI
Windows
Microsoft
7.8Mar 15Apr 5Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
CVE-2019-0841
Ransomware
WI
Windows
Microsoft
7.8Mar 15Apr 5Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
CVE-2019-1132WI
Windows
Microsoft
7.8Mar 15Apr 5Microsoft Win32k Privilege Escalation Vulnerability
CVE-2019-1253
Ransomware
WI
Windows
Microsoft
7.8Mar 15Apr 5Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
CVE-2019-1069
Ransomware
WI
Windows
Microsoft
7.8Mar 15Apr 5Task Scheduler Elevation of Privilege Vulnerability
CVE-2019-1064
Ransomware
WI
Windows
Microsoft
7.8Mar 15Apr 5Windows Elevation of Privilege Vulnerability
CVE-2019-0543
Ransomware
WI
Windows
Microsoft
7.8Mar 15Apr 5Microsoft Windows Privilege Escalation Vulnerability
CVE-2016-3309
Ransomware
WI
Windows
Microsoft
7.8Mar 15Apr 5Microsoft Windows Kernel Privilege Escalation Vulnerability
CVE-2018-8120
Ransomware
W7
Windows 7
Microsoft
7.0Mar 15Apr 5Microsoft Win32k Privilege Escalation Vulnerability
CVE-2019-11581JI
Jira
Atlassian
9.8Mar 7Sep 7Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
CVE-2017-6077DF
Dgn2200 Firmware
Netgear
9.8Mar 7Sep 7NETGEAR DGN2200 Remote Code Execution Vulnerability
CVE-2013-0625CO
ColdFusion
Adobe
9.8Mar 7Sep 7Adobe ColdFusion Authentication Bypass Vulnerability
CVE-2022-26486FI
Firefox
Mozilla
9.6Mar 7Mar 21Mozilla Firefox Use-After-Free Vulnerability
CVE-2022-26485FI
Firefox
Mozilla
8.8Mar 7Mar 21Mozilla Firefox Use-After-Free Vulnerability
CVE-2016-6277DF
D6220 Firmware
Netgear
8.8Mar 7Sep 7NETGEAR Multiple Routers Remote Code Execution Vulnerability
CVE-2013-0631CO
ColdFusion
Adobe
7.5Mar 7Sep 7Adobe ColdFusion Information Disclosure Vulnerability
CVE-2013-0629CO
ColdFusion
Adobe
7.5Mar 7Sep 7Adobe ColdFusion Directory Traversal Vulnerability
CVE-2020-8218CS
Connect Secure
Ivanti
7.2Mar 7Sep 7Pulse Connect Secure Code Injection Vulnerability
CVE-2009-3960
Ransomware
CO
ColdFusion
Adobe
6.5Mar 7Sep 7Adobe BlazeDS Information Disclosure Vulnerability
CVE-2021-21973VS
vCenter Server
VMware
5.3Mar 7Mar 21VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
CVE-2013-3346AC
Acrobat
Adobe
9.8Mar 3Mar 24Adobe Reader and Acrobat Memory Corruption Vulnerability
CVE-2019-16928UL
Ubuntu Linux
Canonical
9.8Mar 3Mar 17Exim Out-of-bounds Write Vulnerability
CVE-2022-20699CS
Cisco Small Business RV Series Router Firmware
Cisco
9.8Mar 3Mar 17Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20700CS
Cisco Small Business RV Series Router Firmware
Cisco
9.8Mar 3Mar 17Cisco Small Business RV Series Routers Vulnerabilities
CVE-2016-4117
Ransomware
FP
Flash Player
Adobe
9.8Mar 3Mar 24Adobe Flash Player Arbitrary Code Execution Vulnerability
CVE-2013-0632CO
ColdFusion
Adobe
9.8Mar 3Mar 24Adobe ColdFusion Authentication Bypass Vulnerability
CVE-2017-12240CI
Cisco IOS and IOS XE
9.8Mar 3Mar 24Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
CVE-2020-1938TO
Tomcat
Apache
9.8Mar 3Mar 17Apache Tomcat Improper Privilege Management Vulnerability
CVE-2012-4681
Ransomware
JD
Jdk
Oracle
9.8Mar 3Mar 24Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
CVE-2012-1723
Ransomware
JD
Jdk
Oracle
9.8Mar 3Mar 24Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
CVE-2012-0507
Ransomware
DL
Debian Linux
Debian
9.8Mar 3Mar 24Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
CVE-2011-3544UL
Ubuntu Linux
Canonical
9.8Mar 3Mar 24Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
CVE-2011-1889FT
Forefront Threat Management Gateway
Microsoft
9.8Mar 3Mar 24Microsoft Forefront TMG Remote Code Execution Vulnerability
Page 26 of 36 · 1,765 total
1…252627…36