CISA KEV
Known exploited
The government must-patch list, mapped to our product index so you can go straight to the product affected.
Updated Oct 30, 12:14 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
| CVE | Product | CVSS | Added | Summary |
|---|---|---|---|---|
| CVE-2018-0151 | IX IOS XE Cisco | 9.8 | Mar 3 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability |
| CVE-2015-5119 | FP Flash Player Adobe | 9.8 | Mar 3 | Adobe Flash Player Use-After-Free Vulnerability |
| CVE-2015-3043 | FP Flash Player Adobe | 9.8 | Mar 3 | Adobe Flash Player Memory Corruption Vulnerability |
| CVE-2015-2590 | UL Ubuntu Linux Canonical | 9.8 | Mar 3 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability |
| CVE-2016-1019 Ransomware | AD Air Desktop Runtime Adobe | 9.8 | Mar 3 | Adobe Flash Player Arbitrary Code Execution Vulnerability |
| CVE-2016-7855 | FP Flash Player Adobe | 8.8 | Mar 3 | Adobe Flash Player Use-After-Free Vulnerability |
| CVE-2017-11292 | AF Adobe Flash Player version 27.0.0.159 and earlier | 8.8 | Mar 3 | Adobe Flash Player Type Confusion Vulnerability |
| CVE-2008-3431 | VI Virtualbox Oracle | 8.8 | Mar 3 | Oracle VirtualBox Insufficient Input Validation Vulnerability |
| CVE-2017-6736 | IX IOS XE Cisco | 8.8 | Mar 3 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
| CVE-2015-2424 | OF Office Microsoft | 8.8 | Mar 3 | Microsoft PowerPoint Memory Corruption Vulnerability |
| CVE-2017-6739 | IX IOS XE Cisco | 8.8 | Mar 3 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
| CVE-2012-1856 | OF Office Microsoft | 8.8 | Mar 3 | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability |
| CVE-2018-0167 | IX IOS XE Cisco | 8.8 | Mar 3 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability |
| CVE-2017-6738 | IX IOS XE Cisco | 8.8 | Mar 3 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
| CVE-2017-6737 | IX IOS XE Cisco | 8.8 | Mar 3 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
| CVE-2011-0611 | CH Chrome Google | 8.8 | Mar 3 | Adobe Flash Player Remote Code Execution Vulnerability |
| CVE-2019-1297 | OF Office Microsoft | 8.8 | Mar 3 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2017-6740 | IX IOS XE Cisco | 8.8 | Mar 3 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
| CVE-2013-3897 | IE Internet Explorer Microsoft | 8.8 | Mar 3 | Microsoft Internet Explorer Use-After-Free Vulnerability |
| CVE-2017-6743 | IX IOS XE Cisco | 8.8 | Mar 3 | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
| CVE-2017-6744 | IO IOS Cisco | 8.8 | Mar 3 | Cisco IOS Software SNMP Remote Code Execution Vulnerability |
| CVE-2014-0496 | AC Acrobat Adobe | 8.8 | Mar 3 | Adobe Reader and Acrobat Use-After-Free Vulnerability |
| CVE-2013-1347 | IE Internet Explorer Microsoft | 8.8 | Mar 3 | Microsoft Internet Explorer Remote Code Execution Vulnerability |
| CVE-2018-0174 | IX IOS XE Cisco | 8.6 | Mar 3 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability |
| CVE-2018-0155 | IX IOS XE Cisco | 8.6 | Mar 3 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability |
| CVE-2018-0173 | IX IOS XE Cisco | 8.6 | Mar 3 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability |
| CVE-2018-0158 | IX IOS XE Cisco | 8.6 | Mar 3 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability |
| CVE-2018-0172 | IX IOS XE Cisco | 8.6 | Mar 3 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerability |
| CVE-2022-20703 | CS Cisco Small Business RV Series Router Firmware Cisco | 8.0 | Mar 3 | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2018-0175 | IX IOS XE Cisco | 8.0 | Mar 3 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability |
| CVE-2022-20708 | CS Cisco Small Business RV Series Router Firmware Cisco | 8.0 | Mar 3 | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2002-0367 | WI Windows Microsoft | 7.8 | Mar 3 | Microsoft Windows Privilege Escalation Vulnerability |
| CVE-2004-0210 | WI Windows Microsoft | 7.8 | Mar 3 | Microsoft Windows Privilege Escalation Vulnerability |
| CVE-2008-2992 Ransomware | AC Acrobat Adobe | 7.8 | Mar 3 | Adobe Reader and Acrobat Input Validation Vulnerability |
| CVE-2009-1123 | WI Windows Microsoft | 7.8 | Mar 3 | Microsoft Windows Improper Input Validation Vulnerability |
| CVE-2009-3129 | OF Office Microsoft | 7.8 | Mar 3 | Microsoft Excel Featheader Record Memory Corruption Vulnerability |
| CVE-2010-0188 Ransomware | AC Acrobat Adobe | 7.8 | Mar 3 | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability |
| CVE-2010-0232 | WI Windows Microsoft | 7.8 | Mar 3 | Microsoft Windows Kernel Exception Handler Vulnerability |
| CVE-2010-3333 | OF Office Microsoft | 7.8 | Mar 3 | Microsoft Office Stack-based Buffer Overflow Vulnerability |
| CVE-2012-1535 | FP Flash Player Adobe | 7.8 | Mar 3 | Adobe Flash Player Arbitrary Code Execution Vulnerability |
| CVE-2013-0640 | AC Acrobat Adobe | 7.8 | Mar 3 | Adobe Reader and Acrobat Memory Corruption Vulnerability |
| CVE-2013-0641 | AC Acrobat Adobe | 7.8 | Mar 3 | Adobe Reader Buffer Overflow Vulnerability |
| CVE-2013-5065 | WI Windows Microsoft | 7.8 | Mar 3 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| CVE-2014-4114 | WI Windows Microsoft | 7.8 | Mar 3 | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability |
| CVE-2015-1642 | OF Office Microsoft | 7.8 | Mar 3 | Microsoft Office Memory Corruption Vulnerability |
| CVE-2015-1701 Ransomware | W2 Windows 2003 Server Microsoft | 7.8 | Mar 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2015-2387 | W7 Windows 7 Microsoft | 7.8 | Mar 3 | Microsoft ATM Font Driver Privilege Escalation Vulnerability |
| CVE-2015-2545 | OF Office Microsoft | 7.8 | Mar 3 | Microsoft Office Malformed EPS File Vulnerability |
| CVE-2015-7645 Ransomware | FP Flash Player Adobe | 7.8 | Mar 3 | Adobe Flash Player Arbitrary Code Execution Vulnerability |
| CVE-2016-0099 Ransomware | WI Windows Microsoft | 7.8 | Mar 3 | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability |
