CISA KEV
Known exploited
The government must-patch list, mapped to our product index so you can go straight to the product affected.
Updated Oct 30, 11:34 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
| CVE | Product | CVSS | Added | Summary |
|---|---|---|---|---|
| CVE-2016-7193 | OF Office Microsoft | 7.8 | Mar 3 | Microsoft Office Memory Corruption Vulnerability |
| CVE-2016-7262 | EX Excel Microsoft | 7.8 | Mar 3 | Microsoft Office Security Feature Bypass Vulnerability |
| CVE-2017-0001 | WG Windows GDI Microsoft Corporation | 7.8 | Mar 3 | Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability |
| CVE-2017-0261 | OF Office Microsoft | 7.8 | Mar 3 | Microsoft Office Use-After-Free Vulnerability |
| CVE-2017-11826 | OF Office Microsoft | 7.8 | Mar 3 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2017-8540 | ES Exchange Server Microsoft | 7.8 | Mar 3 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability |
| CVE-2022-20701 | CS Cisco Small Business RV Series Router Firmware Cisco | 7.8 | Mar 3 | Cisco Small Business RV Series Routers Vulnerabilities |
| CVE-2017-12231 | CI Cisco IOS | 7.5 | Mar 3 | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability |
| CVE-2018-8298 | CH ChakraCore Microsoft | 7.5 | Mar 3 | ChakraCore Scripting Engine Type Confusion Vulnerability |
| CVE-2018-0159 | IX IOS XE Cisco | 7.5 | Mar 3 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability |
| CVE-2018-0156 | IX IOS XE Cisco | 7.5 | Mar 3 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability |
| CVE-2018-0154 | CI Cisco IOS | 7.5 | Mar 3 | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability |
| CVE-2017-6627 | IX IOS XE Cisco | 7.5 | Mar 3 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability |
| CVE-2017-12237 | IX IOS XE Cisco | 7.5 | Mar 3 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability |
| CVE-2017-12235 | CI Cisco IOS | 7.5 | Mar 3 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability |
| CVE-2017-12234 | CI Cisco IOS | 7.5 | Mar 3 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability |
| CVE-2017-12233 | CI Cisco IOS | 7.5 | Mar 3 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability |
| CVE-2016-8562 | SC Simatic CP 1543-1 Firmware Siemens | 7.5 | Mar 3 | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability |
| CVE-2018-8581 Ransomware | ES Exchange Server Microsoft | 7.4 | Mar 3 | Microsoft Exchange Server Privilege Escalation Vulnerability |
| CVE-2019-1652 | CS Cisco Small Business RV Series Router Firmware Cisco | 7.2 | Mar 3 | Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability |
| CVE-2016-5195 | KE Kernel Linux | 7.0 | Mar 3 | Linux Kernel Race Condition Vulnerability |
| CVE-2017-6663 | IX IOS XE Cisco | 6.5 | Mar 3 | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability |
| CVE-2013-1675 | FI Firefox Mozilla | 6.5 | Mar 3 | Mozilla Firefox Information Disclosure Vulnerability |
| CVE-2017-12238 | CI Cisco IOS | 6.5 | Mar 3 | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability |
| CVE-2017-12232 | CI Cisco IOS | 6.5 | Mar 3 | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability |
| CVE-2018-0161 | CI Cisco IOS | 6.3 | Mar 3 | Cisco IOS Software Resource Management Errors Vulnerability |
| CVE-2018-0179 | CI Cisco IOS | 5.9 | Mar 3 | Cisco IOS Software Denial-of-Service Vulnerability |
| CVE-2017-12319 | IX IOS XE Cisco | 5.9 | Mar 3 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability |
| CVE-2018-0180 | CI Cisco IOS | 5.9 | Mar 3 | Cisco IOS Software Denial-of-Service Vulnerability |
| CVE-2021-41379 Ransomware | WI Windows Microsoft | 5.5 | Mar 3 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2020-11899 | W5 Wyse 5030 Firmware Dell | 5.4 | Mar 3 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability |
| CVE-2015-4902 | LE Leap Opensuse | 5.3 | Mar 3 | Oracle Java SE Integrity Check Vulnerability |
| CVE-2017-0222 | IE Internet Explorer Microsoft Corporation | 8.8 | Feb 25 | Microsoft Internet Explorer Remote Code Execution Vulnerability |
| CVE-2017-8570 | OF Office Microsoft | 7.8 | Feb 25 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2014-6352 | WI Windows Microsoft | 7.8 | Feb 25 | Microsoft Windows Code Injection Vulnerability |
| CVE-2022-24682 Ransomware | ZC Zimbra Collaboration Suite Synacor | 6.1 | Feb 25 | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability |
| CVE-2022-23131 | ZA Zabbix Zabbix | 9.8 | Feb 22 | Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML |
| CVE-2022-23134 | ZA Zabbix Zabbix | 5.3 | Feb 22 | Possible view of the setup pages by unauthenticated users if config file already exists |
| CVE-2022-24086 | CO Commerce Adobe | 9.8 | Feb 15 | Adobe Commerce checkout improper input validation leads to remote code execution |
| CVE-2017-9841 | CD Communications Diameter Signaling Router Oracle | 9.8 | Feb 15 | Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring,… |
| CVE-2022-0609 | CH Chrome Google | 8.8 | Feb 15 | Google Chromium Animation Use-After-Free Vulnerability |
| CVE-2013-3906 | OF Office Microsoft | 7.8 | Feb 15 | Microsoft Graphics Component Memory Corruption Vulnerability |
| CVE-2018-20250 Ransomware | WI WinRAR Check Point Software Technologies Ltd. | 7.8 | Feb 15 | WinRAR Absolute Path Traversal Vulnerability |
| CVE-2018-15982 Ransomware | FP Flash Player Adobe | 7.8 | Feb 15 | Adobe Flash Player Use-After-Free Vulnerability |
| CVE-2014-1761 | OF Office Microsoft | 7.8 | Feb 15 | Microsoft Word Memory Corruption Vulnerability |
| CVE-2018-8174 Ransomware | WI Windows Microsoft | 7.5 | Feb 15 | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability |
| CVE-2019-0752 Ransomware | IE Internet Explorer 10 Microsoft | 7.5 | Feb 15 | Microsoft Internet Explorer Type Confusion Vulnerability |
| CVE-2022-22620 | MA macOS Apple | 8.8 | Feb 11 | Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability |
| CVE-2020-0796 Ransomware | W1 Windows 10 Version 1903 for 32-bit Systems Microsoft | 10.0 | Feb 10 | Microsoft SMBv3 Remote Code Execution Vulnerability |
| CVE-2015-1635 | W7 Windows 7 Microsoft | 9.8 | Feb 10 | Microsoft HTTP.sys Remote Code Execution Vulnerability |