Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 29, 22:58 UTC
Added this week
10
▲ 25%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2023-21529
Ransomware
ES
Exchange Server
Microsoft
8.8Apr 13Apr 27Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2026-34621A2
Acrobat 2024
Adobe
8.6Apr 13Apr 27Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321)
CVE-2020-9715AA
Adobe Acrobat and Reader
Adobe
7.8Apr 13Apr 27Adobe Acrobat Use-After-Free Vulnerability
CVE-2025-60710
Ransomware
WI
Windows
Microsoft
7.8Apr 13Apr 27Host Process for Windows Tasks Elevation of Privilege Vulnerability
CVE-2012-1854OF
Office
Microsoft
7.8Apr 13Apr 27Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
CVE-2023-36424WI
Windows
Microsoft
7.8Apr 13Apr 27Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2026-1340EM
Endpoint Manager Mobile
Ivanti
9.8Apr 8Apr 11Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
CVE-2026-35616FO
FortiClientEMS
Fortinet
9.8Apr 6Apr 9Fortinet FortiClient EMS Improper Access Control Vulnerability
CVE-2026-3502TC
TrueConf Client
TrueConf
7.8Apr 2Apr 16TrueConf Client Update Integrity Verification Bypass
CVE-2026-5281CH
Chrome
Google
8.8Apr 1Apr 15Google Dawn Use-After-Free Vulnerability
CVE-2026-3055NA
NetScaler ADC
Citrix
9.8Mar 30Apr 2Insufficient input validation leading to memory overread
CVE-2025-53521BI
BIG-IP
F5
9.8Mar 27Mar 30BigIP APM Vulnerability
CVE-2026-33634SE
setup-trivy
aquasecurity
8.8Mar 26Apr 9Trivy ecosystem supply chain briefly compromised
CVE-2026-33017LA
langflow
langflow-ai
9.8Mar 25Apr 8Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
CVE-2025-32432CM
cms
craftcms
10.0Mar 20Apr 3Craft CMS Allows Remote Code Execution
CVE-2025-54068LI
livewire
livewire
9.8Mar 20Apr 3Livewire vulnerable to remote command execution during property update hydration
CVE-2025-31277MA
macOS
Apple
8.8Mar 20Apr 3Apple Multiple Products Buffer Overflow Vulnerability
CVE-2025-43510MA
macOS
Apple
7.8Mar 20Apr 3Apple Multiple Products Improper Locking Vulnerability
CVE-2025-43520MA
macOS
Apple
5.5Mar 20Apr 3Apple Multiple Products Classic Buffer Overflow Vulnerability
CVE-2026-20131
Ransomware
CS
Cisco Secure Firewall Management Center (FMC)
Cisco
10.0Mar 19Mar 22Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability
CVE-2026-20963SH
SharePoint
Microsoft
9.8Mar 18Mar 21Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2025-66376CO
Collaboration
Zimbra
6.1Mar 18Apr 1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
CVE-2025-47813WF
Wing FTP Server
wftpserver
4.3Mar 16Mar 30Wing FTP Server Information Disclosure Vulnerability
CVE-2026-3909CH
Chrome
Google
8.8Mar 13Mar 27Google Skia Out-of-Bounds Write Vulnerability
CVE-2026-3910CH
Chrome
Google
8.8Mar 13Mar 27Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
CVE-2025-68613N8
n8n
n8n-io
8.8Mar 11Mar 25n8n Vulnerable to Remote Code Execution via Expression Injection
CVE-2025-26399
Ransomware
WH
Web Help Desk
SolarWinds
9.8Mar 9Mar 12SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
CVE-2026-1603EM
Endpoint Manager
Ivanti
7.5Mar 9Mar 23Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
CVE-2021-22054VW
VMware Workspace ONE UEM console
7.5Mar 9Mar 23Omnissa Workspace ONE Server-Side Request Forgery
CVE-2017-7921HC
Hikvision Cameras
9.8Mar 5Mar 26Hikvision Multiple Products Improper Authentication Vulnerability
CVE-2021-22681RA
Rockwell Automation Studio 5000 Logix Designer, RSLogix 5000, Logix Controllers
9.8Mar 5Mar 26Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
CVE-2023-43000MA
macOS
Apple
8.8Mar 5Mar 26Apple Multiple products Use-After-Free Vulnerability
CVE-2023-41974IO
iOS
Apple
7.8Mar 5Mar 26Apple iOS and iPadOS Use-After-Free Vulnerability
CVE-2021-30952MA
macOS
Apple
7.8Mar 5Mar 26Apple Multiple Products Integer Overflow or Wraparound Vulnerability
CVE-2026-22719TC
Telco Cloud Infrastructure
VMware
8.1Mar 3Mar 24VMware Aria Operations command injection vulnerability
CVE-2026-21385SN
Snapdragon
Qualcomm, Inc.
7.8Mar 3Mar 24Integer Overflow or Wraparound in Graphics
CVE-2026-20127CC
Cisco Catalyst SD-WAN Manager
Cisco
10.0Feb 25Feb 27Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVE-2022-20775CC
Cisco Catalyst SD-WAN
Cisco
7.8Feb 25Feb 27Cisco SD-WAN Software Privilege Escalation Vulnerability
CVE-2026-25108FI
FileZen
Soliton Systems K.K.
8.8Feb 24Mar 17Soliton Systems K.K FileZen OS Command Injection Vulnerability
CVE-2025-49113WE
Webmail
Roundcube
8.8Feb 20Mar 13RoundCube Webmail Deserialization of Untrusted Data Vulnerability
CVE-2025-68461WE
Webmail
Roundcube
6.1Feb 20Mar 13RoundCube Webmail Cross-site Scripting Vulnerability
CVE-2026-22769RF
RecoverPoint for Virtual Machines
Dell
10.0Feb 18Feb 21Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
CVE-2021-22175GI
GitLab
GitLab
9.8Feb 18Mar 11GitLab Server-Side Request Forgery (SSRF) Vulnerability
CVE-2020-7796ZC
Zimbra Collaboration Suite
Synacor
9.8Feb 17Mar 10Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
CVE-2026-2441CH
Chrome
Google
8.8Feb 17Mar 10Google Chromium CSS Use-After-Free Vulnerability
CVE-2008-0015WI
Windows
Microsoft
8.8Feb 17Mar 10 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
CVE-2024-7694TA
ThreatSonar Anti-Ransomware
TeamT5
7.2Feb 17Mar 10TeamT5 ThreatSonar Anti-Ransomware - Arbitrary File Upload
CVE-2026-1731
Ransomware
RS
Remote Support
BeyondTrust
9.8Feb 13Feb 16Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
CVE-2024-43468MC
Microsoft Configuration Manager
Microsoft
9.8Feb 12Mar 5Microsoft Configuration Manager Remote Code Execution Vulnerability
CVE-2025-40536WH
Web Help Desk
SolarWinds
9.8Feb 12Feb 15SolarWinds Web Help Desk Security Control Bypass Vulnerability
Page 5 of 36 · 1,765 total
1…456…36