CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 721–780 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2023-41265 Qlik Sense HTTP Tunneling Vulnerability CRITICAL9.6	Qlik Sense HTTP Tunneling Vulnerability Qlik Sense	CRITICAL 9.6	88.2%	7 Dec 2023	CISA: known use
CVE-2023-33107 Qualcomm Multiple Chipsets Integer Overflow Vulnerability HIGH8.4	Qualcomm Multiple Chipsets Integer Overflow Vulnerability Qualcomm Multiple Chipsets	HIGH 8.4	0.7%	5 Dec 2023	—
CVE-2023-33106 Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability HIGH8.4	Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability Qualcomm Multiple Chipsets	HIGH 8.4	0.8%	5 Dec 2023	—
CVE-2023-33063 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH7.8	Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm Multiple Chipsets	HIGH 7.8	0.7%	5 Dec 2023	—
CVE-2022-22071 Qualcomm Multiple Chipsets Use-After-Free Vulnerability HIGH8.4	Qualcomm Multiple Chipsets Use-After-Free Vulnerability Qualcomm Multiple Chipsets	HIGH 8.4	0.4%	5 Dec 2023	—
CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability HIGH8.8	Apple Multiple Products WebKit Memory Corruption Vulnerability Apple Multiple Products	HIGH 8.8	9.3%	4 Dec 2023	—
CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability MEDIUM6.5	Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple Multiple Products	MEDIUM 6.5	17.8%	4 Dec 2023	—
CVE-2023-6345 Google Skia Integer Overflow Vulnerability CRITICAL9.6	Google Skia Integer Overflow Vulnerability Google Chromium Skia	CRITICAL 9.6	16.5%	30 Nov 2023	—
CVE-2023-49103 ownCloud graphapi Information Disclosure Vulnerability CRITICAL10	ownCloud graphapi Information Disclosure Vulnerability ownCloud graphapi	CRITICAL 10	77.8%	30 Nov 2023	—
CVE-2023-4911 GNU C Library Buffer Overflow Vulnerability HIGH7.8	GNU C Library Buffer Overflow Vulnerability GNU C Library	HIGH 7.8	63.8%	21 Nov 2023	—
CVE-2023-36584 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability MEDIUM5.4	Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft Windows	MEDIUM 5.4	3.3%	16 Nov 2023	—
CVE-2023-1671 Sophos Web Appliance Command Injection Vulnerability CRITICAL9.8	Sophos Web Appliance Command Injection Vulnerability Sophos Web Appliance	CRITICAL 9.8	100%	16 Nov 2023	—
CVE-2020-2551 Oracle Fusion Middleware Unspecified Vulnerability CRITICAL9.8	Oracle Fusion Middleware Unspecified Vulnerability Oracle Fusion Middleware	CRITICAL 9.8	92.8%	16 Nov 2023	—
CVE-2023-36033 Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	10.9%	14 Nov 2023	—
CVE-2023-36025 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability HIGH8.8	Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows	HIGH 8.8	88.2%	14 Nov 2023	—
CVE-2023-36036 Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	16.7%	14 Nov 2023	—
CVE-2023-47246 SysAid Server Path Traversal Vulnerability CRITICAL9.8	SysAid Server Path Traversal Vulnerability SysAid Server	CRITICAL 9.8	98.9%	13 Nov 2023	CISA: known use
CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable Modification Vulnerability MEDIUM5.3	Juniper Junos OS EX Series PHP External Variable Modification Vulnerability Juniper Junos OS	MEDIUM 5.3	90%	13 Nov 2023	—
CVE-2023-36845 Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability CRITICAL9.8	Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability Juniper Junos OS	CRITICAL 9.8	95.1%	13 Nov 2023	—
CVE-2023-36846 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability MEDIUM5.3	Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Juniper Junos OS	MEDIUM 5.3	93.5%	13 Nov 2023	—
CVE-2023-36847 Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability MEDIUM5.3	Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability Juniper Junos OS	MEDIUM 5.3	83.5%	13 Nov 2023	—
CVE-2023-36851 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability MEDIUM5.3	Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability Juniper Junos OS	MEDIUM 5.3	1.1%	13 Nov 2023	—
CVE-2023-29552 Service Location Protocol (SLP) Denial-of-Service Vulnerability HIGH7.5	Service Location Protocol (SLP) Denial-of-Service Vulnerability IETF Service Location Protocol (SLP)	HIGH 7.5	64%	8 Nov 2023	—
CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability CRITICAL9.8	Atlassian Confluence Data Center and Server Improper Authorization Vulnerability Atlassian Confluence Data Center and Server	CRITICAL 9.8	100%	7 Nov 2023	CISA: known use
CVE-2023-46604 Apache ActiveMQ Deserialization of Untrusted Data Vulnerability CRITICAL10	Apache ActiveMQ Deserialization of Untrusted Data Vulnerability Apache ActiveMQ	CRITICAL 10	100%	2 Nov 2023	Ransomhub
CVE-2023-46748 F5 BIG-IP Configuration Utility SQL Injection Vulnerability HIGH8.8	F5 BIG-IP Configuration Utility SQL Injection Vulnerability F5 BIG-IP Configuration Utility	HIGH 8.8	4.3%	31 Oct 2023	—
CVE-2023-46747 F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability CRITICAL9.8	F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability F5 BIG-IP Configuration Utility	CRITICAL 9.8	96.7%	31 Oct 2023	Ransomhub
CVE-2023-5631 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability Roundcube Webmail	MEDIUM 6.1	76.3%	26 Oct 2023	—
CVE-2023-20273 Cisco IOS XE Web UI Command Injection Vulnerability HIGH7.2	Cisco IOS XE Web UI Command Injection Vulnerability Cisco IOS XE Web UI	HIGH 7.2	92.9%	23 Oct 2023	—
CVE-2023-4966 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability CRITICAL9.4	Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix NetScaler ADC and NetScaler Gateway	CRITICAL 9.4	100%	18 Oct 2023	CISA: known use
CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Vulnerability CRITICAL10	Cisco IOS XE Web UI Privilege Escalation Vulnerability Cisco IOS XE Web UI	CRITICAL 10	99.8%	16 Oct 2023	—
CVE-2023-21608 Adobe Acrobat and Reader Use-After-Free Vulnerability HIGH7.8	Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe Acrobat and Reader	HIGH 7.8	59.4%	10 Oct 2023	—
CVE-2023-20109 Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability MEDIUM6.6	Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability Cisco IOS and IOS XE	MEDIUM 6.6	2.5%	10 Oct 2023	—
CVE-2023-41763 Microsoft Skype for Business Privilege Escalation Vulnerability MEDIUM5.3	Microsoft Skype for Business Privilege Escalation Vulnerability Microsoft Skype for Business	MEDIUM 5.3	90.3%	10 Oct 2023	—
CVE-2023-36563 Microsoft WordPad Information Disclosure Vulnerability MEDIUM6.5	Microsoft WordPad Information Disclosure Vulnerability Microsoft WordPad	MEDIUM 6.5	20.3%	10 Oct 2023	—
CVE-2023-44487 HTTP/2 Rapid Reset Attack Vulnerability HIGH7.5	HTTP/2 Rapid Reset Attack Vulnerability IETF HTTP/2	HIGH 7.5	100%	10 Oct 2023	—
CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability CRITICAL9.8	Atlassian Confluence Data Center and Server Broken Access Control Vulnerability Atlassian Confluence Data Center and Server	CRITICAL 9.8	99.2%	5 Oct 2023	Ransomhub
CVE-2023-40044 Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability CRITICAL10	Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability Progress WS_FTP Server	CRITICAL 10	90.4%	5 Oct 2023	CISA: known use
CVE-2023-42824 Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability HIGH7.8	Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability Apple iOS and iPadOS	HIGH 7.8	1%	5 Oct 2023	—
CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability CRITICAL9.8	JetBrains TeamCity Authentication Bypass Vulnerability JetBrains TeamCity	CRITICAL 9.8	100%	4 Oct 2023	CISA: known use
CVE-2023-28229 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability HIGH7	Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability Microsoft Windows CNG Key Isolation Service	HIGH 7	1.7%	4 Oct 2023	—
CVE-2023-4211 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability MEDIUM5.5	Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm Mali GPU Kernel Driver	MEDIUM 5.5	1%	3 Oct 2023	—
CVE-2023-5217 Google Chromium libvpx Heap Buffer Overflow Vulnerability HIGH8.8	Google Chromium libvpx Heap Buffer Overflow Vulnerability Google Chromium libvpx	HIGH 8.8	49%	2 Oct 2023	—
CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability CRITICAL9.8	Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability Red Hat JBoss RichFaces Framework	CRITICAL 9.8	74.2%	28 Sep 2023	—
CVE-2023-41991 Apple Multiple Products Improper Certificate Validation Vulnerability MEDIUM5.5	Apple Multiple Products Improper Certificate Validation Vulnerability Apple Multiple Products	MEDIUM 5.5	13.4%	25 Sep 2023	—
CVE-2023-41992 Apple Multiple Products Kernel Privilege Escalation Vulnerability HIGH7.8	Apple Multiple Products Kernel Privilege Escalation Vulnerability Apple Multiple Products	HIGH 7.8	9.5%	25 Sep 2023	—
CVE-2023-41993 Apple Multiple Products WebKit Code Execution Vulnerability HIGH8.8	Apple Multiple Products WebKit Code Execution Vulnerability Apple Multiple Products	HIGH 8.8	23.7%	25 Sep 2023	—
CVE-2023-41179 Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability HIGH7.2	Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability Trend Micro Apex One and Worry-Free Business Security	HIGH 7.2	4.2%	21 Sep 2023	—
CVE-2023-28434 MinIO Security Feature Bypass Vulnerability HIGH8.8	MinIO Security Feature Bypass Vulnerability MinIO MinIO	HIGH 8.8	7.9%	19 Sep 2023	—
CVE-2022-22265 Samsung Mobile Devices Use-After-Free Vulnerability MEDIUM5	Samsung Mobile Devices Use-After-Free Vulnerability Samsung Mobile Devices	MEDIUM 5	0.4%	18 Sep 2023	—
CVE-2014-8361 Realtek SDK Improper Input Validation Vulnerability CRITICAL9.8	Realtek SDK Improper Input Validation Vulnerability Realtek SDK	CRITICAL 9.8	100%	18 Sep 2023	—
CVE-2017-6884 Zyxel EMG2926 Routers Command Injection Vulnerability HIGH8.8	Zyxel EMG2926 Routers Command Injection Vulnerability Zyxel EMG2926 Routers	HIGH 8.8	33%	18 Sep 2023	CISA: known use
CVE-2021-3129 Laravel Ignition File Upload Vulnerability CRITICAL9.8	Laravel Ignition File Upload Vulnerability Laravel Ignition	CRITICAL 9.8	99.9%	18 Sep 2023	CISA: known use
CVE-2023-26369 Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability HIGH7.8	Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability Adobe Acrobat and Reader	HIGH 7.8	7.5%	14 Sep 2023	—
CVE-2023-35674 Android Framework Privilege Escalation Vulnerability HIGH7.8	Android Framework Privilege Escalation Vulnerability Android Framework	HIGH 7.8	2.6%	13 Sep 2023	—
CVE-2023-20269 Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability MEDIUM5	Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability Cisco Adaptive Security Appliance and Firepower Threat Defense	MEDIUM 5	26.6%	13 Sep 2023	Akira
CVE-2023-4863 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability HIGH8.8	Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Google Chromium WebP	HIGH 8.8	100%	13 Sep 2023	—
CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability MEDIUM6.5	Microsoft Word Information Disclosure Vulnerability Microsoft Word	MEDIUM 6.5	19.6%	12 Sep 2023	—
CVE-2023-36802 Microsoft Streaming Service Proxy Privilege Escalation Vulnerability HIGH7.8	Microsoft Streaming Service Proxy Privilege Escalation Vulnerability Microsoft Streaming Service Proxy	HIGH 7.8	27.9%	12 Sep 2023	—
CVE-2023-41064 Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability HIGH7.8	Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability Apple iOS, iPadOS, and macOS	HIGH 7.8	53.4%	11 Sep 2023	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.