CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 781–840 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2023-41061 Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability HIGH7.8	Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability Apple iOS, iPadOS, and watchOS	HIGH 7.8	4.4%	11 Sep 2023	—
CVE-2023-33246 Apache RocketMQ Command Execution Vulnerability CRITICAL9.8	Apache RocketMQ Command Execution Vulnerability Apache RocketMQ	CRITICAL 9.8	96.6%	6 Sep 2023	—
CVE-2023-38831 RARLAB WinRAR Code Execution Vulnerability HIGH7.8	RARLAB WinRAR Code Execution Vulnerability RARLAB WinRAR	HIGH 7.8	99.8%	24 Aug 2023	CISA: known use
CVE-2023-32315 Ignite Realtime Openfire Path Traversal Vulnerability HIGH8.6	Ignite Realtime Openfire Path Traversal Vulnerability Ignite Realtime Openfire	HIGH 8.6	100%	24 Aug 2023	—
CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability CRITICAL9.8	Ivanti Sentry Authentication Bypass Vulnerability Ivanti Sentry	CRITICAL 9.8	100%	22 Aug 2023	CISA: known use
CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability HIGH7.5	Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability Veeam Backup & Replication	HIGH 7.5	80.6%	22 Aug 2023	Akira
CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CRITICAL9.8	Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe ColdFusion	CRITICAL 9.8	17%	21 Aug 2023	—
CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access Control Vulnerability CRITICAL9.8	Citrix Content Collaboration ShareFile Improper Access Control Vulnerability Citrix Content Collaboration	CRITICAL 9.8	97.3%	16 Aug 2023	—
CVE-2023-38180 Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability HIGH7.5	Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability Microsoft .NET Core and Visual Studio	HIGH 7.5	14.1%	9 Aug 2023	—
CVE-2017-18368 Zyxel P660HN-T1A Routers Command Injection Vulnerability CRITICAL9.8	Zyxel P660HN-T1A Routers Command Injection Vulnerability Zyxel P660HN-T1A Routers	CRITICAL 9.8	94.5%	7 Aug 2023	—
CVE-2023-35081 Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability HIGH7.2	Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability Ivanti Endpoint Manager Mobile (EPMM)	HIGH 7.2	63.6%	31 Jul 2023	—
CVE-2023-37580 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	MEDIUM 6.1	49.1%	27 Jul 2023	—
CVE-2023-38606 Apple Multiple Products Kernel Unspecified Vulnerability MEDIUM5.5	Apple Multiple Products Kernel Unspecified Vulnerability Apple Multiple Products	MEDIUM 5.5	2.9%	26 Jul 2023	—
CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability CRITICAL9.8	Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability Ivanti Endpoint Manager Mobile (EPMM)	CRITICAL 9.8	100%	25 Jul 2023	CISA: known use
CVE-2023-29298 Adobe ColdFusion Improper Access Control Vulnerability HIGH7.5	Adobe ColdFusion Improper Access Control Vulnerability Adobe ColdFusion	HIGH 7.5	99.8%	20 Jul 2023	—
CVE-2023-38205 Adobe ColdFusion Improper Access Control Vulnerability HIGH7.5	Adobe ColdFusion Improper Access Control Vulnerability Adobe ColdFusion	HIGH 7.5	99.8%	20 Jul 2023	—
CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability CRITICAL9.8	Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix NetScaler ADC and NetScaler Gateway	CRITICAL 9.8	99.7%	19 Jul 2023	Ransomhub
CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability HIGH7.5	Microsoft Windows Search Remote Code Execution Vulnerability Microsoft Windows	HIGH 7.5	99.4%	17 Jul 2023	CISA: known use
CVE-2022-29303 SolarView Compact Command Injection Vulnerability CRITICAL9.8	SolarView Compact Command Injection Vulnerability SolarView Compact	CRITICAL 9.8	98%	13 Jul 2023	—
CVE-2023-37450 Apple Multiple Products WebKit Code Execution Vulnerability HIGH8.8	Apple Multiple Products WebKit Code Execution Vulnerability Apple Multiple Products	HIGH 8.8	19%	13 Jul 2023	—
CVE-2023-32046 Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	10%	11 Jul 2023	—
CVE-2023-32049 Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability HIGH8.8	Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability Microsoft Windows	HIGH 8.8	4.2%	11 Jul 2023	—
CVE-2023-35311 Microsoft Outlook Security Feature Bypass Vulnerability HIGH8.8	Microsoft Outlook Security Feature Bypass Vulnerability Microsoft Outlook	HIGH 8.8	15.5%	11 Jul 2023	—
CVE-2023-36874 Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	44.4%	11 Jul 2023	—
CVE-2022-31199 Netwrix Auditor Insecure Object Deserialization Vulnerability CRITICAL9.8	Netwrix Auditor Insecure Object Deserialization Vulnerability Netwrix Auditor	CRITICAL 9.8	36%	11 Jul 2023	CISA: known use
CVE-2021-29256 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability HIGH8.8	Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm Mali Graphics Processing Unit (GPU)	HIGH 8.8	3%	7 Jul 2023	—
CVE-2019-17621 D-Link DIR-859 Router Command Execution Vulnerability CRITICAL9.8	D-Link DIR-859 Router Command Execution Vulnerability D-Link DIR-859 Router	CRITICAL 9.8	90.6%	29 Jun 2023	—
CVE-2019-20500 D-Link DWL-2600AP Access Point Command Injection Vulnerability HIGH7.8	D-Link DWL-2600AP Access Point Command Injection Vulnerability D-Link DWL-2600AP Access Point	HIGH 7.8	96.7%	29 Jun 2023	—
CVE-2021-25487 Samsung Mobile Devices Out-of-Bounds Read Vulnerability HIGH7.3	Samsung Mobile Devices Out-of-Bounds Read Vulnerability Samsung Mobile Devices	HIGH 7.3	0.6%	29 Jun 2023	—
CVE-2021-25489 Samsung Mobile Devices Improper Input Validation Vulnerability LOW3.3	Samsung Mobile Devices Improper Input Validation Vulnerability Samsung Mobile Devices	LOW 3.3	0.5%	29 Jun 2023	—
CVE-2021-25394 Samsung Mobile Devices Race Condition Vulnerability MEDIUM6.4	Samsung Mobile Devices Race Condition Vulnerability Samsung Mobile Devices	MEDIUM 6.4	0.4%	29 Jun 2023	—
CVE-2021-25395 Samsung Mobile Devices Race Condition Vulnerability MEDIUM6.4	Samsung Mobile Devices Race Condition Vulnerability Samsung Mobile Devices	MEDIUM 6.4	0.4%	29 Jun 2023	—
CVE-2021-25371 Samsung Mobile Devices Unspecified Vulnerability MEDIUM6.1	Samsung Mobile Devices Unspecified Vulnerability Samsung Mobile Devices	MEDIUM 6.1	0.8%	29 Jun 2023	—
CVE-2021-25372 Samsung Mobile Devices Improper Boundary Check Vulnerability MEDIUM6.1	Samsung Mobile Devices Improper Boundary Check Vulnerability Samsung Mobile Devices	MEDIUM 6.1	0.8%	29 Jun 2023	—
CVE-2023-32434 Apple Multiple Products Integer Overflow Vulnerability HIGH7.8	Apple Multiple Products Integer Overflow Vulnerability Apple Multiple Products	HIGH 7.8	58.2%	23 Jun 2023	—
CVE-2023-32435 Apple Multiple Products WebKit Memory Corruption Vulnerability HIGH8.8	Apple Multiple Products WebKit Memory Corruption Vulnerability Apple Multiple Products	HIGH 8.8	23%	23 Jun 2023	—
CVE-2023-32439 Apple Multiple Products WebKit Type Confusion Vulnerability HIGH8.8	Apple Multiple Products WebKit Type Confusion Vulnerability Apple Multiple Products	HIGH 8.8	24%	23 Jun 2023	—
CVE-2023-20867 VMware Tools Authentication Bypass Vulnerability LOW3.9	VMware Tools Authentication Bypass Vulnerability VMware Tools	LOW 3.9	13.6%	23 Jun 2023	—
CVE-2023-27992 Zyxel Multiple NAS Devices Command Injection Vulnerability CRITICAL9.8	Zyxel Multiple NAS Devices Command Injection Vulnerability Zyxel Multiple Network-Attached Storage (NAS) Devices	CRITICAL 9.8	82.3%	23 Jun 2023	—
CVE-2023-20887 Vmware Aria Operations for Networks Command Injection Vulnerability CRITICAL9.8	Vmware Aria Operations for Networks Command Injection Vulnerability VMware Aria Operations for Networks	CRITICAL 9.8	98.3%	22 Jun 2023	—
CVE-2020-35730 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability Roundcube Webmail	MEDIUM 6.1	32.9%	22 Jun 2023	—
CVE-2020-12641 Roundcube Webmail Remote Code Execution Vulnerability CRITICAL9.8	Roundcube Webmail Remote Code Execution Vulnerability Roundcube Webmail	CRITICAL 9.8	84.4%	22 Jun 2023	—
CVE-2021-44026 Roundcube Webmail SQL Injection Vulnerability CRITICAL9.8	Roundcube Webmail SQL Injection Vulnerability Roundcube Webmail	CRITICAL 9.8	69.9%	22 Jun 2023	—
CVE-2016-9079 Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability HIGH7.5	Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability Mozilla Firefox, Firefox ESR, and Thunderbird	HIGH 7.5	87.4%	22 Jun 2023	—
CVE-2016-0165 Microsoft Win32k Privilege Escalation Vulnerability HIGH7.8	Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k	HIGH 7.8	13.7%	22 Jun 2023	—
CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability CRITICAL9.8	Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Fortinet FortiOS and FortiProxy SSL-VPN	CRITICAL 9.8	86.8%	13 Jun 2023	Ransomhub
CVE-2023-3079 Google Chromium V8 Type Confusion Vulnerability HIGH8.8	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	HIGH 8.8	37.9%	7 Jun 2023	—
CVE-2023-33009 Zyxel Multiple Firewalls Buffer Overflow Vulnerability CRITICAL9.8	Zyxel Multiple Firewalls Buffer Overflow Vulnerability Zyxel Multiple Firewalls	CRITICAL 9.8	28.1%	5 Jun 2023	—
CVE-2023-33010 Zyxel Multiple Firewalls Buffer Overflow Vulnerability CRITICAL9.8	Zyxel Multiple Firewalls Buffer Overflow Vulnerability Zyxel Multiple Firewalls	CRITICAL 9.8	29%	5 Jun 2023	—
CVE-2023-34362 Progress MOVEit Transfer SQL Injection Vulnerability CRITICAL9.8	Progress MOVEit Transfer SQL Injection Vulnerability Progress MOVEit Transfer	CRITICAL 9.8	99.9%	2 Jun 2023	Clop
CVE-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability CRITICAL9.8	Zyxel Multiple Firewalls OS Command Injection Vulnerability Zyxel Multiple Firewalls	CRITICAL 9.8	99.3%	31 May 2023	—
CVE-2023-2868 Barracuda Networks ESG Appliance Improper Input Validation Vulnerability CRITICAL9.4	Barracuda Networks ESG Appliance Improper Input Validation Vulnerability Barracuda Networks Email Security Gateway (ESG) Appliance	CRITICAL 9.4	86.8%	26 May 2023	—
CVE-2023-32409 Apple Multiple Products WebKit Sandbox Escape Vulnerability HIGH8.6	Apple Multiple Products WebKit Sandbox Escape Vulnerability Apple Multiple Products	HIGH 8.6	16.5%	22 May 2023	—
CVE-2023-28204 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability MEDIUM6.5	Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability Apple Multiple Products	MEDIUM 6.5	14.3%	22 May 2023	—
CVE-2023-32373 Apple Multiple Products WebKit Use-After-Free Vulnerability HIGH8.8	Apple Multiple Products WebKit Use-After-Free Vulnerability Apple Multiple Products	HIGH 8.8	12.2%	22 May 2023	—
CVE-2004-1464 Cisco IOS Denial-of-Service Vulnerability MEDIUM5.9	Cisco IOS Denial-of-Service Vulnerability Cisco IOS	MEDIUM 5.9	4.8%	19 May 2023	—
CVE-2016-6415 Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability HIGH7.5	Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability Cisco IOS, IOS XR, and IOS XE	HIGH 7.5	87.7%	19 May 2023	—
CVE-2023-21492 Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability MEDIUM4.4	Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability Samsung Mobile Devices	MEDIUM 4.4	2.6%	19 May 2023	—
CVE-2023-25717 Multiple Ruckus Wireless Products CSRF and RCE Vulnerability CRITICAL9.8	Multiple Ruckus Wireless Products CSRF and RCE Vulnerability Ruckus Wireless Multiple Products	CRITICAL 9.8	98.1%	12 May 2023	—
CVE-2021-3560 Red Hat Polkit Incorrect Authorization Vulnerability HIGH7.8	Red Hat Polkit Incorrect Authorization Vulnerability Red Hat Polkit	HIGH 7.8	21.8%	12 May 2023	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.