CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 841–900 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2014-0196 Linux Kernel Race Condition Vulnerability MEDIUM5.5	Linux Kernel Race Condition Vulnerability Linux Kernel	MEDIUM 5.5	20.3%	12 May 2023	—
CVE-2010-3904 Linux Kernel Improper Input Validation Vulnerability HIGH7.8	Linux Kernel Improper Input Validation Vulnerability Linux Kernel	HIGH 7.8	15.9%	12 May 2023	—
CVE-2015-5317 Jenkins User Interface (UI) Information Disclosure Vulnerability HIGH7.5	Jenkins User Interface (UI) Information Disclosure Vulnerability Jenkins User Interface (UI)	HIGH 7.5	23%	12 May 2023	—
CVE-2016-3427 Oracle Java SE and JRockit Unspecified Vulnerability CRITICAL9.8	Oracle Java SE and JRockit Unspecified Vulnerability Oracle Java SE and JRockit	CRITICAL 9.8	92.3%	12 May 2023	—
CVE-2016-8735 Apache Tomcat Remote Code Execution Vulnerability CRITICAL9.8	Apache Tomcat Remote Code Execution Vulnerability Apache Tomcat	CRITICAL 9.8	90.3%	12 May 2023	—
CVE-2023-29336 Microsoft Win32K Privilege Escalation Vulnerability HIGH7.8	Microsoft Win32K Privilege Escalation Vulnerability Microsoft Win32k	HIGH 7.8	41.2%	9 May 2023	—
CVE-2023-1389 TP-Link Archer AX-21 Command Injection Vulnerability HIGH8.8	TP-Link Archer AX-21 Command Injection Vulnerability TP-Link Archer AX21	HIGH 8.8	100%	1 May 2023	—
CVE-2021-45046 Apache Log4j2 Deserialization of Untrusted Data Vulnerability CRITICAL9	Apache Log4j2 Deserialization of Untrusted Data Vulnerability Apache Log4j2	CRITICAL 9	100%	1 May 2023	CISA: known use
CVE-2023-21839 Oracle WebLogic Server Unspecified Vulnerability HIGH7.5	Oracle WebLogic Server Unspecified Vulnerability Oracle WebLogic Server	HIGH 7.5	99.9%	1 May 2023	—
CVE-2023-28432 MinIO Information Disclosure Vulnerability HIGH7.5	MinIO Information Disclosure Vulnerability MinIO MinIO	HIGH 7.5	84%	21 Apr 2023	—
CVE-2023-27350 PaperCut MF/NG Improper Access Control Vulnerability CRITICAL9.8	PaperCut MF/NG Improper Access Control Vulnerability PaperCut MF/NG	CRITICAL 9.8	100%	21 Apr 2023	Clop
CVE-2023-2136 Google Chrome Skia Integer Overflow Vulnerability CRITICAL9.6	Google Chrome Skia Integer Overflow Vulnerability Google Chromium Skia	CRITICAL 9.6	5.8%	21 Apr 2023	—
CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability HIGH8.8	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability Cisco IOS and IOS XE Software	HIGH 8.8	21.3%	19 Apr 2023	—
CVE-2019-8526 Apple macOS Use-After-Free Vulnerability HIGH7.8	Apple macOS Use-After-Free Vulnerability Apple macOS	HIGH 7.8	0.7%	17 Apr 2023	—
CVE-2023-2033 Google Chromium V8 Type Confusion Vulnerability HIGH8.8	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	HIGH 8.8	40.6%	17 Apr 2023	—
CVE-2023-20963 Android Framework Privilege Escalation Vulnerability HIGH7.8	Android Framework Privilege Escalation Vulnerability Android Framework	HIGH 7.8	1.5%	13 Apr 2023	—
CVE-2023-29492 Novi Survey Insecure Deserialization Vulnerability CRITICAL9.8	Novi Survey Insecure Deserialization Vulnerability Novi Survey Novi Survey	CRITICAL 9.8	2.7%	13 Apr 2023	—
CVE-2023-28252 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	48.9%	11 Apr 2023	CISA: known use
CVE-2023-28205 Apple Multiple Products WebKit Use-After-Free Vulnerability HIGH8.8	Apple Multiple Products WebKit Use-After-Free Vulnerability Apple Multiple Products	HIGH 8.8	27.1%	10 Apr 2023	—
CVE-2023-28206 Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability HIGH8.6	Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability Apple iOS, iPadOS, and macOS	HIGH 8.6	23.2%	10 Apr 2023	—
CVE-2021-27876 Veritas Backup Exec Agent File Access Vulnerability HIGH8.1	Veritas Backup Exec Agent File Access Vulnerability Veritas Backup Exec Agent	HIGH 8.1	13.5%	7 Apr 2023	CISA: known use
CVE-2021-27877 Veritas Backup Exec Agent Improper Authentication Vulnerability HIGH8.2	Veritas Backup Exec Agent Improper Authentication Vulnerability Veritas Backup Exec Agent	HIGH 8.2	64.9%	7 Apr 2023	CISA: known use
CVE-2021-27878 Veritas Backup Exec Agent Command Execution Vulnerability HIGH8.8	Veritas Backup Exec Agent Command Execution Vulnerability Veritas Backup Exec Agent	HIGH 8.8	24%	7 Apr 2023	CISA: known use
CVE-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	8.6%	7 Apr 2023	CISA: known use
CVE-2023-26083 Arm Mali GPU Kernel Driver Information Disclosure Vulnerability LOW3.3	Arm Mali GPU Kernel Driver Information Disclosure Vulnerability Arm Mali Graphics Processing Unit (GPU)	LOW 3.3	1.2%	7 Apr 2023	—
CVE-2022-27926 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	MEDIUM 6.1	17.6%	3 Apr 2023	—
CVE-2013-3163 Microsoft Internet Explorer Memory Corruption Vulnerability HIGH8.8	Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft Internet Explorer	HIGH 8.8	70.7%	30 Mar 2023	—
CVE-2017-7494 Samba Remote Code Execution Vulnerability CRITICAL9.8	Samba Remote Code Execution Vulnerability Samba Samba	CRITICAL 9.8	99.4%	30 Mar 2023	CISA: known use
CVE-2022-42948 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability CRITICAL9.8	Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability Fortra Cobalt Strike	CRITICAL 9.8	2.7%	30 Mar 2023	—
CVE-2022-39197 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability Fortra Cobalt Strike	MEDIUM 6.1	44.1%	30 Mar 2023	—
CVE-2021-30900 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability HIGH7.8	Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability Apple iOS, iPadOS, and macOS	HIGH 7.8	5.2%	30 Mar 2023	—
CVE-2022-38181 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability HIGH8.8	Arm Mali GPU Kernel Driver Use-After-Free Vulnerability Arm Mali Graphics Processing Unit (GPU)	HIGH 8.8	18.5%	30 Mar 2023	—
CVE-2023-0266 Linux Kernel Use-After-Free Vulnerability HIGH7.9	Linux Kernel Use-After-Free Vulnerability Linux Kernel	HIGH 7.9	2.6%	30 Mar 2023	—
CVE-2022-3038 Google Chromium Network Service Use-After-Free Vulnerability HIGH8.8	Google Chromium Network Service Use-After-Free Vulnerability Google Chromium Network Service	HIGH 8.8	24.9%	30 Mar 2023	—
CVE-2022-22706 Arm Mali GPU Kernel Driver Unspecified Vulnerability HIGH7.8	Arm Mali GPU Kernel Driver Unspecified Vulnerability Arm Mali Graphics Processing Unit (GPU)	HIGH 7.8	1.1%	30 Mar 2023	—
CVE-2023-26360 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability HIGH8.6	Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Adobe ColdFusion	HIGH 8.6	97.3%	15 Mar 2023	—
CVE-2023-23397 Microsoft Office Outlook Privilege Escalation Vulnerability CRITICAL9.8	Microsoft Office Outlook Privilege Escalation Vulnerability Microsoft Office	CRITICAL 9.8	97.2%	14 Mar 2023	—
CVE-2023-24880 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability MEDIUM4.4	Microsoft Windows SmartScreen Security Feature Bypass Vulnerability Microsoft Windows	MEDIUM 4.4	78.2%	14 Mar 2023	CISA: known use
CVE-2022-41328 Fortinet FortiOS Path Traversal Vulnerability MEDIUM6.7	Fortinet FortiOS Path Traversal Vulnerability Fortinet FortiOS	MEDIUM 6.7	10.7%	14 Mar 2023	—
CVE-2021-39144 XStream Remote Code Execution Vulnerability HIGH8.5	XStream Remote Code Execution Vulnerability XStream XStream	HIGH 8.5	98.1%	10 Mar 2023	—
CVE-2020-5741 Plex Media Server Remote Code Execution Vulnerability HIGH7.2	Plex Media Server Remote Code Execution Vulnerability Plex Media Server	HIGH 7.2	72.9%	10 Mar 2023	—
CVE-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability MEDIUM6.8	Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability Zoho ManageEngine	MEDIUM 6.8	71%	7 Mar 2023	—
CVE-2022-33891 Apache Spark Command Injection Vulnerability HIGH8.8	Apache Spark Command Injection Vulnerability Apache Spark	HIGH 8.8	93.2%	7 Mar 2023	—
CVE-2022-35914 Teclib GLPI Remote Code Execution Vulnerability CRITICAL9.8	Teclib GLPI Remote Code Execution Vulnerability Teclib GLPI	CRITICAL 9.8	99.9%	7 Mar 2023	—
CVE-2022-36537 ZK Framework AuUploader Unspecified Vulnerability HIGH7.5	ZK Framework AuUploader Unspecified Vulnerability ZK Framework AuUploader	HIGH 7.5	95.4%	27 Feb 2023	CISA: known use
CVE-2022-47986 IBM Aspera Faspex Code Execution Vulnerability CRITICAL9.8	IBM Aspera Faspex Code Execution Vulnerability IBM Aspera Faspex	CRITICAL 9.8	100%	21 Feb 2023	CISA: known use
CVE-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability MEDIUM6.8	Mitel MiVoice Connect Code Injection Vulnerability Mitel MiVoice Connect	MEDIUM 6.8	10.7%	21 Feb 2023	CISA: known use
CVE-2022-40765 Mitel MiVoice Connect Command Injection Vulnerability MEDIUM6.8	Mitel MiVoice Connect Command Injection Vulnerability Mitel MiVoice Connect	MEDIUM 6.8	10.6%	21 Feb 2023	CISA: known use
CVE-2022-46169 Cacti Command Injection Vulnerability CRITICAL9.8	Cacti Command Injection Vulnerability Cacti Cacti	CRITICAL 9.8	99.8%	16 Feb 2023	—
CVE-2023-21715 Microsoft Office Publisher Security Feature Bypass Vulnerability HIGH7.3	Microsoft Office Publisher Security Feature Bypass Vulnerability Microsoft Office	HIGH 7.3	12%	14 Feb 2023	—
CVE-2023-23376 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	10.9%	14 Feb 2023	CISA: known use
CVE-2023-23529 Apple Multiple Products WebKit Type Confusion Vulnerability HIGH8.8	Apple Multiple Products WebKit Type Confusion Vulnerability Apple Multiple Products	HIGH 8.8	9.4%	14 Feb 2023	—
CVE-2023-21823 Microsoft Windows Graphic Component Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Graphic Component Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	5.6%	14 Feb 2023	—
CVE-2015-2291 Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability HIGH7.8	Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability Intel Ethernet Diagnostics Driver for Windows	HIGH 7.8	15.7%	10 Feb 2023	CISA: known use
CVE-2022-24990 TerraMaster OS Remote Command Execution Vulnerability HIGH7.5	TerraMaster OS Remote Command Execution Vulnerability TerraMaster OS	HIGH 7.5	83.2%	10 Feb 2023	CISA: known use
CVE-2023-0669 Fortra GoAnywhere MFT Remote Code Execution Vulnerability HIGH7.2	Fortra GoAnywhere MFT Remote Code Execution Vulnerability Fortra GoAnywhere MFT	HIGH 7.2	100%	10 Feb 2023	CISA: known use
CVE-2022-21587 Oracle E-Business Suite Unspecified Vulnerability CRITICAL9.8	Oracle E-Business Suite Unspecified Vulnerability Oracle E-Business Suite	CRITICAL 9.8	98.3%	2 Feb 2023	CISA: known use
CVE-2023-22952 Multiple SugarCRM Products Remote Code Execution Vulnerability HIGH8.8	Multiple SugarCRM Products Remote Code Execution Vulnerability SugarCRM Multiple Products	HIGH 8.8	80.1%	2 Feb 2023	—
CVE-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability CRITICAL9.8	Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Telerik User Interface (UI) for ASP.NET AJAX	CRITICAL 9.8	77.7%	26 Jan 2023	CISA: known use
CVE-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CRITICAL9.8	Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Zoho ManageEngine	CRITICAL 9.8	99.8%	23 Jan 2023	CISA: known use

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.