CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 901–960 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability CRITICAL9.8	CWP Control Web Panel OS Command Injection Vulnerability CWP Control Web Panel	CRITICAL 9.8	100%	17 Jan 2023	—
CVE-2022-41080 Microsoft Exchange Server Privilege Escalation Vulnerability HIGH8.8	Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft Exchange Server	HIGH 8.8	77.3%	10 Jan 2023	CISA: known use
CVE-2023-21674 Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability HIGH8.8	Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability Microsoft Windows	HIGH 8.8	34.2%	10 Jan 2023	—
CVE-2018-5430 TIBCO JasperReports Server Information Disclosure Vulnerability HIGH8.8	TIBCO JasperReports Server Information Disclosure Vulnerability TIBCO JasperReports	HIGH 8.8	48.1%	29 Dec 2022	—
CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability MEDIUM6.5	TIBCO JasperReports Library Directory Traversal Vulnerability TIBCO JasperReports	MEDIUM 6.5	79.1%	29 Dec 2022	—
CVE-2022-42856 Apple iOS Type Confusion Vulnerability HIGH8.8	Apple iOS Type Confusion Vulnerability Apple iOS	HIGH 8.8	8.5%	14 Dec 2022	—
CVE-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability CRITICAL9.8	Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Fortinet FortiOS	CRITICAL 9.8	99.5%	13 Dec 2022	CISA: known use
CVE-2022-44698 Microsoft Defender SmartScreen Security Feature Bypass Vulnerability MEDIUM5.4	Microsoft Defender SmartScreen Security Feature Bypass Vulnerability Microsoft Defender	MEDIUM 5.4	75%	13 Dec 2022	CISA: known use
CVE-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability CRITICAL9.8	Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability Citrix Application Delivery Controller (ADC) and Gateway	CRITICAL 9.8	6.9%	13 Dec 2022	—
CVE-2022-26500 Veeam Backup & Replication Remote Code Execution Vulnerability HIGH8.8	Veeam Backup & Replication Remote Code Execution Vulnerability Veeam Backup & Replication	HIGH 8.8	5.8%	13 Dec 2022	CISA: known use
CVE-2022-26501 Veeam Backup & Replication Remote Code Execution Vulnerability CRITICAL9.8	Veeam Backup & Replication Remote Code Execution Vulnerability Veeam Backup & Replication	CRITICAL 9.8	4.1%	13 Dec 2022	CISA: known use
CVE-2022-4262 Google Chromium V8 Type Confusion Vulnerability HIGH8.8	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	HIGH 8.8	23.5%	5 Dec 2022	—
CVE-2021-35587 Oracle Fusion Middleware Unspecified Vulnerability CRITICAL9.8	Oracle Fusion Middleware Unspecified Vulnerability Oracle Fusion Middleware	CRITICAL 9.8	96.3%	28 Nov 2022	—
CVE-2022-4135 Google Chromium GPU Heap Buffer Overflow Vulnerability CRITICAL9.6	Google Chromium GPU Heap Buffer Overflow Vulnerability Google Chromium GPU	CRITICAL 9.6	31.9%	28 Nov 2022	—
CVE-2022-41049 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability MEDIUM5.4	Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft Windows	MEDIUM 5.4	3.3%	14 Nov 2022	—
CVE-2022-41091 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability MEDIUM5.4	Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability Microsoft Windows	MEDIUM 5.4	2.3%	8 Nov 2022	CISA: known use
CVE-2022-41073 Microsoft Windows Print Spooler Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	2.6%	8 Nov 2022	CISA: known use
CVE-2022-41125 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	3%	8 Nov 2022	—
CVE-2022-41128 Microsoft Windows Scripting Languages Remote Code Execution Vulnerability HIGH8.8	Microsoft Windows Scripting Languages Remote Code Execution Vulnerability Microsoft Windows	HIGH 8.8	24.6%	8 Nov 2022	—
CVE-2021-25337 Samsung Mobile Devices Improper Access Control Vulnerability MEDIUM4.4	Samsung Mobile Devices Improper Access Control Vulnerability Samsung Mobile Devices	MEDIUM 4.4	2.8%	8 Nov 2022	—
CVE-2021-25369 Samsung Mobile Devices Improper Access Control Vulnerability MEDIUM6.2	Samsung Mobile Devices Improper Access Control Vulnerability Samsung Mobile Devices	MEDIUM 6.2	1.1%	8 Nov 2022	—
CVE-2021-25370 Samsung Mobile Devices Memory Corruption Vulnerability MEDIUM6.1	Samsung Mobile Devices Memory Corruption Vulnerability Samsung Mobile Devices	MEDIUM 6.1	0.9%	8 Nov 2022	—
CVE-2022-3723 Google Chromium V8 Type Confusion Vulnerability HIGH8.8	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	HIGH 8.8	7.9%	28 Oct 2022	—
CVE-2022-42827 Apple iOS and iPadOS Out-of-Bounds Write Vulnerability HIGH7.8	Apple iOS and iPadOS Out-of-Bounds Write Vulnerability Apple iOS and iPadOS	HIGH 7.8	1.1%	25 Oct 2022	—
CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability HIGH7.8	Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability Cisco AnyConnect Secure	HIGH 7.8	10%	24 Oct 2022	CISA: known use
CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability MEDIUM6.5	Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability Cisco AnyConnect Secure	MEDIUM 6.5	28.5%	24 Oct 2022	CISA: known use
CVE-2018-19323 GIGABYTE Multiple Products Privilege Escalation Vulnerability CRITICAL9.8	GIGABYTE Multiple Products Privilege Escalation Vulnerability GIGABYTE Multiple Products	CRITICAL 9.8	8.4%	24 Oct 2022	CISA: known use
CVE-2018-19322 GIGABYTE Multiple Products Code Execution Vulnerability HIGH7.8	GIGABYTE Multiple Products Code Execution Vulnerability GIGABYTE Multiple Products	HIGH 7.8	1.8%	24 Oct 2022	CISA: known use
CVE-2018-19321 GIGABYTE Multiple Products Privilege Escalation Vulnerability HIGH7.8	GIGABYTE Multiple Products Privilege Escalation Vulnerability GIGABYTE Multiple Products	HIGH 7.8	3.7%	24 Oct 2022	CISA: known use
CVE-2018-19320 GIGABYTE Multiple Products Unspecified Vulnerability HIGH7.8	GIGABYTE Multiple Products Unspecified Vulnerability GIGABYTE Multiple Products	HIGH 7.8	4.6%	24 Oct 2022	CISA: known use
CVE-2022-41352 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability CRITICAL9.8	Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	CRITICAL 9.8	95.5%	20 Oct 2022	CISA: known use
CVE-2021-3493 Linux Kernel Privilege Escalation Vulnerability HIGH8.8	Linux Kernel Privilege Escalation Vulnerability Linux Kernel	HIGH 8.8	49.2%	20 Oct 2022	—
CVE-2022-40684 Fortinet Multiple Products Authentication Bypass Vulnerability CRITICAL9.8	Fortinet Multiple Products Authentication Bypass Vulnerability Fortinet Multiple Products	CRITICAL 9.8	100%	11 Oct 2022	Akira
CVE-2022-41033 Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability Microsoft Windows COM+ Event System Service	HIGH 7.8	1.9%	11 Oct 2022	—
CVE-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerability HIGH8	Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server	HIGH 8	100%	30 Sep 2022	CISA: known use
CVE-2022-41040 Microsoft Exchange Server Server-Side Request Forgery Vulnerability HIGH8.8	Microsoft Exchange Server Server-Side Request Forgery Vulnerability Microsoft Exchange Server	HIGH 8.8	100%	30 Sep 2022	CISA: known use
CVE-2022-36804 Atlassian Bitbucket Server and Data Center Command Injection Vulnerability HIGH8.8	Atlassian Bitbucket Server and Data Center Command Injection Vulnerability Atlassian Bitbucket Server and Data Center	HIGH 8.8	99.1%	30 Sep 2022	—
CVE-2022-3236 Sophos Firewall Code Injection Vulnerability CRITICAL9.8	Sophos Firewall Code Injection Vulnerability Sophos Firewall	CRITICAL 9.8	98.9%	23 Sep 2022	—
CVE-2022-35405 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability CRITICAL9.8	Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Zoho ManageEngine	CRITICAL 9.8	99.9%	22 Sep 2022	—
CVE-2022-40139 Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability HIGH7.2	Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability Trend Micro Apex One and Apex One as a Service	HIGH 7.2	3.4%	15 Sep 2022	—
CVE-2013-6282 Linux Kernel Improper Input Validation Vulnerability HIGH8.8	Linux Kernel Improper Input Validation Vulnerability Linux Kernel	HIGH 8.8	39.7%	15 Sep 2022	—
CVE-2013-2597 Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability HIGH8.4	Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability Code Aurora ACDB Audio Driver	HIGH 8.4	1.5%	15 Sep 2022	—
CVE-2013-2596 Linux Kernel Integer Overflow Vulnerability HIGH7.8	Linux Kernel Integer Overflow Vulnerability Linux Kernel	HIGH 7.8	3.2%	15 Sep 2022	—
CVE-2013-2094 Linux Kernel Privilege Escalation Vulnerability HIGH8.4	Linux Kernel Privilege Escalation Vulnerability Linux Kernel	HIGH 8.4	47.7%	15 Sep 2022	—
CVE-2010-2568 Microsoft Windows Remote Code Execution Vulnerability HIGH7.8	Microsoft Windows Remote Code Execution Vulnerability Microsoft Windows	HIGH 7.8	89.6%	15 Sep 2022	—
CVE-2022-37969 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	28.5%	14 Sep 2022	CISA: known use
CVE-2022-32917 Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability HIGH7.8	Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability Apple iOS, iPadOS, and macOS	HIGH 7.8	5.6%	14 Sep 2022	—
CVE-2022-3075 Google Chromium Mojo Insufficient Data Validation Vulnerability CRITICAL9.6	Google Chromium Mojo Insufficient Data Validation Vulnerability Google Chromium Mojo	CRITICAL 9.6	5.8%	8 Sep 2022	—
CVE-2022-27593 QNAP Photo Station Externally Controlled Reference Vulnerability CRITICAL10	QNAP Photo Station Externally Controlled Reference Vulnerability QNAP Photo Station	CRITICAL 10	87.9%	8 Sep 2022	CISA: known use
CVE-2022-26258 D-Link DIR-820L Remote Code Execution Vulnerability CRITICAL9.8	D-Link DIR-820L Remote Code Execution Vulnerability D-Link DIR-820L	CRITICAL 9.8	91.6%	8 Sep 2022	—
CVE-2020-9934 Apple iOS, iPadOS, and macOS Input Validation Vulnerability MEDIUM5.5	Apple iOS, iPadOS, and macOS Input Validation Vulnerability Apple iOS, iPadOS, and macOS	MEDIUM 5.5	3.2%	8 Sep 2022	—
CVE-2018-7445 MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability CRITICAL9.8	MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability MikroTik RouterOS	CRITICAL 9.8	65.8%	8 Sep 2022	—
CVE-2018-6530 D-Link Multiple Routers OS Command Injection Vulnerability CRITICAL9.8	D-Link Multiple Routers OS Command Injection Vulnerability D-Link Multiple Routers	CRITICAL 9.8	96.7%	8 Sep 2022	CISA: known use
CVE-2018-2628 Oracle WebLogic Server Unspecified Vulnerability CRITICAL9.8	Oracle WebLogic Server Unspecified Vulnerability Oracle WebLogic Server	CRITICAL 9.8	100%	8 Sep 2022	—
CVE-2018-13374 Fortinet FortiOS and FortiADC Improper Access Control Vulnerability MEDIUM4.3	Fortinet FortiOS and FortiADC Improper Access Control Vulnerability Fortinet FortiOS and FortiADC	MEDIUM 4.3	38.1%	8 Sep 2022	CISA: known use
CVE-2017-5521 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability HIGH8.1	NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability NETGEAR Multiple Devices	HIGH 8.1	89.4%	8 Sep 2022	—
CVE-2011-4723 D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability MEDIUM5.7	D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability D-Link DIR-300 Router	MEDIUM 5.7	3.1%	8 Sep 2022	—
CVE-2011-1823 Android OS Privilege Escalation Vulnerability HIGH7.8	Android OS Privilege Escalation Vulnerability Android OS	HIGH 7.8	41.4%	8 Sep 2022	—
CVE-2022-26352 dotCMS Unrestricted Upload of File Vulnerability CRITICAL9.8	dotCMS Unrestricted Upload of File Vulnerability dotCMS dotCMS	CRITICAL 9.8	91.2%	25 Aug 2022	CISA: known use
CVE-2022-24706 Apache CouchDB Insecure Default Initialization of Resource Vulnerability CRITICAL9.8	Apache CouchDB Insecure Default Initialization of Resource Vulnerability Apache CouchDB	CRITICAL 9.8	92.5%	25 Aug 2022	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.