CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 961–1,020 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2022-24112 Apache APISIX Authentication Bypass Vulnerability CRITICAL9.8	Apache APISIX Authentication Bypass Vulnerability Apache APISIX	CRITICAL 9.8	96.1%	25 Aug 2022	—
CVE-2022-22963 VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability CRITICAL9.8	VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability VMware Tanzu Spring Cloud	CRITICAL 9.8	99.9%	25 Aug 2022	—
CVE-2022-2294 WebRTC Heap Buffer Overflow Vulnerability HIGH8.8	WebRTC Heap Buffer Overflow Vulnerability WebRTC WebRTC	HIGH 8.8	70.8%	25 Aug 2022	CISA: known use
CVE-2021-39226 Grafana Authentication Bypass Vulnerability CRITICAL9.8	Grafana Authentication Bypass Vulnerability Grafana Labs Grafana	CRITICAL 9.8	99.9%	25 Aug 2022	—
CVE-2021-38406 Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability HIGH7.8	Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability Delta Electronics DOPSoft 2	HIGH 7.8	76.4%	25 Aug 2022	—
CVE-2021-31010 Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability HIGH7.5	Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability Apple iOS, macOS, watchOS	HIGH 7.5	3.7%	25 Aug 2022	—
CVE-2020-36193 PEAR Archive_Tar Improper Link Resolution Vulnerability HIGH7.5	PEAR Archive_Tar Improper Link Resolution Vulnerability PEAR Archive_Tar	HIGH 7.5	70.6%	25 Aug 2022	—
CVE-2020-28949 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability HIGH7.8	PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability PEAR Archive_Tar	HIGH 7.8	84.6%	25 Aug 2022	—
CVE-2022-0028 Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability HIGH8.6	Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability Palo Alto Networks PAN-OS	HIGH 8.6	2.7%	22 Aug 2022	—
CVE-2022-22536 SAP Multiple Products HTTP Request Smuggling Vulnerability CRITICAL10	SAP Multiple Products HTTP Request Smuggling Vulnerability SAP Multiple Products	CRITICAL 10	97.9%	18 Aug 2022	—
CVE-2022-32894 Apple iOS and macOS Out-of-Bounds Write Vulnerability HIGH7.8	Apple iOS and macOS Out-of-Bounds Write Vulnerability Apple iOS and macOS	HIGH 7.8	3.3%	18 Aug 2022	—
CVE-2022-32893 Apple iOS and macOS Out-of-Bounds Write Vulnerability HIGH8.8	Apple iOS and macOS Out-of-Bounds Write Vulnerability Apple iOS and macOS	HIGH 8.8	10.5%	18 Aug 2022	—
CVE-2022-2856 Google Chromium Intents Insufficient Input Validation Vulnerability MEDIUM6.5	Google Chromium Intents Insufficient Input Validation Vulnerability Google Chromium Intents	MEDIUM 6.5	4.6%	18 Aug 2022	—
CVE-2022-26923 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability HIGH8.8	Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft Active Directory	HIGH 8.8	83.5%	18 Aug 2022	—
CVE-2022-21971 Microsoft Windows Runtime Remote Code Execution Vulnerability HIGH7.8	Microsoft Windows Runtime Remote Code Execution Vulnerability Microsoft Windows	HIGH 7.8	53.9%	18 Aug 2022	—
CVE-2017-15944 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability CRITICAL9.8	Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Palo Alto Networks PAN-OS	CRITICAL 9.8	98.3%	18 Aug 2022	—
CVE-2022-27925 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability HIGH7.2	Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	HIGH 7.2	98.7%	11 Aug 2022	CISA: known use
CVE-2022-37042 Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability CRITICAL9.8	Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	CRITICAL 9.8	92.1%	11 Aug 2022	CISA: known use
CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability HIGH7.8	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft Windows	HIGH 7.8	67.8%	9 Aug 2022	—
CVE-2022-30333 RARLAB UnRAR Directory Traversal Vulnerability HIGH7.5	RARLAB UnRAR Directory Traversal Vulnerability RARLAB UnRAR	HIGH 7.5	99.2%	9 Aug 2022	CISA: known use
CVE-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability HIGH7.5	Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability Synacor Zimbra Collaboration Suite (ZCS)	HIGH 7.5	93.9%	4 Aug 2022	CISA: known use
CVE-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability CRITICAL9.8	Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability Atlassian Confluence	CRITICAL 9.8	98.2%	29 Jul 2022	—
CVE-2022-22047 Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	18.3%	12 Jul 2022	—
CVE-2022-26925 Microsoft Windows LSA Spoofing Vulnerability HIGH8.1	Microsoft Windows LSA Spoofing Vulnerability Microsoft Windows	HIGH 8.1	10.5%	1 Jul 2022	—
CVE-2022-29499 Mitel MiVoice Connect Data Validation Vulnerability CRITICAL9.8	Mitel MiVoice Connect Data Validation Vulnerability Mitel MiVoice Connect	CRITICAL 9.8	55.2%	27 Jun 2022	CISA: known use
CVE-2021-30533 Google Chromium PopupBlocker Security Bypass Vulnerability MEDIUM6.5	Google Chromium PopupBlocker Security Bypass Vulnerability Google Chromium PopupBlocker	MEDIUM 6.5	16.7%	27 Jun 2022	—
CVE-2021-4034 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability HIGH7.8	Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Red Hat Polkit	HIGH 7.8	94.9%	27 Jun 2022	CISA: known use
CVE-2021-30983 Apple iOS and iPadOS Buffer Overflow Vulnerability HIGH7.8	Apple iOS and iPadOS Buffer Overflow Vulnerability Apple iOS and iPadOS	HIGH 7.8	2.9%	27 Jun 2022	—
CVE-2020-3837 Apple Multiple Products Memory Corruption Vulnerability HIGH7.8	Apple Multiple Products Memory Corruption Vulnerability Apple Multiple Products	HIGH 7.8	14.8%	27 Jun 2022	—
CVE-2020-9907 Apple Multiple Products Memory Corruption Vulnerability HIGH7.8	Apple Multiple Products Memory Corruption Vulnerability Apple Multiple Products	HIGH 7.8	3.2%	27 Jun 2022	—
CVE-2019-8605 Apple Multiple Products Use-After-Free Vulnerability HIGH7.8	Apple Multiple Products Use-After-Free Vulnerability Apple Multiple Products	HIGH 7.8	17.6%	27 Jun 2022	—
CVE-2018-4344 Apple Multiple Products Memory Corruption Vulnerability HIGH7.8	Apple Multiple Products Memory Corruption Vulnerability Apple Multiple Products	HIGH 7.8	2.4%	27 Jun 2022	—
CVE-2022-30190 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability HIGH7.8	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft Windows	HIGH 7.8	98.5%	14 Jun 2022	Blackbasta
CVE-2021-38163 SAP NetWeaver Unrestricted File Upload Vulnerability CRITICAL9.9	SAP NetWeaver Unrestricted File Upload Vulnerability SAP NetWeaver	CRITICAL 9.9	36.9%	9 Jun 2022	—
CVE-2016-2386 SAP NetWeaver SQL Injection Vulnerability CRITICAL9.8	SAP NetWeaver SQL Injection Vulnerability SAP NetWeaver	CRITICAL 9.8	71.5%	9 Jun 2022	—
CVE-2016-2388 SAP NetWeaver Information Disclosure Vulnerability MEDIUM5.3	SAP NetWeaver Information Disclosure Vulnerability SAP NetWeaver	MEDIUM 5.3	52.2%	9 Jun 2022	—
CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability CRITICAL9.8	QNAP Photo Station Path Traversal Vulnerability QNAP Photo Station	CRITICAL 9.8	89.3%	8 Jun 2022	CISA: known use
CVE-2019-7194 QNAP Photo Station Path Traversal Vulnerability CRITICAL9.8	QNAP Photo Station Path Traversal Vulnerability QNAP Photo Station	CRITICAL 9.8	82.7%	8 Jun 2022	CISA: known use
CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability CRITICAL9.8	QNAP QTS Improper Input Validation Vulnerability QNAP QTS	CRITICAL 9.8	14.4%	8 Jun 2022	CISA: known use
CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability CRITICAL9.8	QNAP Photo Station Improper Access Control Vulnerability QNAP Photo Station	CRITICAL 9.8	88.1%	8 Jun 2022	CISA: known use
CVE-2019-5825 Google Chromium V8 Out-of-Bounds Write Vulnerability MEDIUM6.5	Google Chromium V8 Out-of-Bounds Write Vulnerability Google Chromium V8	MEDIUM 6.5	55.9%	8 Jun 2022	—
CVE-2019-15271 Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability HIGH8.8	Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability Cisco RV Series Routers	HIGH 8.8	5.5%	8 Jun 2022	—
CVE-2018-6065 Google Chromium V8 Integer Overflow Vulnerability HIGH8.8	Google Chromium V8 Integer Overflow Vulnerability Google Chromium V8	HIGH 8.8	60.3%	8 Jun 2022	—
CVE-2018-4990 Adobe Acrobat and Reader Double Free Vulnerability HIGH8.8	Adobe Acrobat and Reader Double Free Vulnerability Adobe Acrobat and Reader	HIGH 8.8	35.8%	8 Jun 2022	—
CVE-2018-17480 Google Chromium V8 Out-of-Bounds Write Vulnerability HIGH8.8	Google Chromium V8 Out-of-Bounds Write Vulnerability Google Chromium V8	HIGH 8.8	35.6%	8 Jun 2022	—
CVE-2018-17463 Google Chromium V8 Remote Code Execution Vulnerability HIGH8.8	Google Chromium V8 Remote Code Execution Vulnerability Google Chromium V8	HIGH 8.8	84.6%	8 Jun 2022	—
CVE-2017-6862 NETGEAR Multiple Devices Buffer Overflow Vulnerability CRITICAL9.8	NETGEAR Multiple Devices Buffer Overflow Vulnerability NETGEAR Multiple Devices	CRITICAL 9.8	45.7%	8 Jun 2022	—
CVE-2017-5070 Google Chromium V8 Type Confusion Vulnerability HIGH8.8	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8	HIGH 8.8	32.1%	8 Jun 2022	—
CVE-2017-5030 Google Chromium V8 Memory Corruption Vulnerability HIGH8.8	Google Chromium V8 Memory Corruption Vulnerability Google Chromium V8	HIGH 8.8	40.6%	8 Jun 2022	—
CVE-2016-5198 Google Chromium V8 Out-of-Bounds Memory Vulnerability HIGH8.8	Google Chromium V8 Out-of-Bounds Memory Vulnerability Google Chromium V8	HIGH 8.8	34.2%	8 Jun 2022	—
CVE-2016-1646 Google Chromium V8 Out-of-Bounds Read Vulnerability HIGH8.8	Google Chromium V8 Out-of-Bounds Read Vulnerability Google Chromium V8	HIGH 8.8	48.1%	8 Jun 2022	—
CVE-2013-1331 Microsoft Office Buffer Overflow Vulnerability HIGH7.8	Microsoft Office Buffer Overflow Vulnerability Microsoft Office	HIGH 7.8	79.8%	8 Jun 2022	—
CVE-2012-5054 Adobe Flash Player Integer Overflow Vulnerability HIGH8.8	Adobe Flash Player Integer Overflow Vulnerability Adobe Flash Player	HIGH 8.8	21.2%	8 Jun 2022	—
CVE-2012-4969 Microsoft Internet Explorer Use-After-Free Vulnerability HIGH8.1	Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft Internet Explorer	HIGH 8.1	80.3%	8 Jun 2022	—
CVE-2012-1889 Microsoft XML Core Services Memory Corruption Vulnerability HIGH8.8	Microsoft XML Core Services Memory Corruption Vulnerability Microsoft XML Core Services	HIGH 8.8	83.5%	8 Jun 2022	—
CVE-2012-0767 Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability MEDIUM6.1	Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability Adobe Flash Player	MEDIUM 6.1	6.2%	8 Jun 2022	—
CVE-2012-0754 Adobe Flash Player Memory Corruption Vulnerability HIGH8.1	Adobe Flash Player Memory Corruption Vulnerability Adobe Flash Player	HIGH 8.1	91.2%	8 Jun 2022	—
CVE-2012-0151 Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability HIGH7.8	Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability Microsoft Windows	HIGH 7.8	87.7%	8 Jun 2022	—
CVE-2011-2462 Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability CRITICAL9.8	Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability Adobe Reader and Acrobat	CRITICAL 9.8	88.6%	8 Jun 2022	—
CVE-2011-0609 Adobe Flash Player Unspecified Vulnerability HIGH7.8	Adobe Flash Player Unspecified Vulnerability Adobe Flash Player	HIGH 7.8	63.5%	8 Jun 2022	—

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.