CVE Database

Every vulnerability CISA records as exploited in the wild — 1,778 of them — with severity, exploitation probability, remediation deadlines, and the ransomware groups recorded using each one.

Showing 1,021–1,080 of 1,778.

CVE	Vulnerability	Severity	EPSS	Added	Ransomware
CVE-2010-2883 Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability HIGH7.3	Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability Adobe Acrobat and Reader	HIGH 7.3	81.4%	8 Jun 2022	—
CVE-2010-2572 Microsoft PowerPoint Buffer Overflow Vulnerability HIGH7.8	Microsoft PowerPoint Buffer Overflow Vulnerability Microsoft PowerPoint	HIGH 7.8	58.6%	8 Jun 2022	—
CVE-2010-1297 Adobe Flash Player Memory Corruption Vulnerability HIGH7.8	Adobe Flash Player Memory Corruption Vulnerability Adobe Flash Player	HIGH 7.8	82.5%	8 Jun 2022	—
CVE-2009-4324 Adobe Acrobat and Reader Use-After-Free Vulnerability HIGH7.8	Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe Acrobat and Reader	HIGH 7.8	81.9%	8 Jun 2022	—
CVE-2009-3953 Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability HIGH8.8	Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability Adobe Acrobat and Reader	HIGH 8.8	83.2%	8 Jun 2022	—
CVE-2009-1862 Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability HIGH7.8	Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability Adobe Acrobat and Reader, Flash Player	HIGH 7.8	21.2%	8 Jun 2022	—
CVE-2009-0563 Microsoft Office Buffer Overflow Vulnerability HIGH7.8	Microsoft Office Buffer Overflow Vulnerability Microsoft Office	HIGH 7.8	59.6%	8 Jun 2022	—
CVE-2009-0557 Microsoft Office Object Record Corruption Vulnerability HIGH7.8	Microsoft Office Object Record Corruption Vulnerability Microsoft Office	HIGH 7.8	52.8%	8 Jun 2022	—
CVE-2008-0655 Adobe Acrobat and Reader Unspecified Vulnerability HIGH8.8	Adobe Acrobat and Reader Unspecified Vulnerability Adobe Acrobat and Reader	HIGH 8.8	37.9%	8 Jun 2022	—
CVE-2007-5659 Adobe Acrobat and Reader Buffer Overflow Vulnerability HIGH7.8	Adobe Acrobat and Reader Buffer Overflow Vulnerability Adobe Acrobat and Reader	HIGH 7.8	87.3%	8 Jun 2022	—
CVE-2006-2492 Microsoft Word Malformed Object Pointer Vulnerability HIGH8.8	Microsoft Word Malformed Object Pointer Vulnerability Microsoft Word	HIGH 8.8	48.1%	8 Jun 2022	—
CVE-2022-26134 Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability CRITICAL9.8	Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Atlassian Confluence Server/Data Center	CRITICAL 9.8	100%	2 Jun 2022	CISA: known use
CVE-2019-3010 Oracle Solaris Privilege Escalation Vulnerability HIGH8.8	Oracle Solaris Privilege Escalation Vulnerability Oracle Solaris	HIGH 8.8	13.5%	25 May 2022	—
CVE-2016-3393 Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability HIGH7.8	Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability Microsoft Windows	HIGH 7.8	68.5%	25 May 2022	—
CVE-2016-7256 Microsoft Windows Open Type Font Remote Code Execution Vulnerability HIGH8.8	Microsoft Windows Open Type Font Remote Code Execution Vulnerability Microsoft Windows	HIGH 8.8	64.6%	25 May 2022	—
CVE-2016-1010 Adobe Flash Player and AIR Integer Overflow Vulnerability HIGH8.8	Adobe Flash Player and AIR Integer Overflow Vulnerability Adobe Flash Player and AIR	HIGH 8.8	19.3%	25 May 2022	—
CVE-2016-0984 Adobe Flash Player and AIR Use-After-Free Vulnerability HIGH8.8	Adobe Flash Player and AIR Use-After-Free Vulnerability Adobe Flash Player and AIR	HIGH 8.8	54.5%	25 May 2022	—
CVE-2016-0034 Microsoft Silverlight Runtime Remote Code Execution Vulnerability HIGH8.8	Microsoft Silverlight Runtime Remote Code Execution Vulnerability Microsoft Silverlight	HIGH 8.8	69.4%	25 May 2022	CISA: known use
CVE-2015-0310 Adobe Flash Player ASLR Bypass Vulnerability HIGH7.8	Adobe Flash Player ASLR Bypass Vulnerability Adobe Flash Player	HIGH 7.8	15.1%	25 May 2022	—
CVE-2015-0016 Microsoft Windows TS WebProxy Directory Traversal Vulnerability HIGH7.8	Microsoft Windows TS WebProxy Directory Traversal Vulnerability Microsoft Windows	HIGH 7.8	75.8%	25 May 2022	—
CVE-2015-0071 Microsoft Internet Explorer ASLR Bypass Vulnerability MEDIUM6.5	Microsoft Internet Explorer ASLR Bypass Vulnerability Microsoft Internet Explorer	MEDIUM 6.5	33.6%	25 May 2022	—
CVE-2015-2360 Microsoft Win32k Privilege Escalation Vulnerability HIGH8.8	Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k	HIGH 8.8	14.8%	25 May 2022	—
CVE-2015-2425 Microsoft Internet Explorer Memory Corruption Vulnerability HIGH8.8	Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft Internet Explorer	HIGH 8.8	44.7%	25 May 2022	—
CVE-2015-1769 Microsoft Windows Mount Manager Privilege Escalation Vulnerability MEDIUM6.6	Microsoft Windows Mount Manager Privilege Escalation Vulnerability Microsoft Windows	MEDIUM 6.6	4.1%	25 May 2022	—
CVE-2015-4495 Mozilla Firefox Security Feature Bypass Vulnerability HIGH8.8	Mozilla Firefox Security Feature Bypass Vulnerability Mozilla Firefox	HIGH 8.8	68.6%	25 May 2022	—
CVE-2015-8651 Adobe Flash Player Integer Overflow Vulnerability HIGH8.8	Adobe Flash Player Integer Overflow Vulnerability Adobe Flash Player	HIGH 8.8	67.7%	25 May 2022	—
CVE-2015-6175 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	5.3%	25 May 2022	—
CVE-2015-1671 Microsoft Windows Remote Code Execution Vulnerability HIGH7.8	Microsoft Windows Remote Code Execution Vulnerability Microsoft Windows	HIGH 7.8	48.8%	25 May 2022	—
CVE-2014-4148 Microsoft Windows Remote Code Execution Vulnerability HIGH8.8	Microsoft Windows Remote Code Execution Vulnerability Microsoft Windows	HIGH 8.8	59.9%	25 May 2022	—
CVE-2014-8439 Adobe Flash Player Dereferenced Pointer Vulnerability HIGH8.8	Adobe Flash Player Dereferenced Pointer Vulnerability Adobe Flash Player	HIGH 8.8	20.4%	25 May 2022	—
CVE-2014-4123 Microsoft Internet Explorer Privilege Escalation Vulnerability HIGH8.8	Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft Internet Explorer	HIGH 8.8	47.1%	25 May 2022	—
CVE-2014-0546 Adobe Reader and Acrobat Sandbox Bypass Vulnerability CRITICAL9.8	Adobe Reader and Acrobat Sandbox Bypass Vulnerability Adobe Reader and Acrobat	CRITICAL 9.8	22.3%	25 May 2022	—
CVE-2014-2817 Microsoft Internet Explorer Privilege Escalation Vulnerability HIGH8.8	Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft Internet Explorer	HIGH 8.8	26.3%	25 May 2022	—
CVE-2014-4077 Microsoft IME Japanese Privilege Escalation Vulnerability HIGH7.8	Microsoft IME Japanese Privilege Escalation Vulnerability Microsoft Input Method Editor (IME) Japanese	HIGH 7.8	54.6%	25 May 2022	—
CVE-2014-3153 Linux Kernel Privilege Escalation Vulnerability HIGH7.8	Linux Kernel Privilege Escalation Vulnerability Linux Kernel	HIGH 7.8	37.2%	25 May 2022	—
CVE-2013-7331 Microsoft Internet Explorer Information Disclosure Vulnerability MEDIUM6.5	Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft Internet Explorer	MEDIUM 6.5	50.2%	25 May 2022	—
CVE-2013-3993 IBM InfoSphere BigInsights Invalid Input Vulnerability MEDIUM6.5	IBM InfoSphere BigInsights Invalid Input Vulnerability IBM InfoSphere BigInsights	MEDIUM 6.5	4.8%	25 May 2022	CISA: known use
CVE-2013-3896 Microsoft Silverlight Information Disclosure Vulnerability MEDIUM5.5	Microsoft Silverlight Information Disclosure Vulnerability Microsoft Silverlight	MEDIUM 5.5	67.1%	25 May 2022	—
CVE-2013-2423 Oracle JRE Unspecified Vulnerability LOW3.7	Oracle JRE Unspecified Vulnerability Oracle Java Runtime Environment (JRE)	LOW 3.7	85.2%	25 May 2022	—
CVE-2013-0431 Oracle JRE Sandbox Bypass Vulnerability LOW3.7	Oracle JRE Sandbox Bypass Vulnerability Oracle Java Runtime Environment (JRE)	LOW 3.7	90.2%	25 May 2022	CISA: known use
CVE-2013-0422 Oracle JRE Remote Code Execution Vulnerability CRITICAL9.8	Oracle JRE Remote Code Execution Vulnerability Oracle Java Runtime Environment (JRE)	CRITICAL 9.8	97.1%	25 May 2022	CISA: known use
CVE-2013-0074 Microsoft Silverlight Double Dereference Vulnerability HIGH7.8	Microsoft Silverlight Double Dereference Vulnerability Microsoft Silverlight	HIGH 7.8	78.9%	25 May 2022	CISA: known use
CVE-2012-1710 Oracle Fusion Middleware Unspecified Vulnerability CRITICAL9.8	Oracle Fusion Middleware Unspecified Vulnerability Oracle Fusion Middleware	CRITICAL 9.8	7.8%	25 May 2022	CISA: known use
CVE-2010-1428 Red Hat JBoss Information Disclosure Vulnerability HIGH7.5	Red Hat JBoss Information Disclosure Vulnerability Red Hat JBoss	HIGH 7.5	52.7%	25 May 2022	CISA: known use
CVE-2010-0840 Oracle JRE Unspecified Vulnerability CRITICAL9.8	Oracle JRE Unspecified Vulnerability Oracle Java Runtime Environment (JRE)	CRITICAL 9.8	96.3%	25 May 2022	—
CVE-2010-0738 Red Hat JBoss Authentication Bypass Vulnerability MEDIUM5.3	Red Hat JBoss Authentication Bypass Vulnerability Red Hat JBoss	MEDIUM 5.3	73.8%	25 May 2022	CISA: known use
CVE-2018-8611 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	4.2%	24 May 2022	—
CVE-2018-19953 QNAP NAS File Station Cross-Site Scripting Vulnerability MEDIUM6.1	QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP Network Attached Storage (NAS)	MEDIUM 6.1	30.5%	24 May 2022	CISA: known use
CVE-2018-19949 QNAP NAS File Station Command Injection Vulnerability CRITICAL9.8	QNAP NAS File Station Command Injection Vulnerability QNAP Network Attached Storage (NAS)	CRITICAL 9.8	30.2%	24 May 2022	CISA: known use
CVE-2018-19943 QNAP NAS File Station Cross-Site Scripting Vulnerability HIGH8	QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP Network Attached Storage (NAS)	HIGH 8	22.7%	24 May 2022	CISA: known use
CVE-2017-0147 Microsoft Windows SMBv1 Information Disclosure Vulnerability HIGH7.5	Microsoft Windows SMBv1 Information Disclosure Vulnerability Microsoft SMBv1 server	HIGH 7.5	99.7%	24 May 2022	CISA: known use
CVE-2017-0022 Microsoft XML Core Services Information Disclosure Vulnerability MEDIUM6.5	Microsoft XML Core Services Information Disclosure Vulnerability Microsoft XML Core Services	MEDIUM 6.5	18.1%	24 May 2022	—
CVE-2017-0005 Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability HIGH7.8	Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability Microsoft Windows	HIGH 7.8	11%	24 May 2022	—
CVE-2017-0149 Microsoft Internet Explorer Memory Corruption Vulnerability HIGH8.8	Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft Internet Explorer	HIGH 8.8	28.5%	24 May 2022	—
CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation Vulnerability HIGH8.8	Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft Internet Explorer	HIGH 8.8	22.3%	24 May 2022	—
CVE-2017-8291 Artifex Ghostscript Type Confusion Vulnerability HIGH7.8	Artifex Ghostscript Type Confusion Vulnerability Artifex Ghostscript	HIGH 7.8	97%	24 May 2022	—
CVE-2017-8543 Microsoft Windows Search Remote Code Execution Vulnerability CRITICAL9.8	Microsoft Windows Search Remote Code Execution Vulnerability Microsoft Windows	CRITICAL 9.8	74.2%	24 May 2022	—
CVE-2017-18362 Kaseya VSA SQL Injection Vulnerability CRITICAL9.8	Kaseya VSA SQL Injection Vulnerability Kaseya Virtual System/Server Administrator (VSA)	CRITICAL 9.8	86.8%	24 May 2022	CISA: known use
CVE-2016-0162 Microsoft Internet Explorer Information Disclosure Vulnerability MEDIUM4.3	Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft Internet Explorer	MEDIUM 4.3	21.9%	24 May 2022	—
CVE-2016-3351 Microsoft Internet Explorer and Edge Information Disclosure Vulnerability MEDIUM6.5	Microsoft Internet Explorer and Edge Information Disclosure Vulnerability Microsoft Internet Explorer and Edge	MEDIUM 6.5	26.5%	24 May 2022	CISA: known use

Catalogue and remediation deadlines from the CISA Known Exploited Vulnerabilities list; severity from NVD; exploitation probability from FIRST EPSS; ransomware group attribution from ransomware.live. Where a severity or EPSS score is missing, that vulnerability has not been enriched yet — the catalogue entry itself is still authoritative.