CISA Known Exploited Vulnerabilities

564 results · Clear filters · Feed

• High 7.8
  CVE-2013-0640 Exploited Public exploit EPSS 87%

  Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execut…

  Feb 14, 2013

  KEV Mar 3, 2022
• High 8.8
  CVE-2013-1347 Exploited Public exploit EPSS 78%

  Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbi…

  May 5, 2013

  KEV Mar 3, 2022
• High 8.8
  CVE-2013-3346 Exploited Public exploit EPSS 79%

  Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbit…

  Aug 30, 2013

  KEV Mar 3, 2022
• High 8.8
  CVE-2013-3897 Exploited Public exploit EPSS 77%

  Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 all…

  Oct 9, 2013

  KEV Mar 3, 2022
• High 7.8
  CVE-2013-5065 Exploited Public exploit EPSS 35%

  NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges…

  Nov 27, 2013

  KEV Mar 3, 2022
• High 7.8
  CVE-2004-0210 Exploited Public exploit

  The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain p…

  Jul 14, 2004

  KEV Mar 3, 2022
• High 7.8
  CVE-2012-1535 Exploited Public exploit EPSS 70%

  Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on …

  Aug 15, 2012

  KEV Mar 3, 2022
• High 8.8
  CVE-2008-3431 Exploited Public exploit

  The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communica…

  Aug 5, 2008

  KEV Mar 3, 2022
• High 7.8
  CVE-2008-2992 Exploited · Ransomware Public exploit EPSS 100%

  Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary …

  Nov 4, 2008

  KEV Mar 3, 2022
• High 7.8
  CVE-2002-0367 Exploited Public exploit

  smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to oth…

  Apr 2, 2003

  KEV Mar 3, 2022
• High 7.8
  CVE-2014-4114 Exploited Public exploit EPSS 82%

  Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  Oct 15, 2014

  KEV Mar 3, 2022
• High 7.8
  CVE-2016-0099 Exploited · Ransomware Public exploit EPSS 37%

  The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows …

  Mar 9, 2016

  KEV Mar 3, 2022
• High 8.8
  CVE-2016-7855 Exploited Public exploit EPSS 25%

  Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Lin…

  flashplugin-nonfree Ubuntu
  Nov 1, 2016

  KEV Mar 3, 2022
• High 7.8
  CVE-2016-4117 Exploited · Ransomware Public exploit EPSS 94%

  Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as…

  flashplugin-nonfree Ubuntu
  May 11, 2016

  KEV Mar 3, 2022
• High 7.0
  CVE-2016-5195 Exploited Public exploit EPSS 84%

  Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by le…

  linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu
  Nov 10, 2016

  KEV Mar 3, 2022
• High 7.8
  CVE-2010-0188 Exploited · Ransomware Public exploit EPSS 88%

  Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a…

  Feb 21, 2010

  KEV Mar 3, 2022
• High 7.8
  CVE-2010-0232 Exploited Public exploit EPSS 29%

  The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows S…

  Jan 21, 2010

  KEV Mar 3, 2022
• High 7.8
  CVE-2010-3333 Exploited Public exploit EPSS 89%

  Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and …

  Nov 10, 2010

  KEV Mar 3, 2022
• High 7.8
  CVE-2009-3129 Exploited Public exploit EPSS 84%

  Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Con…

  Nov 11, 2009

  KEV Mar 3, 2022
• High 7.8
  CVE-2017-0261 Exploited Public exploit EPSS 78%

  Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…

  Microsoft Microsoft Office
  May 12, 2017

  KEV Mar 3, 2022
• High 7.8
  CVE-2017-11826 Exploited Public exploit EPSS 82%

  Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Ser…

  Microsoft Microsoft Office
  Oct 13, 2017

  KEV Mar 3, 2022
• High 8.8
  CVE-2017-6736 Exploited Public exploit EPSS 70%

  The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

  Cisco IntelliShield IOS Universal Product iOS Network devices
  Jul 17, 2017

  KEV Mar 3, 2022
• High 7.8
  CVE-2017-8540 Exploited Public exploit EPSS 72%

  The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

  Microsoft Malware Protection Engine
  May 26, 2017

  KEV Mar 3, 2022
• High 7.2
  CVE-2019-1652 Exploited Public exploit EPSS 96%

  Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

  A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vu…

  Cisco Cisco Small Business RV Series Router Firmware Network devices
  Jan 24, 2019

  KEV Mar 3, 2022
• High 7.8
  CVE-2014-6352 Exploited Public exploit EPSS 77%

  Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  Oct 22, 2014

  KEV Feb 25, 2022
• High 7.8
  CVE-2017-8570 Exploited Public exploit EPSS 90%

  Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Mi…

  Microsoft Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016.
  Jul 11, 2017

  KEV Feb 25, 2022
• High 7.5
  CVE-2018-8174 Exploited · Ransomware Public exploit EPSS 88%

  A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…

  Microsoft Windows Server 2016 Windows Server 2012 R2 Windows Server 2012 Windows
  May 9, 2018

  KEV Feb 15, 2022
• High 7.8
  CVE-2018-15982 Exploited · Ransomware Public exploit EPSS 90%

  Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successfu…

  flashplugin-nonfree Ubuntu
  Jan 18, 2019

  KEV Feb 15, 2022
• High 7.8
  CVE-2018-20250 Exploited · Ransomware Public exploit EPSS 96%

  In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field …

  Check Point Software Technologies WinRAR Network devices
  Feb 5, 2019

  KEV Feb 15, 2022
• High 7.8
  CVE-2013-3906 Exploited Public exploit EPSS 85%

  GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compat…

  Nov 6, 2013

  KEV Feb 15, 2022
• High 7.8
  CVE-2014-1761 Exploited Public exploit EPSS 78%

  Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Off…

  Mar 24, 2014

  KEV Feb 15, 2022
• High 7.5
  CVE-2019-0752 Exploited · Ransomware Public exploit EPSS 82%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 10
  Apr 9, 2019

  KEV Feb 15, 2022
• High 8.8
  CVE-2022-22620 Exploited Public exploit EPSS 16%

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS…

  Apple macOS Safari (v and ) qtwebkit-source macOS Browsers Debian Ubuntu Alpine
  Mar 18, 2022

  KEV Feb 11, 2022
• High 7.8
  CVE-2015-1130 Exploited Public exploit

  The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and …

  Apr 10, 2015

  KEV Feb 10, 2022
• High 8.8
  CVE-2015-2051 Exploited Public exploit EPSS 97%

  The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute a…

  Feb 23, 2015

  KEV Feb 10, 2022
• High 7.8
  CVE-2014-4404 Exploited Public exploit EPSS 49%

  Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbit…

  Sep 18, 2014

  KEV Feb 10, 2022
• High 8.8
  CVE-2017-0144 Exploited · Ransomware Public exploit EPSS 99%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

  Microsoft Windows SMB Windows
  Mar 17, 2017

  KEV Feb 10, 2022
• High 7.8
  CVE-2017-0263 Exploited Public exploit EPSS 10%

  The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201…

  Microsoft Microsoft Windows Windows
  May 12, 2017

  KEV Feb 10, 2022
• High 8.8
  CVE-2017-0145 Exploited · Ransomware Public exploit EPSS 90%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

  Microsoft Windows SMB Windows
  Mar 17, 2017

  KEV Feb 10, 2022
• High 8.8
  CVE-2017-8464 Exploited Public exploit EPSS 90%

  Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20…

  Microsoft Windows Shell Windows
  Jun 15, 2017

  KEV Feb 10, 2022