Skip to content
OpenAdvisories

Source

CISA Known Exploited Vulnerabilities

Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

All Critical High Medium Low Public exploit

1,779 results · Feed

  • High 7.8
    CVE-2016-1019 Exploited · Ransomware EPSS 22%

    Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or p…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2016-4117 Exploited · Ransomware Public exploit EPSS 94%

    Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.5
    CVE-2016-8562 Exploited

    A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions <…

    KEV Mar 3, 2022
  • High 7.0
    CVE-2016-5195 Exploited Public exploit EPSS 84%

    Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by le…

    linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2010-0188 Exploited · Ransomware Public exploit EPSS 88%

    Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2010-0232 Exploited Public exploit EPSS 29%

    The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows S…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2010-3333 Exploited Public exploit EPSS 89%

    Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and …

    KEV Mar 3, 2022
  • High 7.8
    CVE-2009-1123 Exploited

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2009-3129 Exploited Public exploit EPSS 84%

    Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Con…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-0001 Exploited

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …

    Microsoft Windows GDI+ Windows
    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-0261 Exploited Public exploit EPSS 78%

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…

    Microsoft Microsoft Office
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-11292 Exploited EPSS 11%

    Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an unt…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-11826 Exploited Public exploit EPSS 82%

    Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Ser…

    Microsoft Microsoft Office
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12231 Exploited

    A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12234 Exploited

    Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 throug…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12233 Exploited

    Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 throug…

    iOS
    KEV Mar 3, 2022
  • Medium 5.9
    CVE-2017-12319 Exploited

    A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE S…

    iOS
    KEV Mar 3, 2022
  • Medium 6.5
    CVE-2017-12232 Exploited

    A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers …

    iOS
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2017-12240 Exploited EPSS 14%

    The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could a…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12237 Exploited

    A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3…

    iOS
    KEV Mar 3, 2022
  • Medium 6.5
    CVE-2017-12238 Exploited

    A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 S…

    iOS
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-12235 Exploited

    A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 …

    iOS
    KEV Mar 3, 2022
  • Medium 6.5
    CVE-2017-6663 Exploited

    A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unau…

    iOS
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6740 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6743 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6744 Exploited

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6737 Exploited EPSS 45%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IOS iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6738 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco Cisco IOS XE Software IOS iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6736 Exploited Public exploit EPSS 70%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    Cisco IntelliShield IOS Universal Product iOS Network devices
    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6739 Exploited EPSS 11%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    IntelliShield Universal Product
    KEV Mar 3, 2022
  • High 7.5
    CVE-2017-6627 Exploited

    A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow a…

    iOS
    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-8540 Exploited Public exploit EPSS 72%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    Microsoft Malware Protection Engine
    KEV Mar 3, 2022
  • Medium 5.5
    CVE-2021-41379 Exploited · Ransomware EPSS 19%

    Windows Installer Elevation of Privilege Vulnerability

    Windows Installer Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2019-16928 Exploited EPSS 42%

    Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-b…

    exim4 exim Debian Alpine
    KEV Mar 3, 2022
  • High 8.8
    CVE-2019-1297 Exploited EPSS 22%

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

    Microsoft Microsoft Office Office 365 ProPlus Microsoft Excel
    KEV Mar 3, 2022
  • High 7.2
    CVE-2019-1652 Exploited Public exploit EPSS 96%

    Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vu…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • Medium 6.1
    CVE-2022-24682 Exploited · Ransomware Scanner template EPSS 31%

    An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), …

    KEV Feb 25, 2022
  • High 7.8
    CVE-2014-6352 Exploited Public exploit EPSS 77%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

    KEV Feb 25, 2022
  • High 8.8
    CVE-2017-0222 Exploited EPSS 30%

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…

    Microsoft Internet Explorer
    KEV Feb 25, 2022
  • High 7.8
    CVE-2017-8570 Exploited Public exploit EPSS 90%

    Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Mi…

    Microsoft Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016.
    KEV Feb 25, 2022