CISA Known Exploited Vulnerabilities
1,764 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2018-5002 |
Adobe | Flash Player | — | 0.2506 | 2022-05-23 | 2022-06-13 | |
CVE-2018-8589 |
Microsoft | Win32k | — | 0.0302 | 2022-05-23 | 2022-06-13 | |
CVE-2022-30525 |
Zyxel | Multiple Firewalls | — | 0.9994 | 2022-05-16 | 2022-06-06 | |
CVE-2022-22947 |
VMware | Spring Cloud Gateway | — | 0.9825 | 2022-05-16 | 2022-06-06 | |
CVE-2022-1388 |
F5 | BIG-IP | — | 0.9995 | 2022-05-10 | 2022-05-31 | RW |
CVE-2021-1789 |
Apple | Multiple Products | — | 0.1398 | 2022-05-04 | 2022-05-25 | |
CVE-2019-8506 |
Apple | Multiple Products | — | 0.1616 | 2022-05-04 | 2022-05-25 | |
CVE-2014-4113 |
Microsoft | Win32k | — | 0.8665 | 2022-05-04 | 2022-05-25 | |
CVE-2014-0322 |
Microsoft | Internet Explorer | — | 0.8512 | 2022-05-04 | 2022-05-25 | |
CVE-2014-0160 |
OpenSSL | OpenSSL | — | 1.0000 | 2022-05-04 | 2022-05-25 | |
CVE-2022-29464 |
WSO2 | Multiple Products | — | 1.0000 | 2022-04-25 | 2022-05-16 | RW |
CVE-2022-26904 |
Microsoft | Windows | — | 0.1695 | 2022-04-25 | 2022-05-16 | |
CVE-2022-21919 |
Microsoft | Windows | — | 0.0243 | 2022-04-25 | 2022-05-16 | |
CVE-2022-0847 |
Linux | Kernel | — | 0.9280 | 2022-04-25 | 2022-05-16 | |
CVE-2021-41357 |
Microsoft | Win32k | — | 0.0158 | 2022-04-25 | 2022-05-16 | |
CVE-2021-40450 |
Microsoft | Win32k | — | 0.0158 | 2022-04-25 | 2022-05-16 | |
CVE-2019-1003029 |
Jenkins | Script Security Plugin | — | 0.7444 | 2022-04-25 | 2022-05-16 | |
CVE-2018-6882 |
Synacor | Zimbra Collaboration Suite (ZCS) | — | 0.2976 | 2022-04-19 | 2022-05-10 | RW |
CVE-2019-3568 |
Meta Platforms | — | 0.3008 | 2022-04-19 | 2022-05-10 | ||
CVE-2022-22718 |
Microsoft | Windows | — | 0.1846 | 2022-04-19 | 2022-05-10 | |
CVE-2022-22960 |
VMware | Multiple Products | — | 0.3552 | 2022-04-15 | 2022-05-06 | |
CVE-2022-1364 |
Chromium V8 | — | 0.1392 | 2022-04-15 | 2022-05-06 | ||
CVE-2019-3929 |
Crestron | Multiple Products | — | 0.9895 | 2022-04-15 | 2022-05-06 | |
CVE-2019-16057 |
D-Link | DNS-320 Storage Device | — | 0.8649 | 2022-04-15 | 2022-05-06 | RW |
CVE-2018-7841 |
Schneider Electric | U.motion Builder | — | 0.7249 | 2022-04-15 | 2022-05-06 | |
CVE-2016-4523 |
Trihedral | VTScada (formerly VTS) | — | 0.3117 | 2022-04-15 | 2022-05-06 | |
CVE-2014-0780 |
InduSoft | Web Studio | — | 0.7468 | 2022-04-15 | 2022-05-06 | |
CVE-2010-5330 |
Ubiquiti | AirOS | — | 0.4023 | 2022-04-15 | 2022-05-06 | |
CVE-2007-3010 |
Alcatel | OmniPCX Enterprise | — | 0.9738 | 2022-04-15 | 2022-05-06 | |
CVE-2022-22954 |
VMware | Workspace ONE Access and Identity Manager | — | 1.0000 | 2022-04-14 | 2022-05-05 | RW |
CVE-2022-24521 |
Microsoft | Windows | — | 0.0713 | 2022-04-13 | 2022-05-04 | RW |
CVE-2018-7602 |
Drupal | Core | — | 0.9917 | 2022-04-13 | 2022-05-04 | RW |
CVE-2018-20753 |
Kaseya | Virtual System/Server Administrator (VSA) | — | 0.2955 | 2022-04-13 | 2022-05-04 | RW |
CVE-2015-5123 |
Adobe | Flash Player | — | 0.1883 | 2022-04-13 | 2022-05-04 | |
CVE-2015-5122 |
Adobe | Flash Player | — | 0.8703 | 2022-04-13 | 2022-05-04 | |
CVE-2015-3113 |
Adobe | Flash Player | — | 0.9981 | 2022-04-13 | 2022-05-04 | |
CVE-2015-2502 |
Microsoft | Internet Explorer | — | 0.5100 | 2022-04-13 | 2022-05-04 | |
CVE-2015-0313 |
Adobe | Flash Player | — | 0.9534 | 2022-04-13 | 2022-05-04 | |
CVE-2015-0311 |
Adobe | Flash Player | — | 0.8559 | 2022-04-13 | 2022-05-04 | |
CVE-2014-9163 |
Adobe | Flash Player | — | 0.4488 | 2022-04-13 | 2022-05-04 | |
CVE-2022-23176 |
WatchGuard | Firebox and XTM | — | 0.1080 | 2022-04-11 | 2022-05-02 | |
CVE-2021-42287 |
Microsoft | Active Directory | — | 0.7717 | 2022-04-11 | 2022-05-02 | RW |
CVE-2021-42278 |
Microsoft | Active Directory | — | 0.7330 | 2022-04-11 | 2022-05-02 | RW |
CVE-2021-39793 |
Pixel | — | 0.0069 | 2022-04-11 | 2022-05-02 | ||
CVE-2021-27852 |
Checkbox | Checkbox Survey | — | 0.3026 | 2022-04-11 | 2022-05-02 | |
CVE-2021-22600 |
Linux | Kernel | — | 0.0659 | 2022-04-11 | 2022-05-02 | |
CVE-2020-2509 |
QNAP | QNAP Network-Attached Storage (NAS) | — | 0.3399 | 2022-04-11 | 2022-05-02 | |
CVE-2017-11317 |
Telerik | User Interface (UI) for ASP.NET AJAX | — | 0.8417 | 2022-04-11 | 2022-05-02 | |
CVE-2021-3156 |
Sudo | Sudo | — | 0.9996 | 2022-04-06 | 2022-04-27 | |
CVE-2021-31166 |
Microsoft | HTTP Protocol Stack | — | 0.9987 | 2022-04-06 | 2022-04-27 |