CISA Known Exploited Vulnerabilities
1,764 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2017-0148 |
Microsoft | SMBv1 server | — | 0.9936 | 2022-04-06 | 2022-04-27 | RW |
CVE-2022-22965 |
VMware | Spring Framework | — | 0.9964 | 2022-04-04 | 2022-04-25 | |
CVE-2022-22675 |
Apple | macOS | — | 0.1249 | 2022-04-04 | 2022-04-25 | |
CVE-2022-22674 |
Apple | macOS | — | 0.0109 | 2022-04-04 | 2022-04-25 | |
CVE-2021-45382 |
D-Link | Multiple Routers | — | 0.9784 | 2022-04-04 | 2022-04-25 | |
CVE-2022-26871 |
Trend Micro | Apex Central | — | 0.1948 | 2022-03-31 | 2022-04-21 | |
CVE-2022-1040 |
Sophos | Firewall | — | 0.9980 | 2022-03-31 | 2022-04-21 | |
CVE-2021-34484 |
Microsoft | Windows | — | 0.2183 | 2022-03-31 | 2022-04-21 | |
CVE-2021-28799 |
QNAP | Network Attached Storage (NAS) | — | 0.7825 | 2022-03-31 | 2022-04-21 | RW |
CVE-2021-21551 |
Dell | dbutil Driver | — | 0.7963 | 2022-03-31 | 2022-04-21 | |
CVE-2018-10562 |
Dasan | Gigabit Passive Optical Network (GPON) Routers | — | 0.9995 | 2022-03-31 | 2022-04-21 | RW |
CVE-2018-10561 |
Dasan | Gigabit Passive Optical Network (GPON) Routers | — | 0.9282 | 2022-03-31 | 2022-04-21 | |
CVE-2022-1096 |
Chromium V8 | — | 0.2473 | 2022-03-28 | 2022-04-18 | ||
CVE-2022-0543 |
Redis | Debian-specific Redis Servers | — | 0.9935 | 2022-03-28 | 2022-04-18 | |
CVE-2021-38646 |
Microsoft | Office | — | 0.0799 | 2022-03-28 | 2022-04-18 | RW |
CVE-2021-34486 |
Microsoft | Windows | — | 0.0933 | 2022-03-28 | 2022-04-18 | |
CVE-2021-26085 |
Atlassian | Confluence Server | — | 0.9994 | 2022-03-28 | 2022-04-18 | RW |
CVE-2021-20028 |
SonicWall | Secure Remote Access (SRA) | — | 0.3008 | 2022-03-28 | 2022-04-18 | RW |
CVE-2019-7483 |
SonicWall | SMA100 | — | 0.0401 | 2022-03-28 | 2022-04-18 | |
CVE-2018-8440 |
Microsoft | Windows | — | 0.1853 | 2022-03-28 | 2022-04-18 | RW |
CVE-2018-8406 |
Microsoft | DirectX Graphics Kernel (DXGKRNL) | — | 0.0344 | 2022-03-28 | 2022-04-18 | RW |
CVE-2018-8405 |
Microsoft | DirectX Graphics Kernel (DXGKRNL) | — | 0.0344 | 2022-03-28 | 2022-04-18 | RW |
CVE-2017-0213 |
Microsoft | Windows | — | 0.8426 | 2022-03-28 | 2022-04-18 | RW |
CVE-2017-0059 |
Microsoft | Internet Explorer | — | 0.6197 | 2022-03-28 | 2022-04-18 | |
CVE-2017-0037 |
Microsoft | Edge and Internet Explorer | — | 0.8039 | 2022-03-28 | 2022-04-18 | |
CVE-2016-7201 |
Microsoft | Edge | — | 0.8000 | 2022-03-28 | 2022-04-18 | |
CVE-2016-7200 |
Microsoft | Edge | — | 0.8278 | 2022-03-28 | 2022-04-18 | |
CVE-2016-0189 |
Microsoft | Internet Explorer | — | 0.9406 | 2022-03-28 | 2022-04-18 | RW |
CVE-2016-0151 |
Microsoft | Client-Server Run-time Subsystem (CSRSS) | — | 0.6282 | 2022-03-28 | 2022-04-18 | RW |
CVE-2016-0040 |
Microsoft | Windows | — | 0.2428 | 2022-03-28 | 2022-04-18 | |
CVE-2015-2426 |
Microsoft | Windows | — | 0.8658 | 2022-03-28 | 2022-04-18 | |
CVE-2015-2419 |
Microsoft | Internet Explorer | — | 0.5298 | 2022-03-28 | 2022-04-18 | |
CVE-2015-1770 |
Microsoft | Office | — | 0.3499 | 2022-03-28 | 2022-04-18 | |
CVE-2013-3660 |
Microsoft | Win32k | — | 0.3932 | 2022-03-28 | 2022-04-18 | |
CVE-2013-2729 |
Adobe | Reader and Acrobat | — | 0.6655 | 2022-03-28 | 2022-04-18 | |
CVE-2013-2551 |
Microsoft | Internet Explorer | — | 0.7392 | 2022-03-28 | 2022-04-18 | RW |
CVE-2013-2465 |
Oracle | Java SE | — | 0.9877 | 2022-03-28 | 2022-04-18 | RW |
CVE-2013-1690 |
Mozilla | Firefox and Thunderbird | — | 0.6902 | 2022-03-28 | 2022-04-18 | |
CVE-2012-5076 |
Oracle | Java SE | — | 0.9125 | 2022-03-28 | 2022-04-18 | |
CVE-2012-2539 |
Microsoft | Word | — | 0.5303 | 2022-03-28 | 2022-04-18 | |
CVE-2012-2034 |
Adobe | Flash Player | — | 0.0771 | 2022-03-28 | 2022-04-18 | |
CVE-2012-0518 |
Oracle | Fusion Middleware | — | 0.0469 | 2022-03-28 | 2022-04-18 | |
CVE-2011-2005 |
Microsoft | Ancillary Function Driver (afd.sys) | — | 0.3176 | 2022-03-28 | 2022-04-18 | |
CVE-2010-4398 |
Microsoft | Windows | — | 0.0866 | 2022-03-28 | 2022-04-21 | |
CVE-2022-26318 |
WatchGuard | Firebox and XTM Appliances | — | 0.7816 | 2022-03-25 | 2022-04-15 | |
CVE-2022-26143 |
Mitel | MiCollab, MiVoice Business Express | — | 0.8732 | 2022-03-25 | 2022-04-15 | |
CVE-2022-21999 |
Microsoft | Windows | — | 0.4101 | 2022-03-25 | 2022-04-15 | RW |
CVE-2021-42237 |
Sitecore | XP | — | 0.9757 | 2022-03-25 | 2022-04-15 | RW |
CVE-2021-22941 |
Citrix | ShareFile | — | 0.5359 | 2022-03-25 | 2022-04-15 | RW |
CVE-2020-9377 |
D-Link | DIR-610 Devices | — | 0.2189 | 2022-03-25 | 2022-04-15 |