CISA Known Exploited Vulnerabilities
390 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2026-96951 |
Microsoft | Windows | 8.8 | 0.0981 | 2026-10-13 | 2026-10-16 | |
CVE-2026-65660 |
Microsoft | SharePoint | 8.8 | 0.0819 | 2026-09-25 | 2026-09-28 | 2 PoC |
CVE-2026-81963 |
Microsoft | Windows | — | 0.0039 | 2026-09-08 | 2026-09-22 | |
CVE-2026-85880 |
Microsoft | Windows | — | 0.0039 | 2026-09-08 | 2026-09-22 | |
CVE-2019-1068 |
Microsoft | SQL Server | — | — | 2026-08-26 | 2026-08-29 | |
CVE-2026-33824 |
Microsoft | Internet Key Exchange (IKE) Service Extensions | — | 0.7705 | 2026-08-18 | 2026-08-21 | |
CVE-2026-55040 |
Microsoft | SharePoint | 9.1 | 0.6954 | 2026-08-18 | 2026-08-21 | 5 PoC |
CVE-2026-68820 |
Microsoft | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0033 | 2026-08-11 | 2026-08-25 | 4 PoC |
CVE-2026-50522 |
Microsoft | SharePoint | 9.8 | 0.0304 | 2026-07-22 | 2026-07-25 | |
CVE-2026-58644 |
Microsoft | SharePoint | 9.8 | 0.1587 | 2026-07-16 | 2026-07-19 | |
CVE-2026-56155 |
Microsoft | Active Directory Federation Services | 7.8 | 0.0035 | 2026-07-14 | 2026-07-28 | |
CVE-2026-56164 |
Microsoft | SharePoint Server | 5.3 | 0.0101 | 2026-07-14 | 2026-07-17 | |
CVE-2026-45659 |
Microsoft | SharePoint Server | — | 0.8024 | 2026-07-01 | 2026-07-04 | RW |
CVE-2008-4250 |
Microsoft | Windows | — | — | 2026-05-20 | 2026-06-03 | |
CVE-2009-1537 |
Microsoft | DirectX | — | — | 2026-05-20 | 2026-06-03 | |
CVE-2010-0249 |
Microsoft | Internet Explorer | — | — | 2026-05-20 | 2026-06-03 | |
CVE-2010-0806 |
Microsoft | Internet Explorer | — | — | 2026-05-20 | 2026-06-03 | |
CVE-2026-41091 |
Microsoft | Defender | — | 0.0820 | 2026-05-20 | 2026-06-03 | |
CVE-2026-45498 |
Microsoft | Defender | — | 0.6308 | 2026-05-20 | 2026-06-03 | |
CVE-2026-42897 |
Microsoft | Microsoft | 6.1 | 0.7066 | 2026-05-15 | 2026-05-29 | |
CVE-2026-32202 |
Microsoft | Windows | 4.3 | 0.7090 | 2026-04-28 | 2026-05-12 | |
CVE-2026-33825 |
Microsoft | Defender | — | 0.0675 | 2026-04-22 | 2026-05-06 | RW |
CVE-2009-0238 |
Microsoft | Office | — | — | 2026-04-14 | 2026-04-28 | |
CVE-2026-32201 |
Microsoft | SharePoint Server | 6.5 | 0.4338 | 2026-04-14 | 2026-04-28 | |
CVE-2012-1854 |
Microsoft | Visual Basic for Applications (VBA) | — | — | 2026-04-13 | 2026-04-27 | |
CVE-2025-60710 |
Microsoft | Windows | — | 0.0461 | 2026-04-13 | 2026-04-27 | RW |
CVE-2023-21529 |
Microsoft | Exchange Server | — | 0.5929 | 2026-04-13 | 2026-04-27 | RW |
CVE-2023-36424 |
Microsoft | Windows | — | 0.1209 | 2026-04-13 | 2026-04-27 | |
CVE-2026-20963 |
Microsoft | SharePoint | — | 0.2920 | 2026-03-18 | 2026-03-21 | |
CVE-2008-0015 |
Microsoft | Windows | — | — | 2026-02-17 | 2026-03-10 | |
CVE-2024-43468 |
Microsoft | Configuration Manager | — | 0.8104 | 2026-02-12 | 2026-03-05 | |
CVE-2026-21513 |
Microsoft | Windows | — | 0.1585 | 2026-02-10 | 2026-03-03 | |
CVE-2026-21525 |
Microsoft | Windows | — | 0.0486 | 2026-02-10 | 2026-03-03 | |
CVE-2026-21510 |
Microsoft | Windows | — | 0.6124 | 2026-02-10 | 2026-03-03 | |
CVE-2026-21533 |
Microsoft | Windows | — | 0.0418 | 2026-02-10 | 2026-03-03 | |
CVE-2026-21519 |
Microsoft | Windows | — | 0.0248 | 2026-02-10 | 2026-03-03 | |
CVE-2026-21514 |
Microsoft | Office | — | 0.0159 | 2026-02-10 | 2026-03-03 | |
CVE-2026-21509 |
Microsoft | Office | — | 0.7079 | 2026-01-26 | 2026-02-16 | |
CVE-2026-20805 |
Microsoft | Windows | — | 0.0746 | 2026-01-13 | 2026-02-03 | |
CVE-2009-0556 |
Microsoft | Office | — | — | 2026-01-07 | 2026-01-28 | |
CVE-2025-62221 |
Microsoft | Windows | — | 0.0250 | 2025-12-09 | 2025-12-30 | |
CVE-2025-62215 |
Microsoft | Windows | — | 0.0446 | 2025-11-12 | 2025-12-03 | |
CVE-2025-59287 |
Microsoft | Windows | — | 0.9998 | 2025-10-24 | 2025-11-14 | |
CVE-2025-33073 |
Microsoft | Windows | — | 0.8270 | 2025-10-20 | 2025-11-10 | |
CVE-2025-24990 |
Microsoft | Windows | — | 0.0637 | 2025-10-14 | 2025-11-04 | |
CVE-2025-59230 |
Microsoft | Windows | — | 0.0266 | 2025-10-14 | 2025-11-04 | |
CVE-2010-3962 |
Microsoft | Internet Explorer | — | — | 2025-10-06 | 2025-10-27 | |
CVE-2021-43226 |
Microsoft | Windows | — | — | 2025-10-06 | 2025-10-27 | RW |
CVE-2013-3918 |
Microsoft | Windows | — | — | 2025-10-06 | 2025-10-27 | |
CVE-2011-3402 |
Microsoft | Windows | — | — | 2025-10-06 | 2025-10-27 |