CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2017-6862 KEV |
[KEV] Buffer Overflow in NETGEAR Multiple Devices (CVE-2017-6862)
Vulnerability in NETGEAR Multiple Devices (CVE-2017-6862). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-17463 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2018-17463)
Vulnerability in Google Chromium V8 (CVE-2018-17463). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-17480 KEV |
[KEV] Out-of-Bounds Write in Google Chromium V8 (CVE-2018-17480)
Out-of-bounds write in Google Chromium V8 (CVE-2018-17480). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-4990 KEV |
[KEV] Vulnerability in Adobe Acrobat and Reader (CVE-2018-4990)
Vulnerability in Adobe Acrobat and Reader (CVE-2018-4990). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-6065 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2018-6065)
Vulnerability in Google Chromium V8 (CVE-2018-6065). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-15271 KEV |
[KEV] Unsafe Deserialization in Cisco RV Series Routers (CVE-2019-15271)
Vulnerability in Cisco RV Series Routers (CVE-2019-15271). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-5825 KEV |
[KEV] Out-of-Bounds Write in Google Chromium V8 (CVE-2019-5825)
Out-of-bounds write in Google Chromium V8 (CVE-2019-5825). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-7192 KEV |
[KEV] Authorization Flaw in QNAP Photo Station (CVE-2019-7192)
Vulnerability in QNAP Photo Station (CVE-2019-7192). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-7193 KEV |
[KEV] Vulnerability in QNAP QTS (CVE-2019-7193)
Vulnerability in QNAP QTS (CVE-2019-7193). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-7194 KEV |
[KEV] Path Traversal in QNAP Photo Station (CVE-2019-7194)
Path traversal in QNAP Photo Station (CVE-2019-7194). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-7195 KEV |
[KEV] Path Traversal in QNAP Photo Station (CVE-2019-7195)
Path traversal in QNAP Photo Station (CVE-2019-7195). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-26134 KEV |
[KEV] Vulnerability in Atlassian Confluence Server/Data Center (CVE-2022-26134)
Vulnerability in Atlassian Confluence Server/Data Center (CVE-2022-26134). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-0738 KEV |
[KEV] Vulnerability in Red Hat JBoss (CVE-2010-0738)
Vulnerability in Red Hat JBoss (CVE-2010-0738). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-0840 KEV |
[KEV] Vulnerability in Oracle Java Runtime Environment (JRE) (CVE-2010-0840)
Vulnerability in Oracle Java Runtime Environment (JRE) (CVE-2010-0840). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-1428 KEV |
[KEV] Vulnerability in Red Hat JBoss (CVE-2010-1428)
Vulnerability in Red Hat JBoss (CVE-2010-1428). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-1710 KEV |
[KEV] Vulnerability in Oracle Fusion Middleware (CVE-2012-1710)
Vulnerability in Oracle Fusion Middleware (CVE-2012-1710). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-0074 KEV |
[KEV] Vulnerability in Microsoft Silverlight (CVE-2013-0074)
Vulnerability in Microsoft Silverlight (CVE-2013-0074). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-0422 KEV |
[KEV] Vulnerability in Oracle Java Runtime Environment (JRE) (CVE-2013-0422)
Vulnerability in Oracle Java Runtime Environment (JRE) (CVE-2013-0422). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-0431 KEV |
[KEV] Vulnerability in Oracle Java Runtime Environment (JRE) (CVE-2013-0431)
Vulnerability in Oracle Java Runtime Environment (JRE) (CVE-2013-0431). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-2423 KEV |
[KEV] Vulnerability in Oracle Java Runtime Environment (JRE) (CVE-2013-2423)
Vulnerability in Oracle Java Runtime Environment (JRE) (CVE-2013-2423). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-3896 KEV |
[KEV] Vulnerability in Microsoft Silverlight (CVE-2013-3896)
Vulnerability in Microsoft Silverlight (CVE-2013-3896). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-3993 KEV |
[KEV] Vulnerability in IBM InfoSphere BigInsights (CVE-2013-3993)
Vulnerability in IBM InfoSphere BigInsights (CVE-2013-3993). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-7331 KEV |
[KEV] Information Disclosure in Microsoft Internet Explorer (CVE-2013-7331)
Vulnerability in Microsoft Internet Explorer (CVE-2013-7331). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-3153 KEV |
[KEV] Privilege Escalation in Linux Kernel (CVE-2014-3153)
Vulnerability in Linux Kernel (CVE-2014-3153). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-4077 KEV |
[KEV] Vulnerability in Microsoft Input Method Editor (IME) Japanese (CVE-2014-4077)
Vulnerability in Microsoft Input Method Editor (IME) Japanese (CVE-2014-4077). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-2817 KEV |
[KEV] Vulnerability in Microsoft Internet Explorer (CVE-2014-2817)
Vulnerability in Microsoft Internet Explorer (CVE-2014-2817). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-0546 KEV |
[KEV] Vulnerability in Adobe Reader and Acrobat (CVE-2014-0546)
Vulnerability in Adobe Reader and Acrobat (CVE-2014-0546). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-4123 KEV |
[KEV] Vulnerability in Microsoft Internet Explorer (CVE-2014-4123)
Vulnerability in Microsoft Internet Explorer (CVE-2014-4123). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-8439 KEV |
[KEV] Buffer Overflow in Adobe Flash Player (CVE-2014-8439)
Vulnerability in Adobe Flash Player (CVE-2014-8439). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-4148 KEV |
[KEV] Code Injection in Microsoft Windows (CVE-2014-4148)
Code injection in Microsoft Windows (CVE-2014-4148). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-1671 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2015-1671)
Vulnerability in Microsoft Windows (CVE-2015-1671). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-6175 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2015-6175)
Vulnerability in Microsoft Windows (CVE-2015-6175). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-8651 KEV |
[KEV] Vulnerability in Adobe Flash Player (CVE-2015-8651)
Vulnerability in Adobe Flash Player (CVE-2015-8651). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-4495 KEV |
[KEV] Information Disclosure in Mozilla Firefox (CVE-2015-4495)
Vulnerability in Mozilla Firefox (CVE-2015-4495). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-1769 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2015-1769)
Vulnerability in Microsoft Windows (CVE-2015-1769). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-2425 KEV |
[KEV] Buffer Overflow in Microsoft Internet Explorer (CVE-2015-2425)
Vulnerability in Microsoft Internet Explorer (CVE-2015-2425). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-2360 KEV |
[KEV] Buffer Overflow in Microsoft Win32k (CVE-2015-2360)
Vulnerability in Microsoft Win32k (CVE-2015-2360). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-0071 KEV |
[KEV] Vulnerability in Microsoft Internet Explorer (CVE-2015-0071)
Vulnerability in Microsoft Internet Explorer (CVE-2015-0071). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-0016 KEV |
[KEV] Path Traversal in Microsoft Windows (CVE-2015-0016)
Path traversal in Microsoft Windows (CVE-2015-0016). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-0310 KEV |
[KEV] Vulnerability in Adobe Flash Player (CVE-2015-0310)
Vulnerability in Adobe Flash Player (CVE-2015-0310). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-0034 KEV |
[KEV] Vulnerability in Microsoft Silverlight (CVE-2016-0034)
Vulnerability in Microsoft Silverlight (CVE-2016-0034). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-0984 KEV |
[KEV] Use-After-Free in Adobe Flash Player and AIR (CVE-2016-0984)
Vulnerability in Adobe Flash Player and AIR (CVE-2016-0984). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-1010 KEV |
[KEV] Vulnerability in Adobe Flash Player and AIR (CVE-2016-1010)
Vulnerability in Adobe Flash Player and AIR (CVE-2016-1010). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-7256 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2016-7256)
Vulnerability in Microsoft Windows (CVE-2016-7256). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-3393 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2016-3393)
Vulnerability in Microsoft Windows (CVE-2016-3393). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-3010 KEV |
[KEV] Vulnerability in Oracle Solaris (CVE-2019-3010)
Vulnerability in Oracle Solaris (CVE-2019-3010). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-3298 KEV |
[KEV] Information Disclosure in Microsoft Internet Explorer (CVE-2016-3298)
Vulnerability in Microsoft Internet Explorer (CVE-2016-3298). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-6367 KEV |
[KEV] Command Injection in Cisco Adaptive Security Appliance (ASA) (CVE-2016-6367)
Command injection in Cisco Adaptive Security Appliance (ASA) (CVE-2016-6367). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-6366 KEV |
[KEV] Buffer Overflow in Cisco Adaptive Security Appliance (ASA) (CVE-2016-6366)
Vulnerability in Cisco Adaptive Security Appliance (ASA) (CVE-2016-6366). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-4657 KEV |
[KEV] Buffer Overflow in Apple iOS (CVE-2016-4657)
Vulnerability in Apple iOS (CVE-2016-4657). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
