CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2012-2034 KEV |
[KEV] Buffer Overflow in Adobe Flash Player (CVE-2012-2034)
Vulnerability in Adobe Flash Player (CVE-2012-2034). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-2539 KEV |
[KEV] Vulnerability in Microsoft Word (CVE-2012-2539)
Vulnerability in Microsoft Word (CVE-2012-2539). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-5076 KEV |
[KEV] Vulnerability in Oracle Java SE (CVE-2012-5076)
Vulnerability in Oracle Java SE (CVE-2012-5076). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-1690 KEV |
[KEV] Buffer Overflow in Mozilla Firefox and Thunderbird (CVE-2013-1690)
Vulnerability in Mozilla Firefox and Thunderbird (CVE-2013-1690). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-2465 KEV |
[KEV] Vulnerability in Oracle Java SE (CVE-2013-2465)
Vulnerability in Oracle Java SE (CVE-2013-2465). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-2551 KEV |
[KEV] Use-After-Free in Microsoft Internet Explorer (CVE-2013-2551)
Vulnerability in Microsoft Internet Explorer (CVE-2013-2551). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-2729 KEV |
[KEV] Vulnerability in Adobe Reader and Acrobat (CVE-2013-2729)
Vulnerability in Adobe Reader and Acrobat (CVE-2013-2729). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-3660 KEV |
[KEV] Buffer Overflow in Microsoft Win32k (CVE-2013-3660)
Vulnerability in Microsoft Win32k (CVE-2013-3660). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-1770 KEV |
[KEV] Vulnerability in Microsoft Office (CVE-2015-1770)
Vulnerability in Microsoft Office (CVE-2015-1770). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-2419 KEV |
[KEV] Buffer Overflow in Microsoft Internet Explorer (CVE-2015-2419)
Vulnerability in Microsoft Internet Explorer (CVE-2015-2419). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-2426 KEV |
[KEV] Buffer Overflow in Microsoft Windows (CVE-2015-2426)
Vulnerability in Microsoft Windows (CVE-2015-2426). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-0040 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2016-0040)
Vulnerability in Microsoft Windows (CVE-2016-0040). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-0151 KEV |
[KEV] Vulnerability in Microsoft Client-Server Run-time Subsystem (CSRSS) (CVE-2016-0151)
Vulnerability in Microsoft Client-Server Run-time Subsystem (CSRSS) (CVE-2016-0151). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-0189 KEV |
[KEV] Buffer Overflow in Microsoft Internet Explorer (CVE-2016-0189)
Vulnerability in Microsoft Internet Explorer (CVE-2016-0189). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-7200 KEV |
[KEV] Buffer Overflow in Microsoft Edge (CVE-2016-7200)
Vulnerability in Microsoft Edge (CVE-2016-7200). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-7201 KEV |
[KEV] Buffer Overflow in Microsoft Edge (CVE-2016-7201)
Vulnerability in Microsoft Edge (CVE-2016-7201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0037 KEV |
[KEV] Vulnerability in Microsoft Edge and Internet Explorer (CVE-2017-0037)
Vulnerability in Microsoft Edge and Internet Explorer (CVE-2017-0037). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0059 KEV |
[KEV] Information Disclosure in Microsoft Internet Explorer (CVE-2017-0059)
Vulnerability in Microsoft Internet Explorer (CVE-2017-0059). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0213 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2017-0213)
Vulnerability in Microsoft Windows (CVE-2017-0213). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-8405 KEV |
[KEV] Vulnerability in Microsoft DirectX Graphics Kernel (DXGKRNL) (CVE-2018-8405)
Vulnerability in Microsoft DirectX Graphics Kernel (DXGKRNL) (CVE-2018-8405). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-8406 KEV |
[KEV] Vulnerability in Microsoft DirectX Graphics Kernel (DXGKRNL) (CVE-2018-8406)
Vulnerability in Microsoft DirectX Graphics Kernel (DXGKRNL) (CVE-2018-8406). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-8440 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2018-8440)
Vulnerability in Microsoft Windows (CVE-2018-8440). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-7483 KEV |
[KEV] Path Traversal in SonicWall SMA100 (CVE-2019-7483)
Path traversal in SonicWall SMA100 (CVE-2019-7483). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-20028 KEV |
[KEV] SQL Injection in SonicWall Secure Remote Access (SRA) (CVE-2021-20028)
SQL injection in SonicWall Secure Remote Access (SRA) (CVE-2021-20028). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-26085 KEV |
[KEV] Vulnerability in Atlassian Confluence Server (CVE-2021-26085)
Vulnerability in Atlassian Confluence Server (CVE-2021-26085). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-34486 KEV |
[KEV] Use-After-Free in Microsoft Windows (CVE-2021-34486)
Vulnerability in Microsoft Windows (CVE-2021-34486). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-38646 KEV |
[KEV] Vulnerability in Microsoft Office (CVE-2021-38646)
Vulnerability in Microsoft Office (CVE-2021-38646). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-0543 KEV |
[KEV] Vulnerability in Debian-specific Redis Servers (CVE-2022-0543)
Vulnerability in Debian-specific Redis Servers (CVE-2022-0543). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-1096 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2022-1096)
Vulnerability in Google Chromium V8 (CVE-2022-1096). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2005-2773 KEV |
[KEV] Vulnerability in Hewlett Packard (HP) OpenView Network Node Manager (CVE-2005-2773)
Vulnerability in Hewlett Packard (HP) OpenView Network Node Manager (CVE-2005-2773). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-0927 KEV |
[KEV] Vulnerability in Adobe Reader and Acrobat (CVE-2009-0927)
Vulnerability in Adobe Reader and Acrobat (CVE-2009-0927). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-1151 KEV |
[KEV] Code Injection in phpMyAdmin (CVE-2009-1151)
Code injection in phpMyAdmin (CVE-2009-1151). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-2055 KEV |
[KEV] Vulnerability in Cisco IOS XR (CVE-2009-2055)
Vulnerability in Cisco IOS XR (CVE-2009-2055). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-2861 KEV |
[KEV] Path Traversal in Adobe ColdFusion (CVE-2010-2861)
Path traversal in Adobe ColdFusion (CVE-2010-2861). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-3035 KEV |
[KEV] Vulnerability in Cisco IOS XR (CVE-2010-3035)
Vulnerability in Cisco IOS XR (CVE-2010-3035). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-4344 KEV |
[KEV] Buffer Overflow in Exim (CVE-2010-4344)
Vulnerability in Exim (CVE-2010-4344). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-4345 KEV |
[KEV] Vulnerability in Exim (CVE-2010-4345)
Vulnerability in Exim (CVE-2010-4345). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-1823 KEV |
[KEV] Vulnerability in PHP (CVE-2012-1823)
Vulnerability in PHP (CVE-2012-1823). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-2251 KEV |
[KEV] Vulnerability in Apache Struts (CVE-2013-2251)
Vulnerability in Apache Struts (CVE-2013-2251). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-4810 KEV |
[KEV] Code Injection in Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management (CVE-2013-4810)
Code injection in Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management (CVE-2013-4810). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-5223 KEV |
[KEV] Cross-Site Scripting (XSS) in D-Link DSL-2760U (CVE-2013-5223)
Cross-site scripting in D-Link DSL-2760U (CVE-2013-5223). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-0130 KEV |
[KEV] Path Traversal in Ruby on Rails (CVE-2014-0130)
Path traversal in Ruby on Rails (CVE-2014-0130). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-3120 KEV |
[KEV] Vulnerability in Elasticsearch (CVE-2014-3120)
Vulnerability in Elasticsearch (CVE-2014-3120). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-6287 KEV |
[KEV] Code Injection in Rejetto HTTP File Server (HFS) (CVE-2014-6287)
Code injection in Rejetto HTTP File Server (HFS) (CVE-2014-6287). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-6324 KEV |
[KEV] Vulnerability in Microsoft Kerberos Key Distribution Center (KDC) (CVE-2014-6324)
Vulnerability in Microsoft Kerberos Key Distribution Center (KDC) (CVE-2014-6324). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-6332 KEV |
[KEV] Buffer Overflow in Microsoft Windows (CVE-2014-6332)
Vulnerability in Microsoft Windows (CVE-2014-6332). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-0666 KEV |
[KEV] Path Traversal in Cisco Prime Data Center Network Manager (DCNM) (CVE-2015-0666)
Path traversal in Cisco Prime Data Center Network Manager (DCNM) (CVE-2015-0666). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-1187 KEV |
[KEV] Authentication Bypass in D-Link and TRENDnet Multiple Devices (CVE-2015-1187)
Authentication bypass in D-Link and TRENDnet Multiple Devices (CVE-2015-1187). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-1427 KEV |
[KEV] Vulnerability in Elasticsearch (CVE-2015-1427)
Vulnerability in Elasticsearch (CVE-2015-1427). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-3035 KEV |
[KEV] Path Traversal in TP-Link Multiple Archer Devices (CVE-2015-3035)
Path traversal in TP-Link Multiple Archer Devices (CVE-2015-3035). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
