Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1699
- On the catalogue
- 5
- Added in 7 days
- 7
- Due within 7 days
- 355
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2024-5647 | Not specified | 6.4medium | — | — | |
| CVE-2021-47983 | Not specified | 6.4medium | — | — | |
| CVE-2021-40448 | Microsoft Accessibility Insights For Android | 6.3medium | — | — | |
| CVE-2021-38669 | Microsoft Edge | 6.4medium | — | — | |
| CVE-2021-36929 | Microsoft Edge Chromium | 6.3medium | — | — | |
| CVE-2021-34500 | Microsoft Windows 10 | 6.3medium | — | — | |
| CVE-2021-33765 | Microsoft Windows 10 | 6.2medium | — | — | |
| CVE-2021-33755 | Microsoft Windows 10 | 6.3medium | — | — | |
| CVE-2026-56847 | Nodejs Node.Js | 6.1medium | — | — | |
| CVE-2026-56809 | Not specified | 6.1medium | — | — | |
| CVE-2026-56392 | Gnu Coreutils | 6.1medium | — | — | |
| CVE-2026-56391 | Gnu Coreutils | 6.1medium | — | — | |
| CVE-2026-48000 | Adobe Commerce | 6.1medium | — | — | |
| CVE-2026-47991 | Adobe Experience Manager | 6.1medium | — | — | |
| CVE-2026-34614 | Adobe Connect | 6.1medium | — | — | |
| CVE-2026-23745 | Isaacs Tar | 6.1medium | — | — | |
| CVE-2026-21331 | Adobe Connect | 6.1medium | — | — | |
| CVE-2026-20085 | Cisco Enterprise Nfv Infrastructure Software | 6.1medium | — | — | |
| CVE-2026-14922 | Not specified | 6.1medium | — | — | |
| CVE-2026-14921 | Not specified | 6.1medium | — | — | |
| CVE-2026-14845 | Not specified | 6.1medium | — | — | |
| CVE-2026-14841 | Not specified | 6.1medium | — | — | |
| CVE-2024-31828 | Lavalite Lavalite | 6.1medium | — | — | |
| CVE-2021-38657 | Microsoft 365 Apps | 6.1medium | — | — | |
| CVE-2021-38642 | Microsoft Edge | 6.1medium | — | — |