Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1699
- On the catalogue
- 5
- Added in 7 days
- 7
- Due within 7 days
- 355
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-15234 | Not specified | 5.4medium | — | — | |
| CVE-2026-14864 | Not specified | 5.4medium | — | — | |
| CVE-2026-14330 | Not specified | 5.5medium | — | — | |
| CVE-2026-14292 | Not specified | 5.4medium | — | — | |
| CVE-2026-1337 | Neo4j Neo4j | 5.4medium | — | — | |
| CVE-2026-12697 | Not specified | 5.4medium | — | — | |
| CVE-2026-12696 | Not specified | 5.4medium | — | — | |
| CVE-2026-11819 | Redhat Enterprise Linux | 5.5medium | — | — | |
| CVE-2025-0604 | Not specified | 5.4medium | — | — | |
| CVE-2023-22039 | Oracle Agile Product Lifecycle Management | 5.4medium | — | — | |
| CVE-2022-3534 | Debian Debian Linux | 5.5medium | — | — | |
| CVE-2021-47644 | Linux Linux Kernel | 5.5medium | — | — | |
| CVE-2021-40440 | Microsoft Dynamics 365 Business Central | 5.4medium | — | — | |
| CVE-2021-38637 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-38636 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-38635 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36972 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36969 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36962 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36961 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36959 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36950 | Microsoft Dynamics 365 | 5.4medium | — | — | |
| CVE-2021-36946 | Microsoft Dynamics 365 Business Central | 5.4medium | — | — | |
| CVE-2021-36938 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36374 | Apache Ant | 5.5medium | — | — |