Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2026-21300 | Adobe Substance 3d Modeler | 5.5medium | — | — | |
| CVE-2026-21294 | Adobe Commerce | 5.5medium | — | — | |
| CVE-2026-21293 | Adobe Commerce | 5.5medium | — | — | |
| CVE-2026-21292 | Adobe Commerce B2b | 5.4medium | — | — | |
| CVE-2026-21288 | Adobe Illustrator | 5.5medium | — | — | |
| CVE-2026-21278 | Adobe Indesign | 5.5medium | — | — | |
| CVE-2026-1337 | Neo4j Neo4j | 5.4medium | — | — | |
| CVE-2026-11819 | Redhat Enterprise Linux | 5.5medium | — | — | |
| CVE-2025-0604 | Not specified | 5.4medium | — | — | |
| CVE-2023-22039 | Oracle Agile Product Lifecycle Management | 5.4medium | — | — | |
| CVE-2022-3534 | Debian Debian Linux | 5.5medium | — | — | |
| CVE-2021-47644 | Linux Linux Kernel | 5.5medium | — | — | |
| CVE-2021-40440 | Microsoft Dynamics 365 Business Central | 5.4medium | — | — | |
| CVE-2021-38637 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-38636 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-38635 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36972 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36969 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36962 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36961 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36959 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36950 | Microsoft Dynamics 365 | 5.4medium | — | — | |
| CVE-2021-36946 | Microsoft Dynamics 365 Business Central | 5.4medium | — | — | |
| CVE-2021-36938 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-36374 | Apache Ant | 5.5medium | — | — |