Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2021-36373 | Apache Ant | 5.5medium | — | — | |
| CVE-2021-34532 | Microsoft Asp.Net Core | 5.5medium | — | — | |
| CVE-2021-34509 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-34496 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-34491 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-34457 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-34454 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-34440 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-33782 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-33763 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-33760 | Microsoft Windows 10 | 5.5medium | — | — | |
| CVE-2021-30119 | Kaseya Vsa | 5.4medium | — | — | |
| CVE-2021-26437 | Microsoft Visual Studio Code | 5.5medium | — | — | |
| CVE-2020-9666 | Adobe Campaign | 5.5medium | — | — | |
| CVE-2020-3352 | Cisco Secure Firewall Threat Defense | 5.5medium | — | — | |
| CVE-2020-17521 | Apache Groovy | 5.5medium | — | — | |
| CVE-2026-54285 | Opentelemetry Opentelemetry | 5.3medium | — | — | |
| CVE-2026-4891 | Not specified | 5.3medium | — | — | |
| CVE-2026-42258 | Ruby-Lang Net\ | 5.3medium | — | — | |
| CVE-2026-41606 | Apache Thrift | 5.3medium | — | — | |
| CVE-2026-35244 | Oracle Hyperion Infrastructure Technology | 5.2medium | — | — | |
| CVE-2026-34654 | Adobe Commerce | 5.3medium | — | — | |
| CVE-2026-33219 | Linuxfoundation Nats-Server | 5.3medium | — | — | |
| CVE-2026-31812 | Not specified | 5.3medium | — | — | |
| CVE-2026-21310 | Adobe Commerce | 5.3medium | — | — |