Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2013-3900 | Microsoft WinVerifyTrust function | 2022-01-10 | 2022-07-10 | ||
| CVE-2013-3897 | Microsoft Internet Explorer | 2022-03-03 | 2022-03-24 | ||
| CVE-2013-3896 | Microsoft Silverlight | 2022-05-25 | 2022-06-15 | ||
| CVE-2013-3893 | Microsoft Internet Explorer | 2025-08-12 | 2025-09-02 | ||
| CVE-2013-3660 | Microsoft Win32k | 2022-03-28 | 2022-04-18 | ||
| CVE-2013-3163 | Microsoft Internet Explorer | 2023-03-30 | 2023-04-20 | ||
| CVE-2013-1347 | Microsoft Internet Explorer | 2022-03-03 | 2022-03-24 | ||
| CVE-2013-1331 | Microsoft Office | 2022-06-08 | 2022-06-22 | ||
| CVE-2012-4969 | Microsoft Internet Explorer | 2022-06-08 | 2022-06-22 | ||
| CVE-2012-4792 | Microsoft Internet Explorer | 2024-07-23 | 2024-08-13 | ||
| CVE-2012-2539 | Microsoft Word | 2022-03-28 | 2022-04-18 | ||
| CVE-2012-1889 | Microsoft XML Core Services | 2022-06-08 | 2022-06-22 | ||
| CVE-2012-1856 | Microsoft Office | 2022-03-03 | 2022-03-24 | ||
| CVE-2012-1854 | Microsoft Visual Basic for Applications (VBA) | 2026-04-13 | 2026-04-27 | ||
| CVE-2012-0151 | Microsoft Windows | 2022-06-08 | 2022-06-22 | ||
| CVE-2011-3402 | Microsoft Windows | 2025-10-06 | 2025-10-27 | ||
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) | 2022-03-28 | 2022-04-18 | ||
| CVE-2011-1889 | Microsoft Forefront Threat Management Gateway (TMG) | 2022-03-03 | 2022-03-24 | ||
| CVE-2010-4398 | Microsoft Windows | 2022-03-28 | 2022-04-21 | ||
| CVE-2010-3962 | Microsoft Internet Explorer | 2025-10-06 | 2025-10-27 | ||
| CVE-2010-3333 | Microsoft Office | 2022-03-03 | 2022-03-24 | ||
| CVE-2010-2572 | Microsoft PowerPoint | 2022-06-08 | 2022-06-22 | ||
| CVE-2010-2568 | Microsoft Windows | 2022-09-15 | 2022-10-06 | ||
| CVE-2010-0806 | Microsoft Internet Explorer | 2026-05-20 | 2026-06-03 | ||
| CVE-2010-0249 | Microsoft Internet Explorer | 2026-05-20 | 2026-06-03 |