Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2026-0009Google Android7.8high
CVE-2025-61731Golang Go7.8high
CVE-2025-38616Linux Linux Kernel7.8high
CVE-2025-34290Versa-Networks Sase Client7.8high
CVE-2025-14821Libssh Libssh7.8high
CVE-2024-58315Tosi Tosibox Key7.8high
CVE-2024-46741Linux Linux Kernel7.8high
CVE-2023-36664Artifex Ghostscript7.8high
CVE-2022-37992Microsoft Windows 107.8high
CVE-2022-32981Linux Linux Kernel7.8high
CVE-2022-1055Linux Linux Kernel7.8high
CVE-2022-1011Linux Linux Kernel7.8high
CVE-2021-40447Microsoft Windows 107.8high
CVE-2021-38671Microsoft Windows 107.8high
CVE-2021-38667Microsoft Windows 107.8high
CVE-2021-38661Microsoft Hevc Video Extensions7.8high
CVE-2021-38660Microsoft Excel7.8high
CVE-2021-38659Microsoft 365 Apps7.8high
CVE-2021-38658Microsoft Office7.8high
CVE-2021-38656Microsoft 365 Apps7.8high
CVE-2021-38655Microsoft 365 Apps7.8high
CVE-2021-38654Microsoft 365 Apps7.8high
CVE-2021-38653Microsoft 365 Apps7.8high
CVE-2021-38644Microsoft Mpeg-2 Video Extension7.8high
CVE-2021-38639Microsoft Windows 107.8high
Page 17 of 28 · 684 entriesPreviousNext