Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2012-0507Sun Jre9.8critical2022-03-032022-03-24ransomware
CVE-2010-2861Adobe Coldfusion9.8critical2022-03-252022-04-15ransomware
CVE-2021-34473Microsoft Exchange Server9.1critical2021-11-032021-11-17ransomware
CVE-2021-34523Microsoft Exchange Server9.0critical2021-11-032021-11-17ransomware
CVE-2026-21962Oracle Http Server10.0critical2026-08-242026-08-27
CVE-2023-49105Owncloud Owncloud Server9.8critical2026-08-272026-08-30
CVE-2020-1938Apache Geode9.8critical2022-03-032022-03-17
CVE-2016-8735Apache Tomcat9.8critical2023-05-122023-06-02
CVE-2026-7374Not specified9.9critical
CVE-2026-56121Not specified9.8critical
CVE-2026-52924Linux Linux Kernel9.8critical
CVE-2026-48303Adobe Campaign10.0critical
CVE-2026-47938Adobe Campaign10.0critical
CVE-2026-47117Not specified9.8critical
CVE-2026-47103Fgmacedo Python Statemachine9.8critical
CVE-2026-46859Oracle Agile Product Lifecycle Management9.8critical
CVE-2026-43125Linux Linux Kernel9.8critical
CVE-2026-41586Hyperledger Fabric9.8critical
CVE-2026-33815Jackc Pgx9.8critical
CVE-2026-33278Nlnetlabs Unbound9.8critical
CVE-2026-22797Not specified9.9critical
CVE-2026-21660Johnsoncontrols Frick Controls Quantum Hd Firmware9.8critical
CVE-2026-20079Not specified10.0critical
CVE-2026-1615Not specified9.8critical
CVE-2026-1524Neo4j Neo4j9.8critical
Page 2 of 4 · 87 entriesPreviousNext