Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2025-10585Google Chromium V82025-09-232025-10-14
CVE-2025-10230Not specified10.0critical
CVE-2025-0994Trimble Cityworks2025-02-072025-02-28
CVE-2025-04117-Zip 7-Zip2025-02-062025-02-27
CVE-2025-0111Palo Alto Networks PAN-OS2025-02-202025-03-13
CVE-2025-0108Palo Alto Networks PAN-OS2025-02-182025-03-11
CVE-2024-9537ScienceLogic SL12024-10-212024-11-11
CVE-2024-9465Palo Alto Networks Expedition2024-11-142024-12-05
CVE-2024-9463Palo Alto Networks Expedition2024-11-142024-12-05
CVE-2024-9380Ivanti Cloud Services Appliance (CSA)2024-10-092024-10-30
CVE-2024-9379Ivanti Cloud Services Appliance (CSA)2024-10-092024-10-30
CVE-2024-8963Ivanti Cloud Services Appliance (CSA)2024-09-192024-10-10
CVE-2024-8957PTZOptics PT30X-SDI/NDI Cameras2024-11-042024-11-25
CVE-2024-8956PTZOptics PT30X-SDI/NDI Cameras2024-11-042024-11-25
CVE-2024-8190Ivanti Cloud Services Appliance2024-09-132024-10-04
CVE-2024-8069Citrix Session Recording2025-08-252025-09-15
CVE-2024-8068Citrix Session Recording2025-08-252025-09-15
CVE-2024-7971Google Chromium V82024-08-262024-09-16
CVE-2024-7965Google Chromium V82024-08-282024-09-18
CVE-2024-7694TeamT5 ThreatSonar Anti-Ransomware2026-02-172026-03-10
CVE-2024-7593Ivanti Virtual Traffic Manager2024-09-242024-10-15
CVE-2024-7399Samsung MagicINFO 9 Server2026-04-242026-05-08
CVE-2024-7262Kingsoft WPS Office2024-09-032024-09-24
CVE-2024-6047GeoVision Multiple Devices2025-05-072025-05-28
CVE-2024-5910Palo Alto Networks Expedition2024-11-072024-11-28
Page 28 of 114 · 2839 entriesPreviousNext