Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2024-58136 | Yiiframework Yii | 2025-05-02 | 2025-05-23 | ||
| CVE-2024-57968 | Advantive VeraCore | 2025-03-10 | 2025-03-31 | ||
| CVE-2024-56145 | Craft CMS Craft CMS | 2025-06-02 | 2025-06-23 | ||
| CVE-2024-54085 | AMI MegaRAC SPx | 2025-06-25 | 2025-07-16 | ||
| CVE-2024-53197 | Linux Kernel | 2025-04-09 | 2025-04-30 | ||
| CVE-2024-53150 | Linux Kernel | 2025-04-09 | 2025-04-30 | ||
| CVE-2024-53104 | Linux Kernel | 2025-02-05 | 2025-02-26 | ||
| CVE-2024-5274 | Google Chromium V8 | 2024-05-28 | 2024-06-18 | ||
| CVE-2024-5217 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | 2024-07-29 | 2024-08-19 | ||
| CVE-2024-50603 | Aviatrix Controllers | 2025-01-16 | 2025-02-06 | ||
| CVE-2024-50302 | Linux Kernel | 2025-03-04 | 2025-03-25 | ||
| CVE-2024-4978 | Justice AV Solutions Viewer | 2024-05-29 | 2024-06-19 | ||
| CVE-2024-4947 | Google Chromium V8 | 2024-05-20 | 2024-06-10 | ||
| CVE-2024-49138 | Microsoft Windows | 2024-12-10 | 2024-12-31 | ||
| CVE-2024-49035 | Microsoft Partner Center | 2025-02-25 | 2025-03-18 | ||
| CVE-2024-4885 | Progress WhatsUp Gold | 2025-03-03 | 2025-03-24 | ||
| CVE-2024-4879 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | 2024-07-29 | 2024-08-19 | ||
| CVE-2024-48248 | NAKIVO Backup and Replication | 2025-03-19 | 2025-04-09 | ||
| CVE-2024-4761 | Google Chromium V8 | 2024-05-16 | 2024-06-06 | ||
| CVE-2024-47575 | Fortinet FortiManager | 2024-10-23 | 2024-11-13 | ||
| CVE-2024-4671 | Google Chromium | 2024-05-13 | 2024-06-03 | ||
| CVE-2024-4610 | Arm Mali GPU Kernel Driver | 2024-06-12 | 2024-07-03 | ||
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) | 2024-10-03 | 2024-10-24 | ||
| CVE-2024-45195 | Apache OFBiz | 2025-02-04 | 2025-02-25 | ||
| CVE-2024-44309 | Apple Multiple Products | 2024-11-21 | 2024-12-12 |