Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2021-36948Microsoft Windows 10 18097.8high2021-11-032021-11-17
CVE-2021-36934Microsoft Windows 10 18097.8high2022-02-102022-02-24
CVE-2021-34486Microsoft Windows 10 18097.8high2022-03-282022-04-18
CVE-2021-34484Microsoft Windows 10 15077.8high2022-03-312022-04-21
CVE-2021-33771Microsoft Windows 10 15077.8high2021-11-032021-11-17
CVE-2021-31979Microsoft Windows 10 15077.8high2021-11-032021-11-17
CVE-2020-3452Cisco Adaptive Security Appliance Software7.5high2021-11-032022-05-03
CVE-2018-0296Cisco Adaptive Security Appliance Software7.5high2021-11-032022-05-03
CVE-2021-33766Microsoft Exchange Server7.3high2022-01-182022-02-01
CVE-2021-31196Microsoft Exchange Server7.2high2024-08-212024-09-11
CVE-2021-38649Microsoft Azure Automation State Configuration7.0high2021-11-032021-11-17
CVE-2026-7770Ibm I Access Client Solutions8.8high
CVE-2026-6477Postgresql Postgresql8.8high
CVE-2026-6473Postgresql Postgresql8.8high
CVE-2026-5367Not specified8.6high
CVE-2026-53435Jenkins Jenkins8.8high
CVE-2026-47932Adobe Coldfusion8.8high
CVE-2026-47907Adobe Dreamweaver8.6high
CVE-2026-47906Adobe Dreamweaver8.6high
CVE-2026-44513Huggingface Diffusers8.8high
CVE-2026-44494Axios Axios8.7high
CVE-2026-44293Protobufjs Project Protobufjs8.8high
CVE-2026-43503Linux Linux Kernel8.8high
CVE-2026-42266Jupyter Jupyterlab8.8high
CVE-2026-35397Jupyter Jupyter Server8.8high
Page 3 of 28 · 684 entriesPreviousNext