Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2024-38178 | Microsoft Windows | 2024-08-13 | 2024-09-03 | ||
| CVE-2024-38112 | Microsoft Windows | 2024-07-09 | 2024-07-30 | ||
| CVE-2024-38107 | Microsoft Windows | 2024-08-13 | 2024-09-03 | ||
| CVE-2024-38106 | Microsoft Windows | 2024-08-13 | 2024-09-03 | ||
| CVE-2024-38080 | Microsoft Windows | 2024-07-09 | 2024-07-30 | ||
| CVE-2024-38014 | Microsoft Windows | 2024-09-10 | 2024-10-01 | ||
| CVE-2024-37383 | Roundcube Webmail | 2024-10-24 | 2024-11-14 | ||
| CVE-2024-37079 | Broadcom VMware vCenter Server | 2026-01-23 | 2026-02-13 | ||
| CVE-2024-36971 | Android Kernel | 2024-08-07 | 2024-08-28 | ||
| CVE-2024-36401 | OSGeo GeoServer | 2024-07-15 | 2024-08-05 | ||
| CVE-2024-35250 | Microsoft Windows | 2024-12-16 | 2025-01-06 | ||
| CVE-2024-34102 | Adobe Commerce and Magento Open Source | 2024-07-17 | 2024-08-07 | ||
| CVE-2024-3393 | Palo Alto Networks PAN-OS | 2024-12-30 | 2025-01-20 | ||
| CVE-2024-32896 | Android Pixel | 2024-06-13 | 2024-07-04 | ||
| CVE-2024-3273 | D-Link Multiple NAS Devices | 2024-04-11 | 2024-05-02 | ||
| CVE-2024-3272 | D-Link Multiple NAS Devices | 2024-04-11 | 2024-05-02 | ||
| CVE-2024-32113 | Apache OFBiz | 2024-08-07 | 2024-08-28 | ||
| CVE-2024-31823 | Ecommerce-Codeigniter-Bootstrap Project Ecommerce-Codeigniter-Bootstrap | 9.8critical | — | — | |
| CVE-2024-30040 | Microsoft Windows | 2024-05-14 | 2024-06-04 | ||
| CVE-2024-29988 | Microsoft SmartScreen Prompt | 2024-04-30 | 2024-05-21 | ||
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) | 2024-10-02 | 2024-10-23 | ||
| CVE-2024-29748 | Android Pixel | 2024-04-04 | 2024-04-25 | ||
| CVE-2024-29745 | Android Pixel | 2024-04-04 | 2024-04-25 | ||
| CVE-2024-29059 | Microsoft .NET Framework | 2025-02-04 | 2025-02-25 | ||
| CVE-2024-28995 | SolarWinds Serv-U | 2024-07-17 | 2024-08-07 |