Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2024-38178Microsoft Windows2024-08-132024-09-03
CVE-2024-38112Microsoft Windows2024-07-092024-07-30
CVE-2024-38107Microsoft Windows2024-08-132024-09-03
CVE-2024-38106Microsoft Windows2024-08-132024-09-03
CVE-2024-38080Microsoft Windows2024-07-092024-07-30
CVE-2024-38014Microsoft Windows2024-09-102024-10-01
CVE-2024-37383Roundcube Webmail2024-10-242024-11-14
CVE-2024-37079Broadcom VMware vCenter Server2026-01-232026-02-13
CVE-2024-36971Android Kernel2024-08-072024-08-28
CVE-2024-36401OSGeo GeoServer2024-07-152024-08-05
CVE-2024-35250Microsoft Windows2024-12-162025-01-06
CVE-2024-34102Adobe Commerce and Magento Open Source2024-07-172024-08-07
CVE-2024-3393Palo Alto Networks PAN-OS2024-12-302025-01-20
CVE-2024-32896Android Pixel2024-06-132024-07-04
CVE-2024-3273D-Link Multiple NAS Devices2024-04-112024-05-02
CVE-2024-3272D-Link Multiple NAS Devices2024-04-112024-05-02
CVE-2024-32113Apache OFBiz2024-08-072024-08-28
CVE-2024-31823Ecommerce-Codeigniter-Bootstrap Project Ecommerce-Codeigniter-Bootstrap9.8critical
CVE-2024-30040Microsoft Windows2024-05-142024-06-04
CVE-2024-29988Microsoft SmartScreen Prompt2024-04-302024-05-21
CVE-2024-29824Ivanti Endpoint Manager (EPM)2024-10-022024-10-23
CVE-2024-29748Android Pixel2024-04-042024-04-25
CVE-2024-29745Android Pixel2024-04-042024-04-25
CVE-2024-29059Microsoft .NET Framework2025-02-042025-02-25
CVE-2024-28995SolarWinds Serv-U2024-07-172024-08-07
Page 31 of 114 · 2839 entriesPreviousNext