Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2023-28204 | Apple Multiple Products | 2023-05-22 | 2023-06-12 | ||
| CVE-2023-27992 | Zyxel Multiple Network-Attached Storage (NAS) Devices | 2023-06-23 | 2023-07-14 | ||
| CVE-2023-27524 | Apache Superset | 2024-01-08 | 2024-01-29 | ||
| CVE-2023-26369 | Adobe Acrobat and Reader | 2023-09-14 | 2023-10-05 | ||
| CVE-2023-26360 | Adobe ColdFusion | 2023-03-15 | 2023-04-05 | ||
| CVE-2023-26359 | Adobe ColdFusion | 2023-08-21 | 2023-09-11 | ||
| CVE-2023-26083 | Arm Mali Graphics Processing Unit (GPU) | 2023-04-07 | 2023-04-28 | ||
| CVE-2023-25717 | Ruckus Wireless Multiple Products | 2023-05-12 | 2023-06-02 | ||
| CVE-2023-2533 | PaperCut NG/MF | 2025-07-28 | 2025-08-18 | ||
| CVE-2023-25280 | D-Link DIR-820 Router | 2024-09-30 | 2024-10-21 | ||
| CVE-2023-24489 | Citrix Content Collaboration | 2023-08-16 | 2023-09-06 | ||
| CVE-2023-23752 | Joomla! Joomla! | 2024-01-08 | 2024-01-29 | ||
| CVE-2023-23529 | Apple Multiple Products | 2023-02-14 | 2023-03-07 | ||
| CVE-2023-23397 | Microsoft Office | 2023-03-14 | 2023-04-04 | ||
| CVE-2023-22952 | SugarCRM Multiple Products | 2023-02-02 | 2023-02-23 | ||
| CVE-2023-21839 | Oracle WebLogic Server | 2023-05-01 | 2023-05-22 | ||
| CVE-2023-21823 | Microsoft Windows | 2023-02-14 | 2023-03-07 | ||
| CVE-2023-21715 | Microsoft Office | 2023-02-14 | 2023-03-07 | ||
| CVE-2023-21674 | Microsoft Windows | 2023-01-10 | 2023-01-31 | ||
| CVE-2023-21608 | Adobe Acrobat and Reader | 2023-10-10 | 2023-10-31 | ||
| CVE-2023-21492 | Samsung Mobile Devices | 2023-05-19 | 2023-06-09 | ||
| CVE-2023-2136 | Google Chromium Skia | 2023-04-21 | 2023-05-12 | ||
| CVE-2023-21237 | Android Pixel | 2024-03-05 | 2024-03-26 | ||
| CVE-2023-20963 | Android Framework | 2023-04-13 | 2023-05-04 | ||
| CVE-2023-20887 | VMware Aria Operations for Networks | 2023-06-22 | 2023-07-13 |