Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2021-38163 | SAP NetWeaver | 2022-06-09 | 2022-06-30 | ||
| CVE-2021-38003 | Google Chromium V8 | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-38000 | Google Chromium Intents | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-37976 | Google Chromium | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-37975 | Google Chromium V8 | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-37973 | Google Chromium Portals | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-37415 | Zoho ManageEngine ServiceDesk Plus (SDP) | 2021-12-01 | 2021-12-15 | ||
| CVE-2021-36742 | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-36741 | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-36380 | Sunhillo SureLine | 2024-03-05 | 2024-03-26 | ||
| CVE-2021-36260 | Hikvision Security cameras web server | 2022-01-10 | 2022-01-24 | ||
| CVE-2021-3560 | Red Hat Polkit | 2023-05-12 | 2023-06-02 | ||
| CVE-2021-35587 | Oracle Fusion Middleware | 2022-11-28 | 2022-12-19 | ||
| CVE-2021-35395 | Realtek AP-Router SDK | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-35394 | Realtek Jungle Software Development Kit (SDK) | 2021-12-10 | 2021-12-24 | ||
| CVE-2021-35247 | SolarWinds Serv-U | 2022-01-21 | 2022-02-04 | ||
| CVE-2021-3493 | Linux Kernel | 2022-10-20 | 2022-11-10 | ||
| CVE-2021-34458 | Microsoft Windows Server 2016 | 9.9critical | — | — | |
| CVE-2021-33742 | Microsoft Windows | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-33739 | Microsoft Windows | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-33045 | Dahua IP Camera Firmware | 2024-08-21 | 2024-09-11 | ||
| CVE-2021-33044 | Dahua IP Camera Firmware | 2024-08-21 | 2024-09-11 | ||
| CVE-2021-32648 | October CMS October CMS | 2022-01-18 | 2022-02-01 | ||
| CVE-2021-32030 | ASUS Routers | 2025-06-02 | 2025-06-23 | ||
| CVE-2021-31956 | Microsoft Windows | 2021-11-03 | 2021-11-17 |