Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2021-30563 | Google Chromium V8 | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-30554 | Google Chromium WebGL | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-30551 | Google Chromium V8 | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-30533 | Google Chromium PopupBlocker | 2022-06-27 | 2022-07-18 | ||
| CVE-2021-30120 | Kaseya Vsa | 9.9critical | — | — | |
| CVE-2021-29256 | Arm Mali Graphics Processing Unit (GPU) | 2023-07-07 | 2023-07-28 | ||
| CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-28550 | Adobe Acrobat and Reader | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-28310 | Microsoft Win32k | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-27860 | FatPipe WARP, IPVPN, and MPVPN software | 2022-01-10 | 2022-01-24 | ||
| CVE-2021-27852 | Checkbox Checkbox Survey | 2022-04-11 | 2022-05-02 | ||
| CVE-2021-27562 | Arm Trusted Firmware | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-27561 | Yealink Device Management | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-27137 | DD-WRT DD-WRT | 2026-07-21 | 2026-07-24 | ||
| CVE-2021-27085 | Microsoft Internet Explorer | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-27059 | Microsoft Office | 2021-11-03 | 2021-11-17 | ||
| CVE-2021-26829 | OpenPLC ScadaBR | 2025-11-28 | 2025-12-19 | ||
| CVE-2021-26828 | OpenPLC ScadaBR | 2025-12-03 | 2025-12-24 | ||
| CVE-2021-26432 | Microsoft Windows 10 | 9.8critical | — | — | |
| CVE-2021-26424 | Microsoft Windows 10 | 9.9critical | — | — | |
| CVE-2021-26086 | Atlassian Jira Server and Data Center | 2024-11-12 | 2024-12-03 | ||
| CVE-2021-25489 | Samsung Mobile Devices | 2023-06-29 | 2023-07-20 | ||
| CVE-2021-25487 | Samsung Mobile Devices | 2023-06-29 | 2023-07-20 | ||
| CVE-2021-25395 | Samsung Mobile Devices | 2023-06-29 | 2023-07-20 |