Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2020-12641 | Roundcube Roundcube Webmail | 2023-06-22 | 2023-07-13 | ||
| CVE-2020-11978 | Apache Airflow | 2022-01-18 | 2022-07-18 | ||
| CVE-2020-11899 | Treck TCP/IP stack IPv6 | 2022-03-03 | 2022-03-17 | ||
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-11652 | SaltStack Salt | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-11651 | SaltStack Salt | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, Visual Studio | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-11261 | Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 2021-12-01 | 2022-06-01 | ||
| CVE-2020-11023 | JQuery JQuery | 2025-01-23 | 2025-02-13 | ||
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-10683 | Dom4j Project Dom4j | 9.8critical | — | — | |
| CVE-2020-1054 | Microsoft Win32k | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-1027 | Microsoft Windows | 2022-05-23 | 2022-06-13 | ||
| CVE-2020-10221 | rConfig rConfig | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-1020 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-10199 | Sonatype Nexus Repository | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-10189 | Zoho ManageEngine | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-10181 | Sumavision Enhanced Multimedia Router (EMR) | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-10148 | SolarWinds Orion | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0986 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0938 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0683 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0674 | Microsoft Internet Explorer | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0646 | Microsoft .NET Framework | 2021-11-03 | 2022-05-03 |