Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2020-0601 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0069 | MediaTek Multiple Chipsets | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0041 | Android Android Kernel | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-9978 | WordPress Social Warfare Plugin | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-9875 | Sitecore CMS and Experience Platform (XP) | 2025-03-26 | 2025-04-16 | ||
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) | 2025-03-26 | 2025-04-16 | ||
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-01-10 | 2022-07-10 | ||
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-07-07 | 2025-07-28 | ||
| CVE-2019-9082 | ThinkPHP ThinkPHP | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-8720 | WebKitGTK WebKitGTK | 2022-05-23 | 2022-06-13 | ||
| CVE-2019-8605 | Apple Multiple Products | 2022-06-27 | 2022-07-18 | ||
| CVE-2019-8526 | Apple macOS | 2023-04-17 | 2023-05-08 | ||
| CVE-2019-8506 | Apple Multiple Products | 2022-05-04 | 2022-05-25 | ||
| CVE-2019-8394 | Zoho ManageEngine | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-7609 | Elastic Kibana | 2022-01-10 | 2022-07-10 | ||
| CVE-2019-7483 | SonicWall SMA100 | 2022-03-28 | 2022-04-18 | ||
| CVE-2019-7287 | Apple iOS | 2022-05-23 | 2022-06-13 | ||
| CVE-2019-7286 | Apple Multiple Products | 2022-05-23 | 2022-06-13 | ||
| CVE-2019-7256 | Nice Linear eMerge E3-Series | 2024-03-25 | 2024-04-15 | ||
| CVE-2019-7238 | Sonatype Nexus Repository Manager | 2021-12-10 | 2022-06-10 | ||
| CVE-2019-6340 | Drupal Core | 2022-03-25 | 2022-04-15 | ||
| CVE-2019-6223 | Apple iOS and macOS | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-5825 | Google Chromium V8 | 2022-06-08 | 2022-06-22 | ||
| CVE-2019-5786 | Google Chrome Blink | 2022-05-23 | 2022-06-13 | ||
| CVE-2019-5418 | Rails Ruby on Rails | 2025-07-07 | 2025-07-28 |