Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2026-23745Isaacs Tar6.1medium
CVE-2026-21331Adobe Connect6.1medium
CVE-2026-20085Cisco Enterprise Nfv Infrastructure Software6.1medium
CVE-2024-31828Lavalite Lavalite6.1medium
CVE-2021-38657Microsoft 365 Apps6.1medium
CVE-2021-38642Microsoft Edge6.1medium
CVE-2021-38641Microsoft Edge6.1medium
CVE-2021-36928Microsoft Edge Chromium6.0medium
CVE-2021-31961Microsoft Windows 106.1medium
CVE-2021-26436Microsoft Edge6.1medium
CVE-2021-26430Microsoft Azure Sphere6.0medium
CVE-2021-1256Cisco Secure Firewall Threat Defense6.0medium
CVE-2020-9281Ckeditor Ckeditor6.1medium
CVE-2020-3583Cisco Secure Firewall Threat Defense6.1medium
CVE-2020-3582Cisco Secure Firewall Threat Defense6.1medium
CVE-2020-3581Cisco Secure Firewall Threat Defense6.1medium
CVE-2020-27193Ckeditor Ckeditor6.1medium
CVE-2019-1709Cisco Secure Firewall Management Center6.0medium
CVE-2019-12695Cisco Adaptive Security Appliance6.1medium
CVE-2019-10219Redhat Hibernate Validator6.1medium
CVE-2025-2399Not specified5.9medium
CVE-2024-10451Not specified5.9medium
CVE-2022-20795Cisco Adaptive Security Appliance5.8medium
CVE-2021-45105Apache Log4j5.9medium
CVE-2021-34754Cisco Secure Firewall Management Center5.8medium
Page 6 of 19 · 459 entriesPreviousNext