Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2016-4655 | Apple iOS | 2022-05-24 | 2022-06-14 | ||
| CVE-2016-4523 | Trihedral VTScada (formerly VTS) | 2022-04-15 | 2022-05-06 | ||
| CVE-2016-4437 | Apache Shiro | 2021-11-03 | 2022-05-03 | ||
| CVE-2016-4171 | Adobe Flash Player | 2022-03-25 | 2022-04-15 | ||
| CVE-2016-3976 | SAP NetWeaver | 2021-11-03 | 2022-05-03 | ||
| CVE-2016-3718 | ImageMagick ImageMagick | 2021-11-03 | 2022-05-03 | ||
| CVE-2016-3715 | ImageMagick ImageMagick | 2021-11-03 | 2022-05-03 | ||
| CVE-2016-3714 | ImageMagick ImageMagick | 2024-09-09 | 2024-09-30 | ||
| CVE-2016-3643 | SolarWinds Virtualization Manager | 2021-11-03 | 2022-05-03 | ||
| CVE-2016-3427 | Oracle Java SE and JRockit | 2023-05-12 | 2023-06-02 | ||
| CVE-2016-3393 | Microsoft Windows | 2022-05-25 | 2022-06-15 | ||
| CVE-2016-3298 | Microsoft Internet Explorer | 2022-05-24 | 2022-06-14 | ||
| CVE-2016-3235 | Microsoft Office | 2021-11-03 | 2022-05-03 | ||
| CVE-2016-3088 | Apache ActiveMQ | 2022-02-10 | 2022-08-10 | ||
| CVE-2016-2388 | SAP NetWeaver | 2022-06-09 | 2022-06-30 | ||
| CVE-2016-2386 | SAP NetWeaver | 2022-06-09 | 2022-06-30 | ||
| CVE-2016-20017 | D-Link DSL-2750B Devices | 2024-01-08 | 2024-01-29 | ||
| CVE-2016-1646 | Google Chromium V8 | 2022-06-08 | 2022-06-22 | ||
| CVE-2016-1555 | NETGEAR Wireless Access Point (WAP) Devices | 2022-03-25 | 2022-04-15 | ||
| CVE-2016-11021 | D-Link DCS-930L Devices | 2022-03-25 | 2022-04-15 | ||
| CVE-2016-10174 | NETGEAR WNR2000v5 Router | 2022-03-25 | 2022-04-15 | ||
| CVE-2016-1010 | Adobe Flash Player and AIR | 2022-05-25 | 2022-06-15 | ||
| CVE-2016-10033 | PHP PHPMailer | 2025-07-07 | 2025-07-28 | ||
| CVE-2016-0984 | Adobe Flash Player and AIR | 2022-05-25 | 2022-06-15 | ||
| CVE-2016-0752 | Rails Ruby on Rails | 2022-03-25 | 2022-04-15 |