Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2016-0185 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2016-0165 | Microsoft Win32k | 2023-06-22 | 2023-07-13 | ||
| CVE-2016-0162 | Microsoft Internet Explorer | 2022-05-24 | 2022-06-14 | ||
| CVE-2016-0040 | Microsoft Windows | 2022-03-28 | 2022-04-18 | ||
| CVE-2015-8651 | Adobe Flash Player | 2022-05-25 | 2022-06-15 | ||
| CVE-2015-7755 | Juniper ScreenOS | 2025-10-02 | 2025-10-23 | ||
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition | 2022-01-10 | 2022-07-10 | ||
| CVE-2015-6175 | Microsoft Windows | 2022-05-25 | 2022-06-15 | ||
| CVE-2015-5317 | Jenkins Jenkins User Interface (UI) | 2023-05-12 | 2023-06-02 | ||
| CVE-2015-5123 | Adobe Flash Player | 2022-04-13 | 2022-05-04 | ||
| CVE-2015-5122 | Adobe Flash Player | 2022-04-13 | 2022-05-04 | ||
| CVE-2015-5119 | Adobe Flash Player | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-4902 | Oracle Java SE | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-4852 | Oracle WebLogic Server | 2021-11-03 | 2022-05-03 | ||
| CVE-2015-4495 | Mozilla Firefox | 2022-05-25 | 2022-06-15 | ||
| CVE-2015-4068 | Arcserve Unified Data Protection (UDP) | 2022-03-25 | 2022-04-15 | ||
| CVE-2015-3113 | Adobe Flash Player | 2022-04-13 | 2022-05-04 | ||
| CVE-2015-3043 | Adobe Flash Player | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-3035 | TP-Link Multiple Archer Devices | 2022-03-25 | 2022-04-15 | ||
| CVE-2015-2590 | Oracle Java SE | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-2545 | Microsoft Office | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-2502 | Microsoft Internet Explorer | 2022-04-13 | 2022-05-04 | ||
| CVE-2015-2426 | Microsoft Windows | 2022-03-28 | 2022-04-18 | ||
| CVE-2015-2425 | Microsoft Internet Explorer | 2022-05-25 | 2022-06-15 | ||
| CVE-2015-2424 | Microsoft PowerPoint | 2022-03-03 | 2022-03-24 |