Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) | 2022-03-25 | 2022-04-15 | ||
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) | 2022-03-25 | 2022-04-15 | ||
| CVE-2014-6278 | GNU GNU Bash | 2025-10-02 | 2025-10-23 | ||
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) | 2022-01-28 | 2022-07-28 | ||
| CVE-2014-4404 | Apple OS X | 2022-02-10 | 2022-08-10 | ||
| CVE-2014-4148 | Microsoft Windows | 2022-05-25 | 2022-06-15 | ||
| CVE-2014-4123 | Microsoft Internet Explorer | 2022-05-25 | 2022-06-15 | ||
| CVE-2014-4114 | Microsoft Windows | 2022-03-03 | 2022-03-24 | ||
| CVE-2014-4113 | Microsoft Win32k | 2022-05-04 | 2022-05-25 | ||
| CVE-2014-4077 | Microsoft Input Method Editor (IME) Japanese | 2022-05-25 | 2022-06-15 | ||
| CVE-2014-3931 | Looking Glass Multi-Router Looking Glass (MRLG) | 2025-07-07 | 2025-07-28 | ||
| CVE-2014-3153 | Linux Kernel | 2022-05-25 | 2022-06-15 | ||
| CVE-2014-3120 | Elastic Elasticsearch | 2022-03-25 | 2022-04-15 | ||
| CVE-2014-2817 | Microsoft Internet Explorer | 2022-05-25 | 2022-06-15 | ||
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) | 2024-11-12 | 2024-12-03 | ||
| CVE-2014-1776 | Microsoft Internet Explorer | 2022-01-28 | 2022-07-28 | ||
| CVE-2014-1761 | Microsoft Word | 2022-02-15 | 2022-08-15 | ||
| CVE-2014-100005 | D-Link DIR-600 Router | 2024-05-16 | 2024-06-06 | ||
| CVE-2014-0780 | InduSoft Web Studio | 2022-04-15 | 2022-05-06 | ||
| CVE-2014-0546 | Adobe Reader and Acrobat | 2022-05-25 | 2022-06-15 | ||
| CVE-2014-0502 | Adobe Flash Player | 2024-09-17 | 2024-10-08 | ||
| CVE-2014-0497 | Adobe Flash Player | 2024-09-17 | 2024-10-08 | ||
| CVE-2014-0496 | Adobe Reader and Acrobat | 2022-03-03 | 2022-03-24 | ||
| CVE-2014-0322 | Microsoft Internet Explorer | 2022-05-04 | 2022-05-25 | ||
| CVE-2014-0196 | Linux Kernel | 2023-05-12 | 2023-06-02 |