Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2013-1331 | Microsoft Office | 2022-06-08 | 2022-06-22 | ||
| CVE-2013-0648 | Adobe Flash Player | 2024-09-17 | 2024-10-08 | ||
| CVE-2013-0643 | Adobe Flash Player | 2024-09-17 | 2024-10-08 | ||
| CVE-2013-0641 | Adobe Reader | 2022-03-03 | 2022-03-24 | ||
| CVE-2013-0640 | Adobe Reader and Acrobat | 2022-03-03 | 2022-03-24 | ||
| CVE-2013-0632 | Adobe ColdFusion | 2022-03-03 | 2022-03-24 | ||
| CVE-2013-0631 | Adobe ColdFusion | 2022-03-07 | 2022-09-07 | ||
| CVE-2013-0629 | Adobe ColdFusion | 2022-03-07 | 2022-09-07 | ||
| CVE-2013-0625 | Adobe ColdFusion | 2022-03-07 | 2022-09-07 | ||
| CVE-2012-5076 | Oracle Java SE | 2022-03-28 | 2022-04-18 | ||
| CVE-2012-5054 | Adobe Flash Player | 2022-06-08 | 2022-06-22 | ||
| CVE-2012-4969 | Microsoft Internet Explorer | 2022-06-08 | 2022-06-22 | ||
| CVE-2012-4792 | Microsoft Internet Explorer | 2024-07-23 | 2024-08-13 | ||
| CVE-2012-3152 | Oracle Fusion Middleware | 2021-11-03 | 2022-05-03 | ||
| CVE-2012-2539 | Microsoft Word | 2022-03-28 | 2022-04-18 | ||
| CVE-2012-2034 | Adobe Flash Player | 2022-03-28 | 2022-04-18 | ||
| CVE-2012-1889 | Microsoft XML Core Services | 2022-06-08 | 2022-06-22 | ||
| CVE-2012-1856 | Microsoft Office | 2022-03-03 | 2022-03-24 | ||
| CVE-2012-1854 | Microsoft Visual Basic for Applications (VBA) | 2026-04-13 | 2026-04-27 | ||
| CVE-2012-1823 | PHP PHP | 2022-03-25 | 2022-04-15 | ||
| CVE-2012-1535 | Adobe Flash Player | 2022-03-03 | 2022-03-24 | ||
| CVE-2012-0767 | Adobe Flash Player | 2022-06-08 | 2022-06-22 | ||
| CVE-2012-0754 | Adobe Flash Player | 2022-06-08 | 2022-06-22 | ||
| CVE-2012-0518 | Oracle Fusion Middleware | 2022-03-28 | 2022-04-18 | ||
| CVE-2012-0391 | Apache Struts 2 | 2022-01-21 | 2022-07-21 |