Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2022-41091 | Microsoft Windows | 2022-11-08 | 2022-12-09 | ransomware | |
| CVE-2022-41082 | Microsoft Exchange Server | 2022-09-30 | 2022-10-21 | ransomware | |
| CVE-2022-41080 | Microsoft Exchange Server | 2023-01-10 | 2023-01-31 | ransomware | |
| CVE-2022-41073 | Microsoft Windows | 2022-11-08 | 2022-12-09 | ransomware | |
| CVE-2022-41040 | Microsoft Exchange Server | 2022-09-30 | 2022-10-21 | ransomware | |
| CVE-2022-40765 | Mitel MiVoice Connect | 2023-02-21 | 2023-03-14 | ransomware | |
| CVE-2022-40684 | Fortinet Multiple Products | 2022-10-11 | 2022-11-01 | ransomware | |
| CVE-2022-37969 | Microsoft Windows | 2022-09-14 | 2022-10-05 | ransomware | |
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 2022-09-01 | ransomware | |
| CVE-2022-36537 | ZK Framework AuUploader | 2023-02-27 | 2023-03-20 | ransomware | |
| CVE-2022-31199 | Netwrix Auditor | 2023-07-11 | 2023-08-01 | ransomware | |
| CVE-2022-30333 | RARLAB UnRAR | 2022-08-09 | 2022-08-30 | ransomware | |
| CVE-2022-30190 | Microsoft Windows | 2022-06-14 | 2022-07-05 | ransomware | |
| CVE-2022-29499 | Mitel MiVoice Connect | 2022-06-27 | 2022-07-18 | ransomware | |
| CVE-2022-29464 | WSO2 Multiple Products | 2022-04-25 | 2022-05-16 | ransomware | |
| CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 2022-09-01 | ransomware | |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-04 | 2022-08-25 | ransomware | |
| CVE-2022-27593 | QNAP Photo Station | 2022-09-08 | 2022-09-29 | ransomware | |
| CVE-2022-26501 | Veeam Backup & Replication | 2022-12-13 | 2023-01-03 | ransomware | |
| CVE-2022-26500 | Veeam Backup & Replication | 2022-12-13 | 2023-01-03 | ransomware | |
| CVE-2022-26352 | dotCMS dotCMS | 2022-08-25 | 2022-09-15 | ransomware | |
| CVE-2022-26134 | Atlassian Confluence Server/Data Center | 2022-06-02 | 2022-06-06 | ransomware | |
| CVE-2022-24990 | TerraMaster TerraMaster OS | 2023-02-10 | 2023-03-03 | ransomware | |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | 2022-02-25 | 2022-03-11 | ransomware | |
| CVE-2022-24521 | Microsoft Windows | 2022-04-13 | 2022-05-04 | ransomware |