Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2023-36874 | Microsoft Windows | 2023-07-11 | 2023-08-01 | ||
| CVE-2023-36802 | Microsoft Streaming Service Proxy | 2023-09-12 | 2023-10-03 | ||
| CVE-2023-36761 | Microsoft Word | 2023-09-12 | 2023-10-03 | ||
| CVE-2023-36584 | Microsoft Windows | 2023-11-16 | 2023-12-07 | ||
| CVE-2023-36563 | Microsoft WordPad | 2023-10-10 | 2023-10-31 | ||
| CVE-2023-36424 | Microsoft Windows | 2026-04-13 | 2026-04-27 | ||
| CVE-2023-36036 | Microsoft Windows | 2023-11-14 | 2023-12-05 | ||
| CVE-2023-36033 | Microsoft Windows | 2023-11-14 | 2023-12-05 | ||
| CVE-2023-36025 | Microsoft Windows | 2023-11-14 | 2023-12-05 | ||
| CVE-2023-35311 | Microsoft Outlook | 2023-07-11 | 2023-08-01 | ||
| CVE-2023-32049 | Microsoft Windows | 2023-07-11 | 2023-08-01 | ||
| CVE-2023-32046 | Microsoft Windows | 2023-07-11 | 2023-08-01 | ||
| CVE-2023-29360 | Microsoft Streaming Service | 2024-02-29 | 2024-03-21 | ||
| CVE-2023-29336 | Microsoft Win32k | 2023-05-09 | 2023-05-30 | ||
| CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service | 2023-10-04 | 2023-10-25 | ||
| CVE-2023-23397 | Microsoft Office | 2023-03-14 | 2023-04-04 | ||
| CVE-2023-21823 | Microsoft Windows | 2023-02-14 | 2023-03-07 | ||
| CVE-2023-21715 | Microsoft Office | 2023-02-14 | 2023-03-07 | ||
| CVE-2023-21674 | Microsoft Windows | 2023-01-10 | 2023-01-31 | ||
| CVE-2022-41128 | Microsoft Windows | 2022-11-08 | 2022-12-09 | ||
| CVE-2022-41125 | Microsoft Windows | 2022-11-08 | 2022-12-09 | ||
| CVE-2022-41049 | Microsoft Windows | 2022-11-14 | 2022-12-09 | ||
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service | 2022-10-11 | 2022-11-01 | ||
| CVE-2022-38028 | Microsoft Windows | 2024-04-23 | 2024-05-14 | ||
| CVE-2022-34713 | Microsoft Windows | 2022-08-09 | 2022-08-30 |