Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2023-36874Microsoft Windows2023-07-112023-08-01
CVE-2023-36802Microsoft Streaming Service Proxy2023-09-122023-10-03
CVE-2023-36761Microsoft Word2023-09-122023-10-03
CVE-2023-36584Microsoft Windows2023-11-162023-12-07
CVE-2023-36563Microsoft WordPad2023-10-102023-10-31
CVE-2023-36424Microsoft Windows2026-04-132026-04-27
CVE-2023-36036Microsoft Windows2023-11-142023-12-05
CVE-2023-36033Microsoft Windows2023-11-142023-12-05
CVE-2023-36025Microsoft Windows2023-11-142023-12-05
CVE-2023-35311Microsoft Outlook2023-07-112023-08-01
CVE-2023-32049Microsoft Windows2023-07-112023-08-01
CVE-2023-32046Microsoft Windows2023-07-112023-08-01
CVE-2023-29360Microsoft Streaming Service2024-02-292024-03-21
CVE-2023-29336Microsoft Win32k2023-05-092023-05-30
CVE-2023-28229Microsoft Windows CNG Key Isolation Service2023-10-042023-10-25
CVE-2023-23397Microsoft Office2023-03-142023-04-04
CVE-2023-21823Microsoft Windows2023-02-142023-03-07
CVE-2023-21715Microsoft Office2023-02-142023-03-07
CVE-2023-21674Microsoft Windows2023-01-102023-01-31
CVE-2022-41128Microsoft Windows2022-11-082022-12-09
CVE-2022-41125Microsoft Windows2022-11-082022-12-09
CVE-2022-41049Microsoft Windows2022-11-142022-12-09
CVE-2022-41033Microsoft Windows COM+ Event System Service2022-10-112022-11-01
CVE-2022-38028Microsoft Windows2024-04-232024-05-14
CVE-2022-34713Microsoft Windows2022-08-092022-08-30
Page 9 of 25 · 604 entriesPreviousNext