Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2020-0968 | Microsoft Internet Explorer | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2020-0688 | Microsoft Exchange Server | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2019-7195 | QNAP Photo Station | 2022-06-08 | 2022-06-22 | ransomware | |
| CVE-2019-7194 | QNAP Photo Station | 2022-06-08 | 2022-06-22 | ransomware | |
| CVE-2019-7193 | QNAP QTS | 2022-06-08 | 2022-06-22 | ransomware | |
| CVE-2019-7192 | QNAP Photo Station | 2022-06-08 | 2022-06-22 | ransomware | |
| CVE-2019-6693 | Fortinet FortiOS | 2025-06-25 | 2025-07-16 | ransomware | |
| CVE-2019-5544 | VMware VMware ESXi and Horizon DaaS | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2019-3396 | Atlassian Confluence Server and Data Server | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2019-18935 | Progress Telerik UI for ASP.NET AJAX | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2019-16057 | D-Link DNS-320 Storage Device | 2022-04-15 | 2022-05-06 | ransomware | |
| CVE-2019-15107 | Webmin Webmin | 2022-03-25 | 2022-04-15 | ransomware | |
| CVE-2019-1388 | Microsoft Windows | 2023-04-07 | 2023-04-28 | ransomware | |
| CVE-2019-1367 | Microsoft Internet Explorer | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2019-13608 | Citrix StoreFront Server | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2019-1322 | Microsoft Windows | 2022-03-15 | 2022-04-05 | ransomware | |
| CVE-2019-1315 | Microsoft Windows | 2022-03-15 | 2022-04-05 | ransomware | |
| CVE-2019-1253 | Microsoft Windows | 2022-03-15 | 2022-04-05 | ransomware | |
| CVE-2019-1215 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2019-11580 | Atlassian Crowd and Crowd Data Center | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2019-11539 | Ivanti Pulse Connect Secure and Pulse Policy Secure | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2019-11510 | Ivanti Pulse Connect Secure | 2021-11-03 | 2022-05-03 | ransomware | |
| CVE-2019-1129 | Microsoft Windows | 2022-03-15 | 2022-04-05 | ransomware | |
| CVE-2019-11043 | PHP FastCGI Process Manager (FPM) | 2022-03-25 | 2022-04-15 | ransomware |