Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2009-1123 | Microsoft Windows | 2022-03-03 | 2022-03-24 | ||
| CVE-2009-0563 | Microsoft Office | 2022-06-08 | 2022-06-22 | ||
| CVE-2009-0557 | Microsoft Office | 2022-06-08 | 2022-06-22 | ||
| CVE-2009-0556 | Microsoft Office | 2026-01-07 | 2026-01-28 | ||
| CVE-2009-0238 | Microsoft Office | 2026-04-14 | 2026-04-28 | ||
| CVE-2008-4250 | Microsoft Windows | 2026-05-20 | 2026-06-03 | ||
| CVE-2008-0015 | Microsoft Windows | 2026-02-17 | 2026-03-10 | ||
| CVE-2007-0671 | Microsoft Office | 2025-08-12 | 2025-09-02 | ||
| CVE-2006-2492 | Microsoft Word | 2022-06-08 | 2022-06-22 | ||
| CVE-2004-0210 | Microsoft Windows | 2022-03-03 | 2022-03-24 | ||
| CVE-2002-0367 | Microsoft Windows | 2022-03-03 | 2022-03-24 |
Page 16 of 16 · 386 entriesPrevious