Exploited vulnerabilities

The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.

1695
On the catalogue
8
Added in 7 days
7
Due within 7 days
354
Used in ransomware
CVEAffectedCVSSAddedDue
CVE-2024-44309Apple Multiple Products2024-11-212024-12-12
CVE-2024-44308Apple Multiple Products2024-11-212024-12-12
CVE-2024-4358Progress Telerik Report Server2024-06-132024-07-04
CVE-2024-43573Microsoft Windows2024-10-082024-10-29
CVE-2024-43572Microsoft Windows2024-10-082024-10-29
CVE-2024-43468Microsoft Configuration Manager2026-02-122026-03-05
CVE-2024-43461Microsoft Windows2024-09-162024-10-07
CVE-2024-43451Microsoft Windows2024-11-122024-12-03
CVE-2024-43093Android Framework2024-11-072024-11-28
CVE-2024-43047Qualcomm Multiple Chipsets2024-10-082024-10-29
CVE-2024-42009Roundcube Webmail2025-06-092025-06-30
CVE-2024-41710Mitel SIP Phones2025-02-122025-03-05
CVE-2024-40891Zyxel DSL CPE Devices2025-02-112025-03-04
CVE-2024-40890Zyxel DSL CPE Devices2025-02-112025-03-04
CVE-2024-4040CrushFTP CrushFTP2024-04-242024-05-01
CVE-2024-39891Twilio Authy2024-07-232024-08-13
CVE-2024-39717Versa Director2024-08-232024-09-13
CVE-2024-38856Apache OFBiz2024-08-272024-09-17
CVE-2024-38813VMware vCenter Server2024-11-202024-12-11
CVE-2024-38812VMware vCenter Server2024-11-202024-12-11
CVE-2024-38475Apache HTTP Server2025-05-012025-05-22
CVE-2024-38226Microsoft Publisher2024-09-102024-10-01
CVE-2024-38217Microsoft Windows2024-09-102024-10-01
CVE-2024-38213Microsoft Windows2024-08-132024-09-03
CVE-2024-38193Microsoft Windows2024-08-132024-09-03
Page 29 of 68 · 1695 entriesPreviousNext