Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2025-29824 | Microsoft Windows | 2025-04-08 | 2025-04-29 | ransomware | |
| CVE-2025-26633 | Microsoft Windows | 2025-03-11 | 2025-04-01 | ransomware | |
| CVE-2024-49039 | Microsoft Windows | 2024-11-12 | 2024-12-03 | ransomware | |
| CVE-2024-38094 | Microsoft SharePoint | 2024-10-22 | 2024-11-12 | ransomware | |
| CVE-2024-30088 | Microsoft Windows | 2024-10-15 | 2024-11-05 | ransomware | |
| CVE-2024-30051 | Microsoft DWM Core Library | 2024-05-14 | 2024-06-04 | ransomware | |
| CVE-2024-26169 | Microsoft Windows | 2024-06-13 | 2024-07-04 | ransomware | |
| CVE-2024-21412 | Microsoft Windows | 2024-02-13 | 2024-03-05 | ransomware | |
| CVE-2024-21338 | Microsoft Windows | 2024-03-04 | 2024-03-25 | ransomware | |
| CVE-2023-36884 | Microsoft Windows | 2023-07-17 | 2023-08-29 | ransomware | |
| CVE-2023-29357 | Microsoft SharePoint Server | 2024-01-10 | 2024-01-31 | ransomware | |
| CVE-2023-28252 | Microsoft Windows | 2023-04-11 | 2023-05-02 | ransomware | |
| CVE-2023-24955 | Microsoft SharePoint Server | 2024-03-26 | 2024-04-16 | ransomware | |
| CVE-2023-24880 | Microsoft Windows | 2023-03-14 | 2023-04-04 | ransomware | |
| CVE-2023-23376 | Microsoft Windows | 2023-02-14 | 2023-03-07 | ransomware | |
| CVE-2023-21529 | Microsoft Exchange Server | 2026-04-13 | 2026-04-27 | ransomware | |
| CVE-2022-44698 | Microsoft Defender | 2022-12-13 | 2023-01-03 | ransomware | |
| CVE-2022-41091 | Microsoft Windows | 2022-11-08 | 2022-12-09 | ransomware | |
| CVE-2022-41082 | Microsoft Exchange Server | 2022-09-30 | 2022-10-21 | ransomware | |
| CVE-2022-41080 | Microsoft Exchange Server | 2023-01-10 | 2023-01-31 | ransomware | |
| CVE-2022-41073 | Microsoft Windows | 2022-11-08 | 2022-12-09 | ransomware | |
| CVE-2022-41040 | Microsoft Exchange Server | 2022-09-30 | 2022-10-21 | ransomware | |
| CVE-2022-37969 | Microsoft Windows | 2022-09-14 | 2022-10-05 | ransomware | |
| CVE-2022-30190 | Microsoft Windows | 2022-06-14 | 2022-07-05 | ransomware | |
| CVE-2022-24521 | Microsoft Windows | 2022-04-13 | 2022-05-04 | ransomware |