Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) | 2023-07-27 | 2023-08-17 | ||
| CVE-2023-37450 | Apple Multiple Products | 2023-07-13 | 2023-08-03 | ||
| CVE-2023-36874 | Microsoft Windows | 2023-07-11 | 2023-08-01 | ||
| CVE-2023-36851 | Juniper Junos OS | 2023-11-13 | 2023-11-17 | ||
| CVE-2023-36847 | Juniper Junos OS | 2023-11-13 | 2023-11-17 | ||
| CVE-2023-36846 | Juniper Junos OS | 2023-11-13 | 2023-11-17 | ||
| CVE-2023-36845 | Juniper Junos OS | 2023-11-13 | 2023-11-17 | ||
| CVE-2023-36844 | Juniper Junos OS | 2023-11-13 | 2023-11-17 | ||
| CVE-2023-36802 | Microsoft Streaming Service Proxy | 2023-09-12 | 2023-10-03 | ||
| CVE-2023-36761 | Microsoft Word | 2023-09-12 | 2023-10-03 | ||
| CVE-2023-36584 | Microsoft Windows | 2023-11-16 | 2023-12-07 | ||
| CVE-2023-36563 | Microsoft WordPad | 2023-10-10 | 2023-10-31 | ||
| CVE-2023-36424 | Microsoft Windows | 2026-04-13 | 2026-04-27 | ||
| CVE-2023-36036 | Microsoft Windows | 2023-11-14 | 2023-12-05 | ||
| CVE-2023-36033 | Microsoft Windows | 2023-11-14 | 2023-12-05 | ||
| CVE-2023-36025 | Microsoft Windows | 2023-11-14 | 2023-12-05 | ||
| CVE-2023-35674 | Android Framework | 2023-09-13 | 2023-10-04 | ||
| CVE-2023-35311 | Microsoft Outlook | 2023-07-11 | 2023-08-01 | ||
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) | 2023-07-31 | 2023-08-21 | ||
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-02-25 | 2025-03-18 | ||
| CVE-2023-34048 | VMware vCenter Server | 2024-01-22 | 2024-02-12 | ||
| CVE-2023-33538 | TP-Link Multiple Routers | 2025-06-16 | 2025-07-07 | ||
| CVE-2023-33246 | Apache RocketMQ | 2023-09-06 | 2023-09-27 | ||
| CVE-2023-33107 | Qualcomm Multiple Chipsets | 2023-12-05 | 2023-12-26 | ||
| CVE-2023-33106 | Qualcomm Multiple Chipsets | 2023-12-05 | 2023-12-26 |