Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2023-2033 | Google Chromium V8 | 2023-04-17 | 2023-05-08 | ||
| CVE-2023-20273 | Cisco Cisco IOS XE Web UI | 2023-10-23 | 2023-10-27 | ||
| CVE-2023-20198 | Cisco IOS XE Web UI | 2023-10-16 | 2023-10-20 | ||
| CVE-2023-20118 | Cisco Small Business RV Series Routers | 2025-03-03 | 2025-03-24 | ||
| CVE-2023-20109 | Cisco IOS and IOS XE | 2023-10-10 | 2023-10-31 | ||
| CVE-2023-1671 | Sophos Web Appliance | 2023-11-16 | 2023-12-07 | ||
| CVE-2023-1389 | TP-Link Archer AX21 | 2023-05-01 | 2023-05-22 | ||
| CVE-2023-0386 | Linux Kernel | 2025-06-17 | 2025-07-08 | ||
| CVE-2023-0266 | Linux Kernel | 2023-03-30 | 2023-04-20 | ||
| CVE-2022-48618 | Apple Multiple Products | 2024-01-31 | 2024-02-21 | ||
| CVE-2022-48503 | Apple Multiple Products | 2025-10-20 | 2025-11-10 | ||
| CVE-2022-46169 | Cacti Cacti | 2023-02-16 | 2023-03-09 | ||
| CVE-2022-44877 | CWP Control Web Panel | 2023-01-17 | 2023-02-07 | ||
| CVE-2022-43939 | Hitachi Vantara Pentaho Business Analytics (BA) Server | 2025-03-03 | 2025-03-24 | ||
| CVE-2022-43769 | Hitachi Vantara Pentaho Business Analytics (BA) Server | 2025-03-03 | 2025-03-24 | ||
| CVE-2022-42948 | Fortra Cobalt Strike | 2023-03-30 | 2023-04-20 | ||
| CVE-2022-42856 | Apple iOS | 2022-12-14 | 2023-01-04 | ||
| CVE-2022-42827 | Apple iOS and iPadOS | 2022-10-25 | 2022-11-15 | ||
| CVE-2022-4262 | Google Chromium V8 | 2022-12-05 | 2022-12-26 | ||
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-10-20 | 2022-11-10 | ||
| CVE-2022-4135 | Google Chromium GPU | 2022-11-28 | 2022-12-19 | ||
| CVE-2022-41328 | Fortinet FortiOS | 2023-03-14 | 2023-04-04 | ||
| CVE-2022-41128 | Microsoft Windows | 2022-11-08 | 2022-12-09 | ||
| CVE-2022-41125 | Microsoft Windows | 2022-11-08 | 2022-12-09 | ||
| CVE-2022-41049 | Microsoft Windows | 2022-11-14 | 2022-12-09 |