Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2022-0543 | Redis Debian-specific Redis Servers | 2022-03-28 | 2022-04-18 | ||
| CVE-2022-0492 | Linux Kernel | 2026-06-02 | 2026-06-05 | ||
| CVE-2022-0185 | Linux Kernel | 2024-08-21 | 2024-09-11 | ||
| CVE-2022-0028 | Palo Alto Networks PAN-OS | 2022-08-22 | 2022-09-12 | ||
| CVE-2021-45382 | D-Link Multiple Routers | 2022-04-04 | 2022-04-25 | ||
| CVE-2021-44515 | Zoho Desktop Central | 2021-12-10 | 2021-12-24 | ||
| CVE-2021-44207 | Acclaim Systems USAHERDS | 2024-12-23 | 2025-01-13 | ||
| CVE-2021-44168 | Fortinet FortiOS | 2021-12-10 | 2021-12-24 | ||
| CVE-2021-44077 | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | 2021-12-01 | 2021-12-15 | ||
| CVE-2021-44026 | Roundcube Roundcube Webmail | 2023-06-22 | 2023-07-13 | ||
| CVE-2021-43798 | Grafana Labs Grafana | 2025-10-09 | 2025-10-30 | ||
| CVE-2021-42292 | Microsoft Office | 2021-11-17 | 2021-12-01 | ||
| CVE-2021-41357 | Microsoft Win32k | 2022-04-25 | 2022-05-16 | ||
| CVE-2021-41277 | Metabase Metabase | 2024-11-12 | 2024-12-03 | ||
| CVE-2021-4102 | Google Chromium V8 | 2021-12-15 | 2021-12-29 | ||
| CVE-2021-40870 | Aviatrix Aviatrix Controller | 2022-01-18 | 2022-02-01 | ||
| CVE-2021-40655 | D-Link DIR-605 Router | 2024-05-16 | 2024-06-06 | ||
| CVE-2021-40450 | Microsoft Win32k | 2022-04-25 | 2022-05-16 | ||
| CVE-2021-40407 | Reolink RLC-410W IP Camera | 2024-12-18 | 2025-01-08 | ||
| CVE-2021-39935 | GitLab Community and Enterprise Editions | 2026-02-03 | 2026-02-24 | ||
| CVE-2021-39793 | Google Pixel | 2022-04-11 | 2022-05-02 | ||
| CVE-2021-39226 | Grafana Labs Grafana | 2022-08-25 | 2022-09-15 | ||
| CVE-2021-39144 | XStream XStream | 2023-03-10 | 2023-03-31 | ||
| CVE-2021-38406 | Delta Electronics DOPSoft 2 | 2022-08-25 | 2022-09-15 | ||
| CVE-2021-38163 | SAP NetWeaver | 2022-06-09 | 2022-06-30 |