Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2020-11261 | Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 2021-12-01 | 2022-06-01 | ||
| CVE-2020-11023 | JQuery JQuery | 2025-01-23 | 2025-02-13 | ||
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-1054 | Microsoft Win32k | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-1027 | Microsoft Windows | 2022-05-23 | 2022-06-13 | ||
| CVE-2020-10221 | rConfig rConfig | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-1020 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-10199 | Sonatype Nexus Repository | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-10189 | Zoho ManageEngine | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-10181 | Sumavision Enhanced Multimedia Router (EMR) | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-10148 | SolarWinds Orion | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0986 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0938 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0683 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0674 | Microsoft Internet Explorer | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0646 | Microsoft .NET Framework | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0601 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0069 | MediaTek Multiple Chipsets | 2021-11-03 | 2022-05-03 | ||
| CVE-2020-0041 | Android Android Kernel | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-9978 | WordPress Social Warfare Plugin | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-9875 | Sitecore CMS and Experience Platform (XP) | 2025-03-26 | 2025-04-16 | ||
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) | 2025-03-26 | 2025-04-16 | ||
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-01-10 | 2022-07-10 | ||
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-07-07 | 2025-07-28 |