Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2019-9082 | ThinkPHP ThinkPHP | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-8720 | WebKitGTK WebKitGTK | 2022-05-23 | 2022-06-13 | ||
| CVE-2019-8605 | Apple Multiple Products | 2022-06-27 | 2022-07-18 | ||
| CVE-2019-8526 | Apple macOS | 2023-04-17 | 2023-05-08 | ||
| CVE-2019-8506 | Apple Multiple Products | 2022-05-04 | 2022-05-25 | ||
| CVE-2019-8394 | Zoho ManageEngine | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-7609 | Elastic Kibana | 2022-01-10 | 2022-07-10 | ||
| CVE-2019-7483 | SonicWall SMA100 | 2022-03-28 | 2022-04-18 | ||
| CVE-2019-7287 | Apple iOS | 2022-05-23 | 2022-06-13 | ||
| CVE-2019-7286 | Apple Multiple Products | 2022-05-23 | 2022-06-13 | ||
| CVE-2019-7256 | Nice Linear eMerge E3-Series | 2024-03-25 | 2024-04-15 | ||
| CVE-2019-7238 | Sonatype Nexus Repository Manager | 2021-12-10 | 2022-06-10 | ||
| CVE-2019-6340 | Drupal Core | 2022-03-25 | 2022-04-15 | ||
| CVE-2019-6223 | Apple iOS and macOS | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-5825 | Google Chromium V8 | 2022-06-08 | 2022-06-22 | ||
| CVE-2019-5786 | Google Chrome Blink | 2022-05-23 | 2022-06-13 | ||
| CVE-2019-5418 | Rails Ruby on Rails | 2025-07-07 | 2025-07-28 | ||
| CVE-2019-4716 | IBM Planning Analytics | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-3929 | Crestron Multiple Products | 2022-04-15 | 2022-05-06 | ||
| CVE-2019-3568 | Meta Platforms WhatsApp | 2022-04-19 | 2022-05-10 | ||
| CVE-2019-3398 | Atlassian Confluence Server and Data Center | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-3010 | Oracle Solaris | 2022-05-25 | 2022-06-15 | ||
| CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | 2022-03-25 | 2022-04-15 | ||
| CVE-2019-2215 | Android Android Kernel | 2021-11-03 | 2022-05-03 | ||
| CVE-2019-20500 | D-Link DWL-2600AP Access Point | 2023-06-29 | 2023-07-20 |