Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2017-12231 | Cisco IOS software | 2022-03-03 | 2022-03-24 | ||
| CVE-2017-11826 | Microsoft Office | 2022-03-03 | 2022-03-24 | ||
| CVE-2017-11774 | Microsoft Office | 2021-11-03 | 2022-05-03 | ||
| CVE-2017-11317 | Telerik User Interface (UI) for ASP.NET AJAX | 2022-04-11 | 2022-05-02 | ||
| CVE-2017-11292 | Adobe Flash Player | 2022-03-03 | 2022-03-24 | ||
| CVE-2017-1000486 | Primetek Primefaces Application | 2022-01-10 | 2022-07-10 | ||
| CVE-2017-1000353 | Jenkins Jenkins | 2025-10-02 | 2025-10-23 | ||
| CVE-2017-0263 | Microsoft Win32k | 2022-02-10 | 2022-08-10 | ||
| CVE-2017-0262 | Microsoft Office | 2022-02-10 | 2022-08-10 | ||
| CVE-2017-0261 | Microsoft Office | 2022-03-03 | 2022-03-24 | ||
| CVE-2017-0222 | Microsoft Internet Explorer | 2022-02-25 | 2022-08-25 | ||
| CVE-2017-0210 | Microsoft Internet Explorer | 2022-05-24 | 2022-06-14 | ||
| CVE-2017-0149 | Microsoft Internet Explorer | 2022-05-24 | 2022-06-14 | ||
| CVE-2017-0059 | Microsoft Internet Explorer | 2022-03-28 | 2022-04-18 | ||
| CVE-2017-0037 | Microsoft Edge and Internet Explorer | 2022-03-28 | 2022-04-18 | ||
| CVE-2017-0022 | Microsoft XML Core Services | 2022-05-24 | 2022-06-14 | ||
| CVE-2017-0005 | Microsoft Windows | 2022-05-24 | 2022-06-14 | ||
| CVE-2017-0001 | Microsoft Graphics Device Interface (GDI) | 2022-03-03 | 2022-03-24 | ||
| CVE-2016-9563 | SAP NetWeaver | 2021-11-03 | 2022-05-03 | ||
| CVE-2016-9079 | Mozilla Firefox, Firefox ESR, and Thunderbird | 2023-06-22 | 2023-07-13 | ||
| CVE-2016-8562 | Siemens SIMATIC CP | 2022-03-03 | 2022-03-24 | ||
| CVE-2016-7892 | Adobe Flash Player | 2022-03-25 | 2022-04-15 | ||
| CVE-2016-7855 | Adobe Flash Player | 2022-03-03 | 2022-03-24 | ||
| CVE-2016-7836 | SKYSEA Client View | 2025-10-14 | 2025-11-04 | ||
| CVE-2016-7262 | Microsoft Excel | 2022-03-03 | 2022-03-24 |