Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2016-3235 | Microsoft Office | 2021-11-03 | 2022-05-03 | ||
| CVE-2016-3088 | Apache ActiveMQ | 2022-02-10 | 2022-08-10 | ||
| CVE-2016-2388 | SAP NetWeaver | 2022-06-09 | 2022-06-30 | ||
| CVE-2016-2386 | SAP NetWeaver | 2022-06-09 | 2022-06-30 | ||
| CVE-2016-20017 | D-Link DSL-2750B Devices | 2024-01-08 | 2024-01-29 | ||
| CVE-2016-1646 | Google Chromium V8 | 2022-06-08 | 2022-06-22 | ||
| CVE-2016-1555 | NETGEAR Wireless Access Point (WAP) Devices | 2022-03-25 | 2022-04-15 | ||
| CVE-2016-11021 | D-Link DCS-930L Devices | 2022-03-25 | 2022-04-15 | ||
| CVE-2016-10174 | NETGEAR WNR2000v5 Router | 2022-03-25 | 2022-04-15 | ||
| CVE-2016-1010 | Adobe Flash Player and AIR | 2022-05-25 | 2022-06-15 | ||
| CVE-2016-10033 | PHP PHPMailer | 2025-07-07 | 2025-07-28 | ||
| CVE-2016-0984 | Adobe Flash Player and AIR | 2022-05-25 | 2022-06-15 | ||
| CVE-2016-0752 | Rails Ruby on Rails | 2022-03-25 | 2022-04-15 | ||
| CVE-2016-0185 | Microsoft Windows | 2021-11-03 | 2022-05-03 | ||
| CVE-2016-0165 | Microsoft Win32k | 2023-06-22 | 2023-07-13 | ||
| CVE-2016-0162 | Microsoft Internet Explorer | 2022-05-24 | 2022-06-14 | ||
| CVE-2016-0040 | Microsoft Windows | 2022-03-28 | 2022-04-18 | ||
| CVE-2015-8651 | Adobe Flash Player | 2022-05-25 | 2022-06-15 | ||
| CVE-2015-7755 | Juniper ScreenOS | 2025-10-02 | 2025-10-23 | ||
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition | 2022-01-10 | 2022-07-10 | ||
| CVE-2015-6175 | Microsoft Windows | 2022-05-25 | 2022-06-15 | ||
| CVE-2015-5317 | Jenkins Jenkins User Interface (UI) | 2023-05-12 | 2023-06-02 | ||
| CVE-2015-5123 | Adobe Flash Player | 2022-04-13 | 2022-05-04 | ||
| CVE-2015-5122 | Adobe Flash Player | 2022-04-13 | 2022-05-04 | ||
| CVE-2015-5119 | Adobe Flash Player | 2022-03-03 | 2022-03-24 |