Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2015-4902 | Oracle Java SE | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-4852 | Oracle WebLogic Server | 2021-11-03 | 2022-05-03 | ||
| CVE-2015-4495 | Mozilla Firefox | 2022-05-25 | 2022-06-15 | ||
| CVE-2015-4068 | Arcserve Unified Data Protection (UDP) | 2022-03-25 | 2022-04-15 | ||
| CVE-2015-3113 | Adobe Flash Player | 2022-04-13 | 2022-05-04 | ||
| CVE-2015-3043 | Adobe Flash Player | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-3035 | TP-Link Multiple Archer Devices | 2022-03-25 | 2022-04-15 | ||
| CVE-2015-2590 | Oracle Java SE | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-2545 | Microsoft Office | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-2502 | Microsoft Internet Explorer | 2022-04-13 | 2022-05-04 | ||
| CVE-2015-2426 | Microsoft Windows | 2022-03-28 | 2022-04-18 | ||
| CVE-2015-2425 | Microsoft Internet Explorer | 2022-05-25 | 2022-06-15 | ||
| CVE-2015-2424 | Microsoft PowerPoint | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-2419 | Microsoft Internet Explorer | 2022-03-28 | 2022-04-18 | ||
| CVE-2015-2387 | Microsoft ATM Font Driver | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-2360 | Microsoft Win32k | 2022-05-25 | 2022-06-15 | ||
| CVE-2015-2051 | D-Link DIR-645 Router | 2022-02-10 | 2022-08-10 | ||
| CVE-2015-1770 | Microsoft Office | 2022-03-28 | 2022-04-18 | ||
| CVE-2015-1769 | Microsoft Windows | 2022-05-25 | 2022-06-15 | ||
| CVE-2015-1671 | Microsoft Windows | 2022-05-25 | 2022-06-15 | ||
| CVE-2015-1642 | Microsoft Office | 2022-03-03 | 2022-03-24 | ||
| CVE-2015-1641 | Microsoft Office | 2021-11-03 | 2022-05-03 | ||
| CVE-2015-1635 | Microsoft HTTP.sys | 2022-02-10 | 2022-08-10 | ||
| CVE-2015-1427 | Elastic Elasticsearch | 2022-03-25 | 2022-04-15 | ||
| CVE-2015-1187 | D-Link and TRENDnet Multiple Devices | 2022-03-25 | 2022-04-15 |