Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2014-3120 | Elastic Elasticsearch | 2022-03-25 | 2022-04-15 | ||
| CVE-2014-2817 | Microsoft Internet Explorer | 2022-05-25 | 2022-06-15 | ||
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) | 2024-11-12 | 2024-12-03 | ||
| CVE-2014-1776 | Microsoft Internet Explorer | 2022-01-28 | 2022-07-28 | ||
| CVE-2014-1761 | Microsoft Word | 2022-02-15 | 2022-08-15 | ||
| CVE-2014-100005 | D-Link DIR-600 Router | 2024-05-16 | 2024-06-06 | ||
| CVE-2014-0780 | InduSoft Web Studio | 2022-04-15 | 2022-05-06 | ||
| CVE-2014-0546 | Adobe Reader and Acrobat | 2022-05-25 | 2022-06-15 | ||
| CVE-2014-0502 | Adobe Flash Player | 2024-09-17 | 2024-10-08 | ||
| CVE-2014-0497 | Adobe Flash Player | 2024-09-17 | 2024-10-08 | ||
| CVE-2014-0496 | Adobe Reader and Acrobat | 2022-03-03 | 2022-03-24 | ||
| CVE-2014-0322 | Microsoft Internet Explorer | 2022-05-04 | 2022-05-25 | ||
| CVE-2014-0196 | Linux Kernel | 2023-05-12 | 2023-06-02 | ||
| CVE-2014-0160 | OpenSSL OpenSSL | 2022-05-04 | 2022-05-25 | ||
| CVE-2014-0130 | Rails Ruby on Rails | 2022-03-25 | 2022-04-15 | ||
| CVE-2013-7331 | Microsoft Internet Explorer | 2022-05-25 | 2022-06-15 | ||
| CVE-2013-6282 | Linux Kernel | 2022-09-15 | 2022-10-06 | ||
| CVE-2013-5223 | D-Link DSL-2760U | 2022-03-25 | 2022-04-15 | ||
| CVE-2013-5065 | Microsoft Windows | 2022-03-03 | 2022-03-24 | ||
| CVE-2013-4810 | Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | 2022-03-25 | 2022-04-15 | ||
| CVE-2013-3918 | Microsoft Windows | 2025-10-06 | 2025-10-27 | ||
| CVE-2013-3906 | Microsoft Graphics Component | 2022-02-15 | 2022-08-15 | ||
| CVE-2013-3900 | Microsoft WinVerifyTrust function | 2022-01-10 | 2022-07-10 | ||
| CVE-2013-3897 | Microsoft Internet Explorer | 2022-03-03 | 2022-03-24 | ||
| CVE-2013-3896 | Microsoft Silverlight | 2022-05-25 | 2022-06-15 |