Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 1
- Added in 7 days
- 5
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2012-4792 | Microsoft Internet Explorer | 2024-07-23 | 2024-08-13 | ||
| CVE-2012-3152 | Oracle Fusion Middleware | 2021-11-03 | 2022-05-03 | ||
| CVE-2012-2539 | Microsoft Word | 2022-03-28 | 2022-04-18 | ||
| CVE-2012-2034 | Adobe Flash Player | 2022-03-28 | 2022-04-18 | ||
| CVE-2012-1889 | Microsoft XML Core Services | 2022-06-08 | 2022-06-22 | ||
| CVE-2012-1856 | Microsoft Office | 2022-03-03 | 2022-03-24 | ||
| CVE-2012-1854 | Microsoft Visual Basic for Applications (VBA) | 2026-04-13 | 2026-04-27 | ||
| CVE-2012-1823 | PHP PHP | 2022-03-25 | 2022-04-15 | ||
| CVE-2012-1535 | Adobe Flash Player | 2022-03-03 | 2022-03-24 | ||
| CVE-2012-0767 | Adobe Flash Player | 2022-06-08 | 2022-06-22 | ||
| CVE-2012-0754 | Adobe Flash Player | 2022-06-08 | 2022-06-22 | ||
| CVE-2012-0518 | Oracle Fusion Middleware | 2022-03-28 | 2022-04-18 | ||
| CVE-2012-0391 | Apache Struts 2 | 2022-01-21 | 2022-07-21 | ||
| CVE-2012-0151 | Microsoft Windows | 2022-06-08 | 2022-06-22 | ||
| CVE-2011-4723 | D-Link DIR-300 Router | 2022-09-08 | 2022-09-29 | ||
| CVE-2011-3544 | Oracle Java SE JDK and JRE | 2022-03-03 | 2022-03-24 | ||
| CVE-2011-3402 | Microsoft Windows | 2025-10-06 | 2025-10-27 | ||
| CVE-2011-2462 | Adobe Reader and Acrobat | 2022-06-08 | 2022-06-22 | ||
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) | 2022-03-28 | 2022-04-18 | ||
| CVE-2011-1889 | Microsoft Forefront Threat Management Gateway (TMG) | 2022-03-03 | 2022-03-24 | ||
| CVE-2011-1823 | Android Android OS | 2022-09-08 | 2022-09-29 | ||
| CVE-2011-0611 | Adobe Flash Player | 2022-03-03 | 2022-03-24 | ||
| CVE-2011-0609 | Adobe Flash Player | 2022-06-08 | 2022-06-22 | ||
| CVE-2010-5330 | Ubiquiti AirOS | 2022-04-15 | 2022-05-06 | ||
| CVE-2010-5326 | SAP NetWeaver | 2021-11-03 | 2022-05-03 |