Exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalogue, with severity and affected-product data from the National Vulnerability Database. Everything on this list has been observed in real attacks — it is not a forecast.
- 1695
- On the catalogue
- 8
- Added in 7 days
- 7
- Due within 7 days
- 354
- Used in ransomware
| CVE | Affected | CVSS | Added | Due | |
|---|---|---|---|---|---|
| CVE-2024-43573 | Microsoft Windows | 2024-10-08 | 2024-10-29 | ||
| CVE-2024-43572 | Microsoft Windows | 2024-10-08 | 2024-10-29 | ||
| CVE-2024-43468 | Microsoft Configuration Manager | 2026-02-12 | 2026-03-05 | ||
| CVE-2024-43461 | Microsoft Windows | 2024-09-16 | 2024-10-07 | ||
| CVE-2024-43451 | Microsoft Windows | 2024-11-12 | 2024-12-03 | ||
| CVE-2024-38226 | Microsoft Publisher | 2024-09-10 | 2024-10-01 | ||
| CVE-2024-38217 | Microsoft Windows | 2024-09-10 | 2024-10-01 | ||
| CVE-2024-38213 | Microsoft Windows | 2024-08-13 | 2024-09-03 | ||
| CVE-2024-38193 | Microsoft Windows | 2024-08-13 | 2024-09-03 | ||
| CVE-2024-38189 | Microsoft Project | 2024-08-13 | 2024-09-03 | ||
| CVE-2024-38178 | Microsoft Windows | 2024-08-13 | 2024-09-03 | ||
| CVE-2024-38112 | Microsoft Windows | 2024-07-09 | 2024-07-30 | ||
| CVE-2024-38107 | Microsoft Windows | 2024-08-13 | 2024-09-03 | ||
| CVE-2024-38106 | Microsoft Windows | 2024-08-13 | 2024-09-03 | ||
| CVE-2024-38080 | Microsoft Windows | 2024-07-09 | 2024-07-30 | ||
| CVE-2024-38014 | Microsoft Windows | 2024-09-10 | 2024-10-01 | ||
| CVE-2024-35250 | Microsoft Windows | 2024-12-16 | 2025-01-06 | ||
| CVE-2024-30040 | Microsoft Windows | 2024-05-14 | 2024-06-04 | ||
| CVE-2024-29988 | Microsoft SmartScreen Prompt | 2024-04-30 | 2024-05-21 | ||
| CVE-2024-29059 | Microsoft .NET Framework | 2025-02-04 | 2025-02-25 | ||
| CVE-2024-21413 | Microsoft Office Outlook | 2025-02-06 | 2025-02-27 | ||
| CVE-2024-21410 | Microsoft Exchange Server | 2024-02-15 | 2024-03-07 | ||
| CVE-2024-21351 | Microsoft Windows | 2024-02-13 | 2024-03-05 | ||
| CVE-2023-41763 | Microsoft Skype for Business | 2023-10-10 | 2023-10-31 | ||
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio | 2023-08-09 | 2023-08-30 |