Known exploited vulnerabilities classified as CWE-119
Entries88
Ransomware-linked9
Vendors18
By vendor
34
12
10
8
7
2
2
2
2
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-88779 | Citrix NetScaler | 2026-10-04 | 0.5% | Unknown |
| CVE-2026-88772 | Citrix NetScaler | 2026-09-27 | 1.3% | Unknown |
| CVE-2026-88771 | Citrix NetScaler | 2026-09-27 | 1.0% | Unknown |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | 2026-08-26 | 1.0% | Unknown |
| CVE-2009-3459 | Adobe Acrobat and Reader | 2026-05-20 | 86.5% | Unknown |
| CVE-2025-31277 | Apple Multiple Products | 2026-03-20 | 1.6% | Unknown |
| CVE-2026-3910 | Google Chromium V8 | 2026-03-13 | 1.0% | Unknown |
| CVE-2026-20700 | Apple Multiple Products | 2026-02-12 | 1.3% | Unknown |
| CVE-2025-7775 | Citrix NetScaler | 2025-08-26 | 20.2% | Unknown |
| CVE-2014-3931 | Looking Glass Multi-Router Looking Glass (MRLG) | 2025-07-07 | 28.9% | Unknown |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway | 2025-06-30 | 10.5% | Unknown |
| CVE-2017-1000253 | Linux Kernel | 2024-09-09 | 10.6% | Known |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway | 2024-01-17 | 57.6% | Unknown |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | 2023-10-18 | 99.9% | Known |
| CVE-2017-6742 | Cisco IOS and IOS XE Software | 2023-04-19 | 21.4% | Unknown |
| CVE-2022-22706 | Arm Mali Graphics Processing Unit (GPU) | 2023-03-30 | 1.0% | Unknown |
| CVE-2013-2597 | Code Aurora ACDB Audio Driver | 2022-09-15 | 1.5% | Unknown |
| CVE-2018-7445 | MikroTik RouterOS | 2022-09-08 | 60.8% | Unknown |
| CVE-2021-30983 | Apple iOS and iPadOS | 2022-06-27 | 2.9% | Unknown |
| CVE-2018-4344 | Apple Multiple Products | 2022-06-27 | 2.3% | Unknown |
| CVE-2017-6862 | NETGEAR Multiple Devices | 2022-06-08 | 45.7% | Unknown |
| CVE-2016-1646 | Google Chromium V8 | 2022-06-08 | 48.1% | Unknown |
| CVE-2013-1331 | Microsoft Office | 2022-06-08 | 79.8% | Unknown |
| CVE-2012-1889 | Microsoft XML Core Services | 2022-06-08 | 83.5% | Unknown |
| CVE-2010-2883 | Adobe Acrobat and Reader | 2022-06-08 | 81.3% | Unknown |
| CVE-2010-2572 | Microsoft PowerPoint | 2022-06-08 | 58.6% | Unknown |
| CVE-2009-3953 | Adobe Acrobat and Reader | 2022-06-08 | 83.2% | Unknown |
| CVE-2009-0563 | Microsoft Office | 2022-06-08 | 62.8% | Unknown |
| CVE-2007-5659 | Adobe Acrobat and Reader | 2022-06-08 | 87.4% | Unknown |
| CVE-2015-2425 | Microsoft Internet Explorer | 2022-05-25 | 44.7% | Unknown |
| CVE-2015-2360 | Microsoft Win32k | 2022-05-25 | 14.8% | Unknown |
| CVE-2014-8439 | Adobe Flash Player | 2022-05-25 | 20.3% | Unknown |
| CVE-2017-0149 | Microsoft Internet Explorer | 2022-05-24 | 29.1% | Unknown |
| CVE-2017-0005 | Microsoft Windows | 2022-05-24 | 11.0% | Unknown |
| CVE-2016-6366 | Cisco Adaptive Security Appliance (ASA) | 2022-05-24 | 87.5% | Unknown |
| CVE-2016-4657 | Apple iOS | 2022-05-24 | 66.7% | Unknown |
| CVE-2019-8720 | WebKitGTK WebKitGTK | 2022-05-23 | 1.5% | Unknown |
| CVE-2016-4523 | Trihedral VTScada (formerly VTS) | 2022-04-15 | 31.1% | Unknown |
| CVE-2015-3113 | Adobe Flash Player | 2022-04-13 | 99.8% | Unknown |
| CVE-2015-2502 | Microsoft Internet Explorer | 2022-04-13 | 51.0% | Unknown |
| CVE-2016-7201 | Microsoft Edge | 2022-03-28 | 80.0% | Unknown |
| CVE-2016-7200 | Microsoft Edge | 2022-03-28 | 82.7% | Unknown |
| CVE-2016-0189 | Microsoft Internet Explorer | 2022-03-28 | 94.0% | Known |
| CVE-2015-2426 | Microsoft Windows | 2022-03-28 | 86.5% | Unknown |
| CVE-2015-2419 | Microsoft Internet Explorer | 2022-03-28 | 53.1% | Unknown |
| CVE-2013-3660 | Microsoft Win32k | 2022-03-28 | 39.3% | Unknown |
| CVE-2013-1690 | Mozilla Firefox and Thunderbird | 2022-03-28 | 69.0% | Unknown |
| CVE-2012-2034 | Adobe Flash Player | 2022-03-28 | 7.8% | Unknown |
| CVE-2010-4398 | Microsoft Windows | 2022-03-28 | 8.6% | Unknown |
| CVE-2016-10174 | NETGEAR WNR2000v5 Router | 2022-03-25 | 83.3% | Unknown |
| CVE-2014-6332 | Microsoft Windows | 2022-03-25 | 94.9% | Unknown |
| CVE-2010-4344 | Exim Exim | 2022-03-25 | 71.7% | Unknown |
| CVE-2017-0101 | Microsoft Windows | 2022-03-15 | 57.4% | Known |
| CVE-2015-2546 | Microsoft Win32k | 2022-03-15 | 10.1% | Known |
| CVE-2018-0175 | Cisco IOS, XR, and XE Software | 2022-03-03 | 3.4% | Unknown |
| CVE-2018-0167 | Cisco IOS, XR, and XE Software | 2022-03-03 | 3.3% | Unknown |
| CVE-2018-0151 | Cisco IOS and IOS XE Software | 2022-03-03 | 14.1% | Unknown |
| CVE-2017-8540 | Microsoft Malware Protection Engine | 2022-03-03 | 71.8% | Unknown |
| CVE-2017-6744 | Cisco IOS software | 2022-03-03 | 7.2% | Unknown |
| CVE-2017-6743 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.8% | Unknown |
| CVE-2017-6740 | Cisco IOS and IOS XE Software | 2022-03-03 | 11.1% | Unknown |
| CVE-2017-6739 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.8% | Unknown |
| CVE-2017-6738 | Cisco IOS and IOS XE Software | 2022-03-03 | 10.8% | Unknown |
| CVE-2017-6737 | Cisco IOS and IOS XE Software | 2022-03-03 | 45.2% | Unknown |
| CVE-2017-6736 | Cisco IOS and IOS XE Software | 2022-03-03 | 70.3% | Unknown |
| CVE-2017-11826 | Microsoft Office | 2022-03-03 | 81.1% | Unknown |
| CVE-2016-7193 | Microsoft Office | 2022-03-03 | 57.5% | Unknown |
| CVE-2015-5119 | Adobe Flash Player | 2022-03-03 | 99.3% | Unknown |
| CVE-2015-2424 | Microsoft PowerPoint | 2022-03-03 | 40.3% | Unknown |
| CVE-2015-1642 | Microsoft Office | 2022-03-03 | 53.0% | Unknown |
| CVE-2013-3346 | Adobe Reader and Acrobat | 2022-03-03 | 78.9% | Unknown |
| CVE-2013-1675 | Mozilla Firefox | 2022-03-03 | 6.6% | Unknown |
| CVE-2011-1889 | Microsoft Forefront Threat Management Gateway (TMG) | 2022-03-03 | 49.0% | Unknown |
| CVE-2010-3333 | Microsoft Office | 2022-03-03 | 89.4% | Unknown |
| CVE-2008-2992 | Adobe Acrobat and Reader | 2022-03-03 | 98.4% | Known |
| CVE-2017-0222 | Microsoft Internet Explorer | 2022-02-25 | 29.6% | Unknown |
| CVE-2014-1761 | Microsoft Word | 2022-02-15 | 77.4% | Unknown |
| CVE-2020-0796 | Microsoft SMBv3 | 2022-02-10 | 99.8% | Known |
| CVE-2014-4404 | Apple OS X | 2022-02-10 | 48.9% | Unknown |
| CVE-2021-22991 | F5 BIG-IP Traffic Management Microkernel | 2022-01-18 | 61.0% | Unknown |
| CVE-2021-33771 | Microsoft Windows | 2021-11-03 | 10.1% | Unknown |
| CVE-2021-31979 | Microsoft Windows | 2021-11-03 | 4.5% | Unknown |
| CVE-2021-30666 | Apple iOS | 2021-11-03 | 2.9% | Unknown |
| CVE-2020-29557 | D-Link DIR-825 R1 Devices | 2021-11-03 | 54.3% | Unknown |
| CVE-2018-6789 | Exim Exim | 2021-11-03 | 82.1% | Known |
| CVE-2017-7269 | Microsoft Internet Information Services (IIS) | 2021-11-03 | 99.8% | Unknown |
| CVE-2017-11882 | Microsoft Office | 2021-11-03 | 99.9% | Known |
| CVE-2017-11774 | Microsoft Office | 2021-11-03 | 59.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
88 KEV entries are classified as CWE-119. CWE definition (MITRE)