Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-122
Entries33
Ransomware-linked6
Vendors13
By vendor
12
9
2
1
1
1
1
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-94127 | F5 BIG-IP APM | 2026-09-22 | 2.2% | Unknown |
| CVE-2025-25249 | Fortinet Multiple Products | 2026-09-09 | 3.8% | Unknown |
| CVE-2026-85880 | Microsoft Windows | 2026-09-08 | 3.6% | Unknown |
| CVE-2025-32706 | Microsoft Windows | 2025-05-13 | 2.3% | Unknown |
| CVE-2025-24993 | Microsoft Windows | 2025-03-11 | 2.2% | Unknown |
| CVE-2025-24985 | Microsoft Windows | 2025-03-11 | 3.9% | Unknown |
| CVE-2025-21418 | Microsoft Windows | 2025-02-11 | 1.5% | Unknown |
| CVE-2025-21333 | Microsoft Windows | 2025-01-14 | 9.9% | Unknown |
| CVE-2024-49138 | Microsoft Windows | 2024-12-10 | 26.2% | Unknown |
| CVE-2024-38812 | VMware vCenter Server | 2024-11-20 | 54.5% | Unknown |
| CVE-2024-30051 | Microsoft DWM Core Library | 2024-05-14 | 5.6% | Known |
| CVE-2023-4911 | GNU GNU C Library | 2023-11-21 | 63.7% | Unknown |
| CVE-2023-36036 | Microsoft Windows | 2023-11-14 | 16.6% | Unknown |
| CVE-2022-31199 | Netwrix Auditor | 2023-07-11 | 36.0% | Known |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN | 2023-06-13 | 85.6% | Known |
| CVE-2023-28252 | Microsoft Windows | 2023-04-11 | 48.9% | Known |
| CVE-2023-23376 | Microsoft Windows | 2023-02-14 | 10.8% | Known |
| CVE-2022-4262 | Google Chromium V8 | 2022-12-05 | 23.5% | Unknown |
| CVE-2022-3723 | Google Chromium V8 | 2022-10-28 | 7.9% | Unknown |
| CVE-2022-2294 | WebRTC WebRTC | 2022-08-25 | 70.4% | Known |
| CVE-2019-3568 | Meta Platforms WhatsApp | 2022-04-19 | 30.0% | Unknown |
| CVE-2021-3156 | Sudo Sudo | 2022-04-06 | 99.9% | Unknown |
| CVE-2022-26318 | WatchGuard Firebox and XTM Appliances | 2022-03-25 | 78.1% | Unknown |
| CVE-2021-38003 | Google Chromium V8 | 2021-11-03 | 38.5% | Unknown |
| CVE-2021-35395 | Realtek AP-Router SDK | 2021-11-03 | 98.1% | Unknown |
| CVE-2021-30632 | Google Chromium V8 | 2021-11-03 | 63.1% | Unknown |
| CVE-2021-30563 | Google Chromium V8 | 2021-11-03 | 9.0% | Unknown |
| CVE-2021-30551 | Google Chromium V8 | 2021-11-03 | 64.7% | Unknown |
| CVE-2021-21220 | Google Chromium V8 | 2021-11-03 | 70.4% | Unknown |
| CVE-2021-21166 | Google Chromium | 2021-11-03 | 24.0% | Unknown |
| CVE-2021-21148 | Google Chromium V8 | 2021-11-03 | 19.9% | Unknown |
| CVE-2021-21017 | Adobe Acrobat and Reader | 2021-11-03 | 86.3% | Unknown |
| CVE-2021-1647 | Microsoft Defender | 2021-11-03 | 39.3% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
33 KEV entries are classified as CWE-122. CWE definition (MITRE)