Exploited Vulnerabilities Daily
🌐 English

Home › KEV statistics

Known exploited vulnerabilities classified as CWE-20

Entries119
Ransomware-linked26
Vendors42

By vendor

CVEVendor / productAddedEPSSRansomware
CVE-2026-93952Arista VeloCloud Orchestrator2026-09-221.0%Unknown
CVE-2026-12569PTC Windchill and FlexPLM2026-06-2546.0%Known
CVE-2026-34910Ubiquiti UniFi OS2026-06-2345.7%Unknown
CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM)2026-05-072.5%Unknown
CVE-2026-34197Apache ActiveMQ2026-04-1615.4%Unknown
CVE-2026-32201Microsoft SharePoint Server2026-04-1443.3%Unknown
CVE-2025-20393Cisco Multiple Products2025-12-1732.3%Unknown
CVE-2025-54236Adobe Commerce and Magento2025-10-2494.5%Unknown
CVE-2025-6558Google Chromium2025-07-229.4%Unknown
CVE-2024-21413Microsoft Office Outlook2025-02-0694.6%Unknown
CVE-2016-3714ImageMagick ImageMagick2024-09-0997.4%Unknown
CVE-2024-38189Microsoft Project2024-08-138.1%Unknown
CVE-2024-30040Microsoft Windows2024-05-143.9%Unknown
CVE-2024-3400Palo Alto Networks PAN-OS2024-04-1299.9%Known
CVE-2023-41266Qlik Sense2023-12-0784.8%Known
CVE-2023-36563Microsoft WordPad2023-10-1020.7%Unknown
CVE-2014-8361Realtek SDK2023-09-1899.9%Unknown
CVE-2021-25489Samsung Mobile Devices2023-06-290.5%Unknown
CVE-2023-2868Barracuda Networks Email Security Gateway (ESG) Appliance2023-05-2687.6%Unknown
CVE-2010-3904Linux Kernel2023-05-1215.7%Unknown
CVE-2022-39197Fortra Cobalt Strike2023-03-3046.4%Unknown
CVE-2021-30900Apple iOS, iPadOS, and macOS2023-03-305.2%Unknown
CVE-2015-2291Intel Ethernet Diagnostics Driver for Windows2023-02-109.0%Known
CVE-2023-22952SugarCRM Multiple Products2023-02-0280.1%Unknown
CVE-2017-11357Telerik User Interface (UI) for ASP.NET AJAX2023-01-2677.6%Known
CVE-2022-42827Apple iOS and iPadOS2022-10-251.0%Unknown
CVE-2013-6282Linux Kernel2022-09-1539.7%Unknown
CVE-2010-2568Microsoft Windows2022-09-1591.3%Unknown
CVE-2022-37969Microsoft Windows2022-09-1428.2%Known
CVE-2022-32917Apple iOS, iPadOS, and macOS2022-09-145.6%Unknown
CVE-2022-3075Google Chromium Mojo2022-09-085.8%Unknown
CVE-2021-31010Apple iOS, macOS, watchOS2022-08-253.6%Unknown
CVE-2022-32894Apple iOS and macOS2022-08-183.2%Unknown
CVE-2022-32893Apple iOS and macOS2022-08-189.9%Unknown
CVE-2022-2856Google Chromium Intents2022-08-184.5%Unknown
CVE-2022-29499Mitel MiVoice Connect2022-06-2755.2%Known
CVE-2019-7193QNAP QTS2022-06-0814.3%Known
CVE-2012-0151Microsoft Windows2022-06-0887.7%Unknown
CVE-2016-0034Microsoft Silverlight2022-05-2569.3%Known
CVE-2013-3896Microsoft Silverlight2022-05-2567.9%Unknown
CVE-2018-19949QNAP Network Attached Storage (NAS)2022-05-2428.6%Known
CVE-2019-11708Mozilla Firefox and Thunderbird2022-05-2355.8%Unknown
CVE-2007-3010Alcatel OmniPCX Enterprise2022-04-1597.3%Unknown
CVE-2021-42278Microsoft Active Directory2022-04-1173.2%Known
CVE-2017-0148Microsoft SMBv1 server2022-04-0699.3%Known
CVE-2022-22675Apple macOS2022-04-0412.4%Unknown
CVE-2022-22674Apple macOS2022-04-041.1%Unknown
CVE-2018-8414Microsoft Windows2022-03-2572.9%Unknown
CVE-2018-0147Cisco Secure Access Control System (ACS)2022-03-2518.2%Unknown
CVE-2018-0125Cisco VPN Routers2022-03-2555.1%Unknown
CVE-2017-6316Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server2022-03-2573.0%Unknown
CVE-2017-3881Cisco IOS and IOS XE2022-03-2598.9%Unknown
CVE-2017-0146Microsoft Windows2022-03-2589.8%Known
CVE-2013-2251Apache Struts2022-03-2599.9%Unknown
CVE-2012-1823PHP PHP2022-03-2599.9%Unknown
CVE-2010-3035Cisco IOS XR2022-03-255.6%Unknown
CVE-2009-2055Cisco IOS XR2022-03-253.3%Unknown
CVE-2009-0927Adobe Reader and Acrobat2022-03-2596.6%Unknown
CVE-2021-21973VMware vCenter Server and Cloud Foundation2022-03-0788.0%Unknown
CVE-2019-1652Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers2022-03-0395.9%Unknown
CVE-2018-0174Cisco IOS XE Software2022-03-037.6%Unknown
CVE-2018-0173Cisco IOS and IOS XE Software2022-03-037.6%Unknown
CVE-2018-0172Cisco IOS and IOS XE Software2022-03-037.8%Unknown
CVE-2018-0159Cisco IOS Software and Cisco IOS XE Software2022-03-036.8%Unknown
CVE-2018-0158Cisco IOS Software and Cisco IOS XE Software2022-03-037.1%Unknown
CVE-2017-12319Cisco IOS XE Software2022-03-035.2%Unknown
CVE-2017-12240Cisco IOS and IOS XE Software2022-03-0313.7%Unknown
CVE-2017-12235Cisco IOS software2022-03-037.0%Unknown
CVE-2017-12234Cisco IOS software2022-03-037.0%Unknown
CVE-2017-12233Cisco IOS software2022-03-037.0%Unknown
CVE-2016-8562Siemens SIMATIC CP2022-03-033.6%Unknown
CVE-2016-7262Microsoft Excel2022-03-0357.7%Unknown
CVE-2015-2545Microsoft Office2022-03-0385.9%Unknown
CVE-2014-4114Microsoft Windows2022-03-0381.6%Unknown
CVE-2013-5065Microsoft Windows2022-03-0334.6%Unknown
CVE-2009-1123Microsoft Windows2022-03-034.8%Unknown
CVE-2022-24086Adobe Commerce and Magento Open Source2022-02-1599.1%Unknown
CVE-2017-9791Apache Struts 12022-02-1098.9%Unknown
CVE-2017-0145Microsoft SMBv12022-02-1089.8%Known
CVE-2017-0144Microsoft SMBv12022-02-1099.2%Known
CVE-2016-3088Apache ActiveMQ2022-02-1098.5%Unknown
CVE-2022-22587Apple iOS and macOS2022-01-2811.6%Unknown
CVE-2021-35247SolarWinds Serv-U2022-01-213.4%Unknown
CVE-2012-0391Apache Struts 22022-01-2175.5%Unknown
CVE-2013-3900Microsoft WinVerifyTrust function2022-01-1044.6%Unknown
CVE-2021-44228Apache Log4j22021-12-1099.9%Known
CVE-2017-17562Embedthis GoAhead2021-12-1096.2%Unknown
CVE-2010-1871Red Hat JBoss Seam 22021-12-1083.3%Unknown
CVE-2020-11261Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables2021-12-011.6%Unknown
CVE-2021-38000Google Chromium Intents2021-11-034.9%Unknown
CVE-2021-36742Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security2021-11-031.4%Unknown
CVE-2021-35395Realtek AP-Router SDK2021-11-0398.1%Unknown
CVE-2021-31207Microsoft Exchange Server2021-11-0399.7%Known
CVE-2021-30860Apple Multiple Products2021-11-0375.9%Unknown
CVE-2021-30663Apple Multiple Products2021-11-033.5%Unknown
CVE-2021-27104Accellion FTA2021-11-0356.6%Known
CVE-2021-27102Accellion FTA2021-11-033.6%Known
CVE-2021-22502Micro Focus Operation Bridge Reporter (OBR)2021-11-0396.7%Unknown
CVE-2021-22205GitLab Community and Enterprise Editions2021-11-0399.7%Known
CVE-2021-21985VMware vCenter Server2021-11-0399.9%Known
CVE-2021-21220Google Chromium V82021-11-0370.4%Unknown
CVE-2020-8195Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance2021-11-0333.0%Unknown
CVE-2020-3452Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)2021-11-0399.9%Unknown
CVE-2020-3161Cisco Cisco IP Phones2021-11-0383.8%Unknown
CVE-2020-1040Microsoft Hyper-V RemoteFX2021-11-037.3%Unknown
CVE-2020-0041Android Android Kernel2021-11-033.1%Unknown
CVE-2019-0604Microsoft SharePoint2021-11-0399.9%Known
CVE-2018-7600Drupal Drupal Core2021-11-0399.9%Known
CVE-2018-20062ThinkPHP noneCms2021-11-0399.5%Unknown
CVE-2018-11776Apache Struts2021-11-0399.9%Unknown
CVE-2018-0296Cisco Adaptive Security Appliance (ASA)2021-11-0399.9%Unknown
CVE-2018-0171Cisco IOS and IOS XE2021-11-0399.4%Unknown
CVE-2017-9822DotNetNuke (DNN) DotNetNuke (DNN)2021-11-0394.7%Known
CVE-2017-8759Microsoft .NET Framework2021-11-0388.6%Unknown
CVE-2017-6327Symantec Symantec Messaging Gateway2021-11-0335.9%Unknown
CVE-2017-5638Apache Struts2021-11-0399.9%Known
CVE-2017-0143Microsoft Windows2021-11-0393.3%Known
CVE-2016-3718ImageMagick ImageMagick2021-11-0376.7%Unknown
CVE-2016-0185Microsoft Windows2021-11-0369.8%Unknown
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page

119 KEV entries are classified as CWE-20. CWE definition (MITRE)