Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-200
Entries25
Ransomware-linked4
Vendors15
By vendor
8
3
2
1
1
1
1
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-68686 | Fortinet FortiOS | 2026-07-27 | 29.4% | Unknown |
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager | 2026-04-20 | 31.8% | Unknown |
| CVE-2025-31125 | Vite Vitejs | 2026-01-22 | 65.1% | Unknown |
| CVE-2026-20805 | Microsoft Windows | 2026-01-13 | 7.2% | Unknown |
| CVE-2021-41277 | Metabase Metabase | 2024-11-12 | 97.1% | Unknown |
| CVE-2024-24919 | Check Point Quantum Security Gateways | 2024-05-30 | 99.9% | Known |
| CVE-2023-21237 | Android Pixel | 2024-03-05 | 0.2% | Unknown |
| CVE-2020-3259 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-02-15 | 71.7% | Known |
| CVE-2016-6415 | Cisco IOS, IOS XR, and IOS XE | 2023-05-19 | 87.6% | Unknown |
| CVE-2015-5317 | Jenkins Jenkins User Interface (UI) | 2023-05-12 | 23.0% | Unknown |
| CVE-2023-28432 | MinIO MinIO | 2023-04-21 | 83.9% | Unknown |
| CVE-2021-25369 | Samsung Mobile Devices | 2022-11-08 | 1.0% | Unknown |
| CVE-2017-5521 | NETGEAR Multiple Devices | 2022-09-08 | 89.2% | Unknown |
| CVE-2016-2388 | SAP NetWeaver | 2022-06-09 | 52.2% | Unknown |
| CVE-2015-4495 | Mozilla Firefox | 2022-05-25 | 68.5% | Unknown |
| CVE-2013-7331 | Microsoft Internet Explorer | 2022-05-25 | 50.2% | Unknown |
| CVE-2017-0147 | Microsoft SMBv1 server | 2022-05-24 | 99.6% | Known |
| CVE-2017-0022 | Microsoft XML Core Services | 2022-05-24 | 18.0% | Unknown |
| CVE-2016-4655 | Apple iOS | 2022-05-24 | 33.3% | Unknown |
| CVE-2016-3351 | Microsoft Internet Explorer and Edge | 2022-05-24 | 26.4% | Known |
| CVE-2016-3298 | Microsoft Internet Explorer | 2022-05-24 | 33.3% | Unknown |
| CVE-2016-0162 | Microsoft Internet Explorer | 2022-05-24 | 22.0% | Unknown |
| CVE-2017-0059 | Microsoft Internet Explorer | 2022-03-28 | 61.9% | Unknown |
| CVE-2013-0631 | Adobe ColdFusion | 2022-03-07 | 66.4% | Unknown |
| CVE-2013-0632 | Adobe ColdFusion | 2022-03-03 | 93.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
25 KEV entries are classified as CWE-200. CWE definition (MITRE)