Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-264
Entries31
Ransomware-linked10
Vendors8
By vendor
20
3
2
2
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2013-0643 | Adobe Flash Player | 2024-09-17 | 10.5% | Unknown |
| CVE-2016-0165 | Microsoft Win32k | 2023-06-22 | 13.7% | Unknown |
| CVE-2015-6175 | Microsoft Windows | 2022-05-25 | 5.1% | Unknown |
| CVE-2015-1769 | Microsoft Windows | 2022-05-25 | 4.0% | Unknown |
| CVE-2015-0310 | Adobe Flash Player | 2022-05-25 | 15.0% | Unknown |
| CVE-2015-0071 | Microsoft Internet Explorer | 2022-05-25 | 33.5% | Unknown |
| CVE-2014-4123 | Microsoft Internet Explorer | 2022-05-25 | 47.1% | Unknown |
| CVE-2014-4077 | Microsoft Input Method Editor (IME) Japanese | 2022-05-25 | 54.5% | Unknown |
| CVE-2014-2817 | Microsoft Internet Explorer | 2022-05-25 | 26.3% | Unknown |
| CVE-2013-3993 | IBM InfoSphere BigInsights | 2022-05-25 | 4.7% | Known |
| CVE-2013-0422 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 97.0% | Known |
| CVE-2010-1428 | Red Hat JBoss | 2022-05-25 | 61.4% | Known |
| CVE-2010-0738 | Red Hat JBoss | 2022-05-25 | 79.5% | Known |
| CVE-2016-4656 | Apple iOS | 2022-05-24 | 23.6% | Unknown |
| CVE-2014-4113 | Microsoft Win32k | 2022-05-04 | 86.9% | Unknown |
| CVE-2016-0151 | Microsoft Client-Server Run-time Subsystem (CSRSS) | 2022-03-28 | 62.9% | Known |
| CVE-2016-0040 | Microsoft Windows | 2022-03-28 | 24.4% | Unknown |
| CVE-2011-2005 | Microsoft Ancillary Function Driver (afd.sys) | 2022-03-28 | 31.7% | Unknown |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) | 2022-03-25 | 87.3% | Unknown |
| CVE-2010-4345 | Exim Exim | 2022-03-25 | 17.9% | Unknown |
| CVE-2016-3309 | Microsoft Windows | 2022-03-15 | 20.4% | Known |
| CVE-2013-0629 | Adobe ColdFusion | 2022-03-07 | 65.7% | Unknown |
| CVE-2016-0099 | Microsoft Windows | 2022-03-03 | 37.0% | Known |
| CVE-2015-2387 | Microsoft ATM Font Driver | 2022-03-03 | 34.8% | Unknown |
| CVE-2015-1701 | Microsoft Win32k | 2022-03-03 | 55.9% | Known |
| CVE-2010-0232 | Microsoft Windows | 2022-03-03 | 28.7% | Unknown |
| CVE-2008-3431 | Oracle VirtualBox | 2022-03-03 | 6.8% | Unknown |
| CVE-2016-7255 | Microsoft Win32k | 2021-11-03 | 80.9% | Known |
| CVE-2016-3643 | SolarWinds Virtualization Manager | 2021-11-03 | 3.6% | Unknown |
| CVE-2016-3235 | Microsoft Office | 2021-11-03 | 43.3% | Unknown |
| CVE-2016-0167 | Microsoft Win32k | 2021-11-03 | 5.6% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
31 KEV entries are classified as CWE-264. CWE definition (MITRE)