Known exploited vulnerabilities classified as CWE-269
Entries19
Ransomware-linked5
Vendors10
By vendor
9
2
1
1
1
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-102490 | Zammad GmbH Zammad | 2026-10-02 | 0.5% | Unknown |
| CVE-2026-84869 | ConnectWise ScreenConnect | 2026-09-11 | 0.9% | Unknown |
| CVE-2026-46817 | Oracle E-Business Suite | 2026-07-15 | 0.8% | Unknown |
| CVE-2026-21533 | Microsoft Windows | 2026-02-10 | 4.1% | Unknown |
| CVE-2024-8068 | Citrix Session Recording | 2025-08-25 | 3.4% | Unknown |
| CVE-2024-49035 | Microsoft Partner Center | 2025-02-25 | 1.3% | Unknown |
| CVE-2024-38014 | Microsoft Windows | 2024-09-10 | 6.2% | Unknown |
| CVE-2024-26169 | Microsoft Windows | 2024-06-13 | 4.0% | Known |
| CVE-2023-28434 | MinIO MinIO | 2023-09-19 | 7.9% | Unknown |
| CVE-2019-1388 | Microsoft Windows | 2023-04-07 | 8.5% | Known |
| CVE-2021-25337 | Samsung Mobile Devices | 2022-11-08 | 2.8% | Unknown |
| CVE-2014-3153 | Linux Kernel | 2022-05-25 | 37.2% | Unknown |
| CVE-2021-42287 | Microsoft Active Directory | 2022-04-11 | 77.1% | Known |
| CVE-2021-34484 | Microsoft Windows | 2022-03-31 | 21.8% | Unknown |
| CVE-2020-0787 | Microsoft Windows | 2022-01-28 | 42.5% | Known |
| CVE-2019-13272 | Linux Kernel | 2021-12-10 | 52.1% | Unknown |
| CVE-2021-34527 | Microsoft Windows | 2021-11-03 | 99.7% | Known |
| CVE-2020-8655 | EyesOfNetwork EyesOfNetwork | 2021-11-03 | 60.0% | Unknown |
| CVE-2020-3950 | VMware Multiple Products | 2021-11-03 | 7.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
19 KEV entries are classified as CWE-269. CWE definition (MITRE)