Known exploited vulnerabilities classified as CWE-362
Entries12
Ransomware-linked1
Vendors7
By vendor
3
3
2
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-39964 | Linux Kernel | 2026-09-18 | 1.2% | Unknown |
| CVE-2025-62215 | Microsoft Windows | 2025-11-12 | 5.9% | Unknown |
| CVE-2023-36884 | Microsoft Windows | 2023-07-17 | 98.9% | Known |
| CVE-2021-25395 | Samsung Mobile Devices | 2023-06-29 | 0.3% | Unknown |
| CVE-2014-0196 | Linux Kernel | 2023-05-12 | 22.4% | Unknown |
| CVE-2021-0920 | Android Kernel | 2022-05-23 | 0.8% | Unknown |
| CVE-2022-26904 | Microsoft Windows | 2022-04-25 | 16.9% | Unknown |
| CVE-2016-5195 | Linux Kernel | 2022-03-03 | 83.5% | Unknown |
| CVE-2021-21166 | Google Chromium | 2021-11-03 | 24.0% | Unknown |
| CVE-2021-1782 | Apple Multiple Products | 2021-11-03 | 2.2% | Unknown |
| CVE-2020-6820 | Mozilla Firefox and Thunderbird | 2021-11-03 | 7.0% | Unknown |
| CVE-2020-6819 | Mozilla Firefox and Thunderbird | 2021-11-03 | 3.0% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
12 KEV entries are classified as CWE-362. CWE definition (MITRE)