Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-399
Entries18
Ransomware-linked0
Vendors3
By vendor
10
5
3
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2010-0806 | Microsoft Internet Explorer | 2026-05-20 | 82.2% | Unknown |
| CVE-2013-3893 | Microsoft Internet Explorer | 2025-08-12 | 87.5% | Unknown |
| CVE-2014-0502 | Adobe Flash Player | 2024-09-17 | 24.8% | Unknown |
| CVE-2009-4324 | Adobe Acrobat and Reader | 2022-06-08 | 81.8% | Unknown |
| CVE-2012-2539 | Microsoft Word | 2022-03-28 | 53.0% | Unknown |
| CVE-2018-0180 | Cisco IOS Software | 2022-03-03 | 4.9% | Unknown |
| CVE-2018-0179 | Cisco IOS Software | 2022-03-03 | 4.9% | Unknown |
| CVE-2018-0161 | Cisco IOS Software | 2022-03-03 | 4.1% | Unknown |
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 9.3% | Unknown |
| CVE-2018-0154 | Cisco IOS Software | 2022-03-03 | 7.0% | Unknown |
| CVE-2017-6627 | Cisco IOS and IOS XE Software | 2022-03-03 | 6.1% | Unknown |
| CVE-2017-12238 | Cisco Catalyst 6800 Series Switches | 2022-03-03 | 2.0% | Unknown |
| CVE-2017-12237 | Cisco IOS and IOS XE Software | 2022-03-03 | 7.0% | Unknown |
| CVE-2017-12232 | Cisco IOS software | 2022-03-03 | 2.1% | Unknown |
| CVE-2017-12231 | Cisco IOS software | 2022-03-03 | 7.0% | Unknown |
| CVE-2014-0496 | Adobe Reader and Acrobat | 2022-03-03 | 39.9% | Unknown |
| CVE-2013-3897 | Microsoft Internet Explorer | 2022-03-03 | 77.3% | Unknown |
| CVE-2015-1641 | Microsoft Office | 2021-11-03 | 96.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
18 KEV entries are classified as CWE-399. CWE definition (MITRE)