Known exploited vulnerabilities classified as CWE-416
Entries93
Ransomware-linked10
Vendors12
By vendor
28
16
12
11
5
5
5
4
3
2
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-68820 | Microsoft Windows Ancillary Function Driver for WinSock | 2026-08-11 | 0.3% | Unknown |
| CVE-2010-0249 | Microsoft Internet Explorer | 2026-05-20 | 91.9% | Unknown |
| CVE-2020-9715 | Adobe Acrobat | 2026-04-13 | 48.5% | Unknown |
| CVE-2026-5281 | Google Dawn | 2026-04-01 | 0.7% | Unknown |
| CVE-2023-43000 | Apple Multiple Products | 2026-03-05 | 4.0% | Unknown |
| CVE-2023-41974 | Apple iOS and iPadOS | 2026-03-05 | 1.9% | Unknown |
| CVE-2026-2441 | Google Chromium | 2026-02-17 | 55.1% | Unknown |
| CVE-2025-43529 | Apple Multiple Products | 2025-12-15 | 8.7% | Unknown |
| CVE-2025-62221 | Microsoft Windows | 2025-12-09 | 2.5% | Unknown |
| CVE-2025-27038 | Qualcomm Multiple Chipsets | 2025-06-03 | 1.0% | Unknown |
| CVE-2025-32709 | Microsoft Windows | 2025-05-13 | 2.1% | Unknown |
| CVE-2025-32701 | Microsoft Windows | 2025-05-13 | 1.4% | Unknown |
| CVE-2025-30400 | Microsoft Windows | 2025-05-13 | 1.9% | Unknown |
| CVE-2025-29824 | Microsoft Windows | 2025-04-08 | 13.9% | Known |
| CVE-2025-24983 | Microsoft Windows | 2025-03-11 | 1.3% | Unknown |
| CVE-2025-24085 | Apple Multiple Products | 2025-01-29 | 17.5% | Unknown |
| CVE-2025-21335 | Microsoft Windows | 2025-01-14 | 1.3% | Unknown |
| CVE-2025-21334 | Microsoft Windows | 2025-01-14 | 1.5% | Unknown |
| CVE-2024-9680 | Mozilla Firefox | 2024-10-15 | 23.1% | Known |
| CVE-2024-43047 | Qualcomm Multiple Chipsets | 2024-10-08 | 0.6% | Unknown |
| CVE-2024-38193 | Microsoft Windows | 2024-08-13 | 28.7% | Unknown |
| CVE-2024-38107 | Microsoft Windows | 2024-08-13 | 1.6% | Unknown |
| CVE-2024-36971 | Android Kernel | 2024-08-07 | 2.7% | Unknown |
| CVE-2012-4792 | Microsoft Internet Explorer | 2024-07-23 | 78.8% | Unknown |
| CVE-2022-2586 | Linux Kernel | 2024-06-26 | 10.2% | Unknown |
| CVE-2024-4610 | Arm Mali GPU Kernel Driver | 2024-06-12 | 0.7% | Unknown |
| CVE-2024-1086 | Linux Kernel | 2024-05-30 | 28.0% | Known |
| CVE-2024-4671 | Google Chromium | 2024-05-13 | 8.3% | Unknown |
| CVE-2023-33063 | Qualcomm Multiple Chipsets | 2023-12-05 | 0.6% | Unknown |
| CVE-2022-22071 | Qualcomm Multiple Chipsets | 2023-12-05 | 0.4% | Unknown |
| CVE-2023-21608 | Adobe Acrobat and Reader | 2023-10-10 | 61.4% | Unknown |
| CVE-2023-4211 | Arm Mali GPU Kernel Driver | 2023-10-03 | 1.0% | Unknown |
| CVE-2023-36802 | Microsoft Streaming Service Proxy | 2023-09-12 | 27.9% | Unknown |
| CVE-2021-29256 | Arm Mali Graphics Processing Unit (GPU) | 2023-07-07 | 2.9% | Unknown |
| CVE-2021-25394 | Samsung Mobile Devices | 2023-06-29 | 0.4% | Unknown |
| CVE-2016-9079 | Mozilla Firefox, Firefox ESR, and Thunderbird | 2023-06-22 | 87.5% | Unknown |
| CVE-2023-32373 | Apple Multiple Products | 2023-05-22 | 12.1% | Unknown |
| CVE-2023-29336 | Microsoft Win32k | 2023-05-09 | 41.1% | Unknown |
| CVE-2019-8526 | Apple macOS | 2023-04-17 | 0.7% | Unknown |
| CVE-2023-28205 | Apple Multiple Products | 2023-04-10 | 27.0% | Unknown |
| CVE-2023-0266 | Linux Kernel | 2023-03-30 | 3.7% | Unknown |
| CVE-2022-38181 | Arm Mali Graphics Processing Unit (GPU) | 2023-03-30 | 14.0% | Unknown |
| CVE-2022-3038 | Google Chromium Network Service | 2023-03-30 | 24.9% | Unknown |
| CVE-2023-21674 | Microsoft Windows | 2023-01-10 | 40.9% | Unknown |
| CVE-2021-25370 | Samsung Mobile Devices | 2022-11-08 | 0.8% | Unknown |
| CVE-2019-8605 | Apple Multiple Products | 2022-06-27 | 17.6% | Unknown |
| CVE-2016-0984 | Adobe Flash Player and AIR | 2022-05-25 | 54.5% | Unknown |
| CVE-2021-1048 | Android Kernel | 2022-05-23 | 1.0% | Unknown |
| CVE-2021-0920 | Android Kernel | 2022-05-23 | 0.8% | Unknown |
| CVE-2019-5786 | Google Chrome Blink | 2022-05-23 | 61.0% | Unknown |
| CVE-2019-13720 | Google Chrome WebAudio | 2022-05-23 | 49.1% | Unknown |
| CVE-2014-0322 | Microsoft Internet Explorer | 2022-05-04 | 85.1% | Unknown |
| CVE-2015-5123 | Adobe Flash Player | 2022-04-13 | 18.8% | Unknown |
| CVE-2015-5122 | Adobe Flash Player | 2022-04-13 | 93.9% | Unknown |
| CVE-2015-0313 | Adobe Flash Player | 2022-04-13 | 95.2% | Unknown |
| CVE-2021-31166 | Microsoft HTTP Protocol Stack | 2022-04-06 | 99.8% | Unknown |
| CVE-2021-34486 | Microsoft Windows | 2022-03-28 | 9.2% | Unknown |
| CVE-2013-2551 | Microsoft Internet Explorer | 2022-03-28 | 73.9% | Known |
| CVE-2016-7892 | Adobe Flash Player | 2022-03-25 | 18.7% | Unknown |
| CVE-2022-26486 | Mozilla Firefox | 2022-03-07 | 2.3% | Unknown |
| CVE-2022-26485 | Mozilla Firefox | 2022-03-07 | 14.2% | Unknown |
| CVE-2017-0261 | Microsoft Office | 2022-03-03 | 78.1% | Unknown |
| CVE-2016-7855 | Adobe Flash Player | 2022-03-03 | 25.1% | Unknown |
| CVE-2022-0609 | Google Chromium Animation | 2022-02-15 | 22.9% | Unknown |
| CVE-2018-15982 | Adobe Flash Player | 2022-02-15 | 89.5% | Known |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS | 2022-02-11 | 16.3% | Unknown |
| CVE-2017-0263 | Microsoft Win32k | 2022-02-10 | 10.0% | Unknown |
| CVE-2014-1776 | Microsoft Internet Explorer | 2022-01-28 | 82.6% | Unknown |
| CVE-2020-6572 | Google Chrome Media | 2022-01-10 | 10.5% | Unknown |
| CVE-2021-4102 | Google Chromium V8 | 2021-12-15 | 7.8% | Unknown |
| CVE-2021-40449 | Microsoft Windows | 2021-11-17 | 74.1% | Known |
| CVE-2021-37975 | Google Chromium V8 | 2021-11-03 | 34.8% | Unknown |
| CVE-2021-37973 | Google Chromium Portals | 2021-11-03 | 11.7% | Unknown |
| CVE-2021-30858 | Apple iOS, iPadOS, and macOS | 2021-11-03 | 13.3% | Unknown |
| CVE-2021-30762 | Apple iOS | 2021-11-03 | 10.9% | Unknown |
| CVE-2021-30661 | Apple Multiple Products | 2021-11-03 | 4.4% | Unknown |
| CVE-2021-30633 | Google Chromium Indexed DB API | 2021-11-03 | 33.1% | Unknown |
| CVE-2021-30554 | Google Chromium WebGL | 2021-11-03 | 7.3% | Unknown |
| CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) | 2021-11-03 | 12.0% | Unknown |
| CVE-2021-28550 | Adobe Acrobat and Reader | 2021-11-03 | 51.8% | Unknown |
| CVE-2021-26411 | Microsoft Internet Explorer | 2021-11-03 | 80.7% | Known |
| CVE-2021-21206 | Google Chromium Blink | 2021-11-03 | 9.3% | Unknown |
| CVE-2021-21193 | Google Chromium Blink | 2021-11-03 | 9.8% | Unknown |
| CVE-2021-1905 | Qualcomm Multiple Chipsets | 2021-11-03 | 1.5% | Unknown |
| CVE-2020-6819 | Mozilla Firefox and Thunderbird | 2021-11-03 | 3.0% | Unknown |
| CVE-2020-3992 | VMware ESXi | 2021-11-03 | 83.0% | Known |
| CVE-2020-16017 | Google Chrome | 2021-11-03 | 2.7% | Unknown |
| CVE-2020-0674 | Microsoft Internet Explorer | 2021-11-03 | 86.8% | Unknown |
| CVE-2019-2215 | Android Android Kernel | 2021-11-03 | 72.1% | Unknown |
| CVE-2019-1429 | Microsoft Internet Explorer | 2021-11-03 | 77.2% | Unknown |
| CVE-2019-0708 | Microsoft Remote Desktop Services | 2021-11-03 | 99.9% | Known |
| CVE-2019-0211 | Apache HTTP Server | 2021-11-03 | 65.0% | Unknown |
| CVE-2018-4878 | Adobe Flash Player | 2021-11-03 | 89.5% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
93 KEV entries are classified as CWE-416. CWE definition (MITRE)