Known exploited vulnerabilities classified as CWE-693
Entries11
Ransomware-linked1
Vendors4
By vendor
8
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-58704 | Google Pixel | 2026-09-16 | 0.5% | Unknown |
| CVE-2026-32202 | Microsoft Windows | 2026-04-28 | 4.9% | Unknown |
| CVE-2025-40536 | SolarWinds Web Help Desk | 2026-02-12 | 73.5% | Unknown |
| CVE-2026-21513 | Microsoft Windows | 2026-02-10 | 15.8% | Unknown |
| CVE-2026-21510 | Microsoft Windows | 2026-02-10 | 24.5% | Unknown |
| CVE-2025-0411 | 7-Zip 7-Zip | 2025-02-06 | 67.0% | Unknown |
| CVE-2024-38226 | Microsoft Publisher | 2024-09-10 | 2.6% | Unknown |
| CVE-2024-38217 | Microsoft Windows | 2024-09-10 | 10.0% | Unknown |
| CVE-2024-38213 | Microsoft Windows | 2024-08-13 | 13.6% | Unknown |
| CVE-2024-29988 | Microsoft SmartScreen Prompt | 2024-04-30 | 44.8% | Unknown |
| CVE-2024-21412 | Microsoft Windows | 2024-02-13 | 99.4% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
11 KEV entries are classified as CWE-693. CWE definition (MITRE)