Known exploited vulnerabilities classified as CWE-787
Entries105
Ransomware-linked16
Vendors21
By vendor
26
25
19
7
5
3
3
2
2
2
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-86950 | Apple Multiple Products | 2026-09-29 | 1.2% | Unknown |
| CVE-2026-53266 | Linux Kernel | 2026-09-18 | 0.8% | Unknown |
| CVE-2026-87491 | Google Chromium V8 | 2026-09-09 | 3.1% | Unknown |
| CVE-2025-25249 | Fortinet Multiple Products | 2026-09-09 | 3.8% | Unknown |
| CVE-2022-0995 | Linux Kernel | 2026-08-26 | 8.7% | Unknown |
| CVE-2026-11645 | Google Chromium V8 | 2026-06-09 | 2.4% | Unknown |
| CVE-2026-0300 | Palo Alto Networks PAN-OS | 2026-05-06 | 31.7% | Unknown |
| CVE-2026-3909 | Google Skia | 2026-03-13 | 2.3% | Unknown |
| CVE-2024-37079 | Broadcom VMware vCenter Server | 2026-01-23 | 22.3% | Unknown |
| CVE-2025-14733 | WatchGuard Firebox | 2025-12-19 | 26.5% | Known |
| CVE-2025-9242 | WatchGuard Firebox | 2025-11-12 | 91.3% | Unknown |
| CVE-2025-21042 | Samsung Mobile Devices | 2025-11-10 | 33.1% | Unknown |
| CVE-2021-22555 | Linux Kernel | 2025-10-06 | 78.6% | Unknown |
| CVE-2025-21043 | Samsung Mobile Devices | 2025-10-02 | 2.1% | Unknown |
| CVE-2025-43300 | Apple iOS, iPadOS, and macOS | 2025-08-21 | 32.4% | Unknown |
| CVE-2025-5419 | Google Chromium V8 | 2025-06-05 | 7.8% | Unknown |
| CVE-2025-27363 | FreeType FreeType | 2025-05-06 | 27.7% | Unknown |
| CVE-2024-53197 | Linux Kernel | 2025-04-09 | 4.1% | Unknown |
| CVE-2025-24201 | Apple Multiple Products | 2025-03-13 | 3.8% | Unknown |
| CVE-2024-53104 | Linux Kernel | 2025-02-05 | 3.3% | Unknown |
| CVE-2024-4761 | Google Chromium V8 | 2024-05-16 | 11.0% | Unknown |
| CVE-2024-23296 | Apple Multiple Products | 2024-03-06 | 1.4% | Unknown |
| CVE-2024-23225 | Apple Multiple Products | 2024-03-06 | 1.4% | Unknown |
| CVE-2024-21762 | Fortinet FortiOS | 2024-02-09 | 83.4% | Known |
| CVE-2023-34048 | VMware vCenter Server | 2024-01-22 | 99.4% | Unknown |
| CVE-2024-0519 | Google Chromium V8 | 2024-01-17 | 3.8% | Unknown |
| CVE-2023-7024 | Google Chromium WebRTC | 2024-01-02 | 6.6% | Unknown |
| CVE-2023-42917 | Apple Multiple Products | 2023-12-04 | 9.2% | Unknown |
| CVE-2023-20109 | Cisco IOS and IOS XE | 2023-10-10 | 2.4% | Unknown |
| CVE-2023-5217 | Google Chromium libvpx | 2023-10-02 | 49.0% | Unknown |
| CVE-2023-26369 | Adobe Acrobat and Reader | 2023-09-14 | 6.7% | Unknown |
| CVE-2023-4863 | Google Chromium WebP | 2023-09-13 | 99.9% | Unknown |
| CVE-2021-25372 | Samsung Mobile Devices | 2023-06-29 | 0.8% | Unknown |
| CVE-2023-32435 | Apple Multiple Products | 2023-06-23 | 22.9% | Unknown |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS | 2023-04-10 | 23.2% | Unknown |
| CVE-2021-30900 | Apple iOS, iPadOS, and macOS | 2023-03-30 | 5.2% | Unknown |
| CVE-2022-4135 | Google Chromium GPU | 2022-11-28 | 31.8% | Unknown |
| CVE-2022-41128 | Microsoft Windows | 2022-11-08 | 24.6% | Unknown |
| CVE-2022-41125 | Microsoft Windows | 2022-11-08 | 3.0% | Unknown |
| CVE-2022-41073 | Microsoft Windows | 2022-11-08 | 2.2% | Known |
| CVE-2022-42827 | Apple iOS and iPadOS | 2022-10-25 | 1.0% | Unknown |
| CVE-2022-37969 | Microsoft Windows | 2022-09-14 | 28.2% | Known |
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS | 2022-09-14 | 5.6% | Unknown |
| CVE-2021-38406 | Delta Electronics DOPSoft 2 | 2022-08-25 | 76.4% | Unknown |
| CVE-2022-32894 | Apple iOS and macOS | 2022-08-18 | 3.2% | Unknown |
| CVE-2022-32893 | Apple iOS and macOS | 2022-08-18 | 9.9% | Unknown |
| CVE-2021-4034 | Red Hat Polkit | 2022-06-27 | 94.3% | Known |
| CVE-2020-9907 | Apple Multiple Products | 2022-06-27 | 3.1% | Unknown |
| CVE-2020-3837 | Apple Multiple Products | 2022-06-27 | 14.8% | Unknown |
| CVE-2019-5825 | Google Chromium V8 | 2022-06-08 | 55.9% | Unknown |
| CVE-2018-6065 | Google Chromium V8 | 2022-06-08 | 60.3% | Unknown |
| CVE-2018-17480 | Google Chromium V8 | 2022-06-08 | 35.6% | Unknown |
| CVE-2016-5198 | Google Chromium V8 | 2022-06-08 | 34.1% | Unknown |
| CVE-2012-0754 | Adobe Flash Player | 2022-06-08 | 91.0% | Unknown |
| CVE-2011-2462 | Adobe Reader and Acrobat | 2022-06-08 | 88.8% | Unknown |
| CVE-2010-1297 | Adobe Flash Player | 2022-06-08 | 82.5% | Unknown |
| CVE-2021-30883 | Apple Multiple Products | 2022-05-23 | 14.7% | Unknown |
| CVE-2020-1027 | Microsoft Windows | 2022-05-23 | 4.5% | Unknown |
| CVE-2019-7287 | Apple iOS | 2022-05-23 | 4.5% | Unknown |
| CVE-2019-7286 | Apple Multiple Products | 2022-05-23 | 15.9% | Unknown |
| CVE-2018-5002 | Adobe Flash Player | 2022-05-23 | 25.0% | Unknown |
| CVE-2022-24521 | Microsoft Windows | 2022-04-13 | 7.0% | Known |
| CVE-2021-39793 | Google Pixel | 2022-04-11 | 0.6% | Unknown |
| CVE-2018-8373 | Microsoft Internet Explorer Scripting Engine | 2022-03-25 | 61.9% | Unknown |
| CVE-2019-16928 | Exim Exim Internet Mailer | 2022-03-03 | 41.6% | Unknown |
| CVE-2015-3043 | Adobe Flash Player | 2022-03-03 | 73.8% | Unknown |
| CVE-2013-0640 | Adobe Reader and Acrobat | 2022-03-03 | 86.9% | Unknown |
| CVE-2018-8174 | Microsoft Windows | 2022-02-15 | 88.3% | Known |
| CVE-2022-21882 | Microsoft Win32k | 2022-02-04 | 59.2% | Known |
| CVE-2022-22587 | Apple iOS and macOS | 2022-01-28 | 11.6% | Unknown |
| CVE-2018-13383 | Fortinet FortiOS and FortiProxy | 2022-01-10 | 33.6% | Known |
| CVE-2021-35211 | SolarWinds Serv-U | 2021-11-03 | 91.1% | Known |
| CVE-2021-34448 | Microsoft Windows | 2021-11-03 | 40.0% | Unknown |
| CVE-2021-33742 | Microsoft Windows | 2021-11-03 | 59.4% | Unknown |
| CVE-2021-31956 | Microsoft Windows | 2021-11-03 | 22.2% | Unknown |
| CVE-2021-31755 | Tenda AC11 Router | 2021-11-03 | 86.5% | Unknown |
| CVE-2021-30807 | Apple Multiple Products | 2021-11-03 | 28.8% | Unknown |
| CVE-2021-30761 | Apple iOS | 2021-11-03 | 10.5% | Unknown |
| CVE-2021-30665 | Apple Multiple Products | 2021-11-03 | 3.7% | Unknown |
| CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) | 2021-11-03 | 5.4% | Unknown |
| CVE-2021-28310 | Microsoft Win32k | 2021-11-03 | 8.3% | Unknown |
| CVE-2021-27562 | Arm Trusted Firmware | 2021-11-03 | 3.0% | Unknown |
| CVE-2021-1732 | Microsoft Win32k | 2021-11-03 | 78.3% | Known |
| CVE-2020-9819 | Apple iOS, iPadOS, and watchOS | 2021-11-03 | 2.1% | Unknown |
| CVE-2020-9818 | Apple iOS, iPadOS, and watchOS | 2021-11-03 | 2.2% | Unknown |
| CVE-2020-27930 | Apple Multiple Products | 2021-11-03 | 22.0% | Unknown |
| CVE-2020-16013 | Google Chromium V8 | 2021-11-03 | 2.7% | Unknown |
| CVE-2020-16010 | Google Chrome for Android UI | 2021-11-03 | 6.3% | Unknown |
| CVE-2020-16009 | Google Chromium V8 | 2021-11-03 | 48.2% | Unknown |
| CVE-2020-15999 | Google Chrome FreeType | 2021-11-03 | 63.8% | Unknown |
| CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) | 2021-11-03 | 80.1% | Unknown |
| CVE-2020-1380 | Microsoft Internet Explorer | 2021-11-03 | 24.1% | Unknown |
| CVE-2020-1054 | Microsoft Win32k | 2021-11-03 | 54.1% | Unknown |
| CVE-2020-1020 | Microsoft Windows | 2021-11-03 | 65.0% | Unknown |
| CVE-2020-0986 | Microsoft Windows | 2021-11-03 | 16.4% | Unknown |
| CVE-2020-0968 | Microsoft Internet Explorer | 2021-11-03 | 30.6% | Known |
| CVE-2020-0938 | Microsoft Windows | 2021-11-03 | 68.9% | Unknown |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer | 2021-11-03 | 2.6% | Known |
| CVE-2020-0069 | MediaTek Multiple Chipsets | 2021-11-03 | 1.3% | Unknown |
| CVE-2019-5544 | VMware VMware ESXi and Horizon DaaS | 2021-11-03 | 97.2% | Known |
| CVE-2019-1429 | Microsoft Internet Explorer | 2021-11-03 | 77.2% | Unknown |
| CVE-2019-1367 | Microsoft Internet Explorer | 2021-11-03 | 52.4% | Known |
| CVE-2018-8653 | Microsoft Internet Explorer | 2021-11-03 | 29.6% | Unknown |
| CVE-2018-0802 | Microsoft Office | 2021-11-03 | 93.2% | Known |
| CVE-2018-0798 | Microsoft Office | 2021-11-03 | 95.1% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
105 KEV entries are classified as CWE-787. CWE definition (MITRE)