Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-79
Entries33
Ransomware-linked5
Vendors15
By vendor
9
6
2
2
2
2
2
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-42897 | Microsoft Microsoft | 2026-05-15 | 0.5% | Unknown |
| CVE-2025-48700 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-04-20 | 1.7% | Unknown |
| CVE-2025-66376 | Synacor Zimbra Collaboration Suite (ZCS) | 2026-03-18 | 20.2% | Unknown |
| CVE-2025-68461 | Roundcube Webmail | 2026-02-20 | 26.8% | Unknown |
| CVE-2021-26829 | OpenPLC ScadaBR | 2025-11-28 | 48.0% | Unknown |
| CVE-2025-27915 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-10-07 | 4.0% | Unknown |
| CVE-2024-42009 | Roundcube Webmail | 2025-06-09 | 82.8% | Unknown |
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-05-19 | 23.6% | Unknown |
| CVE-2024-11182 | MDaemon Email Server | 2025-05-19 | 17.5% | Unknown |
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-02-25 | 77.2% | Unknown |
| CVE-2020-11023 | JQuery JQuery | 2025-01-23 | 84.8% | Unknown |
| CVE-2024-44309 | Apple Multiple Products | 2024-11-21 | 22.5% | Unknown |
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) | 2024-11-12 | 22.5% | Unknown |
| CVE-2024-37383 | Roundcube Webmail | 2024-10-24 | 73.2% | Unknown |
| CVE-2024-43573 | Microsoft Windows | 2024-10-08 | 46.1% | Unknown |
| CVE-2023-43770 | Roundcube Webmail | 2024-02-12 | 63.6% | Unknown |
| CVE-2023-5631 | Roundcube Webmail | 2023-10-26 | 75.8% | Unknown |
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) | 2023-07-27 | 49.0% | Unknown |
| CVE-2020-35730 | Roundcube Roundcube Webmail | 2023-06-22 | 32.9% | Unknown |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) | 2023-04-03 | 17.6% | Unknown |
| CVE-2022-42948 | Fortra Cobalt Strike | 2023-03-30 | 2.7% | Unknown |
| CVE-2022-39197 | Fortra Cobalt Strike | 2023-03-30 | 46.4% | Unknown |
| CVE-2012-0767 | Adobe Flash Player | 2022-06-08 | 6.1% | Unknown |
| CVE-2018-19953 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 28.9% | Known |
| CVE-2018-19943 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 21.4% | Known |
| CVE-2019-18426 | Meta Platforms WhatsApp | 2022-05-23 | 67.8% | Unknown |
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-04-19 | 29.7% | Known |
| CVE-2019-3929 | Crestron Multiple Products | 2022-04-15 | 98.9% | Unknown |
| CVE-2013-5223 | D-Link DSL-2760U | 2022-03-25 | 50.8% | Unknown |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | 2022-02-25 | 30.9% | Known |
| CVE-2021-1879 | Apple iOS, iPadOS, and watchOS | 2021-11-03 | 7.0% | Unknown |
| CVE-2020-3580 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | 85.5% | Known |
| CVE-2019-9978 | WordPress Social Warfare Plugin | 2021-11-03 | 72.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
33 KEV entries are classified as CWE-79. CWE definition (MITRE)