Known exploited vulnerabilities classified as CWE-843
Entries38
Ransomware-linked1
Vendors6
By vendor
20
8
5
2
2
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-85046 | Google Chromium V8 | 2026-09-04 | 48.8% | Unknown |
| CVE-2026-21519 | Microsoft Windows | 2026-02-10 | 2.4% | Unknown |
| CVE-2025-13223 | Google Chromium V8 | 2025-11-19 | 5.0% | Unknown |
| CVE-2025-10585 | Google Chromium V8 | 2025-09-23 | 5.3% | Unknown |
| CVE-2025-6554 | Google Chromium V8 | 2025-07-02 | 14.1% | Unknown |
| CVE-2025-30397 | Microsoft Windows | 2025-05-13 | 26.8% | Unknown |
| CVE-2024-7971 | Google Chromium V8 | 2024-08-26 | 21.1% | Unknown |
| CVE-2024-38178 | Microsoft Windows | 2024-08-13 | 41.3% | Unknown |
| CVE-2024-5274 | Google Chromium V8 | 2024-05-28 | 7.4% | Unknown |
| CVE-2024-4947 | Google Chromium V8 | 2024-05-20 | 15.2% | Unknown |
| CVE-2023-4762 | Google Chromium V8 | 2024-02-06 | 41.3% | Unknown |
| CVE-2024-23222 | Apple Multiple Products | 2024-01-23 | 10.5% | Unknown |
| CVE-2023-32439 | Apple Multiple Products | 2023-06-23 | 23.9% | Unknown |
| CVE-2023-3079 | Google Chromium V8 | 2023-06-07 | 32.1% | Unknown |
| CVE-2023-2033 | Google Chromium V8 | 2023-04-17 | 40.7% | Unknown |
| CVE-2023-23529 | Apple Multiple Products | 2023-02-14 | 9.5% | Unknown |
| CVE-2022-42856 | Apple iOS | 2022-12-14 | 8.5% | Unknown |
| CVE-2022-4262 | Google Chromium V8 | 2022-12-05 | 23.5% | Unknown |
| CVE-2022-3723 | Google Chromium V8 | 2022-10-28 | 7.9% | Unknown |
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service | 2022-10-11 | 1.8% | Unknown |
| CVE-2017-5070 | Google Chromium V8 | 2022-06-08 | 32.0% | Unknown |
| CVE-2019-11707 | Mozilla Firefox and Thunderbird | 2022-05-23 | 37.6% | Unknown |
| CVE-2021-1789 | Apple Multiple Products | 2022-05-04 | 13.9% | Unknown |
| CVE-2019-8506 | Apple Multiple Products | 2022-05-04 | 16.1% | Unknown |
| CVE-2022-1364 | Google Chromium V8 | 2022-04-15 | 13.7% | Unknown |
| CVE-2022-1096 | Google Chromium V8 | 2022-03-28 | 24.7% | Unknown |
| CVE-2018-8298 | ChakraCore ChakraCore scripting engine | 2022-03-03 | 74.6% | Unknown |
| CVE-2017-11292 | Adobe Flash Player | 2022-03-03 | 11.8% | Unknown |
| CVE-2011-0611 | Adobe Flash Player | 2022-03-03 | 99.4% | Unknown |
| CVE-2019-0752 | Microsoft Internet Explorer | 2022-02-15 | 81.6% | Known |
| CVE-2021-30869 | Apple iOS, iPadOS, and macOS | 2021-11-03 | 4.1% | Unknown |
| CVE-2021-30563 | Google Chromium V8 | 2021-11-03 | 9.0% | Unknown |
| CVE-2021-30551 | Google Chromium V8 | 2021-11-03 | 64.7% | Unknown |
| CVE-2021-21224 | Google Chromium V8 | 2021-11-03 | 84.1% | Unknown |
| CVE-2020-6418 | Google Chromium V8 | 2021-11-03 | 78.8% | Unknown |
| CVE-2020-27932 | Apple Multiple Products | 2021-11-03 | 10.3% | Unknown |
| CVE-2020-16009 | Google Chromium V8 | 2021-11-03 | 48.2% | Unknown |
| CVE-2019-17026 | Mozilla Firefox and Thunderbird | 2021-11-03 | 46.3% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
38 KEV entries are classified as CWE-843. CWE definition (MITRE)