Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-863
Entries18
Ransomware-linked6
Vendors15
By vendor
3
2
1
1
1
1
1
1
1
1
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-71362 | Adobe Commerce and Magento | 2026-09-24 | 87.5% | Unknown |
| CVE-2026-42016 | JFrog Artifactory | 2026-09-11 | 8.6% | Unknown |
| CVE-2025-55177 | Meta Platforms WhatsApp | 2025-09-02 | 4.7% | Unknown |
| CVE-2025-21480 | Qualcomm Multiple Chipsets | 2025-06-03 | 0.4% | Unknown |
| CVE-2025-21479 | Qualcomm Multiple Chipsets | 2025-06-03 | 0.8% | Unknown |
| CVE-2025-24200 | Apple iOS and iPadOS | 2025-02-12 | 4.4% | Unknown |
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) | 2024-11-21 | 1.7% | Unknown |
| CVE-2024-38856 | Apache OFBiz | 2024-08-27 | 99.4% | Unknown |
| CVE-2021-40655 | D-Link DIR-605 Router | 2024-05-16 | 86.6% | Unknown |
| CVE-2023-22518 | Atlassian Confluence Data Center and Server | 2023-11-07 | 99.9% | Known |
| CVE-2023-38035 | Ivanti Sentry | 2023-08-22 | 99.9% | Known |
| CVE-2021-3560 | Red Hat Polkit | 2023-05-12 | 23.7% | Unknown |
| CVE-2023-24880 | Microsoft Windows | 2023-03-14 | 78.0% | Known |
| CVE-2023-21715 | Microsoft Office | 2023-02-14 | 12.0% | Unknown |
| CVE-2022-41091 | Microsoft Windows | 2022-11-08 | 1.8% | Known |
| CVE-2021-30533 | Google Chromium PopupBlocker | 2022-06-27 | 16.7% | Unknown |
| CVE-2019-7192 | QNAP Photo Station | 2022-06-08 | 88.1% | Known |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management | 2021-11-03 | 99.8% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
18 KEV entries are classified as CWE-863. CWE definition (MITRE)