Exploited Vulnerabilities DailyKnown exploited vulnerabilities classified as CWE-94
Entries71
Ransomware-linked11
Vendors37
By vendor
17
7
3
3
3
3
2
2
2
2
1
1
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-65660 | Microsoft SharePoint | 2026-09-25 | 2.1% | Unknown |
| CVE-2026-60004 | Gitea Gitea | 2026-08-25 | 23.9% | Unknown |
| CVE-2026-72530 | TrueConf Server | 2026-08-20 | 1.6% | Unknown |
| CVE-2025-62593 | Ray-Project Ray | 2026-08-17 | 62.4% | Unknown |
| CVE-2026-9198 | IBM Langflow | 2026-08-04 | 28.6% | Unknown |
| CVE-2026-15410 | SonicWall SMA1000 Appliances | 2026-07-14 | 11.7% | Known |
| CVE-2025-67038 | Lantronix EDS5000 | 2026-06-23 | 19.9% | Unknown |
| CVE-2008-4250 | Microsoft Windows | 2026-05-20 | 98.7% | Unknown |
| CVE-2026-34197 | Apache ActiveMQ | 2026-04-16 | 15.4% | Unknown |
| CVE-2009-0238 | Microsoft Office | 2026-04-14 | 43.2% | Unknown |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-04-08 | 98.6% | Unknown |
| CVE-2026-33017 | Langflow Langflow | 2026-03-25 | 24.7% | Unknown |
| CVE-2025-54068 | Laravel Livewire | 2026-03-20 | 97.3% | Unknown |
| CVE-2025-32432 | Craft CMS Craft CMS | 2026-03-20 | 99.7% | Unknown |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-29 | 98.6% | Unknown |
| CVE-2026-20045 | Cisco Unified Communications Manager | 2026-01-21 | 4.5% | Unknown |
| CVE-2025-37164 | Hewlett Packard Enterprise (HPE) OneView | 2026-01-07 | 90.1% | Unknown |
| CVE-2009-0556 | Microsoft Office | 2026-01-07 | 67.3% | Unknown |
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 79.3% | Unknown |
| CVE-2025-49704 | Microsoft SharePoint | 2025-07-22 | 99.9% | Known |
| CVE-2024-56145 | Craft CMS Craft CMS | 2025-06-02 | 97.4% | Unknown |
| CVE-2025-4428 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 86.5% | Unknown |
| CVE-2025-1976 | Broadcom Brocade Fabric OS | 2025-04-28 | 0.6% | Unknown |
| CVE-2025-23209 | Craft CMS Craft CMS | 2025-02-20 | 21.7% | Unknown |
| CVE-2022-24816 | OSGeo JAI-EXT | 2024-06-26 | 99.9% | Unknown |
| CVE-2024-20359 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-04-24 | 19.4% | Unknown |
| CVE-2023-24955 | Microsoft SharePoint Server | 2024-03-26 | 84.9% | Known |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) | 2024-03-25 | 99.1% | Known |
| CVE-2024-21351 | Microsoft Windows | 2024-02-13 | 27.7% | Unknown |
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway | 2024-01-17 | 3.1% | Unknown |
| CVE-2018-14667 | Red Hat JBoss RichFaces Framework | 2023-09-28 | 74.2% | Unknown |
| CVE-2023-33246 | Apache RocketMQ | 2023-09-06 | 96.5% | Unknown |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway | 2023-07-19 | 99.7% | Known |
| CVE-2023-25717 | Ruckus Wireless Multiple Products | 2023-05-12 | 98.0% | Unknown |
| CVE-2023-29492 | Novi Survey Novi Survey | 2023-04-13 | 2.6% | Unknown |
| CVE-2017-7494 | Samba Samba | 2023-03-30 | 99.4% | Known |
| CVE-2013-3163 | Microsoft Internet Explorer | 2023-03-30 | 70.6% | Unknown |
| CVE-2021-39144 | XStream XStream | 2023-03-10 | 98.1% | Unknown |
| CVE-2022-41223 | Mitel MiVoice Connect | 2023-02-21 | 10.6% | Known |
| CVE-2022-3236 | Sophos Firewall | 2022-09-23 | 98.9% | Unknown |
| CVE-2022-22963 | VMware Tanzu Spring Cloud | 2022-08-25 | 99.9% | Unknown |
| CVE-2009-1862 | Adobe Acrobat and Reader, Flash Player | 2022-06-08 | 21.1% | Unknown |
| CVE-2009-0557 | Microsoft Office | 2022-06-08 | 53.0% | Unknown |
| CVE-2014-4148 | Microsoft Windows | 2022-05-25 | 59.8% | Unknown |
| CVE-2022-22947 | VMware Spring Cloud Gateway | 2022-05-16 | 98.2% | Unknown |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager | 2022-04-14 | 99.9% | Known |
| CVE-2022-22965 | VMware Spring Framework | 2022-04-04 | 99.6% | Unknown |
| CVE-2018-1273 | VMware Tanzu Spring Data Commons | 2022-03-25 | 96.9% | Known |
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) | 2022-03-25 | 99.3% | Unknown |
| CVE-2013-4810 | Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | 2022-03-25 | 79.4% | Unknown |
| CVE-2009-1151 | phpMyAdmin phpMyAdmin | 2022-03-25 | 96.5% | Unknown |
| CVE-2020-8218 | Pulse Secure Pulse Connect Secure | 2022-03-07 | 32.2% | Unknown |
| CVE-2013-1347 | Microsoft Internet Explorer | 2022-03-03 | 77.7% | Unknown |
| CVE-2012-1856 | Microsoft Office | 2022-03-03 | 72.0% | Unknown |
| CVE-2010-0188 | Adobe Reader and Acrobat | 2022-03-03 | 88.2% | Known |
| CVE-2009-3129 | Microsoft Excel | 2022-03-03 | 84.0% | Unknown |
| CVE-2014-6352 | Microsoft Windows | 2022-02-25 | 77.4% | Unknown |
| CVE-2017-9841 | PHPUnit PHPUnit | 2022-02-15 | 99.9% | Unknown |
| CVE-2013-3906 | Microsoft Graphics Component | 2022-02-15 | 84.8% | Unknown |
| CVE-2015-1635 | Microsoft HTTP.sys | 2022-02-10 | 99.9% | Unknown |
| CVE-2019-7609 | Elastic Kibana | 2022-01-10 | 95.3% | Unknown |
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition | 2022-01-10 | 97.7% | Unknown |
| CVE-2019-0193 | Apache Solr | 2021-12-10 | 83.5% | Unknown |
| CVE-2021-22900 | Ivanti Pulse Connect Secure | 2021-11-03 | 14.1% | Unknown |
| CVE-2021-22894 | Ivanti Pulse Connect Secure | 2021-11-03 | 41.2% | Unknown |
| CVE-2020-8644 | PlaySMS PlaySMS | 2021-11-03 | 86.6% | Unknown |
| CVE-2020-8243 | Ivanti Pulse Connect Secure | 2021-11-03 | 90.7% | Unknown |
| CVE-2019-9082 | ThinkPHP ThinkPHP | 2021-11-03 | 97.4% | Unknown |
| CVE-2019-4716 | IBM Planning Analytics | 2021-11-03 | 86.4% | Unknown |
| CVE-2019-16759 | vBulletin vBulletin | 2021-11-03 | 99.7% | Unknown |
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX | 2021-11-03 | 99.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
71 KEV entries are classified as CWE-94. CWE definition (MITRE)