CVEs from 2010 known to be exploited
Entries23
Ransomware-linked4
Avg. lag12.6 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2010-0806 | Microsoft Internet Explorer | 2026-05-20 | 82.2% | Unknown |
| CVE-2010-0249 | Microsoft Internet Explorer | 2026-05-20 | 91.9% | Unknown |
| CVE-2010-3962 | Microsoft Internet Explorer | 2025-10-06 | 96.8% | Unknown |
| CVE-2010-3765 | Mozilla Multiple Products | 2025-10-06 | 83.1% | Unknown |
| CVE-2010-3904 | Linux Kernel | 2023-05-12 | 15.7% | Unknown |
| CVE-2010-2568 | Microsoft Windows | 2022-09-15 | 91.3% | Unknown |
| CVE-2010-2883 | Adobe Acrobat and Reader | 2022-06-08 | 81.3% | Unknown |
| CVE-2010-2572 | Microsoft PowerPoint | 2022-06-08 | 58.6% | Unknown |
| CVE-2010-1297 | Adobe Flash Player | 2022-06-08 | 82.5% | Unknown |
| CVE-2010-1428 | Red Hat JBoss | 2022-05-25 | 61.4% | Known |
| CVE-2010-0840 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 96.3% | Unknown |
| CVE-2010-0738 | Red Hat JBoss | 2022-05-25 | 79.5% | Known |
| CVE-2010-5330 | Ubiquiti AirOS | 2022-04-15 | 39.3% | Unknown |
| CVE-2010-4398 | Microsoft Windows | 2022-03-28 | 8.6% | Unknown |
| CVE-2010-4345 | Exim Exim | 2022-03-25 | 17.9% | Unknown |
| CVE-2010-4344 | Exim Exim | 2022-03-25 | 71.7% | Unknown |
| CVE-2010-3035 | Cisco IOS XR | 2022-03-25 | 5.6% | Unknown |
| CVE-2010-2861 | Adobe ColdFusion | 2022-03-25 | 99.7% | Known |
| CVE-2010-3333 | Microsoft Office | 2022-03-03 | 89.4% | Unknown |
| CVE-2010-0232 | Microsoft Windows | 2022-03-03 | 28.7% | Unknown |
| CVE-2010-0188 | Adobe Reader and Acrobat | 2022-03-03 | 88.2% | Known |
| CVE-2010-1871 | Red Hat JBoss Seam 2 | 2021-12-10 | 83.3% | Unknown |
| CVE-2010-5326 | SAP NetWeaver | 2021-11-03 | 17.7% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
23 CVE-2010 vulnerabilities are in KEV; on average they were listed 12.6 years after the CVE year.