CVEs from 2013 known to be exploited
Entries38
Ransomware-linked6
Avg. lag9.3 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2013-3918 | Microsoft Windows | 2025-10-06 | 73.6% | Unknown |
| CVE-2013-3893 | Microsoft Internet Explorer | 2025-08-12 | 87.5% | Unknown |
| CVE-2013-0648 | Adobe Flash Player | 2024-09-17 | 11.0% | Unknown |
| CVE-2013-0643 | Adobe Flash Player | 2024-09-17 | 10.5% | Unknown |
| CVE-2013-3163 | Microsoft Internet Explorer | 2023-03-30 | 70.6% | Unknown |
| CVE-2013-6282 | Linux Kernel | 2022-09-15 | 39.7% | Unknown |
| CVE-2013-2597 | Code Aurora ACDB Audio Driver | 2022-09-15 | 1.5% | Unknown |
| CVE-2013-2596 | Linux Kernel | 2022-09-15 | 3.2% | Unknown |
| CVE-2013-2094 | Linux Kernel | 2022-09-15 | 47.7% | Unknown |
| CVE-2013-1331 | Microsoft Office | 2022-06-08 | 79.8% | Unknown |
| CVE-2013-7331 | Microsoft Internet Explorer | 2022-05-25 | 50.2% | Unknown |
| CVE-2013-3993 | IBM InfoSphere BigInsights | 2022-05-25 | 4.7% | Known |
| CVE-2013-3896 | Microsoft Silverlight | 2022-05-25 | 67.9% | Unknown |
| CVE-2013-2423 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 85.2% | Unknown |
| CVE-2013-0431 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 90.1% | Known |
| CVE-2013-0422 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 97.0% | Known |
| CVE-2013-0074 | Microsoft Silverlight | 2022-05-25 | 78.8% | Known |
| CVE-2013-3660 | Microsoft Win32k | 2022-03-28 | 39.3% | Unknown |
| CVE-2013-2729 | Adobe Reader and Acrobat | 2022-03-28 | 66.5% | Unknown |
| CVE-2013-2551 | Microsoft Internet Explorer | 2022-03-28 | 73.9% | Known |
| CVE-2013-2465 | Oracle Java SE | 2022-03-28 | 98.8% | Known |
| CVE-2013-1690 | Mozilla Firefox and Thunderbird | 2022-03-28 | 69.0% | Unknown |
| CVE-2013-5223 | D-Link DSL-2760U | 2022-03-25 | 50.8% | Unknown |
| CVE-2013-4810 | Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management | 2022-03-25 | 79.4% | Unknown |
| CVE-2013-2251 | Apache Struts | 2022-03-25 | 99.9% | Unknown |
| CVE-2013-0631 | Adobe ColdFusion | 2022-03-07 | 66.4% | Unknown |
| CVE-2013-0629 | Adobe ColdFusion | 2022-03-07 | 65.7% | Unknown |
| CVE-2013-0625 | Adobe ColdFusion | 2022-03-07 | 93.7% | Unknown |
| CVE-2013-5065 | Microsoft Windows | 2022-03-03 | 34.6% | Unknown |
| CVE-2013-3897 | Microsoft Internet Explorer | 2022-03-03 | 77.3% | Unknown |
| CVE-2013-3346 | Adobe Reader and Acrobat | 2022-03-03 | 78.9% | Unknown |
| CVE-2013-1675 | Mozilla Firefox | 2022-03-03 | 6.6% | Unknown |
| CVE-2013-1347 | Microsoft Internet Explorer | 2022-03-03 | 77.7% | Unknown |
| CVE-2013-0641 | Adobe Reader | 2022-03-03 | 32.3% | Unknown |
| CVE-2013-0640 | Adobe Reader and Acrobat | 2022-03-03 | 86.9% | Unknown |
| CVE-2013-0632 | Adobe ColdFusion | 2022-03-03 | 93.6% | Unknown |
| CVE-2013-3906 | Microsoft Graphics Component | 2022-02-15 | 84.8% | Unknown |
| CVE-2013-3900 | Microsoft WinVerifyTrust function | 2022-01-10 | 44.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
38 CVE-2013 vulnerabilities are in KEV; on average they were listed 9.3 years after the CVE year.