CVEs from 2014 known to be exploited
Entries34
Ransomware-linked1
Avg. lag8.4 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2014-6278 | GNU GNU Bash | 2025-10-02 | 99.6% | Unknown |
| CVE-2014-3931 | Looking Glass Multi-Router Looking Glass (MRLG) | 2025-07-07 | 28.9% | Unknown |
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) | 2024-11-12 | 22.5% | Unknown |
| CVE-2014-0502 | Adobe Flash Player | 2024-09-17 | 24.8% | Unknown |
| CVE-2014-0497 | Adobe Flash Player | 2024-09-17 | 99.8% | Unknown |
| CVE-2014-100005 | D-Link DIR-600 Router | 2024-05-16 | 43.4% | Unknown |
| CVE-2014-8361 | Realtek SDK | 2023-09-18 | 99.9% | Unknown |
| CVE-2014-0196 | Linux Kernel | 2023-05-12 | 22.4% | Unknown |
| CVE-2014-8439 | Adobe Flash Player | 2022-05-25 | 20.3% | Unknown |
| CVE-2014-4148 | Microsoft Windows | 2022-05-25 | 59.8% | Unknown |
| CVE-2014-4123 | Microsoft Internet Explorer | 2022-05-25 | 47.1% | Unknown |
| CVE-2014-4077 | Microsoft Input Method Editor (IME) Japanese | 2022-05-25 | 54.5% | Unknown |
| CVE-2014-3153 | Linux Kernel | 2022-05-25 | 37.2% | Unknown |
| CVE-2014-2817 | Microsoft Internet Explorer | 2022-05-25 | 26.3% | Unknown |
| CVE-2014-0546 | Adobe Reader and Acrobat | 2022-05-25 | 22.3% | Unknown |
| CVE-2014-4113 | Microsoft Win32k | 2022-05-04 | 86.9% | Unknown |
| CVE-2014-0322 | Microsoft Internet Explorer | 2022-05-04 | 85.1% | Unknown |
| CVE-2014-0160 | OpenSSL OpenSSL | 2022-05-04 | 99.9% | Unknown |
| CVE-2014-0780 | InduSoft Web Studio | 2022-04-15 | 74.6% | Unknown |
| CVE-2014-9163 | Adobe Flash Player | 2022-04-13 | 20.7% | Unknown |
| CVE-2014-6332 | Microsoft Windows | 2022-03-25 | 94.9% | Unknown |
| CVE-2014-6324 | Microsoft Kerberos Key Distribution Center (KDC) | 2022-03-25 | 87.3% | Unknown |
| CVE-2014-6287 | Rejetto HTTP File Server (HFS) | 2022-03-25 | 99.3% | Unknown |
| CVE-2014-3120 | Elastic Elasticsearch | 2022-03-25 | 88.5% | Unknown |
| CVE-2014-0130 | Rails Ruby on Rails | 2022-03-25 | 53.7% | Unknown |
| CVE-2014-4114 | Microsoft Windows | 2022-03-03 | 81.6% | Unknown |
| CVE-2014-0496 | Adobe Reader and Acrobat | 2022-03-03 | 39.9% | Unknown |
| CVE-2014-6352 | Microsoft Windows | 2022-02-25 | 77.4% | Unknown |
| CVE-2014-1761 | Microsoft Word | 2022-02-15 | 77.4% | Unknown |
| CVE-2014-4404 | Apple OS X | 2022-02-10 | 48.9% | Unknown |
| CVE-2014-7169 | GNU Bourne-Again Shell (Bash) | 2022-01-28 | 99.9% | Unknown |
| CVE-2014-6271 | GNU Bourne-Again Shell (Bash) | 2022-01-28 | 99.9% | Unknown |
| CVE-2014-1776 | Microsoft Internet Explorer | 2022-01-28 | 82.6% | Unknown |
| CVE-2014-1812 | Microsoft Windows | 2021-11-03 | 64.8% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
34 CVE-2014 vulnerabilities are in KEV; on average they were listed 8.4 years after the CVE year.