CVEs from 2015 known to be exploited
Entries48
Ransomware-linked4
Avg. lag7.4 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2015-5477 | ISC BIND | 2026-10-08 | 91.2% | Unknown |
| CVE-2015-3306 | ProFTPD ProFTPD | 2026-10-08 | 96.7% | Unknown |
| CVE-2015-5287 | Red Hat Automatic Bug Reporting Tool | 2026-08-26 | 4.9% | Unknown |
| CVE-2015-3246 | Red Hat Libuser | 2026-08-26 | 8.4% | Unknown |
| CVE-2015-7755 | Juniper ScreenOS | 2025-10-02 | 61.1% | Unknown |
| CVE-2015-5317 | Jenkins Jenkins User Interface (UI) | 2023-05-12 | 23.0% | Unknown |
| CVE-2015-2291 | Intel Ethernet Diagnostics Driver for Windows | 2023-02-10 | 9.0% | Known |
| CVE-2015-8651 | Adobe Flash Player | 2022-05-25 | 67.6% | Unknown |
| CVE-2015-6175 | Microsoft Windows | 2022-05-25 | 5.1% | Unknown |
| CVE-2015-4495 | Mozilla Firefox | 2022-05-25 | 68.5% | Unknown |
| CVE-2015-2425 | Microsoft Internet Explorer | 2022-05-25 | 44.7% | Unknown |
| CVE-2015-2360 | Microsoft Win32k | 2022-05-25 | 14.8% | Unknown |
| CVE-2015-1769 | Microsoft Windows | 2022-05-25 | 4.0% | Unknown |
| CVE-2015-1671 | Microsoft Windows | 2022-05-25 | 48.9% | Unknown |
| CVE-2015-0310 | Adobe Flash Player | 2022-05-25 | 15.0% | Unknown |
| CVE-2015-0071 | Microsoft Internet Explorer | 2022-05-25 | 33.5% | Unknown |
| CVE-2015-0016 | Microsoft Windows | 2022-05-25 | 75.7% | Unknown |
| CVE-2015-5123 | Adobe Flash Player | 2022-04-13 | 18.8% | Unknown |
| CVE-2015-5122 | Adobe Flash Player | 2022-04-13 | 93.9% | Unknown |
| CVE-2015-3113 | Adobe Flash Player | 2022-04-13 | 99.8% | Unknown |
| CVE-2015-2502 | Microsoft Internet Explorer | 2022-04-13 | 51.0% | Unknown |
| CVE-2015-0313 | Adobe Flash Player | 2022-04-13 | 95.2% | Unknown |
| CVE-2015-0311 | Adobe Flash Player | 2022-04-13 | 85.5% | Unknown |
| CVE-2015-2426 | Microsoft Windows | 2022-03-28 | 86.5% | Unknown |
| CVE-2015-2419 | Microsoft Internet Explorer | 2022-03-28 | 53.1% | Unknown |
| CVE-2015-1770 | Microsoft Office | 2022-03-28 | 34.9% | Unknown |
| CVE-2015-4068 | Arcserve Unified Data Protection (UDP) | 2022-03-25 | 63.6% | Unknown |
| CVE-2015-3035 | TP-Link Multiple Archer Devices | 2022-03-25 | 83.9% | Unknown |
| CVE-2015-1427 | Elastic Elasticsearch | 2022-03-25 | 99.9% | Unknown |
| CVE-2015-1187 | D-Link and TRENDnet Multiple Devices | 2022-03-25 | 82.8% | Unknown |
| CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) | 2022-03-25 | 40.3% | Unknown |
| CVE-2015-2546 | Microsoft Win32k | 2022-03-15 | 10.1% | Known |
| CVE-2015-7645 | Adobe Flash Player | 2022-03-03 | 65.3% | Known |
| CVE-2015-5119 | Adobe Flash Player | 2022-03-03 | 99.3% | Unknown |
| CVE-2015-4902 | Oracle Java SE | 2022-03-03 | 13.6% | Unknown |
| CVE-2015-3043 | Adobe Flash Player | 2022-03-03 | 73.8% | Unknown |
| CVE-2015-2590 | Oracle Java SE | 2022-03-03 | 25.4% | Unknown |
| CVE-2015-2545 | Microsoft Office | 2022-03-03 | 85.9% | Unknown |
| CVE-2015-2424 | Microsoft PowerPoint | 2022-03-03 | 40.3% | Unknown |
| CVE-2015-2387 | Microsoft ATM Font Driver | 2022-03-03 | 34.8% | Unknown |
| CVE-2015-1701 | Microsoft Win32k | 2022-03-03 | 55.9% | Known |
| CVE-2015-1642 | Microsoft Office | 2022-03-03 | 53.0% | Unknown |
| CVE-2015-2051 | D-Link DIR-645 Router | 2022-02-10 | 97.1% | Unknown |
| CVE-2015-1635 | Microsoft HTTP.sys | 2022-02-10 | 99.9% | Unknown |
| CVE-2015-1130 | Apple OS X | 2022-02-10 | 9.8% | Unknown |
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition | 2022-01-10 | 97.7% | Unknown |
| CVE-2015-4852 | Oracle WebLogic Server | 2021-11-03 | 96.0% | Unknown |
| CVE-2015-1641 | Microsoft Office | 2021-11-03 | 96.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
48 CVE-2015 vulnerabilities are in KEV; on average they were listed 7.4 years after the CVE year.