CVEs from 2018 known to be exploited
Entries89
Ransomware-linked33
Avg. lag4.1 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2018-14634 | Linux Kernel | 2026-01-26 | 14.6% | Unknown |
| CVE-2018-4063 | Sierra Wireless AirLink ALEOS | 2025-12-12 | 27.0% | Unknown |
| CVE-2018-8639 | Microsoft Windows | 2025-03-03 | 22.1% | Known |
| CVE-2018-9276 | Paessler PRTG Network Monitor | 2025-02-04 | 86.9% | Unknown |
| CVE-2018-19410 | Paessler PRTG Network Monitor | 2025-02-04 | 97.9% | Unknown |
| CVE-2018-14933 | NUUO NVRmini Devices | 2024-12-18 | 94.8% | Unknown |
| CVE-2018-0824 | Microsoft Windows | 2024-08-05 | 73.1% | Unknown |
| CVE-2018-15133 | Laravel Laravel Framework | 2024-01-16 | 76.8% | Unknown |
| CVE-2018-14667 | Red Hat JBoss RichFaces Framework | 2023-09-28 | 74.2% | Unknown |
| CVE-2018-5430 | TIBCO JasperReports | 2022-12-29 | 48.9% | Unknown |
| CVE-2018-18809 | TIBCO JasperReports | 2022-12-29 | 79.0% | Unknown |
| CVE-2018-19323 | GIGABYTE Multiple Products | 2022-10-24 | 8.3% | Known |
| CVE-2018-19322 | GIGABYTE Multiple Products | 2022-10-24 | 1.8% | Known |
| CVE-2018-19321 | GIGABYTE Multiple Products | 2022-10-24 | 3.7% | Known |
| CVE-2018-19320 | GIGABYTE Multiple Products | 2022-10-24 | 3.5% | Known |
| CVE-2018-7445 | MikroTik RouterOS | 2022-09-08 | 60.8% | Unknown |
| CVE-2018-6530 | D-Link Multiple Routers | 2022-09-08 | 96.6% | Known |
| CVE-2018-2628 | Oracle WebLogic Server | 2022-09-08 | 99.9% | Unknown |
| CVE-2018-13374 | Fortinet FortiOS and FortiADC | 2022-09-08 | 38.0% | Known |
| CVE-2018-4344 | Apple Multiple Products | 2022-06-27 | 2.3% | Unknown |
| CVE-2018-6065 | Google Chromium V8 | 2022-06-08 | 60.3% | Unknown |
| CVE-2018-4990 | Adobe Acrobat and Reader | 2022-06-08 | 36.2% | Unknown |
| CVE-2018-17480 | Google Chromium V8 | 2022-06-08 | 35.6% | Unknown |
| CVE-2018-17463 | Google Chromium V8 | 2022-06-08 | 84.5% | Unknown |
| CVE-2018-8611 | Microsoft Windows | 2022-05-24 | 4.1% | Unknown |
| CVE-2018-19953 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 28.9% | Known |
| CVE-2018-19949 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 28.6% | Known |
| CVE-2018-19943 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 21.4% | Known |
| CVE-2018-8589 | Microsoft Win32k | 2022-05-23 | 3.0% | Unknown |
| CVE-2018-5002 | Adobe Flash Player | 2022-05-23 | 25.0% | Unknown |
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-04-19 | 29.7% | Known |
| CVE-2018-7841 | Schneider Electric U.motion Builder | 2022-04-15 | 72.6% | Unknown |
| CVE-2018-7602 | Drupal Core | 2022-04-13 | 99.1% | Known |
| CVE-2018-20753 | Kaseya Virtual System/Server Administrator (VSA) | 2022-04-13 | 29.5% | Known |
| CVE-2018-10562 | Dasan Gigabit Passive Optical Network (GPON) Routers | 2022-03-31 | 99.9% | Known |
| CVE-2018-10561 | Dasan Gigabit Passive Optical Network (GPON) Routers | 2022-03-31 | 92.8% | Unknown |
| CVE-2018-8440 | Microsoft Windows | 2022-03-28 | 18.3% | Known |
| CVE-2018-8406 | Microsoft DirectX Graphics Kernel (DXGKRNL) | 2022-03-28 | 3.4% | Known |
| CVE-2018-8405 | Microsoft DirectX Graphics Kernel (DXGKRNL) | 2022-03-28 | 3.4% | Known |
| CVE-2018-8414 | Microsoft Windows | 2022-03-25 | 72.9% | Unknown |
| CVE-2018-8373 | Microsoft Internet Explorer Scripting Engine | 2022-03-25 | 61.9% | Unknown |
| CVE-2018-6961 | VMware SD-WAN Edge | 2022-03-25 | 86.2% | Unknown |
| CVE-2018-14839 | LG N1A1 NAS | 2022-03-25 | 89.3% | Unknown |
| CVE-2018-1273 | VMware Tanzu Spring Data Commons | 2022-03-25 | 96.9% | Known |
| CVE-2018-11138 | Quest KACE System Management Appliance | 2022-03-25 | 91.7% | Known |
| CVE-2018-0147 | Cisco Secure Access Control System (ACS) | 2022-03-25 | 18.2% | Unknown |
| CVE-2018-0125 | Cisco VPN Routers | 2022-03-25 | 55.1% | Unknown |
| CVE-2018-8120 | Microsoft Win32k | 2022-03-15 | 73.4% | Known |
| CVE-2018-8581 | Microsoft Exchange Server | 2022-03-03 | 27.3% | Known |
| CVE-2018-8298 | ChakraCore ChakraCore scripting engine | 2022-03-03 | 74.6% | Unknown |
| CVE-2018-0180 | Cisco IOS Software | 2022-03-03 | 4.9% | Unknown |
| CVE-2018-0179 | Cisco IOS Software | 2022-03-03 | 4.9% | Unknown |
| CVE-2018-0175 | Cisco IOS, XR, and XE Software | 2022-03-03 | 3.4% | Unknown |
| CVE-2018-0174 | Cisco IOS XE Software | 2022-03-03 | 7.6% | Unknown |
| CVE-2018-0173 | Cisco IOS and IOS XE Software | 2022-03-03 | 7.6% | Unknown |
| CVE-2018-0172 | Cisco IOS and IOS XE Software | 2022-03-03 | 7.8% | Unknown |
| CVE-2018-0167 | Cisco IOS, XR, and XE Software | 2022-03-03 | 3.3% | Unknown |
| CVE-2018-0161 | Cisco IOS Software | 2022-03-03 | 4.1% | Unknown |
| CVE-2018-0159 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 6.8% | Unknown |
| CVE-2018-0158 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 7.1% | Unknown |
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software | 2022-03-03 | 9.3% | Unknown |
| CVE-2018-0155 | Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches | 2022-03-03 | 7.7% | Unknown |
| CVE-2018-0154 | Cisco IOS Software | 2022-03-03 | 7.0% | Unknown |
| CVE-2018-0151 | Cisco IOS and IOS XE Software | 2022-03-03 | 14.1% | Unknown |
| CVE-2018-8174 | Microsoft Windows | 2022-02-15 | 88.3% | Known |
| CVE-2018-20250 | RARLAB WinRAR | 2022-02-15 | 96.0% | Known |
| CVE-2018-15982 | Adobe Flash Player | 2022-02-15 | 89.5% | Known |
| CVE-2018-1000861 | Jenkins Jenkins Stapler Web Framework | 2022-02-10 | 98.3% | Unknown |
| CVE-2018-8453 | Microsoft Win32k | 2022-01-21 | 70.0% | Known |
| CVE-2018-13383 | Fortinet FortiOS and FortiProxy | 2022-01-10 | 33.6% | Known |
| CVE-2018-13382 | Fortinet FortiOS and FortiProxy | 2022-01-10 | 81.6% | Known |
| CVE-2018-14847 | MikroTik RouterOS | 2021-12-01 | 95.9% | Unknown |
| CVE-2018-8653 | Microsoft Internet Explorer | 2021-11-03 | 29.6% | Unknown |
| CVE-2018-7600 | Drupal Drupal Core | 2021-11-03 | 99.9% | Known |
| CVE-2018-6789 | Exim Exim | 2021-11-03 | 82.1% | Known |
| CVE-2018-4939 | Adobe ColdFusion | 2021-11-03 | 61.9% | Unknown |
| CVE-2018-4878 | Adobe Flash Player | 2021-11-03 | 89.5% | Known |
| CVE-2018-2380 | SAP Customer Relationship Management (CRM) | 2021-11-03 | 28.9% | Known |
| CVE-2018-20062 | ThinkPHP noneCms | 2021-11-03 | 99.5% | Unknown |
| CVE-2018-18325 | DotNetNuke (DNN) DotNetNuke (DNN) | 2021-11-03 | 73.8% | Unknown |
| CVE-2018-15961 | Adobe ColdFusion | 2021-11-03 | 99.9% | Unknown |
| CVE-2018-15811 | DotNetNuke (DNN) DotNetNuke (DNN) | 2021-11-03 | 76.1% | Unknown |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers | 2021-11-03 | 8.5% | Unknown |
| CVE-2018-13379 | Fortinet FortiOS | 2021-11-03 | 99.9% | Known |
| CVE-2018-11776 | Apache Struts | 2021-11-03 | 99.9% | Unknown |
| CVE-2018-0802 | Microsoft Office | 2021-11-03 | 93.2% | Known |
| CVE-2018-0798 | Microsoft Office | 2021-11-03 | 95.1% | Unknown |
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) | 2021-11-03 | 99.9% | Unknown |
| CVE-2018-0171 | Cisco IOS and IOS XE | 2021-11-03 | 99.4% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
89 CVE-2018 vulnerabilities are in KEV; on average they were listed 4.1 years after the CVE year.