CVEs from 2019 known to be exploited
Entries119
Ransomware-linked41
Avg. lag2.9 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2019-1068 | Microsoft SQL Server | 2026-08-26 | 57.2% | Unknown |
| CVE-2019-19006 | Sangoma FreePBX | 2026-02-03 | 55.9% | Unknown |
| CVE-2019-9621 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-07-07 | 81.0% | Unknown |
| CVE-2019-5418 | Rails Ruby on Rails | 2025-07-07 | 98.5% | Unknown |
| CVE-2019-6693 | Fortinet FortiOS | 2025-06-25 | 5.8% | Known |
| CVE-2019-9875 | Sitecore CMS and Experience Platform (XP) | 2025-03-26 | 13.7% | Unknown |
| CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) | 2025-03-26 | 83.7% | Unknown |
| CVE-2019-11001 | Reolink Multiple IP Cameras | 2024-12-18 | 37.5% | Unknown |
| CVE-2019-16278 | Nostromo nhttpd | 2024-11-07 | 99.0% | Unknown |
| CVE-2019-0344 | SAP Commerce Cloud | 2024-09-30 | 7.0% | Unknown |
| CVE-2019-7256 | Nice Linear eMerge E3-Series | 2024-03-25 | 97.0% | Unknown |
| CVE-2019-20500 | D-Link DWL-2600AP Access Point | 2023-06-29 | 96.7% | Unknown |
| CVE-2019-17621 | D-Link DIR-859 Router | 2023-06-29 | 89.6% | Unknown |
| CVE-2019-8526 | Apple macOS | 2023-04-17 | 0.7% | Unknown |
| CVE-2019-1388 | Microsoft Windows | 2023-04-07 | 8.5% | Known |
| CVE-2019-8605 | Apple Multiple Products | 2022-06-27 | 17.6% | Unknown |
| CVE-2019-7195 | QNAP Photo Station | 2022-06-08 | 89.5% | Known |
| CVE-2019-7194 | QNAP Photo Station | 2022-06-08 | 83.1% | Known |
| CVE-2019-7193 | QNAP QTS | 2022-06-08 | 14.3% | Known |
| CVE-2019-7192 | QNAP Photo Station | 2022-06-08 | 88.1% | Known |
| CVE-2019-5825 | Google Chromium V8 | 2022-06-08 | 55.9% | Unknown |
| CVE-2019-15271 | Cisco RV Series Routers | 2022-06-08 | 5.4% | Unknown |
| CVE-2019-3010 | Oracle Solaris | 2022-05-25 | 13.3% | Unknown |
| CVE-2019-8720 | WebKitGTK WebKitGTK | 2022-05-23 | 1.5% | Unknown |
| CVE-2019-7287 | Apple iOS | 2022-05-23 | 4.5% | Unknown |
| CVE-2019-7286 | Apple Multiple Products | 2022-05-23 | 15.9% | Unknown |
| CVE-2019-5786 | Google Chrome Blink | 2022-05-23 | 61.0% | Unknown |
| CVE-2019-18426 | Meta Platforms WhatsApp | 2022-05-23 | 67.8% | Unknown |
| CVE-2019-1385 | Microsoft Windows | 2022-05-23 | 3.6% | Known |
| CVE-2019-13720 | Google Chrome WebAudio | 2022-05-23 | 49.1% | Unknown |
| CVE-2019-11708 | Mozilla Firefox and Thunderbird | 2022-05-23 | 55.8% | Unknown |
| CVE-2019-11707 | Mozilla Firefox and Thunderbird | 2022-05-23 | 37.6% | Unknown |
| CVE-2019-1130 | Microsoft Windows | 2022-05-23 | 1.7% | Known |
| CVE-2019-0880 | Microsoft Windows | 2022-05-23 | 2.3% | Unknown |
| CVE-2019-0703 | Microsoft Windows | 2022-05-23 | 9.6% | Unknown |
| CVE-2019-0676 | Microsoft Internet Explorer | 2022-05-23 | 8.1% | Unknown |
| CVE-2019-8506 | Apple Multiple Products | 2022-05-04 | 16.1% | Unknown |
| CVE-2019-1003029 | Jenkins Script Security Plugin | 2022-04-25 | 74.4% | Unknown |
| CVE-2019-3568 | Meta Platforms WhatsApp | 2022-04-19 | 30.0% | Unknown |
| CVE-2019-3929 | Crestron Multiple Products | 2022-04-15 | 98.9% | Unknown |
| CVE-2019-16057 | D-Link DNS-320 Storage Device | 2022-04-15 | 86.4% | Known |
| CVE-2019-7483 | SonicWall SMA100 | 2022-03-28 | 4.0% | Unknown |
| CVE-2019-6340 | Drupal Core | 2022-03-25 | 92.0% | Unknown |
| CVE-2019-2616 | Oracle BI Publisher (Formerly XML Publisher) | 2022-03-25 | 92.1% | Unknown |
| CVE-2019-16920 | D-Link Multiple Routers | 2022-03-25 | 99.9% | Unknown |
| CVE-2019-15107 | Webmin Webmin | 2022-03-25 | 99.7% | Known |
| CVE-2019-12991 | Citrix SD-WAN and NetScaler | 2022-03-25 | 74.0% | Unknown |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler | 2022-03-25 | 94.9% | Unknown |
| CVE-2019-11043 | PHP FastCGI Process Manager (FPM) | 2022-03-25 | 99.7% | Known |
| CVE-2019-10068 | Kentico Xperience | 2022-03-25 | 95.0% | Unknown |
| CVE-2019-1003030 | Jenkins Matrix Project Plugin | 2022-03-25 | 97.0% | Unknown |
| CVE-2019-0903 | Microsoft Graphics Device Interface (GDI) | 2022-03-25 | 21.7% | Unknown |
| CVE-2019-1405 | Microsoft Windows | 2022-03-15 | 30.1% | Known |
| CVE-2019-1322 | Microsoft Windows | 2022-03-15 | 19.2% | Known |
| CVE-2019-1315 | Microsoft Windows | 2022-03-15 | 3.4% | Known |
| CVE-2019-1253 | Microsoft Windows | 2022-03-15 | 11.6% | Known |
| CVE-2019-1132 | Microsoft Win32k | 2022-03-15 | 9.8% | Unknown |
| CVE-2019-1129 | Microsoft Windows | 2022-03-15 | 1.7% | Known |
| CVE-2019-1069 | Microsoft Task Scheduler | 2022-03-15 | 6.1% | Known |
| CVE-2019-1064 | Microsoft Windows | 2022-03-15 | 6.8% | Known |
| CVE-2019-0841 | Microsoft Windows | 2022-03-15 | 41.4% | Known |
| CVE-2019-0543 | Microsoft Windows | 2022-03-15 | 4.7% | Known |
| CVE-2019-11581 | Atlassian Jira Server and Data Center | 2022-03-07 | 84.6% | Unknown |
| CVE-2019-16928 | Exim Exim Internet Mailer | 2022-03-03 | 41.6% | Unknown |
| CVE-2019-1652 | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | 2022-03-03 | 95.9% | Unknown |
| CVE-2019-1297 | Microsoft Excel | 2022-03-03 | 21.8% | Unknown |
| CVE-2019-0752 | Microsoft Internet Explorer | 2022-02-15 | 81.6% | Known |
| CVE-2019-9670 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-01-10 | 99.9% | Unknown |
| CVE-2019-7609 | Elastic Kibana | 2022-01-10 | 95.3% | Unknown |
| CVE-2019-2725 | Oracle WebLogic Server | 2022-01-10 | 99.9% | Known |
| CVE-2019-1579 | Palo Alto Networks PAN-OS | 2022-01-10 | 46.2% | Known |
| CVE-2019-1458 | Microsoft Win32k | 2022-01-10 | 74.4% | Known |
| CVE-2019-10149 | Exim Mail Transfer Agent (MTA) | 2022-01-10 | 99.9% | Unknown |
| CVE-2019-7238 | Sonatype Nexus Repository Manager | 2021-12-10 | 77.1% | Unknown |
| CVE-2019-13272 | Linux Kernel | 2021-12-10 | 52.1% | Unknown |
| CVE-2019-10758 | MongoDB mongo-express | 2021-12-10 | 84.7% | Unknown |
| CVE-2019-0193 | Apache Solr | 2021-12-10 | 83.5% | Unknown |
| CVE-2019-9978 | WordPress Social Warfare Plugin | 2021-11-03 | 72.9% | Unknown |
| CVE-2019-9082 | ThinkPHP ThinkPHP | 2021-11-03 | 97.4% | Unknown |
| CVE-2019-8394 | Zoho ManageEngine | 2021-11-03 | 63.3% | Unknown |
| CVE-2019-7481 | SonicWall SMA100 | 2021-11-03 | 99.9% | Known |
| CVE-2019-6223 | Apple iOS and macOS | 2021-11-03 | 2.6% | Unknown |
| CVE-2019-5591 | Fortinet FortiOS | 2021-11-03 | 18.5% | Known |
| CVE-2019-5544 | VMware VMware ESXi and Horizon DaaS | 2021-11-03 | 97.2% | Known |
| CVE-2019-4716 | IBM Planning Analytics | 2021-11-03 | 86.4% | Unknown |
| CVE-2019-3398 | Atlassian Confluence Server and Data Center | 2021-11-03 | 97.0% | Unknown |
| CVE-2019-3396 | Atlassian Confluence Server and Data Server | 2021-11-03 | 99.9% | Known |
| CVE-2019-2215 | Android Android Kernel | 2021-11-03 | 72.1% | Unknown |
| CVE-2019-20085 | TVT NVMS-1000 | 2021-11-03 | 96.0% | Unknown |
| CVE-2019-19781 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 99.9% | Known |
| CVE-2019-19356 | Netis WF2419 Devices | 2021-11-03 | 28.1% | Unknown |
| CVE-2019-18988 | TeamViewer Desktop | 2021-11-03 | 4.7% | Unknown |
| CVE-2019-18935 | Progress Telerik UI for ASP.NET AJAX | 2021-11-03 | 99.7% | Known |
| CVE-2019-18187 | Trend Micro OfficeScan | 2021-11-03 | 25.1% | Unknown |
| CVE-2019-17558 | Apache Solr | 2021-11-03 | 98.5% | Unknown |
| CVE-2019-17026 | Mozilla Firefox and Thunderbird | 2021-11-03 | 46.3% | Unknown |
| CVE-2019-16759 | vBulletin vBulletin | 2021-11-03 | 99.7% | Unknown |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers | 2021-11-03 | 99.8% | Unknown |
| CVE-2019-16256 | SIMalliance Toolbox Browser | 2021-11-03 | 4.9% | Unknown |
| CVE-2019-15949 | Nagios Nagios XI | 2021-11-03 | 77.0% | Unknown |
| CVE-2019-15752 | Docker Desktop Community Edition | 2021-11-03 | 48.6% | Unknown |
| CVE-2019-1429 | Microsoft Internet Explorer | 2021-11-03 | 77.2% | Unknown |
| CVE-2019-1367 | Microsoft Internet Explorer | 2021-11-03 | 52.4% | Known |
| CVE-2019-13608 | Citrix StoreFront Server | 2021-11-03 | 30.0% | Known |
| CVE-2019-1215 | Microsoft Windows | 2021-11-03 | 19.2% | Known |
| CVE-2019-1214 | Microsoft Windows | 2021-11-03 | 1.4% | Unknown |
| CVE-2019-11634 | Citrix Workspace Application and Receiver for Windows | 2021-11-03 | 8.0% | Known |
| CVE-2019-11580 | Atlassian Crowd and Crowd Data Center | 2021-11-03 | 95.3% | Known |
| CVE-2019-11539 | Ivanti Pulse Connect Secure and Pulse Policy Secure | 2021-11-03 | 98.5% | Known |
| CVE-2019-11510 | Ivanti Pulse Connect Secure | 2021-11-03 | 99.9% | Known |
| CVE-2019-0863 | Microsoft Windows | 2021-11-03 | 5.2% | Unknown |
| CVE-2019-0859 | Microsoft Win32k | 2021-11-03 | 4.1% | Known |
| CVE-2019-0808 | Microsoft Win32k | 2021-11-03 | 53.0% | Unknown |
| CVE-2019-0803 | Microsoft Win32k | 2021-11-03 | 45.2% | Known |
| CVE-2019-0797 | Microsoft Win32k | 2021-11-03 | 1.8% | Unknown |
| CVE-2019-0708 | Microsoft Remote Desktop Services | 2021-11-03 | 99.9% | Known |
| CVE-2019-0604 | Microsoft SharePoint | 2021-11-03 | 99.9% | Known |
| CVE-2019-0541 | Microsoft MSHTML | 2021-11-03 | 53.2% | Unknown |
| CVE-2019-0211 | Apache HTTP Server | 2021-11-03 | 65.0% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
119 CVE-2019 vulnerabilities are in KEV; on average they were listed 2.9 years after the CVE year.