CVEs from 2023 known to be exploited
Entries166
Ransomware-linked37
Avg. lag0.4 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2023-22894 | Strapi Strapi | 2026-10-08 | 1.6% | Unknown |
| CVE-2023-49105 | ownCloud ownCloud | 2026-08-27 | 42.9% | Unknown |
| CVE-2023-4346 | KNX Association KNX Protocol Connection Authorization Option 1 | 2026-07-15 | 1.2% | Unknown |
| CVE-2023-27351 | PaperCut NG/MF | 2026-04-20 | 78.0% | Known |
| CVE-2023-36424 | Microsoft Windows | 2026-04-13 | 12.1% | Unknown |
| CVE-2023-21529 | Microsoft Exchange Server | 2026-04-13 | 59.2% | Known |
| CVE-2023-43000 | Apple Multiple Products | 2026-03-05 | 4.0% | Unknown |
| CVE-2023-41974 | Apple iOS and iPadOS | 2026-03-05 | 1.9% | Unknown |
| CVE-2023-52163 | Digiever DS-2105 Pro | 2025-12-22 | 96.9% | Unknown |
| CVE-2023-50224 | TP-Link TL-WR841N | 2025-09-03 | 15.5% | Unknown |
| CVE-2023-2533 | PaperCut NG/MF | 2025-07-28 | 28.6% | Unknown |
| CVE-2023-0386 | Linux Kernel | 2025-06-17 | 7.8% | Unknown |
| CVE-2023-33538 | TP-Link Multiple Routers | 2025-06-16 | 41.6% | Unknown |
| CVE-2023-39780 | ASUS RT-AX55 Routers | 2025-06-02 | 39.5% | Unknown |
| CVE-2023-38950 | ZKTeco BioTime | 2025-05-19 | 92.4% | Unknown |
| CVE-2023-44221 | SonicWall SMA100 Appliances | 2025-05-01 | 76.2% | Unknown |
| CVE-2023-20118 | Cisco Small Business RV Series Routers | 2025-03-03 | 54.1% | Unknown |
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-02-25 | 77.2% | Unknown |
| CVE-2023-48365 | Qlik Sense | 2025-01-13 | 47.4% | Known |
| CVE-2023-45727 | North Grid Proself | 2024-12-03 | 3.5% | Unknown |
| CVE-2023-28461 | Array Networks AG/vxAG ArrayOS | 2024-11-25 | 68.0% | Known |
| CVE-2023-25280 | D-Link DIR-820 Router | 2024-09-30 | 97.8% | Unknown |
| CVE-2023-45249 | Acronis Cyber Infrastructure (ACI) | 2024-07-29 | 53.2% | Unknown |
| CVE-2023-43208 | NextGen Healthcare Mirth Connect | 2024-05-20 | 82.7% | Known |
| CVE-2023-7028 | GitLab GitLab CE/EE | 2024-05-01 | 94.6% | Unknown |
| CVE-2023-24955 | Microsoft SharePoint Server | 2024-03-26 | 84.9% | Known |
| CVE-2023-48788 | Fortinet FortiClient EMS | 2024-03-25 | 98.4% | Known |
| CVE-2023-21237 | Android Pixel | 2024-03-05 | 0.2% | Unknown |
| CVE-2023-29360 | Microsoft Streaming Service | 2024-02-29 | 21.6% | Unknown |
| CVE-2023-43770 | Roundcube Webmail | 2024-02-12 | 63.6% | Unknown |
| CVE-2023-4762 | Google Chromium V8 | 2024-02-06 | 41.3% | Unknown |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server | 2024-01-24 | 99.9% | Known |
| CVE-2023-34048 | VMware vCenter Server | 2024-01-22 | 99.4% | Unknown |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | 2024-01-18 | 99.9% | Known |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway | 2024-01-17 | 57.6% | Unknown |
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway | 2024-01-17 | 3.1% | Unknown |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure | 2024-01-10 | 99.9% | Known |
| CVE-2023-29357 | Microsoft SharePoint Server | 2024-01-10 | 99.9% | Known |
| CVE-2023-41990 | Apple Multiple Products | 2024-01-08 | 1.3% | Unknown |
| CVE-2023-38203 | Adobe ColdFusion | 2024-01-08 | 97.0% | Known |
| CVE-2023-29300 | Adobe ColdFusion | 2024-01-08 | 99.9% | Known |
| CVE-2023-27524 | Apache Superset | 2024-01-08 | 97.4% | Unknown |
| CVE-2023-23752 | Joomla! Joomla! | 2024-01-08 | 99.8% | Unknown |
| CVE-2023-7101 | Spreadsheet::ParseExcel Spreadsheet::ParseExcel | 2024-01-02 | 19.1% | Unknown |
| CVE-2023-7024 | Google Chromium WebRTC | 2024-01-02 | 6.6% | Unknown |
| CVE-2023-49897 | FXC AE1021, AE1021PE | 2023-12-21 | 50.4% | Unknown |
| CVE-2023-47565 | QNAP VioStor NVR | 2023-12-21 | 73.2% | Unknown |
| CVE-2023-6448 | Unitronics Vision PLC and HMI | 2023-12-11 | 2.0% | Unknown |
| CVE-2023-41266 | Qlik Sense | 2023-12-07 | 84.8% | Known |
| CVE-2023-41265 | Qlik Sense | 2023-12-07 | 88.2% | Known |
| CVE-2023-33107 | Qualcomm Multiple Chipsets | 2023-12-05 | 0.7% | Unknown |
| CVE-2023-33106 | Qualcomm Multiple Chipsets | 2023-12-05 | 0.7% | Unknown |
| CVE-2023-33063 | Qualcomm Multiple Chipsets | 2023-12-05 | 0.6% | Unknown |
| CVE-2023-42917 | Apple Multiple Products | 2023-12-04 | 9.2% | Unknown |
| CVE-2023-42916 | Apple Multiple Products | 2023-12-04 | 17.8% | Unknown |
| CVE-2023-6345 | Google Chromium Skia | 2023-11-30 | 16.4% | Unknown |
| CVE-2023-49103 | ownCloud ownCloud graphapi | 2023-11-30 | 78.4% | Unknown |
| CVE-2023-4911 | GNU GNU C Library | 2023-11-21 | 63.7% | Unknown |
| CVE-2023-36584 | Microsoft Windows | 2023-11-16 | 3.0% | Unknown |
| CVE-2023-1671 | Sophos Web Appliance | 2023-11-16 | 99.9% | Unknown |
| CVE-2023-36036 | Microsoft Windows | 2023-11-14 | 16.6% | Unknown |
| CVE-2023-36033 | Microsoft Windows | 2023-11-14 | 10.9% | Unknown |
| CVE-2023-36025 | Microsoft Windows | 2023-11-14 | 88.0% | Unknown |
| CVE-2023-47246 | SysAid SysAid Server | 2023-11-13 | 98.8% | Known |
| CVE-2023-36851 | Juniper Junos OS | 2023-11-13 | 1.1% | Unknown |
| CVE-2023-36847 | Juniper Junos OS | 2023-11-13 | 83.4% | Unknown |
| CVE-2023-36846 | Juniper Junos OS | 2023-11-13 | 93.4% | Unknown |
| CVE-2023-36845 | Juniper Junos OS | 2023-11-13 | 95.0% | Unknown |
| CVE-2023-36844 | Juniper Junos OS | 2023-11-13 | 89.9% | Unknown |
| CVE-2023-29552 | IETF Service Location Protocol (SLP) | 2023-11-08 | 63.9% | Unknown |
| CVE-2023-22518 | Atlassian Confluence Data Center and Server | 2023-11-07 | 99.9% | Known |
| CVE-2023-46604 | Apache ActiveMQ | 2023-11-02 | 99.8% | Known |
| CVE-2023-46748 | F5 BIG-IP Configuration Utility | 2023-10-31 | 4.4% | Unknown |
| CVE-2023-46747 | F5 BIG-IP Configuration Utility | 2023-10-31 | 96.5% | Known |
| CVE-2023-5631 | Roundcube Webmail | 2023-10-26 | 75.8% | Unknown |
| CVE-2023-20273 | Cisco Cisco IOS XE Web UI | 2023-10-23 | 89.6% | Unknown |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | 2023-10-18 | 99.9% | Known |
| CVE-2023-20198 | Cisco IOS XE Web UI | 2023-10-16 | 99.5% | Unknown |
| CVE-2023-44487 | IETF HTTP/2 | 2023-10-10 | 99.9% | Unknown |
| CVE-2023-41763 | Microsoft Skype for Business | 2023-10-10 | 90.3% | Unknown |
| CVE-2023-36563 | Microsoft WordPad | 2023-10-10 | 20.7% | Unknown |
| CVE-2023-21608 | Adobe Acrobat and Reader | 2023-10-10 | 61.4% | Unknown |
| CVE-2023-20109 | Cisco IOS and IOS XE | 2023-10-10 | 2.4% | Unknown |
| CVE-2023-42824 | Apple iOS and iPadOS | 2023-10-05 | 1.0% | Unknown |
| CVE-2023-40044 | Progress WS_FTP Server | 2023-10-05 | 90.3% | Known |
| CVE-2023-22515 | Atlassian Confluence Data Center and Server | 2023-10-05 | 99.2% | Known |
| CVE-2023-42793 | JetBrains TeamCity | 2023-10-04 | 99.9% | Known |
| CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service | 2023-10-04 | 1.6% | Unknown |
| CVE-2023-4211 | Arm Mali GPU Kernel Driver | 2023-10-03 | 1.0% | Unknown |
| CVE-2023-5217 | Google Chromium libvpx | 2023-10-02 | 49.0% | Unknown |
| CVE-2023-41993 | Apple Multiple Products | 2023-09-25 | 24.3% | Unknown |
| CVE-2023-41992 | Apple Multiple Products | 2023-09-25 | 9.5% | Unknown |
| CVE-2023-41991 | Apple Multiple Products | 2023-09-25 | 13.3% | Unknown |
| CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security | 2023-09-21 | 4.2% | Unknown |
| CVE-2023-28434 | MinIO MinIO | 2023-09-19 | 7.9% | Unknown |
| CVE-2023-26369 | Adobe Acrobat and Reader | 2023-09-14 | 6.7% | Unknown |
| CVE-2023-4863 | Google Chromium WebP | 2023-09-13 | 99.9% | Unknown |
| CVE-2023-35674 | Android Framework | 2023-09-13 | 2.6% | Unknown |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense | 2023-09-13 | 25.4% | Known |
| CVE-2023-36802 | Microsoft Streaming Service Proxy | 2023-09-12 | 27.9% | Unknown |
| CVE-2023-36761 | Microsoft Word | 2023-09-12 | 19.5% | Unknown |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS | 2023-09-11 | 53.4% | Unknown |
| CVE-2023-41061 | Apple iOS, iPadOS, and watchOS | 2023-09-11 | 4.3% | Unknown |
| CVE-2023-33246 | Apache RocketMQ | 2023-09-06 | 96.5% | Unknown |
| CVE-2023-38831 | RARLAB WinRAR | 2023-08-24 | 99.8% | Known |
| CVE-2023-32315 | Ignite Realtime Openfire | 2023-08-24 | 99.9% | Unknown |
| CVE-2023-38035 | Ivanti Sentry | 2023-08-22 | 99.9% | Known |
| CVE-2023-27532 | Veeam Backup & Replication | 2023-08-22 | 81.3% | Known |
| CVE-2023-26359 | Adobe ColdFusion | 2023-08-21 | 16.9% | Unknown |
| CVE-2023-24489 | Citrix Content Collaboration | 2023-08-16 | 97.3% | Unknown |
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio | 2023-08-09 | 14.0% | Unknown |
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) | 2023-07-31 | 63.5% | Unknown |
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) | 2023-07-27 | 49.0% | Unknown |
| CVE-2023-38606 | Apple Multiple Products | 2023-07-26 | 2.8% | Unknown |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile (EPMM) | 2023-07-25 | 99.9% | Known |
| CVE-2023-38205 | Adobe ColdFusion | 2023-07-20 | 99.7% | Unknown |
| CVE-2023-29298 | Adobe ColdFusion | 2023-07-20 | 99.7% | Unknown |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway | 2023-07-19 | 99.7% | Known |
| CVE-2023-36884 | Microsoft Windows | 2023-07-17 | 98.9% | Known |
| CVE-2023-37450 | Apple Multiple Products | 2023-07-13 | 18.9% | Unknown |
| CVE-2023-36874 | Microsoft Windows | 2023-07-11 | 42.5% | Unknown |
| CVE-2023-35311 | Microsoft Outlook | 2023-07-11 | 15.5% | Unknown |
| CVE-2023-32049 | Microsoft Windows | 2023-07-11 | 4.1% | Unknown |
| CVE-2023-32046 | Microsoft Windows | 2023-07-11 | 10.0% | Unknown |
| CVE-2023-32439 | Apple Multiple Products | 2023-06-23 | 23.9% | Unknown |
| CVE-2023-32435 | Apple Multiple Products | 2023-06-23 | 22.9% | Unknown |
| CVE-2023-32434 | Apple Multiple Products | 2023-06-23 | 51.5% | Unknown |
| CVE-2023-27992 | Zyxel Multiple Network-Attached Storage (NAS) Devices | 2023-06-23 | 82.8% | Unknown |
| CVE-2023-20867 | VMware Tools | 2023-06-23 | 13.5% | Unknown |
| CVE-2023-20887 | VMware Aria Operations for Networks | 2023-06-22 | 98.2% | Unknown |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN | 2023-06-13 | 85.6% | Known |
| CVE-2023-3079 | Google Chromium V8 | 2023-06-07 | 32.1% | Unknown |
| CVE-2023-33010 | Zyxel Multiple Firewalls | 2023-06-05 | 29.0% | Unknown |
| CVE-2023-33009 | Zyxel Multiple Firewalls | 2023-06-05 | 28.1% | Unknown |
| CVE-2023-34362 | Progress MOVEit Transfer | 2023-06-02 | 99.9% | Known |
| CVE-2023-28771 | Zyxel Multiple Firewalls | 2023-05-31 | 99.2% | Unknown |
| CVE-2023-2868 | Barracuda Networks Email Security Gateway (ESG) Appliance | 2023-05-26 | 87.6% | Unknown |
| CVE-2023-32409 | Apple Multiple Products | 2023-05-22 | 16.5% | Unknown |
| CVE-2023-32373 | Apple Multiple Products | 2023-05-22 | 12.1% | Unknown |
| CVE-2023-28204 | Apple Multiple Products | 2023-05-22 | 14.2% | Unknown |
| CVE-2023-21492 | Samsung Mobile Devices | 2023-05-19 | 2.5% | Unknown |
| CVE-2023-25717 | Ruckus Wireless Multiple Products | 2023-05-12 | 98.0% | Unknown |
| CVE-2023-29336 | Microsoft Win32k | 2023-05-09 | 41.1% | Unknown |
| CVE-2023-21839 | Oracle WebLogic Server | 2023-05-01 | 99.9% | Unknown |
| CVE-2023-1389 | TP-Link Archer AX21 | 2023-05-01 | 99.9% | Unknown |
| CVE-2023-28432 | MinIO MinIO | 2023-04-21 | 83.9% | Unknown |
| CVE-2023-27350 | PaperCut MF/NG | 2023-04-21 | 99.9% | Known |
| CVE-2023-2136 | Google Chromium Skia | 2023-04-21 | 5.7% | Unknown |
| CVE-2023-2033 | Google Chromium V8 | 2023-04-17 | 40.7% | Unknown |
| CVE-2023-29492 | Novi Survey Novi Survey | 2023-04-13 | 2.6% | Unknown |
| CVE-2023-20963 | Android Framework | 2023-04-13 | 1.4% | Unknown |
| CVE-2023-28252 | Microsoft Windows | 2023-04-11 | 48.9% | Known |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS | 2023-04-10 | 23.2% | Unknown |
| CVE-2023-28205 | Apple Multiple Products | 2023-04-10 | 27.0% | Unknown |
| CVE-2023-26083 | Arm Mali Graphics Processing Unit (GPU) | 2023-04-07 | 1.2% | Unknown |
| CVE-2023-0266 | Linux Kernel | 2023-03-30 | 3.7% | Unknown |
| CVE-2023-26360 | Adobe ColdFusion | 2023-03-15 | 97.3% | Unknown |
| CVE-2023-24880 | Microsoft Windows | 2023-03-14 | 78.0% | Known |
| CVE-2023-23397 | Microsoft Office | 2023-03-14 | 97.1% | Unknown |
| CVE-2023-23529 | Apple Multiple Products | 2023-02-14 | 9.5% | Unknown |
| CVE-2023-23376 | Microsoft Windows | 2023-02-14 | 10.8% | Known |
| CVE-2023-21823 | Microsoft Windows | 2023-02-14 | 5.5% | Unknown |
| CVE-2023-21715 | Microsoft Office | 2023-02-14 | 12.0% | Unknown |
| CVE-2023-0669 | Fortra GoAnywhere MFT | 2023-02-10 | 99.9% | Known |
| CVE-2023-22952 | SugarCRM Multiple Products | 2023-02-02 | 80.1% | Unknown |
| CVE-2023-21674 | Microsoft Windows | 2023-01-10 | 40.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
166 CVE-2023 vulnerabilities are in KEV; on average they were listed 0.4 years after the CVE year.