Exploited Vulnerabilities DailyCVEs from 2024 known to be exploited
Entries164
Ransomware-linked39
Avg. lag0.3 yrs
Year added to KEV
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2024-21182 | Oracle WebLogic Server | 2026-06-01 | 74.1% | Unknown |
| CVE-2024-1708 | ConnectWise ScreenConnect | 2026-04-28 | 95.4% | Known |
| CVE-2024-7399 | Samsung MagicINFO 9 Server | 2026-04-24 | 91.9% | Unknown |
| CVE-2024-57728 | SimpleHelp SimpleHelp | 2026-04-24 | 64.6% | Known |
| CVE-2024-57726 | SimpleHelp SimpleHelp | 2026-04-24 | 66.6% | Known |
| CVE-2024-27199 | JetBrains TeamCity | 2026-04-20 | 99.9% | Known |
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware | 2026-02-17 | 1.7% | Unknown |
| CVE-2024-43468 | Microsoft Configuration Manager | 2026-02-12 | 81.0% | Unknown |
| CVE-2024-37079 | Broadcom VMware vCenter Server | 2026-01-23 | 22.3% | Unknown |
| CVE-2024-8069 | Citrix Session Recording | 2025-08-25 | 14.6% | Unknown |
| CVE-2024-8068 | Citrix Session Recording | 2025-08-25 | 3.4% | Unknown |
| CVE-2024-54085 | AMI MegaRAC SPx | 2025-06-25 | 60.7% | Unknown |
| CVE-2024-0769 | D-Link DIR-859 Router | 2025-06-25 | 82.7% | Unknown |
| CVE-2024-42009 | Roundcube Webmail | 2025-06-09 | 82.8% | Unknown |
| CVE-2024-56145 | Craft CMS Craft CMS | 2025-06-02 | 97.4% | Unknown |
| CVE-2024-27443 | Synacor Zimbra Collaboration Suite (ZCS) | 2025-05-19 | 23.6% | Unknown |
| CVE-2024-11182 | MDaemon Email Server | 2025-05-19 | 17.5% | Unknown |
| CVE-2024-12987 | DrayTek Vigor Routers | 2025-05-15 | 98.1% | Unknown |
| CVE-2024-6047 | GeoVision Multiple Devices | 2025-05-07 | 10.0% | Unknown |
| CVE-2024-11120 | GeoVision Multiple Devices | 2025-05-07 | 28.3% | Unknown |
| CVE-2024-58136 | Yiiframework Yii | 2025-05-02 | 87.7% | Unknown |
| CVE-2024-38475 | Apache HTTP Server | 2025-05-01 | 99.9% | Unknown |
| CVE-2024-53197 | Linux Kernel | 2025-04-09 | 4.1% | Unknown |
| CVE-2024-53150 | Linux Kernel | 2025-04-09 | 1.3% | Unknown |
| CVE-2024-20439 | Cisco Smart Licensing Utility | 2025-03-31 | 97.0% | Unknown |
| CVE-2024-48248 | NAKIVO Backup and Replication | 2025-03-19 | 94.3% | Unknown |
| CVE-2024-57968 | Advantive VeraCore | 2025-03-10 | 32.2% | Unknown |
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 90.0% | Unknown |
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 91.2% | Unknown |
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 99.9% | Unknown |
| CVE-2024-50302 | Linux Kernel | 2025-03-04 | 0.8% | Unknown |
| CVE-2024-4885 | Progress WhatsUp Gold | 2025-03-03 | 99.2% | Unknown |
| CVE-2024-49035 | Microsoft Partner Center | 2025-02-25 | 1.3% | Unknown |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) | 2025-02-24 | 3.9% | Unknown |
| CVE-2024-53704 | SonicWall SonicOS | 2025-02-18 | 95.1% | Known |
| CVE-2024-57727 | SimpleHelp SimpleHelp | 2025-02-13 | 96.5% | Known |
| CVE-2024-41710 | Mitel SIP Phones | 2025-02-12 | 41.6% | Unknown |
| CVE-2024-40891 | Zyxel DSL CPE Devices | 2025-02-11 | 21.7% | Unknown |
| CVE-2024-40890 | Zyxel DSL CPE Devices | 2025-02-11 | 20.7% | Unknown |
| CVE-2024-21413 | Microsoft Office Outlook | 2025-02-06 | 94.6% | Unknown |
| CVE-2024-53104 | Linux Kernel | 2025-02-05 | 3.3% | Unknown |
| CVE-2024-45195 | Apache OFBiz | 2025-02-04 | 99.9% | Unknown |
| CVE-2024-29059 | Microsoft .NET Framework | 2025-02-04 | 98.6% | Unknown |
| CVE-2024-50603 | Aviatrix Controllers | 2025-01-16 | 98.5% | Unknown |
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy | 2025-01-14 | 94.1% | Known |
| CVE-2024-12686 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) | 2025-01-13 | 13.7% | Unknown |
| CVE-2024-55550 | Mitel MiCollab | 2025-01-07 | 38.1% | Known |
| CVE-2024-41713 | Mitel MiCollab | 2025-01-07 | 98.1% | Known |
| CVE-2024-3393 | Palo Alto Networks PAN-OS | 2024-12-30 | 29.1% | Unknown |
| CVE-2024-12356 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) | 2024-12-19 | 87.2% | Unknown |
| CVE-2024-55956 | Cleo Multiple Products | 2024-12-17 | 93.9% | Known |
| CVE-2024-35250 | Microsoft Windows | 2024-12-16 | 25.2% | Unknown |
| CVE-2024-20767 | Adobe ColdFusion | 2024-12-16 | 98.5% | Unknown |
| CVE-2024-50623 | Cleo Multiple Products | 2024-12-13 | 98.6% | Known |
| CVE-2024-49138 | Microsoft Windows | 2024-12-10 | 26.2% | Unknown |
| CVE-2024-51378 | CyberPersons CyberPanel | 2024-12-04 | 94.7% | Known |
| CVE-2024-11680 | ProjectSend ProjectSend | 2024-12-03 | 91.6% | Unknown |
| CVE-2024-11667 | Zyxel Multiple Firewalls | 2024-12-03 | 2.9% | Known |
| CVE-2024-44309 | Apple Multiple Products | 2024-11-21 | 22.5% | Unknown |
| CVE-2024-44308 | Apple Multiple Products | 2024-11-21 | 10.1% | Unknown |
| CVE-2024-21287 | Oracle Agile Product Lifecycle Management (PLM) | 2024-11-21 | 1.7% | Unknown |
| CVE-2024-38813 | VMware vCenter Server | 2024-11-20 | 17.3% | Unknown |
| CVE-2024-38812 | VMware vCenter Server | 2024-11-20 | 54.5% | Unknown |
| CVE-2024-9474 | Palo Alto Networks PAN-OS | 2024-11-18 | 94.8% | Known |
| CVE-2024-1212 | Progress Kemp LoadMaster | 2024-11-18 | 95.3% | Unknown |
| CVE-2024-0012 | Palo Alto Networks PAN-OS | 2024-11-18 | 99.8% | Known |
| CVE-2024-9465 | Palo Alto Networks Expedition | 2024-11-14 | 99.6% | Unknown |
| CVE-2024-9463 | Palo Alto Networks Expedition | 2024-11-14 | 98.5% | Unknown |
| CVE-2024-49039 | Microsoft Windows | 2024-11-12 | 14.1% | Known |
| CVE-2024-43451 | Microsoft Windows | 2024-11-12 | 84.1% | Unknown |
| CVE-2024-5910 | Palo Alto Networks Expedition | 2024-11-07 | 91.6% | Unknown |
| CVE-2024-51567 | CyberPersons CyberPanel | 2024-11-07 | 86.6% | Known |
| CVE-2024-43093 | Android Framework | 2024-11-07 | 0.7% | Unknown |
| CVE-2024-8957 | PTZOptics PT30X-SDI/NDI Cameras | 2024-11-04 | 79.7% | Unknown |
| CVE-2024-8956 | PTZOptics PT30X-SDI/NDI Cameras | 2024-11-04 | 58.7% | Unknown |
| CVE-2024-37383 | Roundcube Webmail | 2024-10-24 | 73.2% | Unknown |
| CVE-2024-20481 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-10-24 | 15.8% | Unknown |
| CVE-2024-47575 | Fortinet FortiManager | 2024-10-23 | 94.7% | Unknown |
| CVE-2024-38094 | Microsoft SharePoint | 2024-10-22 | 50.8% | Known |
| CVE-2024-9537 | ScienceLogic SL1 | 2024-10-21 | 3.8% | Unknown |
| CVE-2024-40711 | Veeam Backup & Replication | 2024-10-17 | 90.3% | Known |
| CVE-2024-9680 | Mozilla Firefox | 2024-10-15 | 23.1% | Known |
| CVE-2024-30088 | Microsoft Windows | 2024-10-15 | 68.2% | Known |
| CVE-2024-28987 | SolarWinds Web Help Desk | 2024-10-15 | 93.2% | Unknown |
| CVE-2024-9380 | Ivanti Cloud Services Appliance (CSA) | 2024-10-09 | 59.6% | Unknown |
| CVE-2024-9379 | Ivanti Cloud Services Appliance (CSA) | 2024-10-09 | 43.7% | Unknown |
| CVE-2024-23113 | Fortinet Multiple Products | 2024-10-09 | 61.7% | Unknown |
| CVE-2024-43573 | Microsoft Windows | 2024-10-08 | 46.1% | Unknown |
| CVE-2024-43572 | Microsoft Windows | 2024-10-08 | 66.6% | Unknown |
| CVE-2024-43047 | Qualcomm Multiple Chipsets | 2024-10-08 | 0.6% | Unknown |
| CVE-2024-45519 | Synacor Zimbra Collaboration Suite (ZCS) | 2024-10-03 | 99.9% | Unknown |
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) | 2024-10-02 | 99.9% | Unknown |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | 2024-09-24 | 99.9% | Unknown |
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) | 2024-09-19 | 98.6% | Unknown |
| CVE-2024-27348 | Apache HugeGraph-Server | 2024-09-18 | 99.2% | Unknown |
| CVE-2024-6670 | Progress WhatsUp Gold | 2024-09-16 | 93.0% | Known |
| CVE-2024-43461 | Microsoft Windows | 2024-09-16 | 54.4% | Unknown |
| CVE-2024-8190 | Ivanti Cloud Services Appliance | 2024-09-13 | 88.5% | Unknown |
| CVE-2024-38226 | Microsoft Publisher | 2024-09-10 | 2.6% | Unknown |
| CVE-2024-38217 | Microsoft Windows | 2024-09-10 | 10.0% | Unknown |
| CVE-2024-38014 | Microsoft Windows | 2024-09-10 | 6.2% | Unknown |
| CVE-2024-40766 | SonicWall SonicOS | 2024-09-09 | 18.3% | Known |
| CVE-2024-7262 | Kingsoft WPS Office | 2024-09-03 | 2.9% | Unknown |
| CVE-2024-7965 | Google Chromium V8 | 2024-08-28 | 18.5% | Unknown |
| CVE-2024-38856 | Apache OFBiz | 2024-08-27 | 99.4% | Unknown |
| CVE-2024-7971 | Google Chromium V8 | 2024-08-26 | 21.1% | Unknown |
| CVE-2024-39717 | Versa Director | 2024-08-23 | 4.0% | Unknown |
| CVE-2024-23897 | Jenkins Jenkins Command Line Interface (CLI) | 2024-08-19 | 99.9% | Known |
| CVE-2024-28986 | SolarWinds Web Help Desk | 2024-08-15 | 84.6% | Unknown |
| CVE-2024-38213 | Microsoft Windows | 2024-08-13 | 13.6% | Unknown |
| CVE-2024-38193 | Microsoft Windows | 2024-08-13 | 28.7% | Unknown |
| CVE-2024-38189 | Microsoft Project | 2024-08-13 | 8.1% | Unknown |
| CVE-2024-38178 | Microsoft Windows | 2024-08-13 | 41.3% | Unknown |
| CVE-2024-38107 | Microsoft Windows | 2024-08-13 | 1.6% | Unknown |
| CVE-2024-38106 | Microsoft Windows | 2024-08-13 | 6.3% | Unknown |
| CVE-2024-36971 | Android Kernel | 2024-08-07 | 2.7% | Unknown |
| CVE-2024-32113 | Apache OFBiz | 2024-08-07 | 99.9% | Unknown |
| CVE-2024-37085 | VMware ESXi | 2024-07-30 | 26.7% | Known |
| CVE-2024-5217 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | 2024-07-29 | 99.6% | Unknown |
| CVE-2024-4879 | ServiceNow Utah, Vancouver, and Washington DC Now Platform | 2024-07-29 | 99.9% | Unknown |
| CVE-2024-39891 | Twilio Authy | 2024-07-23 | 1.6% | Unknown |
| CVE-2024-34102 | Adobe Commerce and Magento Open Source | 2024-07-17 | 99.9% | Unknown |
| CVE-2024-28995 | SolarWinds Serv-U | 2024-07-17 | 99.6% | Unknown |
| CVE-2024-36401 | OSGeo GeoServer | 2024-07-15 | 99.8% | Unknown |
| CVE-2024-38112 | Microsoft Windows | 2024-07-09 | 84.2% | Unknown |
| CVE-2024-38080 | Microsoft Windows | 2024-07-09 | 7.1% | Unknown |
| CVE-2024-23692 | Rejetto HTTP File Server | 2024-07-09 | 99.4% | Known |
| CVE-2024-20399 | Cisco NX-OS | 2024-07-02 | 4.3% | Unknown |
| CVE-2024-4358 | Progress Telerik Report Server | 2024-06-13 | 97.4% | Unknown |
| CVE-2024-32896 | Android Pixel | 2024-06-13 | 2.9% | Unknown |
| CVE-2024-26169 | Microsoft Windows | 2024-06-13 | 4.0% | Known |
| CVE-2024-4610 | Arm Mali GPU Kernel Driver | 2024-06-12 | 0.7% | Unknown |
| CVE-2024-4577 | PHP Group PHP | 2024-06-12 | 99.9% | Known |
| CVE-2024-24919 | Check Point Quantum Security Gateways | 2024-05-30 | 99.9% | Known |
| CVE-2024-1086 | Linux Kernel | 2024-05-30 | 28.0% | Known |
| CVE-2024-4978 | Justice AV Solutions Viewer | 2024-05-29 | 26.9% | Unknown |
| CVE-2024-5274 | Google Chromium V8 | 2024-05-28 | 7.4% | Unknown |
| CVE-2024-4947 | Google Chromium V8 | 2024-05-20 | 15.2% | Unknown |
| CVE-2024-4761 | Google Chromium V8 | 2024-05-16 | 11.0% | Unknown |
| CVE-2024-30051 | Microsoft DWM Core Library | 2024-05-14 | 5.6% | Known |
| CVE-2024-30040 | Microsoft Windows | 2024-05-14 | 3.9% | Unknown |
| CVE-2024-4671 | Google Chromium | 2024-05-13 | 8.3% | Unknown |
| CVE-2024-29988 | Microsoft SmartScreen Prompt | 2024-04-30 | 44.8% | Unknown |
| CVE-2024-4040 | CrushFTP CrushFTP | 2024-04-24 | 99.5% | Unknown |
| CVE-2024-20359 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-04-24 | 19.4% | Unknown |
| CVE-2024-20353 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-04-24 | 70.6% | Unknown |
| CVE-2024-3400 | Palo Alto Networks PAN-OS | 2024-04-12 | 99.9% | Known |
| CVE-2024-3273 | D-Link Multiple NAS Devices | 2024-04-11 | 99.9% | Unknown |
| CVE-2024-3272 | D-Link Multiple NAS Devices | 2024-04-11 | 98.0% | Unknown |
| CVE-2024-29748 | Android Pixel | 2024-04-04 | 0.6% | Unknown |
| CVE-2024-29745 | Android Pixel | 2024-04-04 | 0.4% | Unknown |
| CVE-2024-27198 | JetBrains TeamCity | 2024-03-07 | 99.9% | Known |
| CVE-2024-23296 | Apple Multiple Products | 2024-03-06 | 1.4% | Unknown |
| CVE-2024-23225 | Apple Multiple Products | 2024-03-06 | 1.4% | Unknown |
| CVE-2024-21338 | Microsoft Windows | 2024-03-04 | 59.8% | Known |
| CVE-2024-1709 | ConnectWise ScreenConnect | 2024-02-22 | 99.9% | Known |
| CVE-2024-21410 | Microsoft Exchange Server | 2024-02-15 | 12.5% | Unknown |
| CVE-2024-21412 | Microsoft Windows | 2024-02-13 | 99.4% | Known |
| CVE-2024-21351 | Microsoft Windows | 2024-02-13 | 27.7% | Unknown |
| CVE-2024-21762 | Fortinet FortiOS | 2024-02-09 | 83.4% | Known |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons | 2024-01-31 | 99.9% | Known |
| CVE-2024-23222 | Apple Multiple Products | 2024-01-23 | 10.5% | Unknown |
| CVE-2024-0519 | Google Chromium V8 | 2024-01-17 | 3.8% | Unknown |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure | 2024-01-10 | 99.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
164 CVE-2024 vulnerabilities are in KEV; on average they were listed 0.3 years after the CVE year.