CISA KEV
Known exploited
The government must-patch list, mapped to our product index so you can go straight to the product affected.
Updated Oct 28, 11:20 UTC
Added this week
6
▼ 33%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
7
federalremediation deadlines
Total on KEV
1,761
since 2021all entries
| CVE | Product | CVSS | Added | Summary |
|---|---|---|---|---|
| CVE-2024-57727 Ransomware | SI Simplehelp Simple-help | 7.5 | Feb 13 | SimpleHelp Path Traversal Vulnerability |
| CVE-2020-29574 Ransomware | CY Cyberoamos Sophos | 9.8 | Feb 6 | CyberoamOS (CROS) SQL Injection Vulnerability |
| CVE-2025-23006 Ransomware | SM SMA1000 SonicWall | 9.8 | Jan 24 | SonicWall SMA1000 Appliances Deserialization Vulnerability |
| CVE-2024-55591 Ransomware | FO FortiOS Fortinet | 9.8 | Jan 14 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
| CVE-2023-48365 Ransomware | QS Qlik Sense Qlik | 9.9 | Jan 13 | Qlik Sense HTTP Tunneling Vulnerability |
| CVE-2025-0282 Ransomware | CS Connect Secure Ivanti | 9.0 | Jan 8 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability |
| CVE-2024-41713 Ransomware | MI Micollab Mitel | 9.1 | Jan 7 | Mitel MiCollab Path Traversal Vulnerability |
| CVE-2024-55550 Ransomware | MI Micollab Mitel | 2.7 | Jan 7 | Mitel MiCollab Path Traversal Vulnerability |
| CVE-2024-55956 Ransomware | HA Harmony Cleo | 9.8 | Dec 17 | Cleo Multiple Products Unauthenticated File Upload Vulnerability |
| CVE-2024-50623 Ransomware | HA Harmony Cleo | 9.8 | Dec 13 | Cleo Multiple Products Unrestricted File Upload Vulnerability |
| CVE-2024-51378 Ransomware | CY Cyberpanel Cyberpanel | 9.8 | Dec 4 | CyberPanel Incorrect Default Permissions Vulnerability |
| CVE-2024-11667 Ransomware | AS ATP series firmware Zyxel | 9.8 | Dec 3 | Zyxel Multiple Firewalls Path Traversal Vulnerability |
| CVE-2023-28461 Ransomware | AA Arrayos AG Arraynetworks | 9.8 | Nov 25 | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability |
| CVE-2024-0012 Ransomware | PA PAN-OS Palo Alto Networks | 9.8 | Nov 18 | PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) |
| CVE-2024-9474 Ransomware | PA PAN-OS Palo Alto Networks | 7.2 | Nov 18 | PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface |
| CVE-2024-49039 Ransomware | WI Windows Microsoft | 8.8 | Nov 12 | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2024-51567 Ransomware | CY Cyberpanel Cyberpanel | 9.8 | Nov 7 | CyberPanel Incorrect Default Permissions Vulnerability |
| CVE-2024-38094 Ransomware | SH SharePoint Microsoft | 7.2 | Oct 22 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2024-40711 Ransomware | BR Backup & Replication Veeam | 9.8 | Oct 17 | Veeam Backup and Replication Deserialization Vulnerability |
| CVE-2024-9680 Ransomware | FI Firefox Mozilla | 9.8 | Oct 15 | Mozilla Firefox Use-After-Free Vulnerability |
| CVE-2024-30088 Ransomware | WI Windows Microsoft | 7.0 | Oct 15 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2020-0618 Ransomware | MS Microsoft SQL Server Microsoft | 8.8 | Sep 18 | Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability |
| CVE-2024-6670 Ransomware | WG WhatsUp Gold Progress | 9.8 | Sep 16 | WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability |
| CVE-2024-40766 Ransomware | SO SonicOS SonicWall | 9.8 | Sep 9 | SonicWall SonicOS Improper Access Control Vulnerability |
| CVE-2017-1000253 Ransomware | KE Kernel Linux | 7.8 | Sep 9 | Linux Kernel PIE Stack Buffer Corruption Vulnerability |
| CVE-2024-23897 Ransomware | JE Jenkins Jenkins | 9.8 | Aug 19 | Jenkins Command Line Interface (CLI) Path Traversal Vulnerability |
| CVE-2024-37085 Ransomware | ES ESXi VMware | 7.2 | Jul 30 | VMware ESXi Authentication Bypass Vulnerability |
| CVE-2024-23692 Ransomware | HF HTTP File Server Rejetto | 9.8 | Jul 9 | Rejetto HTTP File Server 2.3m Unauthenticated RCE |
| CVE-2024-26169 Ransomware | WI Windows Microsoft | 7.8 | Jun 13 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
| CVE-2024-4577 Ransomware | PH PHP PHP | 9.8 | Jun 12 | Argument Injection in PHP-CGI |
| CVE-2024-24919 Ransomware | CP Check Point Quantum Gateway, Spark Gateway and CloudGuard Network checkpoint | 8.6 | May 30 | Information disclosure |
| CVE-2024-1086 Ransomware | KE Kernel Linux | 7.8 | May 30 | Use-after-free in Linux kernel's netfilter: nf_tables component |
| CVE-2023-43208 Ransomware | MC Mirth Connect Nextgen | 9.8 | May 20 | NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability |
| CVE-2024-30051 Ransomware | W1 Windows 10 Version 1507 Microsoft | 7.8 | May 14 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2024-3400 Ransomware | PA PAN-OS Palo Alto Networks | 10.0 | Apr 12 | PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect |
| CVE-2023-24955 Ransomware | SH SharePoint Microsoft | 7.2 | Mar 26 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2021-44529 Ransomware | IE Ivanti EPM | 9.8 | Mar 25 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability |
| CVE-2023-48788 Ransomware | FO FortiClientEMS Fortinet | 9.8 | Mar 25 | Fortinet FortiClient EMS SQL Injection Vulnerability |
| CVE-2024-27198 Ransomware | TE TeamCity JetBrains | 9.8 | Mar 7 | JetBrains TeamCity Authentication Bypass Vulnerability |
| CVE-2024-21338 Ransomware | WI Windows Microsoft | 7.8 | Mar 4 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-1709 Ransomware | SC ScreenConnect ConnectWise | 10.0 | Feb 22 | Authentication bypass using an alternate path or channel |
| CVE-2020-3259 Ransomware | CA Cisco Adaptive Security Appliance (ASA) Software Cisco | 7.5 | Feb 15 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability |
| CVE-2024-21412 Ransomware | WI Windows Microsoft | 8.1 | Feb 13 | Internet Shortcut Files Security Feature Bypass Vulnerability |
| CVE-2024-21762 Ransomware | FO FortiOS Fortinet | 9.8 | Feb 9 | Fortinet FortiOS Out-of-Bound Write Vulnerability |
| CVE-2024-21893 Ransomware | CS Connect Secure Ivanti | 8.2 | Jan 31 | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability |
| CVE-2023-22527 Ransomware | CO Confluence Atlassian | 9.8 | Jan 24 | Atlassian Confluence Data Center and Server Template Injection Vulnerability |
| CVE-2023-35082 Ransomware | EM Endpoint Manager Mobile Ivanti | 9.8 | Jan 18 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability |
| CVE-2023-29357 Ransomware | SH SharePoint Microsoft | 9.8 | Jan 10 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
| CVE-2024-21887 Ransomware | CS Connect Secure Ivanti | 9.1 | Jan 10 | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability |
| CVE-2023-46805 Ransomware | CS Connect Secure Ivanti | 8.2 | Jan 10 | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability |