CISA KEV
Known exploited
The government must-patch list, mapped to our product index so you can go straight to the product affected.
Updated Oct 28, 21:48 UTC
Added this week
8
▼ 11%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,763
since 2021all entries
| CVE | Product | CVSS | Added | Summary |
|---|---|---|---|---|
| CVE-2022-41091 Ransomware | WI Windows Microsoft | 5.4 | Nov 8 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2018-19323 Ransomware | AG Aorus Graphics Engine Gigabyte | 9.8 | Oct 24 | GIGABYTE Multiple Products Privilege Escalation Vulnerability |
| CVE-2018-19320 Ransomware | AG Aorus Graphics Engine Gigabyte | 7.8 | Oct 24 | GIGABYTE Multiple Products Unspecified Vulnerability |
| CVE-2018-19321 Ransomware | AG Aorus Graphics Engine Gigabyte | 7.8 | Oct 24 | GIGABYTE Multiple Products Privilege Escalation Vulnerability |
| CVE-2020-3433 Ransomware | CA Cisco AnyConnect Secure Mobility Client Cisco | 7.8 | Oct 24 | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability |
| CVE-2018-19322 Ransomware | AG Aorus Graphics Engine Gigabyte | 7.8 | Oct 24 | GIGABYTE Multiple Products Code Execution Vulnerability |
| CVE-2020-3153 Ransomware | CA Cisco AnyConnect Secure Mobility Client Cisco | 6.5 | Oct 24 | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability |
| CVE-2022-41352 Ransomware | ZC Zimbra Collaboration Suite Synacor | 9.8 | Oct 20 | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability |
| CVE-2022-40684 Ransomware | FO FortiOS Fortinet | 9.8 | Oct 11 | Fortinet Multiple Products Authentication Bypass Vulnerability |
| CVE-2022-41040 Ransomware | ES Exchange Server Microsoft | 8.8 | Sep 30 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2022-41082 Ransomware | ES Exchange Server Microsoft | 8.0 | Sep 30 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2022-37969 Ransomware | WI Windows Microsoft | 7.8 | Sep 14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2018-6530 Ransomware | DF Dir-860l Firmware Dlink | 9.8 | Sep 8 | D-Link Multiple Routers OS Command Injection Vulnerability |
| CVE-2022-27593 Ransomware | PS Photo Station QNAP Systems Inc. | 9.1 | Sep 8 | DeadBolt Ransomware |
| CVE-2018-13374 Ransomware | FO FortiOS Fortinet | 4.3 | Sep 8 | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability |
| CVE-2022-26352 Ransomware | DO Dotcms Dotcms | 9.8 | Aug 25 | dotCMS Unrestricted Upload of File Vulnerability |
| CVE-2022-2294 Ransomware | CH Chrome Google | 8.8 | Aug 25 | WebRTC Heap Buffer Overflow Vulnerability |
| CVE-2022-37042 Ransomware | ZC Zimbra Collaboration Suite Synacor | 9.8 | Aug 11 | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability |
| CVE-2022-27925 Ransomware | ZC Zimbra Collaboration Suite Synacor | 7.2 | Aug 11 | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability |
| CVE-2022-30333 Ransomware | DL Debian Linux Debian | 7.5 | Aug 9 | RARLAB UnRAR Directory Traversal Vulnerability |
| CVE-2022-27924 Ransomware | ZC Zimbra Collaboration Suite Synacor | 7.5 | Aug 4 | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability |
| CVE-2022-29499 Ransomware | MC Mivoice Connect Mitel | 9.8 | Jun 27 | Mitel MiVoice Connect Data Validation Vulnerability |
| CVE-2021-4034 Ransomware | PO polkit | 7.8 | Jun 27 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability |
| CVE-2022-30190 Ransomware | WI Windows Microsoft | 7.8 | Jun 14 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
| CVE-2019-7193 Ransomware | QN QNAP NAS devices | 9.8 | Jun 8 | QNAP QTS Improper Input Validation Vulnerability |
| CVE-2019-7194 Ransomware | QN QNAP NAS devices running Photo Station | 9.8 | Jun 8 | QNAP Photo Station Path Traversal Vulnerability |
| CVE-2019-7195 Ransomware | QN QNAP NAS devices running Photo Station | 9.8 | Jun 8 | QNAP Photo Station Path Traversal Vulnerability |
| CVE-2019-7192 Ransomware | QN QNAP NAS devices running Photo Station | 9.8 | Jun 8 | QNAP Photo Station Improper Access Control Vulnerability |
| CVE-2022-26134 Ransomware | CO Confluence Atlassian | 9.8 | Jun 2 | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability |
| CVE-2012-1710 Ransomware | FM Fusion Middleware Oracle | 9.8 | May 25 | Oracle Fusion Middleware Unspecified Vulnerability |
| CVE-2013-0422 Ransomware | UL Ubuntu Linux Canonical | 9.8 | May 25 | Oracle JRE Remote Code Execution Vulnerability |
| CVE-2016-0034 Ransomware | SI Silverlight Microsoft | 8.8 | May 25 | Microsoft Silverlight Runtime Remote Code Execution Vulnerability |
| CVE-2013-0074 Ransomware | SI Silverlight Microsoft | 7.8 | May 25 | Microsoft Silverlight Double Dereference Vulnerability |
| CVE-2010-1428 Ransomware | JE Jboss Enterprise Application Platform Redhat | 7.5 | May 25 | Red Hat JBoss Information Disclosure Vulnerability |
| CVE-2013-3993 Ransomware | IB Infosphere Biginsights Ibm | 6.5 | May 25 | IBM InfoSphere BigInsights Invalid Input Vulnerability |
| CVE-2010-0738 Ransomware | JE Jboss Enterprise Application Platform Redhat | 5.3 | May 25 | Red Hat JBoss Authentication Bypass Vulnerability |
| CVE-2013-0431 Ransomware | JR Jre Oracle | 3.7 | May 25 | Oracle JRE Sandbox Bypass Vulnerability |
| CVE-2018-19949 Ransomware | QT QTS QNAP Systems Inc. | 9.8 | May 24 | QNAP NAS File Station Command Injection Vulnerability |
| CVE-2017-18362 Ransomware | MA Manageditsync Connectwise | 9.8 | May 24 | Kaseya VSA SQL Injection Vulnerability |
| CVE-2017-0147 Ransomware | WS Windows SMB Microsoft Corporation | 7.5 | May 24 | Microsoft Windows SMBv1 Information Disclosure Vulnerability |
| CVE-2016-3351 Ransomware | ED Edge Microsoft | 6.5 | May 24 | Microsoft Internet Explorer and Edge Information Disclosure Vulnerability |
| CVE-2018-19953 Ransomware | QT QTS QNAP Systems Inc. | 6.1 | May 24 | QNAP NAS File Station Cross-Site Scripting Vulnerability |
| CVE-2018-19943 Ransomware | QT QTS QNAP Systems Inc. | 5.4 | May 24 | QNAP NAS File Station Cross-Site Scripting Vulnerability |
| CVE-2019-1385 Ransomware | WI Windows Microsoft | 7.8 | May 23 | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability |
| CVE-2020-0638 Ransomware | WI Windows Microsoft | 7.8 | May 23 | Microsoft Update Notification Manager Privilege Escalation Vulnerability |
| CVE-2019-1130 Ransomware | WI Windows Microsoft | 7.8 | May 23 | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability |
| CVE-2022-1388 Ransomware | BI BIG-IP F5 | 9.8 | May 10 | F5 BIG-IP Missing Authentication Vulnerability |
| CVE-2022-29464 Ransomware | AM Api Manager Wso2 | 9.8 | Apr 25 | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability |
| CVE-2018-6882 Ransomware | ZC Zimbra Collaboration Suite Synacor | 6.1 | Apr 19 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability |
| CVE-2019-16057 Ransomware | DF Dns-320 Firmware Dlink | 9.8 | Apr 15 | D-Link DNS-320 Remote Code Execution Vulnerability |