CISA KEV
Known exploited
The government must-patch list, mapped to our product index so you can go straight to the product affected.
Updated Oct 28, 17:52 UTC
Added this week
6
▼ 33%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
7
federalremediation deadlines
Total on KEV
1,761
since 2021all entries
| CVE | Product | CVSS | Added | Summary |
|---|---|---|---|---|
| CVE-2012-1723 Ransomware | JD Jdk Oracle | 9.8 | Mar 3 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
| CVE-2008-2992 Ransomware | AC Acrobat Adobe | 7.8 | Mar 3 | Adobe Reader and Acrobat Input Validation Vulnerability |
| CVE-2010-0188 Ransomware | AC Acrobat Adobe | 7.8 | Mar 3 | Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability |
| CVE-2015-1701 Ransomware | W2 Windows 2003 Server Microsoft | 7.8 | Mar 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2015-7645 Ransomware | FP Flash Player Adobe | 7.8 | Mar 3 | Adobe Flash Player Arbitrary Code Execution Vulnerability |
| CVE-2016-0099 Ransomware | WI Windows Microsoft | 7.8 | Mar 3 | Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability |
| CVE-2018-8581 Ransomware | ES Exchange Server Microsoft | 7.4 | Mar 3 | Microsoft Exchange Server Privilege Escalation Vulnerability |
| CVE-2021-41379 Ransomware | WI Windows Microsoft | 5.5 | Mar 3 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2022-24682 Ransomware | ZC Zimbra Collaboration Suite Synacor | 6.1 | Feb 25 | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability |
| CVE-2018-20250 Ransomware | WI WinRAR Check Point Software Technologies Ltd. | 7.8 | Feb 15 | WinRAR Absolute Path Traversal Vulnerability |
| CVE-2018-15982 Ransomware | FP Flash Player Adobe | 7.8 | Feb 15 | Adobe Flash Player Use-After-Free Vulnerability |
| CVE-2018-8174 Ransomware | WI Windows Microsoft | 7.5 | Feb 15 | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability |
| CVE-2019-0752 Ransomware | IE Internet Explorer 10 Microsoft | 7.5 | Feb 15 | Microsoft Internet Explorer Type Confusion Vulnerability |
| CVE-2020-0796 Ransomware | W1 Windows 10 Version 1903 for 32-bit Systems Microsoft | 10.0 | Feb 10 | Microsoft SMBv3 Remote Code Execution Vulnerability |
| CVE-2017-0145 Ransomware | WS Windows SMB Microsoft Corporation | 8.8 | Feb 10 | Microsoft SMBv1 Remote Code Execution Vulnerability |
| CVE-2017-0144 Ransomware | WS Windows SMB Microsoft Corporation | 8.8 | Feb 10 | Microsoft SMBv1 Remote Code Execution Vulnerability |
| CVE-2017-10271 Ransomware | WS WebLogic Server Oracle | 7.5 | Feb 10 | Oracle Corporation WebLogic Server Remote Code Execution Vulnerability |
| CVE-2022-21882 Ransomware | W1 Windows 10 Version 1809 Microsoft | 7.8 | Feb 4 | Win32k Elevation of Privilege Vulnerability |
| CVE-2021-20038 Ransomware | SS SonicWall SMA100 SonicWall | 9.8 | Jan 28 | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability |
| CVE-2020-0787 Ransomware | WI Windows Microsoft | 7.8 | Jan 28 | Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability |
| CVE-2018-8453 Ransomware | WI Windows Microsoft | 7.8 | Jan 21 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2021-21975 Ransomware | VV VMware vRealize Operations | 7.5 | Jan 18 | VMware Server Side Request Forgery in vRealize Operations Manager API |
| CVE-2019-2725 Ransomware | WS WebLogic Server Oracle | 9.8 | Jan 10 | Oracle WebLogic Server, Injection |
| CVE-2019-1579 Ransomware | PA PAN-OS Palo Alto Networks | 8.1 | Jan 10 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability |
| CVE-2019-1458 Ransomware | WI Windows Microsoft | 7.8 | Jan 10 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2018-13382 Ransomware | FO FortiOS Fortinet | 7.5 | Jan 10 | Fortinet FortiOS and FortiProxy Improper Authorization |
| CVE-2018-13383 Ransomware | FO FortiOS Fortinet | 6.5 | Jan 10 | Fortinet FortiOS and FortiProxy Out-of-bounds Write |
| CVE-2021-43890 Ransomware | WI Windows Microsoft | 7.1 | Dec 15 | Windows AppX Installer Spoofing Vulnerability |
| CVE-2021-44228 Ransomware | LO Log4j Apache | 10.0 | Dec 10 | Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints |
| CVE-2017-12149 Ransomware | JB jbossas Red Hat, Inc. | 9.8 | Dec 10 | Red Hat JBoss Application Server Remote Code Execution Vulnerability |
| CVE-2021-40438 Ransomware | HS HTTP Server Apache | 9.0 | Dec 1 | mod_proxy SSRF |
| CVE-2021-42321 Ransomware | ES Exchange Server Microsoft | 8.8 | Nov 17 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-40449 Ransomware | WI Windows Microsoft | 7.8 | Nov 17 | Win32k Elevation of Privilege Vulnerability |
| CVE-2021-35211 Ransomware | SE Serv-U SolarWinds | 10.0 | Nov 3 | Serv-U Remote Memory Escape Vulnerability |
| CVE-2021-22205 Ransomware | GI GitLab GitLab | 10.0 | Nov 3 | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability |
| CVE-2019-11510 Ransomware | CS Connect Secure Ivanti | 10.0 | Nov 3 | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability |
| CVE-2021-22893 Ransomware | CS Connect Secure Ivanti | 10.0 | Nov 3 | Ivanti Pulse Connect Secure Use-After-Free Vulnerability |
| CVE-2021-27101 Ransomware | FT FTA Accellion | 9.8 | Nov 3 | Accellion FTA SQL Injection Vulnerability |
| CVE-2021-42258 Ransomware | BW Billquick Web Suite Bqe | 9.8 | Nov 3 | BQE BillQuick Web Suite SQL Injection Vulnerability |
| CVE-2021-42013 Ransomware | HS HTTP Server Apache | 9.8 | Nov 3 | Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) |
| CVE-2021-41773 Ransomware | HS HTTP Server Apache | 9.8 | Nov 3 | Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 |
| CVE-2021-40539 Ransomware | MA ManageEngine ADSelfService Plus Zoho | 9.8 | Nov 3 | Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability |
| CVE-2021-38647 Ransomware | AA Azure Automation State Configuration, DSC Extension Microsoft | 9.8 | Nov 3 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability |
| CVE-2021-35464 Ransomware | AM Access Management Forgerock | 9.8 | Nov 3 | ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability |
| CVE-2021-30116 Ransomware | VA Vsa Agent Kaseya | 9.8 | Nov 3 | Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6 |
| CVE-2021-27104 Ransomware | FT FTA Accellion | 9.8 | Nov 3 | Accellion FTA OS Command Injection Vulnerability |
| CVE-2021-27103 Ransomware | FT FTA Accellion | 9.8 | Nov 3 | Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability |
| CVE-2021-26084 Ransomware | CO Confluence Atlassian | 9.8 | Nov 3 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability |
| CVE-2021-22986 Ransomware | BB BIG-IP; BIG-IQ | 9.8 | Nov 3 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability |
| CVE-2021-22005 Ransomware | VS vCenter Server VMware | 9.8 | Nov 3 | VMware vCenter Server File Upload Vulnerability |