Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2018-17480 | Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a… | Google / Chromium V8 | Jun 8, 2022 | — | View → |
| CVE-2018-4990 | Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution. | Adobe / Acrobat and Reader | Jun 8, 2022 | — | View → |
| CVE-2018-6065 | Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption… | Google / Chromium V8 | Jun 8, 2022 | — | View → |
| CVE-2019-15271 | A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers… | Cisco / RV Series Routers | Jun 8, 2022 | — | View → |
| CVE-2019-5825 | Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap… | Google / Chromium V8 | Jun 8, 2022 | — | View → |
| CVE-2019-7192 | QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized… | QNAP / Photo Station | Jun 8, 2022 | Ransomware | View → |
| CVE-2019-7193 | QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system. | QNAP / QTS | Jun 8, 2022 | Ransomware | View → |
| CVE-2019-7194 | QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or… | QNAP / Photo Station | Jun 8, 2022 | Ransomware | View → |
| CVE-2019-7195 | QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or… | QNAP / Photo Station | Jun 8, 2022 | Ransomware | View → |
| CVE-2022-26134 | Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to… | Atlassian / Confluence Server/Data Center | Jun 2, 2022 | Ransomware | View → |
| CVE-2010-0738 | The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and… | Red Hat / JBoss | May 25, 2022 | Ransomware | View → |
| CVE-2010-0840 | Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality,… | Oracle / Java Runtime Environment (JRE) | May 25, 2022 | — | View → |
| CVE-2010-1428 | Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this… | Red Hat / JBoss | May 25, 2022 | Ransomware | View → |
| CVE-2012-1710 | Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to… | Oracle / Fusion Middleware | May 25, 2022 | Ransomware | View → |
| CVE-2013-0074 | Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via… | Microsoft / Silverlight | May 25, 2022 | Ransomware | View → |
| CVE-2013-0422 | A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable… | Oracle / Java Runtime Environment (JRE) | May 25, 2022 | Ransomware | View → |
| CVE-2013-0431 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security… | Oracle / Java Runtime Environment (JRE) | May 25, 2022 | Ransomware | View → |
| CVE-2013-2423 | Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity. | Oracle / Java Runtime Environment (JRE) | May 25, 2022 | — | View → |
| CVE-2013-3896 | Microsoft Silverlight does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain… | Microsoft / Silverlight | May 25, 2022 | — | View → |
| CVE-2013-3993 | Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete… | IBM / InfoSphere BigInsights | May 25, 2022 | Ransomware | View → |