Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2013-0629 | Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories. | Adobe / ColdFusion | Mar 7, 2022 | — | View → |
| CVE-2013-0631 | Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server. | Adobe / ColdFusion | Mar 7, 2022 | — | View → |
| CVE-2016-6277 | NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting… | NETGEAR / Multiple Routers | Mar 7, 2022 | — | View → |
| CVE-2017-6077 | NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution. | NETGEAR / Wireless Router DGN2200 | Mar 7, 2022 | — | View → |
| CVE-2019-11581 | Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution. | Atlassian / Jira Server and Data Center | Mar 7, 2022 | — | View → |
| CVE-2020-8218 | A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code… | Pulse Secure / Pulse Connect Secure | Mar 7, 2022 | — | View → |
| CVE-2021-21973 | VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server… | VMware / vCenter Server and Cloud Foundation | Mar 7, 2022 | — | View → |
| CVE-2022-26485 | Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code… | Mozilla / Firefox | Mar 7, 2022 | — | View → |
| CVE-2022-26486 | Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution. | Mozilla / Firefox | Mar 7, 2022 | — | View → |
| CVE-2002-0367 | smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows… | Microsoft / Windows | Mar 3, 2022 | — | View → |
| CVE-2004-0210 | A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete… | Microsoft / Windows | Mar 3, 2022 | — | View → |
| CVE-2008-2992 | Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution. | Adobe / Acrobat and Reader | Mar 3, 2022 | Ransomware | View → |
| CVE-2008-3431 | An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute… | Oracle / VirtualBox | Mar 3, 2022 | — | View → |
| CVE-2009-1123 | The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain… | Microsoft / Windows | Mar 3, 2022 | — | View → |
| CVE-2009-3129 | Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid… | Microsoft / Excel | Mar 3, 2022 | — | View → |
| CVE-2010-0188 | Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code. | Adobe / Reader and Acrobat | Mar 3, 2022 | Ransomware | View → |
| CVE-2010-0232 | The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate… | Microsoft / Windows | Mar 3, 2022 | — | View → |
| CVE-2010-3333 | A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to… | Microsoft / Office | Mar 3, 2022 | — | View → |
| CVE-2011-0611 | Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service… | Adobe / Flash Player | Mar 3, 2022 | — | View → |
| CVE-2011-1889 | A remote code execution vulnerability exists in the Forefront Threat Management Gateway (TMG) Firewall Client Winsock provider that could… | Microsoft / Forefront Threat Management Gateway (TMG) | Mar 3, 2022 | — | View → |