Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2011-3544 | An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker… | Oracle / Java SE JDK and JRE | Mar 3, 2022 | — | View → |
| CVE-2012-0507 | An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely… | Oracle / Java SE | Mar 3, 2022 | Ransomware | View → |
| CVE-2012-1535 | Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted… | Adobe / Flash Player | Mar 3, 2022 | — | View → |
| CVE-2012-1723 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect… | Oracle / Java SE | Mar 3, 2022 | Ransomware | View → |
| CVE-2012-1856 | The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code… | Microsoft / Office | Mar 3, 2022 | — | View → |
| CVE-2012-4681 | The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution. | Oracle / Java SE | Mar 3, 2022 | Ransomware | View → |
| CVE-2013-0632 | An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access. | Adobe / ColdFusion | Mar 3, 2022 | — | View → |
| CVE-2013-0640 | An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution. | Adobe / Reader and Acrobat | Mar 3, 2022 | — | View → |
| CVE-2013-0641 | A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution. | Adobe / Reader | Mar 3, 2022 | — | View → |
| CVE-2013-1347 | This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user… | Microsoft / Internet Explorer | Mar 3, 2022 | — | View → |
| CVE-2013-1675 | Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale… | Mozilla / Firefox | Mar 3, 2022 | — | View → |
| CVE-2013-3346 | Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial… | Adobe / Reader and Acrobat | Mar 3, 2022 | — | View → |
| CVE-2013-3897 | A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute… | Microsoft / Internet Explorer | Mar 3, 2022 | — | View → |
| CVE-2013-5065 | Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to… | Microsoft / Windows | Mar 3, 2022 | — | View → |
| CVE-2014-0496 | Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution. | Adobe / Reader and Acrobat | Mar 3, 2022 | — | View → |
| CVE-2014-4114 | A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that… | Microsoft / Windows | Mar 3, 2022 | — | View → |
| CVE-2015-1642 | Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document. | Microsoft / Office | Mar 3, 2022 | — | View → |
| CVE-2015-1701 | An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to… | Microsoft / Win32k | Mar 3, 2022 | Ransomware | View → |
| CVE-2015-2387 | ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application. | Microsoft / ATM Font Driver | Mar 3, 2022 | — | View → |
| CVE-2015-2424 | Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… | Microsoft / PowerPoint | Mar 3, 2022 | — | View → |