Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2022-20700 | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following:… | Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 3, 2022 | — | View → |
| CVE-2022-20701 | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following:… | Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 3, 2022 | — | View → |
| CVE-2022-20703 | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following:… | Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 3, 2022 | — | View → |
| CVE-2022-20708 | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following:… | Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 3, 2022 | — | View → |
| CVE-2014-6352 | Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object. | Microsoft / Windows | Feb 25, 2022 | — | View → |
| CVE-2017-0222 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. | Microsoft / Internet Explorer | Feb 25, 2022 | — | View → |
| CVE-2017-8570 | A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. | Microsoft / Office | Feb 25, 2022 | — | View → |
| CVE-2022-24682 | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an… | Synacor / Zimbra Collaborate Suite (ZCS) | Feb 25, 2022 | Ransomware | View → |
| CVE-2022-23131 | Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML. | Zabbix / Frontend | Feb 22, 2022 | — | View → |
| CVE-2022-23134 | Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend. | Zabbix / Frontend | Feb 22, 2022 | — | View → |
| CVE-2013-3906 | Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution. | Microsoft / Graphics Component | Feb 15, 2022 | — | View → |
| CVE-2014-1761 | Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution. | Microsoft / Word | Feb 15, 2022 | — | View → |
| CVE-2017-9841 | PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by… | PHPUnit / PHPUnit | Feb 15, 2022 | — | View → |
| CVE-2018-15982 | Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability | Adobe / Flash Player | Feb 15, 2022 | Ransomware | View → |
| CVE-2018-20250 | WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution | RARLAB / WinRAR | Feb 15, 2022 | Ransomware | View → |
| CVE-2018-8174 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine… | Microsoft / Windows | Feb 15, 2022 | Ransomware | View → |
| CVE-2019-0752 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer | Microsoft / Internet Explorer | Feb 15, 2022 | Ransomware | View → |
| CVE-2022-0609 | Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via… | Google / Chromium Animation | Feb 15, 2022 | — | View → |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution. | Adobe / Commerce and Magento Open Source | Feb 15, 2022 | — | View → |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously… | Apple / iOS, iPadOS, and macOS | Feb 11, 2022 | — | View → |