Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2025-49113 | RoundCube Webmail contains a deserialization of untrusted data vulnerability that allows remote code execution by authenticated users… | Roundcube / Webmail | Feb 20, 2026 | — | View → |
| CVE-2025-68461 | RoundCube Webmail contains a cross-site scripting vulnerability via the animate tag in an SVG document. | Roundcube / Webmail | Feb 20, 2026 | — | View → |
| CVE-2021-22175 | GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled. | GitLab / GitLab | Feb 18, 2026 | — | View → |
| CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could allow an… | Dell / RecoverPoint for Virtual Machines (RP4VMs) | Feb 18, 2026 | — | View → |
| CVE-2008-0015 | Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by… | Microsoft / Windows | Feb 17, 2026 | — | View → |
| CVE-2020-7796 | Synacor Zimbra Collaboration Suite (ZCS) contains a server-side request forgery vulnerability if WebEx zimlet installed and zimlet JSP is… | Synacor / Zimbra Collaboration Suite | Feb 17, 2026 | — | View → |
| CVE-2024-7694 | TeamT5 ThreatSonar Anti-Ransomware contains an unrestricted upload of file with dangerous type vulnerability. ThreatSonar Anti-Ransomware… | TeamT5 / ThreatSonar Anti-Ransomware | Feb 17, 2026 | — | View → |
| CVE-2026-2441 | Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via… | Google / Chromium | Feb 17, 2026 | — | View → |
| CVE-2026-1731 | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)contain an OS command injection vulnerability. Successful exploitation… | BeyondTrust / Remote Support (RS) and Privileged Remote Access (PRA) | Feb 13, 2026 | Ransomware | View → |
| CVE-2024-43468 | Microsoft Configuration Manager contains an SQL injection vulnerability. An unauthenticated attacker could exploit this vulnerability by… | Microsoft / Configuration Manager | Feb 12, 2026 | — | View → |
| CVE-2025-15556 | Notepad++ when using the WinGUp updater, contains a download of code without integrity check vulnerability that could allow an attacker to… | Notepad++ / Notepad++ | Feb 12, 2026 | — | View → |
| CVE-2025-40536 | SolarWinds Web Help Desk contains a security control bypass vulnerability that could allow an unauthenticated attacker to gain access to… | SolarWinds / Web Help Desk | Feb 12, 2026 | — | View → |
| CVE-2026-20700 | Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer… | Apple / Multiple Products | Feb 12, 2026 | — | View → |
| CVE-2026-21510 | Microsoft Windows Shell contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a… | Microsoft / Windows | Feb 10, 2026 | — | View → |
| CVE-2026-21513 | Microsoft MSHTML Framework contains a protection mechanism failure vulnerability that could allow an unauthorized attacker to bypass a… | Microsoft / Windows | Feb 10, 2026 | — | View → |
| CVE-2026-21514 | Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker… | Microsoft / Office | Feb 10, 2026 | — | View → |
| CVE-2026-21519 | Microsoft Desktop Windows Manager contains a type confusion vulnerability that could allow an authorized attacker to elevate privileges… | Microsoft / Windows | Feb 10, 2026 | — | View → |
| CVE-2026-21525 | Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an unauthorized attacker to deny… | Microsoft / Windows | Feb 10, 2026 | — | View → |
| CVE-2026-21533 | Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow an authorized attacker… | Microsoft / Windows | Feb 10, 2026 | — | View → |
| CVE-2025-11953 | React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST… | React Native Community / CLI | Feb 5, 2026 | — | View → |