Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2025-22226 | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. Successful… | VMware / ESXi, Workstation, and Fusion | Mar 4, 2025 | — | View → |
| CVE-2018-8639 | Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege… | Microsoft / Windows | Mar 3, 2025 | Ransomware | View → |
| CVE-2022-43769 | Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates… | Hitachi Vantara / Pentaho Business Analytics (BA) Server | Mar 3, 2025 | — | View → |
| CVE-2022-43939 | Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an… | Hitachi Vantara / Pentaho Business Analytics (BA) Server | Mar 3, 2025 | — | View → |
| CVE-2023-20118 | Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface.… | Cisco / Small Business RV Series Routers | Mar 3, 2025 | — | View → |
| CVE-2024-4885 | Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticated attacker to achieve remote code execution. | Progress / WhatsUp Gold | Mar 3, 2025 | — | View → |
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker… | Synacor / Zimbra Collaboration Suite (ZCS) | Feb 25, 2025 | — | View → |
| CVE-2024-49035 | Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges. | Microsoft / Partner Center | Feb 25, 2025 | — | View → |
| CVE-2017-3066 | Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution. | Adobe / ColdFusion | Feb 24, 2025 | — | View → |
| CVE-2024-20953 | Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with… | Oracle / Agile Product Lifecycle Management (PLM) | Feb 24, 2025 | — | View → |
| CVE-2025-24989 | Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a… | Microsoft / Power Pages | Feb 21, 2025 | — | View → |
| CVE-2025-0111 | Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an… | Palo Alto Networks / PAN-OS | Feb 20, 2025 | — | View → |
| CVE-2025-23209 | Craft CMS contains a code injection vulnerability caused by improper validation of the database backup path, ultimately enabling remote… | Craft CMS / Craft CMS | Feb 20, 2025 | — | View → |
| CVE-2024-53704 | SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker… | SonicWall / SonicOS | Feb 18, 2025 | Ransomware | View → |
| CVE-2025-0108 | Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an… | Palo Alto Networks / PAN-OS | Feb 18, 2025 | — | View → |
| CVE-2024-57727 | SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to… | SimpleHelp / SimpleHelp | Feb 13, 2025 | Ransomware | View → |
| CVE-2024-41710 | Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, contain an argument injection… | Mitel / SIP Phones | Feb 12, 2025 | — | View → |
| CVE-2025-24200 | Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a… | Apple / iOS and iPadOS | Feb 12, 2025 | — | View → |
| CVE-2024-40890 | Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an… | Zyxel / DSL CPE Devices | Feb 11, 2025 | — | View → |
| CVE-2024-40891 | Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the management commands that could allow… | Zyxel / DSL CPE Devices | Feb 11, 2025 | — | View → |