Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2025-21391 | Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could… | Microsoft / Windows | Feb 11, 2025 | — | View → |
| CVE-2025-21418 | Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege… | Microsoft / Windows | Feb 11, 2025 | — | View → |
| CVE-2025-0994 | Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution… | Trimble / Cityworks | Feb 7, 2025 | — | View → |
| CVE-2020-15069 | Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature. | Sophos / XG Firewall | Feb 6, 2025 | — | View → |
| CVE-2020-29574 | CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL… | Sophos / CyberoamOS | Feb 6, 2025 | Ransomware | View → |
| CVE-2022-23748 | Dante Discovery contains a process control vulnerability in mDNSResponder.exe that all allows for a DLL sideloading attack. A local… | Audinate / Dante Discovery | Feb 6, 2025 | — | View → |
| CVE-2024-21413 | Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of… | Microsoft / Office Outlook | Feb 6, 2025 | — | View → |
| CVE-2025-0411 | 7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to… | 7-Zip / 7-Zip | Feb 6, 2025 | — | View → |
| CVE-2024-53104 | Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that… | Linux / Kernel | Feb 5, 2025 | — | View → |
| CVE-2018-19410 | Paessler PRTG Network Monitor contains a local file inclusion vulnerability that allows a remote, unauthenticated attacker to create users… | Paessler / PRTG Network Monitor | Feb 4, 2025 | — | View → |
| CVE-2018-9276 | Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to… | Paessler / PRTG Network Monitor | Feb 4, 2025 | — | View → |
| CVE-2024-29059 | Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling… | Microsoft / .NET Framework | Feb 4, 2025 | — | View → |
| CVE-2024-45195 | Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access. | Apache / OFBiz | Feb 4, 2025 | — | View → |
| CVE-2025-24085 | Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate… | Apple / Multiple Products | Jan 29, 2025 | — | View → |
| CVE-2025-23006 | SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data… | SonicWall / SMA1000 Appliances | Jan 24, 2025 | Ransomware | View → |
| CVE-2020-11023 | JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML… | JQuery / JQuery | Jan 23, 2025 | — | View → |
| CVE-2024-50603 | Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code.… | Aviatrix / Controllers | Jan 16, 2025 | — | View → |
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain… | Fortinet / FortiOS and FortiProxy | Jan 14, 2025 | Ransomware | View → |
| CVE-2025-21333 | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to… | Microsoft / Windows | Jan 14, 2025 | — | View → |
| CVE-2025-21334 | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM… | Microsoft / Windows | Jan 14, 2025 | — | View → |