Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2025-21335 | Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM… | Microsoft / Windows | Jan 14, 2025 | — | View → |
| CVE-2023-48365 | Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the… | Qlik / Sense | Jan 13, 2025 | Ransomware | View → |
| CVE-2024-12686 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by… | BeyondTrust / Privileged Remote Access (PRA) and Remote Support (RS) | Jan 13, 2025 | — | View → |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code… | Ivanti / Connect Secure, Policy Secure, and ZTA Gateways | Jan 8, 2025 | Ransomware | View → |
| CVE-2020-2883 | Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an… | Oracle / WebLogic Server | Jan 7, 2025 | — | View → |
| CVE-2024-41713 | Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This… | Mitel / MiCollab | Jan 7, 2025 | Ransomware | View → |
| CVE-2024-55550 | Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read… | Mitel / MiCollab | Jan 7, 2025 | Ransomware | View → |
| CVE-2024-3393 | Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when… | Palo Alto Networks / PAN-OS | Dec 30, 2024 | — | View → |
| CVE-2021-44207 | Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that could allow an attacker to achieve remote code execution on… | Acclaim Systems / USAHERDS | Dec 23, 2024 | — | View → |
| CVE-2024-12356 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an… | BeyondTrust / Privileged Remote Access (PRA) and Remote Support (RS) | Dec 19, 2024 | — | View → |
| CVE-2018-14933 | NUUO NVRmini devices contain an OS command injection vulnerability. This vulnerability allows remote command execution via shell… | NUUO / NVRmini Devices | Dec 18, 2024 | — | View → |
| CVE-2019-11001 | Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This… | Reolink / Multiple IP Cameras | Dec 18, 2024 | — | View → |
| CVE-2021-40407 | Reolink RLC-410W IP cameras contain an authenticated OS command injection vulnerability in the device network settings functionality. | Reolink / RLC-410W IP Camera | Dec 18, 2024 | — | View → |
| CVE-2022-23227 | NUUO NVRmini2 devices contain a missing authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR… | NUUO / NVRmini2 Devices | Dec 18, 2024 | — | View → |
| CVE-2024-55956 | Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload vulnerability that… | Cleo / Multiple Products | Dec 17, 2024 | Ransomware | View → |
| CVE-2024-20767 | Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via… | Adobe / ColdFusion | Dec 16, 2024 | — | View → |
| CVE-2024-35250 | Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate… | Microsoft / Windows | Dec 16, 2024 | — | View → |
| CVE-2024-50623 | Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload and download… | Cleo / Multiple Products | Dec 13, 2024 | Ransomware | View → |
| CVE-2024-49138 | Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to… | Microsoft / Windows | Dec 10, 2024 | — | View → |
| CVE-2024-51378 | CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary… | CyberPersons / CyberPanel | Dec 4, 2024 | Ransomware | View → |