Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2024-43093 | Android Framework contains an unspecified vulnerability that allows for privilege escalation. | Android / Framework | Nov 7, 2024 | — | View → |
| CVE-2024-51567 | CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as… | CyberPersons / CyberPanel | Nov 7, 2024 | Ransomware | View → |
| CVE-2024-5910 | Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an… | Palo Alto Networks / Expedition | Nov 7, 2024 | — | View → |
| CVE-2024-8956 | PTZOptics PT30X-SDI/NDI cameras contain an insecure direct object reference (IDOR) vulnerability that allows a remote, attacker to bypass… | PTZOptics / PT30X-SDI/NDI Cameras | Nov 4, 2024 | — | View → |
| CVE-2024-8957 | PTZOptics PT30X-SDI/NDI cameras contain an OS command injection vulnerability that allows a remote, authenticated attacker to escalate… | PTZOptics / PT30X-SDI/NDI Cameras | Nov 4, 2024 | — | View → |
| CVE-2024-20481 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime… | Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Oct 24, 2024 | — | View → |
| CVE-2024-37383 | RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote… | Roundcube / Webmail | Oct 24, 2024 | — | View → |
| CVE-2024-47575 | Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker… | Fortinet / FortiManager | Oct 23, 2024 | — | View → |
| CVE-2024-38094 | Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. | Microsoft / SharePoint | Oct 22, 2024 | Ransomware | View → |
| CVE-2024-9537 | ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component. | ScienceLogic / SL1 | Oct 21, 2024 | — | View → |
| CVE-2024-40711 | Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution. | Veeam / Backup & Replication | Oct 17, 2024 | Ransomware | View → |
| CVE-2024-28987 | SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal… | SolarWinds / Web Help Desk | Oct 15, 2024 | — | View → |
| CVE-2024-30088 | Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege… | Microsoft / Windows | Oct 15, 2024 | Ransomware | View → |
| CVE-2024-9680 | Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the… | Mozilla / Firefox | Oct 15, 2024 | Ransomware | View → |
| CVE-2024-23113 | Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker… | Fortinet / Multiple Products | Oct 9, 2024 | — | View → |
| CVE-2024-9379 | Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which… | Ivanti / Cloud Services Appliance (CSA) | Oct 9, 2024 | — | View → |
| CVE-2024-9380 | Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an… | Ivanti / Cloud Services Appliance (CSA) | Oct 9, 2024 | — | View → |
| CVE-2024-43047 | Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services while maintaining memory maps… | Qualcomm / Multiple Chipsets | Oct 8, 2024 | — | View → |
| CVE-2024-43572 | Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution. | Microsoft / Windows | Oct 8, 2024 | — | View → |
| CVE-2024-43573 | Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality. | Microsoft / Windows | Oct 8, 2024 | — | View → |