Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2024-38226 | Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to… | Microsoft / Publisher | Sep 10, 2024 | — | View → |
| CVE-2016-3714 | ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT… | ImageMagick / ImageMagick | Sep 9, 2024 | — | View → |
| CVE-2017-1000253 | Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a… | Linux / Kernel | Sep 9, 2024 | Ransomware | View → |
| CVE-2024-40766 | SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain… | SonicWall / SonicOS | Sep 9, 2024 | Ransomware | View → |
| CVE-2021-20123 | Draytek VigorConnect contains a path traversal vulnerability in the DownloadFileServlet endpoint. An unauthenticated attacker could… | DrayTek / VigorConnect | Sep 3, 2024 | — | View → |
| CVE-2021-20124 | Draytek VigorConnect contains a path traversal vulnerability in the file download functionality of the WebServlet endpoint. An… | DrayTek / VigorConnect | Sep 3, 2024 | — | View → |
| CVE-2024-7262 | Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an… | Kingsoft / WPS Office | Sep 3, 2024 | — | View → |
| CVE-2024-7965 | Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap… | Google / Chromium V8 | Aug 28, 2024 | — | View → |
| CVE-2024-38856 | Apache OFBiz contains an incorrect authorization vulnerability that could allow remote code execution via a Groovy payload in the context… | Apache / OFBiz | Aug 27, 2024 | — | View → |
| CVE-2024-7971 | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML… | Google / Chromium V8 | Aug 26, 2024 | — | View → |
| CVE-2024-39717 | The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with… | Versa / Director | Aug 23, 2024 | — | View → |
| CVE-2021-31196 | Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution. | Microsoft / Exchange Server | Aug 21, 2024 | — | View → |
| CVE-2021-33044 | Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by… | Dahua / IP Camera Firmware | Aug 21, 2024 | — | View → |
| CVE-2021-33045 | Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client… | Dahua / IP Camera Firmware | Aug 21, 2024 | — | View → |
| CVE-2022-0185 | Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context… | Linux / Kernel | Aug 21, 2024 | — | View → |
| CVE-2024-23897 | Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files,… | Jenkins / Jenkins Command Line Interface (CLI) | Aug 19, 2024 | Ransomware | View → |
| CVE-2024-28986 | SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution. | SolarWinds / Web Help Desk | Aug 15, 2024 | — | View → |
| CVE-2024-38106 | Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain… | Microsoft / Windows | Aug 13, 2024 | — | View → |
| CVE-2024-38107 | Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a… | Microsoft / Windows | Aug 13, 2024 | — | View → |
| CVE-2024-38178 | Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code… | Microsoft / Windows | Aug 13, 2024 | — | View → |