Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2020-13965 | Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML… | Roundcube / Webmail | Jun 26, 2024 | — | View → |
| CVE-2022-24816 | OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided… | OSGeo / JAI-EXT | Jun 26, 2024 | — | View → |
| CVE-2022-2586 | Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges. | Linux / Kernel | Jun 26, 2024 | — | View → |
| CVE-2024-26169 | Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user… | Microsoft / Windows | Jun 13, 2024 | Ransomware | View → |
| CVE-2024-32896 | Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation. | Android / Pixel | Jun 13, 2024 | — | View → |
| CVE-2024-4358 | Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized… | Progress / Telerik Report Server | Jun 13, 2024 | — | View → |
| CVE-2024-4577 | PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code… | PHP Group / PHP | Jun 12, 2024 | Ransomware | View → |
| CVE-2024-4610 | Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make… | Arm / Mali GPU Kernel Driver | Jun 12, 2024 | — | View → |
| CVE-2017-3506 | Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an… | Oracle / WebLogic Server | Jun 3, 2024 | — | View → |
| CVE-2024-1086 | Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local… | Linux / Kernel | May 30, 2024 | Ransomware | View → |
| CVE-2024-24919 | Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an… | Check Point / Quantum Security Gateways | May 30, 2024 | Ransomware | View → |
| CVE-2024-4978 | Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256:… | Justice AV Solutions / Viewer | May 29, 2024 | — | View → |
| CVE-2024-5274 | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This… | Google / Chromium V8 | May 28, 2024 | — | View → |
| CVE-2020-17519 | Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the… | Apache / Flink | May 23, 2024 | — | View → |
| CVE-2023-43208 | NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code… | NextGen Healthcare / Mirth Connect | May 20, 2024 | Ransomware | View → |
| CVE-2024-4947 | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. | Google / Chromium V8 | May 20, 2024 | — | View → |
| CVE-2014-100005 | D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations… | D-Link / DIR-600 Router | May 16, 2024 | — | View → |
| CVE-2021-40655 | D-Link DIR-605 routers contain an information disclosure vulnerability that allows attackers to obtain a username and password by forging… | D-Link / DIR-605 Router | May 16, 2024 | — | View → |
| CVE-2024-4761 | Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability… | Google / Chromium V8 | May 16, 2024 | — | View → |
| CVE-2024-30040 | Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass. | Microsoft / Windows | May 14, 2024 | — | View → |