Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2021-36380 | Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the… | Sunhillo / SureLine | Mar 5, 2024 | — | View → |
| CVE-2023-21237 | Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to… | Android / Pixel | Mar 5, 2024 | — | View → |
| CVE-2024-21338 | Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output… | Microsoft / Windows | Mar 4, 2024 | Ransomware | View → |
| CVE-2023-29360 | Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local… | Microsoft / Streaming Service | Feb 29, 2024 | — | View → |
| CVE-2024-1709 | ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management… | ConnectWise / ScreenConnect | Feb 22, 2024 | Ransomware | View → |
| CVE-2020-3259 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker… | Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Feb 15, 2024 | Ransomware | View → |
| CVE-2024-21410 | Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Exchange Server | Feb 15, 2024 | — | View → |
| CVE-2024-21351 | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user… | Microsoft / Windows | Feb 13, 2024 | — | View → |
| CVE-2024-21412 | Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass. | Microsoft / Windows | Feb 13, 2024 | Ransomware | View → |
| CVE-2023-43770 | Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious… | Roundcube / Webmail | Feb 12, 2024 | — | View → |
| CVE-2024-21762 | Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands… | Fortinet / FortiOS | Feb 9, 2024 | Ransomware | View → |
| CVE-2023-4762 | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This… | Google / Chromium V8 | Feb 6, 2024 | — | View → |
| CVE-2022-48618 | Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an… | Apple / Multiple Products | Jan 31, 2024 | — | View → |
| CVE-2024-21893 | Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side… | Ivanti / Connect Secure, Policy Secure, and Neurons | Jan 31, 2024 | Ransomware | View → |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code… | Atlassian / Confluence Data Center and Server | Jan 24, 2024 | Ransomware | View → |
| CVE-2024-23222 | Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing… | Apple / Multiple Products | Jan 23, 2024 | — | View → |
| CVE-2023-34048 | VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker… | VMware / vCenter Server | Jan 22, 2024 | — | View → |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to… | Ivanti / Endpoint Manager Mobile (EPMM) and MobileIron Core | Jan 18, 2024 | Ransomware | View → |
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on… | Citrix / NetScaler ADC and NetScaler Gateway | Jan 17, 2024 | — | View → |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as… | Citrix / NetScaler ADC and NetScaler Gateway | Jan 17, 2024 | — | View → |