Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2023-22518 | Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when… | Atlassian / Confluence Data Center and Server | Nov 7, 2023 | Ransomware | View → |
| CVE-2023-46604 | Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a… | Apache / ActiveMQ | Nov 2, 2023 | Ransomware | View → |
| CVE-2023-46747 | F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed… | F5 / BIG-IP Configuration Utility | Oct 31, 2023 | Ransomware | View → |
| CVE-2023-46748 | F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access… | F5 / BIG-IP Configuration Utility | Oct 31, 2023 | — | View → |
| CVE-2023-5631 | Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript… | Roundcube / Webmail | Oct 26, 2023 | — | View → |
| CVE-2023-20273 | Cisco IOS XE contains a command injection vulnerability in the web user interface. When chained with CVE-2023-20198, the attacker can… | Cisco / Cisco IOS XE Web UI | Oct 23, 2023 | — | View → |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when… | Citrix / NetScaler ADC and NetScaler Gateway | Oct 18, 2023 | Ransomware | View → |
| CVE-2023-20198 | Cisco IOS XE Web UI contains a privilege escalation vulnerability in the web user interface that could allow a remote, unauthenticated… | Cisco / IOS XE Web UI | Oct 16, 2023 | — | View → |
| CVE-2023-20109 | Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow… | Cisco / IOS and IOS XE | Oct 10, 2023 | — | View → |
| CVE-2023-21608 | Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user. | Adobe / Acrobat and Reader | Oct 10, 2023 | — | View → |
| CVE-2023-36563 | Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure. | Microsoft / WordPad | Oct 10, 2023 | — | View → |
| CVE-2023-41763 | Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Skype for Business | Oct 10, 2023 | — | View → |
| CVE-2023-44487 | HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). | IETF / HTTP/2 | Oct 10, 2023 | — | View → |
| CVE-2023-22515 | Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized… | Atlassian / Confluence Data Center and Server | Oct 5, 2023 | Ransomware | View → |
| CVE-2023-40044 | Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an… | Progress / WS_FTP Server | Oct 5, 2023 | Ransomware | View → |
| CVE-2023-42824 | Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation. | Apple / iOS and iPadOS | Oct 5, 2023 | — | View → |
| CVE-2023-28229 | Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker… | Microsoft / Windows CNG Key Isolation Service | Oct 4, 2023 | — | View → |
| CVE-2023-42793 | JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server. | JetBrains / TeamCity | Oct 4, 2023 | Ransomware | View → |
| CVE-2023-4211 | Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory… | Arm / Mali GPU Kernel Driver | Oct 3, 2023 | — | View → |
| CVE-2023-5217 | Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit… | Google / Chromium libvpx | Oct 2, 2023 | — | View → |