Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2018-14667 | Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote,… | Red Hat / JBoss RichFaces Framework | Sep 28, 2023 | — | View → |
| CVE-2023-41991 | Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass… | Apple / Multiple Products | Sep 25, 2023 | — | View → |
| CVE-2023-41992 | Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation. | Apple / Multiple Products | Sep 25, 2023 | — | View → |
| CVE-2023-41993 | Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously… | Apple / Multiple Products | Sep 25, 2023 | — | View → |
| CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that… | Trend Micro / Apex One and Worry-Free Business Security | Sep 21, 2023 | — | View → |
| CVE-2023-28434 | MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name… | MinIO / MinIO | Sep 19, 2023 | — | View → |
| CVE-2014-8361 | Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute… | Realtek / SDK | Sep 18, 2023 | — | View → |
| CVE-2017-6884 | Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A… | Zyxel / EMG2926 Routers | Sep 18, 2023 | Ransomware | View → |
| CVE-2021-3129 | Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to… | Laravel / Ignition | Sep 18, 2023 | Ransomware | View → |
| CVE-2022-22265 | Samsung devices with selected Exynos chipsets contain a use-after-free vulnerability that allows malicious memory write and code execution. | Samsung / Mobile Devices | Sep 18, 2023 | — | View → |
| CVE-2023-26369 | Adobe Acrobat and Reader contains an out-of-bounds write vulnerability that allows for code execution. | Adobe / Acrobat and Reader | Sep 14, 2023 | — | View → |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an… | Cisco / Adaptive Security Appliance and Firepower Threat Defense | Sep 13, 2023 | Ransomware | View → |
| CVE-2023-35674 | Android Framework contains an unspecified vulnerability that allows for privilege escalation. | Android / Framework | Sep 13, 2023 | — | View → |
| CVE-2023-4863 | Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory… | Google / Chromium WebP | Sep 13, 2023 | — | View → |
| CVE-2023-36761 | Microsoft Word contains an unspecified vulnerability that allows for information disclosure. | Microsoft / Word | Sep 12, 2023 | — | View → |
| CVE-2023-36802 | Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Streaming Service Proxy | Sep 12, 2023 | — | View → |
| CVE-2023-41061 | Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously… | Apple / iOS, iPadOS, and watchOS | Sep 11, 2023 | — | View → |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may… | Apple / iOS, iPadOS, and macOS | Sep 11, 2023 | — | View → |
| CVE-2023-33246 | Several components of Apache RocketMQ, including NameServer, Broker, and Controller, are exposed to the extranet and lack permission… | Apache / RocketMQ | Sep 6, 2023 | — | View → |
| CVE-2023-32315 | Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the… | Ignite Realtime / Openfire | Aug 24, 2023 | — | View → |