Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2023-38831 | RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file… | RARLAB / WinRAR | Aug 24, 2023 | Ransomware | View → |
| CVE-2023-27532 | Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an… | Veeam / Backup & Replication | Aug 22, 2023 | Ransomware | View → |
| CVE-2023-38035 | Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass… | Ivanti / Sentry | Aug 22, 2023 | Ransomware | View → |
| CVE-2023-26359 | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the… | Adobe / ColdFusion | Aug 21, 2023 | — | View → |
| CVE-2023-24489 | Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely… | Citrix / Content Collaboration | Aug 16, 2023 | — | View → |
| CVE-2023-38180 | Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS). | Microsoft / .NET Core and Visual Studio | Aug 9, 2023 | — | View → |
| CVE-2017-18368 | Zyxel P660HN-T1A routers contain a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an… | Zyxel / P660HN-T1A Routers | Aug 7, 2023 | — | View → |
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform… | Ivanti / Endpoint Manager Mobile (EPMM) | Jul 31, 2023 | — | View → |
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data. | Synacor / Zimbra Collaboration Suite (ZCS) | Jul 27, 2023 | — | View → |
| CVE-2023-38606 | Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state. | Apple / Multiple Products | Jul 26, 2023 | — | View → |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows… | Ivanti / Endpoint Manager Mobile (EPMM) | Jul 25, 2023 | Ransomware | View → |
| CVE-2023-29298 | Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. | Adobe / ColdFusion | Jul 20, 2023 | — | View → |
| CVE-2023-38205 | Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. | Adobe / ColdFusion | Jul 20, 2023 | — | View → |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution. | Citrix / NetScaler ADC and NetScaler Gateway | Jul 19, 2023 | Ransomware | View → |
| CVE-2023-36884 | Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a… | Microsoft / Windows | Jul 17, 2023 | Ransomware | View → |
| CVE-2022-29303 | SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of… | SolarView / Compact | Jul 13, 2023 | — | View → |
| CVE-2023-37450 | Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously… | Apple / Multiple Products | Jul 13, 2023 | — | View → |
| CVE-2022-31199 | Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an… | Netwrix / Auditor | Jul 11, 2023 | Ransomware | View → |
| CVE-2023-32046 | Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Jul 11, 2023 | — | View → |
| CVE-2023-32049 | Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File -… | Microsoft / Windows | Jul 11, 2023 | — | View → |