Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2023-35311 | Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice… | Microsoft / Outlook | Jul 11, 2023 | — | View → |
| CVE-2023-36874 | Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Jul 11, 2023 | — | View → |
| CVE-2021-29256 | Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or… | Arm / Mali Graphics Processing Unit (GPU) | Jul 7, 2023 | — | View → |
| CVE-2019-17621 | D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an… | D-Link / DIR-859 Router | Jun 29, 2023 | — | View → |
| CVE-2019-20500 | D-Link DWL-2600AP access point contains an authenticated command injection vulnerability via the Save Configuration functionality in the… | D-Link / DWL-2600AP Access Point | Jun 29, 2023 | — | View → |
| CVE-2021-25371 | Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP. | Samsung / Mobile Devices | Jun 29, 2023 | — | View → |
| CVE-2021-25372 | Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access. | Samsung / Mobile Devices | Jun 29, 2023 | — | View → |
| CVE-2021-25394 | Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a… | Samsung / Mobile Devices | Jun 29, 2023 | — | View → |
| CVE-2021-25395 | Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a… | Samsung / Mobile Devices | Jun 29, 2023 | — | View → |
| CVE-2021-25487 | Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of… | Samsung / Mobile Devices | Jun 29, 2023 | — | View → |
| CVE-2021-25489 | Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format… | Samsung / Mobile Devices | Jun 29, 2023 | — | View → |
| CVE-2023-20867 | VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to… | VMware / Tools | Jun 23, 2023 | — | View → |
| CVE-2023-27992 | Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an… | Zyxel / Multiple Network-Attached Storage (NAS) Devices | Jun 23, 2023 | — | View → |
| CVE-2023-32434 | Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with… | Apple / Multiple Products | Jun 23, 2023 | — | View → |
| CVE-2023-32435 | Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing… | Apple / Multiple Products | Jun 23, 2023 | — | View → |
| CVE-2023-32439 | Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing… | Apple / Multiple Products | Jun 23, 2023 | — | View → |
| CVE-2016-0165 | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Win32k | Jun 22, 2023 | — | View → |
| CVE-2016-9079 | Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser… | Mozilla / Firefox, Firefox ESR, and Thunderbird | Jun 22, 2023 | — | View → |
| CVE-2020-12641 | Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a… | Roundcube / Roundcube Webmail | Jun 22, 2023 | — | View → |
| CVE-2020-35730 | Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with… | Roundcube / Roundcube Webmail | Jun 22, 2023 | — | View → |