Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2021-44026 | Roundcube Webmail is vulnerable to SQL injection via search or search_params. | Roundcube / Roundcube Webmail | Jun 22, 2023 | — | View → |
| CVE-2023-20887 | VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious… | VMware / Aria Operations for Networks | Jun 22, 2023 | — | View → |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote… | Fortinet / FortiOS and FortiProxy SSL-VPN | Jun 13, 2023 | Ransomware | View → |
| CVE-2023-3079 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via… | Google / Chromium V8 | Jun 7, 2023 | — | View → |
| CVE-2023-33009 | Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the… | Zyxel / Multiple Firewalls | Jun 5, 2023 | — | View → |
| CVE-2023-33010 | Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the ID… | Zyxel / Multiple Firewalls | Jun 5, 2023 | — | View → |
| CVE-2023-34362 | Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access… | Progress / MOVEit Transfer | Jun 2, 2023 | Ransomware | View → |
| CVE-2023-28771 | Zyxel ATP, USG FLEX, VPN, and ZyWALL/USG firewalls allow for improper error message handling which could allow an unauthenticated attacker… | Zyxel / Multiple Firewalls | May 31, 2023 | — | View → |
| CVE-2023-2868 | Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading… | Barracuda Networks / Email Security Gateway (ESG) Appliance | May 26, 2023 | — | View → |
| CVE-2023-28204 | Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive… | Apple / Multiple Products | May 22, 2023 | — | View → |
| CVE-2023-32373 | Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when… | Apple / Multiple Products | May 22, 2023 | — | View → |
| CVE-2023-32409 | Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break… | Apple / Multiple Products | May 22, 2023 | — | View → |
| CVE-2004-1464 | Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and… | Cisco / IOS | May 19, 2023 | — | View → |
| CVE-2016-6415 | Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1… | Cisco / IOS, IOS XR, and IOS XE | May 19, 2023 | — | View → |
| CVE-2023-21492 | Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that… | Samsung / Mobile Devices | May 19, 2023 | — | View → |
| CVE-2010-3904 | Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that… | Linux / Kernel | May 12, 2023 | — | View → |
| CVE-2014-0196 | Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service… | Linux / Kernel | May 12, 2023 | — | View → |
| CVE-2015-5317 | Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds… | Jenkins / Jenkins User Interface (UI) | May 12, 2023 | — | View → |
| CVE-2016-3427 | Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and… | Oracle / Java SE and JRockit | May 12, 2023 | — | View → |
| CVE-2016-8735 | Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an… | Apache / Tomcat | May 12, 2023 | — | View → |