Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2021-27878 | Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol… | Veritas / Backup Exec Agent | Apr 7, 2023 | Ransomware | View → |
| CVE-2023-26083 | Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing… | Arm / Mali Graphics Processing Unit (GPU) | Apr 7, 2023 | — | View → |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters… | Synacor / Zimbra Collaboration Suite (ZCS) | Apr 3, 2023 | — | View → |
| CVE-2013-3163 | Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of… | Microsoft / Internet Explorer | Mar 30, 2023 | — | View → |
| CVE-2017-7494 | Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then… | Samba / Samba | Mar 30, 2023 | Ransomware | View → |
| CVE-2021-30900 | Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application… | Apple / iOS, iPadOS, and macOS | Mar 30, 2023 | — | View → |
| CVE-2022-22706 | Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only… | Arm / Mali Graphics Processing Unit (GPU) | Mar 30, 2023 | — | View → |
| CVE-2022-3038 | Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap… | Google / Chromium Network Service | Mar 30, 2023 | — | View → |
| CVE-2022-38181 | Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or… | Arm / Mali Graphics Processing Unit (GPU) | Mar 30, 2023 | — | View → |
| CVE-2022-39197 | Fortra Cobalt Strike contains a cross-site scripting (XSS) vulnerability in Teamserver that would allow an attacker to set a malformed… | Fortra / Cobalt Strike | Mar 30, 2023 | — | View → |
| CVE-2022-42948 | Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution. | Fortra / Cobalt Strike | Mar 30, 2023 | — | View → |
| CVE-2023-0266 | Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user. | Linux / Kernel | Mar 30, 2023 | — | View → |
| CVE-2023-26360 | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution. | Adobe / ColdFusion | Mar 15, 2023 | — | View → |
| CVE-2022-41328 | Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted… | Fortinet / FortiOS | Mar 14, 2023 | — | View → |
| CVE-2023-23397 | Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to… | Microsoft / Office | Mar 14, 2023 | — | View → |
| CVE-2023-24880 | Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web… | Microsoft / Windows | Mar 14, 2023 | Ransomware | View → |
| CVE-2020-5741 | Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex… | Plex / Media Server | Mar 10, 2023 | — | View → |
| CVE-2021-39144 | XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or… | XStream / XStream | Mar 10, 2023 | — | View → |
| CVE-2022-28810 | Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password… | Zoho / ManageEngine | Mar 7, 2023 | — | View → |
| CVE-2022-33891 | Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled. | Apache / Spark | Mar 7, 2023 | — | View → |