Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2022-35914 | Teclib GLPI contains a remote code execution vulnerability in the third-party library, htmlawed. | Teclib / GLPI | Mar 7, 2023 | — | View → |
| CVE-2022-36537 | ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file… | ZK Framework / AuUploader | Feb 27, 2023 | Ransomware | View → |
| CVE-2022-40765 | The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands… | Mitel / MiVoice Connect | Feb 21, 2023 | Ransomware | View → |
| CVE-2022-41223 | The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the… | Mitel / MiVoice Connect | Feb 21, 2023 | Ransomware | View → |
| CVE-2022-47986 | IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw. | IBM / Aspera Faspex | Feb 21, 2023 | Ransomware | View → |
| CVE-2022-46169 | Cacti contains a command injection vulnerability that allows an unauthenticated user to execute code. | Cacti / Cacti | Feb 16, 2023 | — | View → |
| CVE-2023-21715 | Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted… | Microsoft / Office | Feb 14, 2023 | — | View → |
| CVE-2023-21823 | Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Feb 14, 2023 | — | View → |
| CVE-2023-23376 | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Feb 14, 2023 | Ransomware | View → |
| CVE-2023-23529 | Apple iOS, MacOS, Safari and iPadOS WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously… | Apple / Multiple Products | Feb 14, 2023 | — | View → |
| CVE-2015-2291 | Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a… | Intel / Ethernet Diagnostics Driver for Windows | Feb 10, 2023 | Ransomware | View → |
| CVE-2022-24990 | TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target… | TerraMaster / TerraMaster OS | Feb 10, 2023 | Ransomware | View → |
| CVE-2023-0669 | Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response… | Fortra / GoAnywhere MFT | Feb 10, 2023 | Ransomware | View → |
| CVE-2022-21587 | Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to… | Oracle / E-Business Suite | Feb 2, 2023 | Ransomware | View → |
| CVE-2023-22952 | Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom… | SugarCRM / Multiple Products | Feb 2, 2023 | — | View → |
| CVE-2017-11357 | Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads… | Telerik / User Interface (UI) for ASP.NET AJAX | Jan 26, 2023 | Ransomware | View → |
| CVE-2022-47966 | Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated… | Zoho / ManageEngine | Jan 23, 2023 | Ransomware | View → |
| CVE-2022-44877 | CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute… | CWP / Control Web Panel | Jan 17, 2023 | — | View → |
| CVE-2022-41080 | Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with… | Microsoft / Exchange Server | Jan 10, 2023 | Ransomware | View → |
| CVE-2023-21674 | Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Jan 10, 2023 | — | View → |