Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2018-18809 | TIBCO JasperReports Library contains a directory-traversal vulnerability that may allow web server users to access contents of the host… | TIBCO / JasperReports | Dec 29, 2022 | — | View → |
| CVE-2018-5430 | TIBCO JasperReports Server contain a vulnerability which may allow any authenticated user read-only access to the contents of the web… | TIBCO / JasperReports | Dec 29, 2022 | — | View → |
| CVE-2022-42856 | Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution. | Apple / iOS | Dec 14, 2022 | — | View → |
| CVE-2022-26500 | The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A… | Veeam / Backup & Replication | Dec 13, 2022 | Ransomware | View → |
| CVE-2022-26501 | The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A… | Veeam / Backup & Replication | Dec 13, 2022 | Ransomware | View → |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication… | Citrix / Application Delivery Controller (ADC) and Gateway | Dec 13, 2022 | — | View → |
| CVE-2022-42475 | Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated,… | Fortinet / FortiOS | Dec 13, 2022 | Ransomware | View → |
| CVE-2022-44698 | Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web… | Microsoft / Defender | Dec 13, 2022 | Ransomware | View → |
| CVE-2022-4262 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via… | Google / Chromium V8 | Dec 5, 2022 | — | View → |
| CVE-2021-35587 | Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager… | Oracle / Fusion Middleware | Nov 28, 2022 | — | View → |
| CVE-2022-4135 | Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process,… | Google / Chromium GPU | Nov 28, 2022 | — | View → |
| CVE-2022-41049 | Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and… | Microsoft / Windows | Nov 14, 2022 | — | View → |
| CVE-2021-25337 | Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read… | Samsung / Mobile Devices | Nov 8, 2022 | — | View → |
| CVE-2021-25369 | Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability… | Samsung / Mobile Devices | Nov 8, 2022 | — | View → |
| CVE-2021-25370 | Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect… | Samsung / Mobile Devices | Nov 8, 2022 | — | View → |
| CVE-2022-41073 | Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges. | Microsoft / Windows | Nov 8, 2022 | Ransomware | View → |
| CVE-2022-41091 | Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and… | Microsoft / Windows | Nov 8, 2022 | Ransomware | View → |
| CVE-2022-41125 | Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker… | Microsoft / Windows | Nov 8, 2022 | — | View → |
| CVE-2022-41128 | Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution. | Microsoft / Windows | Nov 8, 2022 | — | View → |
| CVE-2022-3723 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via… | Google / Chromium V8 | Oct 28, 2022 | — | View → |