Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2022-42827 | Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with… | Apple / iOS and iPadOS | Oct 25, 2022 | — | View → |
| CVE-2018-19320 | The GDrv low-level driver in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II exposes ring0 memcpy-like… | GIGABYTE / Multiple Products | Oct 24, 2022 | Ransomware | View → |
| CVE-2018-19321 | The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose… | GIGABYTE / Multiple Products | Oct 24, 2022 | Ransomware | View → |
| CVE-2018-19322 | The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose… | GIGABYTE / Multiple Products | Oct 24, 2022 | Ransomware | View → |
| CVE-2018-19323 | The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU expose… | GIGABYTE / Multiple Products | Oct 24, 2022 | Ransomware | View → |
| CVE-2020-3153 | Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials… | Cisco / AnyConnect Secure | Oct 24, 2022 | Ransomware | View → |
| CVE-2020-3433 | Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of… | Cisco / AnyConnect Secure | Oct 24, 2022 | Ransomware | View → |
| CVE-2021-3493 | The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user… | Linux / Kernel | Oct 20, 2022 | — | View → |
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any… | Synacor / Zimbra Collaboration Suite (ZCS) | Oct 20, 2022 | Ransomware | View → |
| CVE-2022-40684 | Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated… | Fortinet / Multiple Products | Oct 11, 2022 | Ransomware | View → |
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows COM+ Event System Service | Oct 11, 2022 | — | View → |
| CVE-2022-36804 | Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with… | Atlassian / Bitbucket Server and Data Center | Sep 30, 2022 | — | View → |
| CVE-2022-41040 | Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with… | Microsoft / Exchange Server | Sep 30, 2022 | Ransomware | View → |
| CVE-2022-41082 | Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed… | Microsoft / Exchange Server | Sep 30, 2022 | Ransomware | View → |
| CVE-2022-3236 | A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution. | Sophos / Firewall | Sep 23, 2022 | — | View → |
| CVE-2022-35405 | Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code… | Zoho / ManageEngine | Sep 22, 2022 | — | View → |
| CVE-2010-2568 | Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the… | Microsoft / Windows | Sep 15, 2022 | — | View → |
| CVE-2013-2094 | Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled… | Linux / Kernel | Sep 15, 2022 | — | View → |
| CVE-2013-2596 | Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation. | Linux / Kernel | Sep 15, 2022 | — | View → |
| CVE-2013-2597 | The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for… | Code Aurora / ACDB Audio Driver | Sep 15, 2022 | — | View → |