Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2013-6282 | The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms.… | Linux / Kernel | Sep 15, 2022 | — | View → |
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote… | Trend Micro / Apex One and Apex One as a Service | Sep 15, 2022 | — | View → |
| CVE-2022-32917 | Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to… | Apple / iOS, iPadOS, and macOS | Sep 14, 2022 | — | View → |
| CVE-2022-37969 | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Sep 14, 2022 | Ransomware | View → |
| CVE-2011-1823 | The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and… | Android / Android OS | Sep 8, 2022 | — | View → |
| CVE-2011-4723 | The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information. | D-Link / DIR-300 Router | Sep 8, 2022 | — | View → |
| CVE-2017-5521 | Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server. | NETGEAR / Multiple Devices | Sep 8, 2022 | — | View → |
| CVE-2018-13374 | Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login… | Fortinet / FortiOS and FortiADC | Sep 8, 2022 | Ransomware | View → |
| CVE-2018-2628 | Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to… | Oracle / WebLogic Server | Sep 8, 2022 | — | View → |
| CVE-2018-6530 | Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands. | D-Link / Multiple Routers | Sep 8, 2022 | Ransomware | View → |
| CVE-2018-7445 | In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access… | MikroTik / RouterOS | Sep 8, 2022 | — | View → |
| CVE-2020-9934 | Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view… | Apple / iOS, iPadOS, and macOS | Sep 8, 2022 | — | View → |
| CVE-2022-26258 | D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution. | D-Link / DIR-820L | Sep 8, 2022 | — | View → |
| CVE-2022-27593 | Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which… | QNAP / Photo Station | Sep 8, 2022 | Ransomware | View → |
| CVE-2022-3075 | Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the… | Google / Chromium Mojo | Sep 8, 2022 | — | View → |
| CVE-2020-28949 | PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and… | PEAR / Archive_Tar | Aug 25, 2022 | — | View → |
| CVE-2020-36193 | PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for… | PEAR / Archive_Tar | Aug 25, 2022 | — | View → |
| CVE-2021-31010 | In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions. | Apple / iOS, macOS, watchOS | Aug 25, 2022 | — | View → |
| CVE-2021-38406 | Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation)… | Delta Electronics / DOPSoft 2 | Aug 25, 2022 | — | View → |
| CVE-2021-39226 | Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all… | Grafana Labs / Grafana | Aug 25, 2022 | — | View → |