Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).
34exploited in the last 30 days
13critical (CVSS ≥ 9)
0used in ransomware
1768in the KEV catalog
CVE-2016-3351Severity under analysisRansomwareadded on 05/24/2022
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
Microsoft · Internet Explorer and Edge · CWE-200
An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.
CVE-2020-0638Severity under analysisRansomwareadded on 05/23/2022
Microsoft Update Notification Manager Privilege Escalation Vulnerability
Microsoft · Update Notification Manager
Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.
CVE-2019-1385Severity under analysisRansomwareadded on 05/23/2022
Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
Microsoft · Windows · CWE-59
A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.
CVE-2019-1130Severity under analysisRansomwareadded on 05/23/2022
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
Microsoft · Windows · CWE-59
A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.
CVE-2022-1388Severity under analysisRansomwareadded on 05/10/2022
F5 BIG-IP Missing Authentication Vulnerability
F5 · BIG-IP · CWE-306
F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.
CVE-2022-29464Severity under analysisRansomwareadded on 04/25/2022
WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
WSO2 · Multiple Products · CWE-22
Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.
CVE-2018-6882Severity under analysisRansomwareadded on 04/19/2022
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS) · CWE-79
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML.
CVE-2019-16057Severity under analysisRansomwareadded on 04/15/2022
The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution.
CVE-2022-22954Severity under analysisRansomwareadded on 04/14/2022
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
VMware · Workspace ONE Access and Identity Manager · CWE-94
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
CVE-2022-24521Severity under analysisRansomwareadded on 04/13/2022
Microsoft Windows CLFS Driver Privilege Escalation Vulnerability
Microsoft · Windows · CWE-787, CWE-1285
Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.
CVE-2018-7602Severity under analysisRansomwareadded on 04/13/2022
Drupal Core Remote Code Execution Vulnerability
Drupal · Core
A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.
CVE-2018-20753Severity under analysisRansomwareadded on 04/13/2022
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.
CVE-2021-38646Severity under analysisRansomwareadded on 03/28/2022
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft · Office
Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.
CVE-2021-26085Severity under analysisRansomwareadded on 03/28/2022
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
Atlassian · Confluence Server · CWE-425
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.
CVE-2021-20028Severity under analysisRansomwareadded on 03/28/2022
Bit is an AI and can make mistakes. Do not share passwords or personal data. Conversations are not stored. Learn more
Your privacy matters
We use essential cookies to make the site work and, with your permission, Google cookies to measure traffic and show ads — including personalized ones — that keep the tools free. You can change your choice at any time under “Cookie preferences” in the footer. Learn more.
