Vulnerabilities exploited in the wild
1,781 vulnerabilities that attackers have used in real attacks, as confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA). If you run an affected product, these come before everything else in your patch queue.
| Score | Vulnerability | Added | Federal deadline | Ransomware use |
|---|---|---|---|---|
| 9.8 Critical severity | Zyxel Multiple Firewalls Buffer Overflow CVE-2023-33009 | Jun 5, 2023 | Jun 26, 2023 | Not reported |
| 9.8 Critical severity | Progress MOVEit Transfer SQL Injection CVE-2023-34362 | Jun 2, 2023 | Jun 23, 2023 | Known |
| 9.8 Critical severity | Zyxel Multiple Firewalls OS Command Injection CVE-2023-28771 | May 31, 2023 | Jun 21, 2023 | Not reported |
| 9.8 Critical severity | Barracuda Networks ESG Appliance Improper Input Validation CVE-2023-2868 | May 26, 2023 | Jun 16, 2023 | Not reported |
| 8.6 High severity | Apple Multiple Products WebKit Sandbox Escape CVE-2023-32409 | May 22, 2023 | Jun 12, 2023 | Not reported |
| 8.8 High severity | Apple Multiple Products WebKit Use-After-Free CVE-2023-32373 | May 22, 2023 | Jun 12, 2023 | Not reported |
| 6.5 Medium severity | Apple Multiple Products WebKit Out-of-Bounds Read CVE-2023-28204 | May 22, 2023 | Jun 12, 2023 | Not reported |
| 4.4 Medium severity | Samsung Mobile Devices Insertion of Sensitive Information Into Log File CVE-2023-21492 | May 19, 2023 | Jun 9, 2023 | Not reported |
| 7.5 High severity | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure CVE-2016-6415 | May 19, 2023 | Jun 9, 2023 | Not reported |
| 5.9 Medium severity | Cisco IOS Denial-of-Service CVE-2004-1464 | May 19, 2023 | Jun 9, 2023 | Not reported |
| 9.8 Critical severity | Multiple Ruckus Wireless Products CSRF and RCE CVE-2023-25717 | May 12, 2023 | Jun 2, 2023 | Not reported |
| 7.8 High severity | Red Hat Polkit Incorrect Authorization CVE-2021-3560 | May 12, 2023 | Jun 2, 2023 | Not reported |
| 9.8 Critical severity | Apache Tomcat Remote Code Execution CVE-2016-8735 | May 12, 2023 | Jun 2, 2023 | Not reported |
| 9.8 Critical severity | Oracle Java SE and JRockit Unspecified CVE-2016-3427 | May 12, 2023 | Jun 2, 2023 | Not reported |
| 5.0 Medium severity | Jenkins User Interface (UI) Information Disclosure CVE-2015-5317 | May 12, 2023 | Jun 2, 2023 | Not reported |
| 6.9 Medium severity | Linux Kernel Race Condition CVE-2014-0196 | May 12, 2023 | Jun 2, 2023 | Not reported |
| 7.8 High severity | Linux Kernel Improper Input Validation CVE-2010-3904 | May 12, 2023 | Jun 2, 2023 | Not reported |
| 7.8 High severity | Microsoft Win32K Privilege Escalation CVE-2023-29336 | May 9, 2023 | May 30, 2023 | Not reported |
| 7.5 High severity | Oracle WebLogic Server Unspecified CVE-2023-21839 | May 1, 2023 | May 22, 2023 | Not reported |
| 8.8 High severity | TP-Link Archer AX-21 Command Injection CVE-2023-1389 | May 1, 2023 | May 22, 2023 | Not reported |
| 9.0 Critical severity | Apache Log4j2 Deserialization of Untrusted Data CVE-2021-45046 | May 1, 2023 | May 22, 2023 | Known |
| 7.5 High severity | MinIO Information Disclosure CVE-2023-28432 | Apr 21, 2023 | May 12, 2023 | Not reported |
| 9.8 Critical severity | PaperCut MF/NG Improper Access Control CVE-2023-27350 | Apr 21, 2023 | May 12, 2023 | Known |
| 9.6 Critical severity | Google Chrome Skia Integer Overflow CVE-2023-2136 | Apr 21, 2023 | May 12, 2023 | Not reported |
| 8.8 High severity | Cisco IOS and IOS XE Software SNMP Remote Code Execution CVE-2017-6742 | Apr 19, 2023 | May 10, 2023 | Not reported |
| 8.8 High severity | Google Chromium V8 Type Confusion CVE-2023-2033 | Apr 17, 2023 | May 8, 2023 | Not reported |
| 7.8 High severity | Apple macOS Use-After-Free CVE-2019-8526 | Apr 17, 2023 | May 8, 2023 | Not reported |
| 9.8 Critical severity | Novi Survey Insecure Deserialization CVE-2023-29492 | Apr 13, 2023 | May 4, 2023 | Not reported |
| 7.8 High severity | Android Framework Privilege Escalation CVE-2023-20963 | Apr 13, 2023 | May 4, 2023 | Not reported |
| 7.8 High severity | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation CVE-2023-28252 | Apr 11, 2023 | May 2, 2023 | Known |
| 8.6 High severity | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write CVE-2023-28206 | Apr 10, 2023 | May 1, 2023 | Not reported |
| 8.8 High severity | Apple Multiple Products WebKit Use-After-Free CVE-2023-28205 | Apr 10, 2023 | May 1, 2023 | Not reported |
| 3.3 Low severity | Arm Mali GPU Kernel Driver Information Disclosure CVE-2023-26083 | Apr 7, 2023 | Apr 28, 2023 | Not reported |
| 8.8 High severity | Veritas Backup Exec Agent Command Execution CVE-2021-27878 | Apr 7, 2023 | Apr 28, 2023 | Known |
| 9.8 Critical severity | Veritas Backup Exec Agent Improper Authentication CVE-2021-27877 | Apr 7, 2023 | Apr 28, 2023 | Known |
| 8.1 High severity | Veritas Backup Exec Agent File Access CVE-2021-27876 | Apr 7, 2023 | Apr 28, 2023 | Known |
| 7.8 High severity | Microsoft Windows Certificate Dialog Privilege Escalation CVE-2019-1388 | Apr 7, 2023 | Apr 28, 2023 | Known |
| 6.1 Medium severity | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) CVE-2022-27926 | Apr 3, 2023 | Apr 24, 2023 | Not reported |
| 7.0 High severity | Linux Kernel Use-After-Free CVE-2023-0266 | Mar 30, 2023 | Apr 20, 2023 | Not reported |
| 9.8 Critical severity | Fortra Cobalt Strike User Interface Remote Code Execution CVE-2022-42948 | Mar 30, 2023 | Apr 20, 2023 | Not reported |
About this list
CISA adds a vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue only when there is reliable evidence of exploitation and a clear fix or mitigation. US federal agencies must remediate each entry by the deadline shown; everyone else can treat the list as a short, evidence-based set of must-patch issues.
A vulnerability missing from this list is not proof that it is safe. Many exploited flaws are never catalogued, which is why each of our CVE pages also shows the EPSS exploitation forecast.