Vulnerabilities exploited in the wild
1,781 vulnerabilities that attackers have used in real attacks, as confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA). If you run an affected product, these come before everything else in your patch queue.
| Score | Vulnerability | Added | Federal deadline | Ransomware use |
|---|---|---|---|---|
| 8.8 High severity | Adobe Acrobat and Reader Unspecified CVE-2008-0655 | Jun 8, 2022 | Jun 22, 2022 | Not reported |
| 7.8 High severity | Adobe Acrobat and Reader Buffer Overflow CVE-2007-5659 | Jun 8, 2022 | Jun 22, 2022 | Not reported |
| 8.8 High severity | Microsoft Word Malformed Object Pointer CVE-2006-2492 | Jun 8, 2022 | Jun 22, 2022 | Not reported |
| 9.8 Critical severity | Atlassian Confluence Server and Data Center Remote Code Execution CVE-2022-26134 | Jun 2, 2022 | Jun 6, 2022 | Known |
| 8.8 High severity | Oracle Solaris Privilege Escalation CVE-2019-3010 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 8.8 High severity | Microsoft Windows Open Type Font Remote Code Execution CVE-2016-7256 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 7.8 High severity | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution CVE-2016-3393 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 8.8 High severity | Adobe Flash Player and AIR Integer Overflow CVE-2016-1010 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 8.8 High severity | Adobe Flash Player and AIR Use-After-Free CVE-2016-0984 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 8.8 High severity | Microsoft Silverlight Runtime Remote Code Execution CVE-2016-0034 | May 25, 2022 | Jun 15, 2022 | Known |
| 8.8 High severity | Adobe Flash Player Integer Overflow CVE-2015-8651 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 7.8 High severity | Microsoft Windows Kernel Privilege Escalation CVE-2015-6175 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 8.8 High severity | Mozilla Firefox Security Feature Bypass CVE-2015-4495 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 8.8 High severity | Microsoft Internet Explorer Memory Corruption CVE-2015-2425 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 7.2 High severity | Microsoft Win32k Privilege Escalation CVE-2015-2360 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 7.2 High severity | Microsoft Windows Mount Manager Privilege Escalation CVE-2015-1769 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 9.3 High severity | Microsoft Windows Remote Code Execution CVE-2015-1671 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 10.0 High severity | Adobe Flash Player ASLR Bypass CVE-2015-0310 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 6.5 Medium severity | Microsoft Internet Explorer ASLR Bypass CVE-2015-0071 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 7.8 High severity | Microsoft Windows TS WebProxy Directory Traversal CVE-2015-0016 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 10.0 High severity | Adobe Flash Player Dereferenced Pointer CVE-2014-8439 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 8.8 High severity | Microsoft Windows Remote Code Execution CVE-2014-4148 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 8.8 High severity | Microsoft Internet Explorer Privilege Escalation CVE-2014-4123 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 7.8 High severity | Microsoft IME Japanese Privilege Escalation CVE-2014-4077 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 7.8 High severity | Linux Kernel Privilege Escalation CVE-2014-3153 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 8.8 High severity | Microsoft Internet Explorer Privilege Escalation CVE-2014-2817 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 9.8 Critical severity | Adobe Reader and Acrobat Sandbox Bypass CVE-2014-0546 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 4.3 Medium severity | Microsoft Internet Explorer Information Disclosure CVE-2013-7331 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 3.5 Low severity | IBM InfoSphere BigInsights Invalid Input CVE-2013-3993 | May 25, 2022 | Jun 15, 2022 | Known |
| 5.5 Medium severity | Microsoft Silverlight Information Disclosure CVE-2013-3896 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 4.3 Medium severity | Oracle JRE Unspecified CVE-2013-2423 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 5.0 Medium severity | Oracle JRE Sandbox Bypass CVE-2013-0431 | May 25, 2022 | Jun 15, 2022 | Known |
| 10.0 High severity | Oracle JRE Remote Code Execution CVE-2013-0422 | May 25, 2022 | Jun 15, 2022 | Known |
| 7.8 High severity | Microsoft Silverlight Double Dereference CVE-2013-0074 | May 25, 2022 | Jun 15, 2022 | Known |
| 9.8 Critical severity | Oracle Fusion Middleware Unspecified CVE-2012-1710 | May 25, 2022 | Jun 15, 2022 | Known |
| 7.5 High severity | Red Hat JBoss Information Disclosure CVE-2010-1428 | May 25, 2022 | Jun 15, 2022 | Known |
| 9.8 Critical severity | Oracle JRE Unspecified CVE-2010-0840 | May 25, 2022 | Jun 15, 2022 | Not reported |
| 5.3 Medium severity | Red Hat JBoss Authentication Bypass CVE-2010-0738 | May 25, 2022 | Jun 15, 2022 | Known |
| 7.8 High severity | Microsoft Windows Kernel Privilege Escalation CVE-2018-8611 | May 24, 2022 | Jun 14, 2022 | Not reported |
| 6.1 Medium severity | QNAP NAS File Station Cross-Site Scripting CVE-2018-19953 | May 24, 2022 | Jun 14, 2022 | Known |
About this list
CISA adds a vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue only when there is reliable evidence of exploitation and a clear fix or mitigation. US federal agencies must remediate each entry by the deadline shown; everyone else can treat the list as a short, evidence-based set of must-patch issues.
A vulnerability missing from this list is not proof that it is safe. Many exploited flaws are never catalogued, which is why each of our CVE pages also shows the EPSS exploitation forecast.