Vulnerabilities exploited in the wild
1,781 vulnerabilities that attackers have used in real attacks, as confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA). If you run an affected product, these come before everything else in your patch queue.
| Score | Vulnerability | Added | Federal deadline | Ransomware use |
|---|---|---|---|---|
| 9.8 Critical severity | Quest KACE System Management Appliance Remote Command Execution CVE-2018-11138 | Mar 25, 2022 | Apr 15, 2022 | Known |
| 9.8 Critical severity | Cisco Secure Access Control System Java Deserialization CVE-2018-0147 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | Cisco VPN Routers Remote Code Execution CVE-2018-0125 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 8.8 High severity | NETGEAR DGN2200 Devices OS Command Injection CVE-2017-6334 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | Citrix Multiple Products Remote Code Execution CVE-2017-6316 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | Cisco IOS and IOS XE Remote Code Execution CVE-2017-3881 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 8.1 High severity | Apache Tomcat Remote Code Execution CVE-2017-12617 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 8.1 High severity | Apache Tomcat on Windows Remote Code Execution CVE-2017-12615 | Mar 25, 2022 | Apr 15, 2022 | Known |
| 8.8 High severity | Microsoft Windows SMB Remote Code Execution CVE-2017-0146 | Mar 25, 2022 | Apr 15, 2022 | Known |
| 8.8 High severity | Adobe Flash Player Use-After-Free CVE-2016-7892 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | Adobe Flash Player Remote Code Execution CVE-2016-4171 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | NETGEAR Multiple WAP Devices Command Injection CVE-2016-1555 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 7.2 High severity | D-Link DCS-930L Devices OS Command Injection CVE-2016-11021 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | NETGEAR WNR2000v5 Router Buffer Overflow CVE-2016-10174 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 7.5 High severity | Ruby on Rails Directory Traversal CVE-2016-0752 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.1 Critical severity | Arcserve Unified Data Protection (UDP) Directory Traversal CVE-2015-4068 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 7.5 High severity | TP-Link Multiple Archer Devices Directory Traversal CVE-2015-3035 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | Elasticsearch Groovy Scripting Engine Remote Code Execution CVE-2015-1427 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | D-Link and TRENDnet Multiple Devices Remote Code Execution CVE-2015-1187 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 7.8 High severity | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal CVE-2015-0666 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.3 High severity | Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution CVE-2014-6332 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.0 High severity | Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation CVE-2014-6324 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | Rejetto HTTP File Server (HFS) Remote Code Execution CVE-2014-6287 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 8.1 High severity | Elasticsearch Remote Code Execution CVE-2014-3120 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 7.5 High severity | Ruby on Rails Directory Traversal CVE-2014-0130 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 5.4 Medium severity | D-Link DSL-2760U Gateway Cross-Site Scripting CVE-2013-5223 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | HP Multiple Products Remote Code Execution CVE-2013-4810 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | Apache Struts Improper Input Validation CVE-2013-2251 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 7.5 High severity | PHP-CGI Query String Parameter CVE-2012-1823 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 7.8 High severity | Exim Privilege Escalation CVE-2010-4345 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | Exim Heap-Based Buffer Overflow CVE-2010-4344 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 7.5 High severity | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service CVE-2010-3035 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | Adobe ColdFusion Directory Traversal CVE-2010-2861 | Mar 25, 2022 | Apr 15, 2022 | Known |
| 4.3 Medium severity | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service CVE-2009-2055 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | phpMyAdmin Remote Code Execution CVE-2009-1151 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 8.8 High severity | Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow CVE-2009-0927 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | HP OpenView Network Node Manager Remote Code Execution CVE-2005-2773 | Mar 25, 2022 | Apr 15, 2022 | Not reported |
| 9.8 Critical severity | SonicWall SonicOS Buffer Overflow CVE-2020-5135 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 7.8 High severity | Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation CVE-2019-1405 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 7.8 High severity | Microsoft Windows Privilege Escalation CVE-2019-1322 | Mar 15, 2022 | Apr 5, 2022 | Known |
About this list
CISA adds a vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue only when there is reliable evidence of exploitation and a clear fix or mitigation. US federal agencies must remediate each entry by the deadline shown; everyone else can treat the list as a short, evidence-based set of must-patch issues.
A vulnerability missing from this list is not proof that it is safe. Many exploited flaws are never catalogued, which is why each of our CVE pages also shows the EPSS exploitation forecast.