Vulnerabilities exploited in the wild
1,781 vulnerabilities that attackers have used in real attacks, as confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA). If you run an affected product, these come before everything else in your patch queue.
| Score | Vulnerability | Added | Federal deadline | Ransomware use |
|---|---|---|---|---|
| 7.8 High severity | Microsoft Windows Error Reporting Manager Privilege Escalation CVE-2019-1315 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 7.8 High severity | Microsoft Windows AppX Deployment Server Privilege Escalation CVE-2019-1253 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 7.8 High severity | Microsoft Win32k Privilege Escalation CVE-2019-1132 | Mar 15, 2022 | Apr 5, 2022 | Not reported |
| 7.8 High severity | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation CVE-2019-1129 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 7.8 High severity | Microsoft Task Scheduler Privilege Escalation CVE-2019-1069 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 7.8 High severity | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation CVE-2019-1064 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 7.8 High severity | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation CVE-2019-0841 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 7.8 High severity | Microsoft Windows Privilege Escalation CVE-2019-0543 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 7.0 High severity | Microsoft Win32k Privilege Escalation CVE-2018-8120 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 7.8 High severity | Microsoft Windows Transaction Manager Privilege Escalation CVE-2017-0101 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 7.8 High severity | Microsoft Windows Kernel Privilege Escalation CVE-2016-3309 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 6.9 Medium severity | Microsoft Win32k Memory Corruption CVE-2015-2546 | Mar 15, 2022 | Apr 5, 2022 | Known |
| 9.6 Critical severity | Mozilla Firefox Use-After-Free CVE-2022-26486 | Mar 7, 2022 | Mar 21, 2022 | Not reported |
| 8.8 High severity | Mozilla Firefox Use-After-Free CVE-2022-26485 | Mar 7, 2022 | Mar 21, 2022 | Not reported |
| 5.3 Medium severity | VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) CVE-2021-21973 | Mar 7, 2022 | Mar 21, 2022 | Not reported |
| 7.2 High severity | Pulse Connect Secure Code Injection CVE-2020-8218 | Mar 7, 2022 | Sep 7, 2022 | Not reported |
| 9.8 Critical severity | Atlassian Jira Server and Data Center Server-Side Template Injection CVE-2019-11581 | Mar 7, 2022 | Sep 7, 2022 | Not reported |
| 9.8 Critical severity | NETGEAR DGN2200 Remote Code Execution CVE-2017-6077 | Mar 7, 2022 | Sep 7, 2022 | Not reported |
| 8.8 High severity | NETGEAR Multiple Routers Remote Code Execution CVE-2016-6277 | Mar 7, 2022 | Sep 7, 2022 | Not reported |
| 7.5 High severity | Adobe ColdFusion Information Disclosure CVE-2013-0631 | Mar 7, 2022 | Sep 7, 2022 | Not reported |
| 7.5 High severity | Adobe ColdFusion Directory Traversal CVE-2013-0629 | Mar 7, 2022 | Sep 7, 2022 | Not reported |
| 9.8 Critical severity | Adobe ColdFusion Authentication Bypass CVE-2013-0625 | Mar 7, 2022 | Sep 7, 2022 | Not reported |
| 6.5 Medium severity | Adobe BlazeDS Information Disclosure CVE-2009-3960 | Mar 7, 2022 | Sep 7, 2022 | Known |
| 8.0 High severity | Cisco Small Business RV Series Routers Stack-based Buffer Overflow CVE-2022-20708 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 8.0 High severity | Cisco Small Business RV Series Routers Stack-based Buffer Overflow CVE-2022-20703 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 7.8 High severity | Cisco Small Business RV Series Routers Stack-based Buffer Overflow CVE-2022-20701 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 9.8 Critical severity | Cisco Small Business RV Series Routers Stack-based Buffer Overflow CVE-2022-20700 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 9.8 Critical severity | Cisco Small Business RV Series Routers Stack-based Buffer Overflow CVE-2022-20699 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 7.8 High severity | Microsoft Windows Installer Privilege Escalation CVE-2021-41379 | Mar 3, 2022 | Mar 17, 2022 | Known |
| 9.8 Critical severity | Apache Tomcat Improper Privilege Management CVE-2020-1938 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 5.4 Medium severity | Treck TCP/IP stack Out-of-Bounds Read CVE-2020-11899 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 9.8 Critical severity | Exim Out-of-bounds Write CVE-2019-16928 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 7.2 High severity | Cisco Small Business Routers Improper Input Validation CVE-2019-1652 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 8.8 High severity | Microsoft Excel Remote Code Execution CVE-2019-1297 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 7.4 High severity | Microsoft Exchange Server Privilege Escalation CVE-2018-8581 | Mar 3, 2022 | Mar 17, 2022 | Known |
| 7.5 High severity | ChakraCore Scripting Engine Type Confusion CVE-2018-8298 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 5.9 Medium severity | Cisco IOS Software Denial-of-Service CVE-2018-0180 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 5.9 Medium severity | Cisco IOS Software Denial-of-Service CVE-2018-0179 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 8.0 High severity | Cisco IOS, XR, and XE Software Buffer Overflow CVE-2018-0175 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 8.6 High severity | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation CVE-2018-0174 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
About this list
CISA adds a vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue only when there is reliable evidence of exploitation and a clear fix or mitigation. US federal agencies must remediate each entry by the deadline shown; everyone else can treat the list as a short, evidence-based set of must-patch issues.
A vulnerability missing from this list is not proof that it is safe. Many exploited flaws are never catalogued, which is why each of our CVE pages also shows the EPSS exploitation forecast.