Vulnerabilities exploited in the wild
1,781 vulnerabilities that attackers have used in real attacks, as confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA). If you run an affected product, these come before everything else in your patch queue.
| Score | Vulnerability | Added | Federal deadline | Ransomware use |
|---|---|---|---|---|
| 8.6 High severity | Cisco IOS and IOS XE Software Improper Input Validation CVE-2018-0173 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 8.6 High severity | Cisco IOS and IOS XE Software Improper Input Validation CVE-2018-0172 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 8.8 High severity | Cisco IOS, XR, and XE Software Buffer Overflow CVE-2018-0167 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 6.3 Medium severity | Cisco IOS Software Resource Management Errors CVE-2018-0161 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 7.5 High severity | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service CVE-2018-0159 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 8.6 High severity | Cisco IOS and XE Software Internet Key Exchange Memory Leak CVE-2018-0158 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 7.5 High severity | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service CVE-2018-0156 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 8.6 High severity | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service CVE-2018-0155 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 7.5 High severity | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service CVE-2018-0154 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 9.8 Critical severity | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution CVE-2018-0151 | Mar 3, 2022 | Mar 17, 2022 | Not reported |
| 7.8 High severity | Microsoft Malware Protection Engine Improper Restriction of Operations CVE-2017-8540 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Cisco IOS Software SNMP Remote Code Execution CVE-2017-6744 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Cisco IOS and IOS XE Software SNMP Remote Code Execution CVE-2017-6743 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Cisco IOS and IOS XE Software SNMP Remote Code Execution CVE-2017-6740 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Cisco IOS and IOS XE Software SNMP Remote Code Execution CVE-2017-6739 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Cisco IOS and IOS XE Software SNMP Remote Code Execution CVE-2017-6738 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Cisco IOS and IOS XE Software SNMP Remote Code Execution CVE-2017-6737 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Cisco IOS and IOS XE Software SNMP Remote Code Execution CVE-2017-6736 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 6.5 Medium severity | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service CVE-2017-6663 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.5 High severity | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service CVE-2017-6627 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 5.9 Medium severity | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service CVE-2017-12319 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 9.8 Critical severity | Cisco IOS and IOS XE Software DHCP Remote Code Execution CVE-2017-12240 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 6.5 Medium severity | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service CVE-2017-12238 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.5 High severity | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service CVE-2017-12237 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.5 High severity | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service CVE-2017-12235 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.5 High severity | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service CVE-2017-12234 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.5 High severity | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service CVE-2017-12233 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 6.5 Medium severity | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service CVE-2017-12232 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.5 High severity | Cisco IOS Software Network Address Translation Denial-of-Service CVE-2017-12231 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Office Remote Code Execution CVE-2017-11826 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Adobe Flash Player Type Confusion CVE-2017-11292 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Office Use-After-Free CVE-2017-0261 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Graphics Device Interface (GDI) Privilege Escalation CVE-2017-0001 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.5 High severity | Siemens SIMATIC CP 1543-1 Improper Privilege Management CVE-2016-8562 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Adobe Flash Player Use-After-Free CVE-2016-7855 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Office Security Feature Bypass CVE-2016-7262 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Office Memory Corruption CVE-2016-7193 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.0 High severity | Linux Kernel Race Condition CVE-2016-5195 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 9.8 Critical severity | Adobe Flash Player Arbitrary Code Execution CVE-2016-4117 | Mar 3, 2022 | Mar 24, 2022 | Known |
| 9.8 Critical severity | Adobe Flash Player Arbitrary Code Execution CVE-2016-1019 | Mar 3, 2022 | Mar 24, 2022 | Known |
About this list
CISA adds a vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue only when there is reliable evidence of exploitation and a clear fix or mitigation. US federal agencies must remediate each entry by the deadline shown; everyone else can treat the list as a short, evidence-based set of must-patch issues.
A vulnerability missing from this list is not proof that it is safe. Many exploited flaws are never catalogued, which is why each of our CVE pages also shows the EPSS exploitation forecast.