Vulnerabilities exploited in the wild
1,781 vulnerabilities that attackers have used in real attacks, as confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA). If you run an affected product, these come before everything else in your patch queue.
| Score | Vulnerability | Added | Federal deadline | Ransomware use |
|---|---|---|---|---|
| 7.8 High severity | Microsoft Windows Secondary Logon Service Privilege Escalation CVE-2016-0099 | Mar 3, 2022 | Mar 24, 2022 | Known |
| 7.8 High severity | Adobe Flash Player Arbitrary Code Execution CVE-2015-7645 | Mar 3, 2022 | Mar 24, 2022 | Known |
| 9.8 Critical severity | Adobe Flash Player Use-After-Free CVE-2015-5119 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 5.0 Medium severity | Oracle Java SE Integrity Check CVE-2015-4902 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 9.8 Critical severity | Adobe Flash Player Memory Corruption CVE-2015-3043 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 9.8 Critical severity | Oracle Java SE and Java SE Embedded Remote Code Execution CVE-2015-2590 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Office Malformed EPS File CVE-2015-2545 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 9.3 High severity | Microsoft PowerPoint Memory Corruption CVE-2015-2424 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft ATM Font Driver Privilege Escalation CVE-2015-2387 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Win32k Privilege Escalation CVE-2015-1701 | Mar 3, 2022 | Mar 24, 2022 | Known |
| 7.8 High severity | Microsoft Office Memory Corruption CVE-2015-1642 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 9.3 High severity | Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution CVE-2014-4114 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 10.0 High severity | Adobe Reader and Acrobat Use-After-Free CVE-2014-0496 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Windows Kernel Privilege Escalation CVE-2013-5065 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Microsoft Internet Explorer Use-After-Free CVE-2013-3897 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 9.8 Critical severity | Adobe Reader and Acrobat Memory Corruption CVE-2013-3346 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 6.5 Medium severity | Mozilla Firefox Information Disclosure CVE-2013-1675 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Microsoft Internet Explorer Remote Code Execution CVE-2013-1347 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Adobe Reader Buffer Overflow CVE-2013-0641 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Adobe Reader and Acrobat Memory Corruption CVE-2013-0640 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 9.8 Critical severity | Adobe ColdFusion Authentication Bypass CVE-2013-0632 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 9.8 Critical severity | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution CVE-2012-4681 | Mar 3, 2022 | Mar 24, 2022 | Known |
| 8.8 High severity | Microsoft Office MSCOMCTL.OCX Remote Code Execution CVE-2012-1856 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 10.0 High severity | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution CVE-2012-1723 | Mar 3, 2022 | Mar 24, 2022 | Known |
| 7.8 High severity | Adobe Flash Player Arbitrary Code Execution CVE-2012-1535 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 10.0 High severity | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution CVE-2012-0507 | Mar 3, 2022 | Mar 24, 2022 | Known |
| 9.8 Critical severity | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution CVE-2011-3544 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 9.8 Critical severity | Microsoft Forefront TMG Remote Code Execution CVE-2011-1889 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Adobe Flash Player Remote Code Execution CVE-2011-0611 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Office Stack-based Buffer Overflow CVE-2010-3333 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Windows Kernel Exception Handler CVE-2010-0232 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Adobe Reader and Acrobat Arbitrary Code Execution CVE-2010-0188 | Mar 3, 2022 | Mar 24, 2022 | Known |
| 7.8 High severity | Microsoft Excel Featheader Record Memory Corruption CVE-2009-3129 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Windows Improper Input Validation CVE-2009-1123 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 8.8 High severity | Oracle VirtualBox Insufficient Input Validation CVE-2008-3431 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Adobe Reader and Acrobat Input Validation CVE-2008-2992 | Mar 3, 2022 | Mar 24, 2022 | Known |
| 7.8 High severity | Microsoft Windows Privilege Escalation CVE-2004-0210 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 7.8 High severity | Microsoft Windows Privilege Escalation CVE-2002-0367 | Mar 3, 2022 | Mar 24, 2022 | Not reported |
| 6.1 Medium severity | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting CVE-2022-24682 | Feb 25, 2022 | Mar 11, 2022 | Known |
| 7.8 High severity | Microsoft Office Remote Code Execution CVE-2017-8570 | Feb 25, 2022 | Aug 25, 2022 | Not reported |
About this list
CISA adds a vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue only when there is reliable evidence of exploitation and a clear fix or mitigation. US federal agencies must remediate each entry by the deadline shown; everyone else can treat the list as a short, evidence-based set of must-patch issues.
A vulnerability missing from this list is not proof that it is safe. Many exploited flaws are never catalogued, which is why each of our CVE pages also shows the EPSS exploitation forecast.