CVE-2024-38226
Added Sep 10, 2024
Microsoft Publisher Protection Mechanism Failure Vulnerability
Microsoft · Publisher
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 12 of 35
CVE-2016-3714
Added Sep 9, 2024
ImageMagick Improper Input Validation Vulnerability
ImageMagick · ImageMagick
Ransomware: Unknown
CVE-2017-1000253
Added Sep 9, 2024
Linux Kernel PIE Stack Buffer Corruption Vulnerability
Linux · Kernel
Ransomware: Known
CVE-2024-40766
Added Sep 9, 2024
SonicWall SonicOS Improper Access Control Vulnerability
SonicWall · SonicOS
Ransomware: Known
CVE-2021-20123
Added Sep 3, 2024
Draytek VigorConnect Path Traversal Vulnerability
DrayTek · VigorConnect
Ransomware: Unknown
CVE-2021-20124
Added Sep 3, 2024
Draytek VigorConnect Path Traversal Vulnerability
DrayTek · VigorConnect
Ransomware: Unknown
CVE-2024-7262
Added Sep 3, 2024
Kingsoft WPS Office Path Traversal Vulnerability
Kingsoft · WPS Office
Ransomware: Unknown
CVE-2024-7965
Added Aug 28, 2024
Google Chromium V8 Inappropriate Implementation Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2024-38856
Added Aug 27, 2024
Apache OFBiz Incorrect Authorization Vulnerability
Apache · OFBiz
Ransomware: Unknown
CVE-2024-7971
Added Aug 26, 2024
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2024-39717
Added Aug 23, 2024
Versa Director Dangerous File Type Upload Vulnerability
Versa · Director
Ransomware: Unknown
CVE-2021-31196
Added Aug 21, 2024
Microsoft Exchange Server Information Disclosure Vulnerability
Microsoft · Exchange Server
Ransomware: Unknown
CVE-2021-33044
Added Aug 21, 2024
Dahua IP Camera Authentication Bypass Vulnerability
Dahua · IP Camera Firmware
Ransomware: Unknown
CVE-2021-33045
Added Aug 21, 2024
Dahua IP Camera Authentication Bypass Vulnerability
Dahua · IP Camera Firmware
Ransomware: Unknown
CVE-2022-0185
Added Aug 21, 2024
Linux Kernel Heap-Based Buffer Overflow Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2024-23897
Added Aug 19, 2024
Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
Jenkins · Jenkins Command Line Interface (CLI)
Ransomware: Known
CVE-2024-28986
Added Aug 15, 2024
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds · Web Help Desk
Ransomware: Unknown
CVE-2024-38106
Added Aug 13, 2024
Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-38107
Added Aug 13, 2024
Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-38178
Added Aug 13, 2024
Microsoft Windows Scripting Engine Memory Corruption Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-38189
Added Aug 13, 2024
Microsoft Project Remote Code Execution Vulnerability
Microsoft · Project
Ransomware: Unknown
CVE-2024-38193
Added Aug 13, 2024
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-38213
Added Aug 13, 2024
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-32113
Added Aug 7, 2024
Apache OFBiz Path Traversal Vulnerability
Apache · OFBiz
Ransomware: Unknown
CVE-2024-36971
Added Aug 7, 2024
Android Kernel Remote Code Execution Vulnerability
Android · Kernel
Ransomware: Unknown
CVE-2018-0824
Added Aug 5, 2024
Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-37085
Added Jul 30, 2024
VMware ESXi Authentication Bypass Vulnerability
VMware · ESXi
Ransomware: Known
CVE-2023-45249
Added Jul 29, 2024
Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
Acronis · Cyber Infrastructure (ACI)
Ransomware: Unknown
CVE-2024-4879
Added Jul 29, 2024
ServiceNow Improper Input Validation Vulnerability
ServiceNow · Utah, Vancouver, and Washington DC Now Platform
Ransomware: Unknown
CVE-2024-5217
Added Jul 29, 2024
ServiceNow Incomplete List of Disallowed Inputs Vulnerability
ServiceNow · Utah, Vancouver, and Washington DC Now Platform
Ransomware: Unknown
CVE-2012-4792
Added Jul 23, 2024
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft · Internet Explorer
Ransomware: Unknown
CVE-2024-39891
Added Jul 23, 2024
Twilio Authy Information Disclosure Vulnerability
Twilio · Authy
Ransomware: Unknown
CVE-2022-22948
Added Jul 17, 2024
VMware vCenter Server Incorrect Default File Permissions Vulnerability
VMware · vCenter Server
Ransomware: Unknown
CVE-2024-28995
Added Jul 17, 2024
SolarWinds Serv-U Path Traversal Vulnerability
SolarWinds · Serv-U
Ransomware: Unknown
CVE-2024-34102
Added Jul 17, 2024
Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
Adobe · Commerce and Magento Open Source
Ransomware: Unknown
CVE-2024-36401
Added Jul 15, 2024
OSGeo GeoServer GeoTools Eval Injection Vulnerability
OSGeo · GeoServer
Ransomware: Unknown
CVE-2024-23692
Added Jul 9, 2024
Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Rejetto · HTTP File Server
Ransomware: Known
CVE-2024-38080
Added Jul 9, 2024
Microsoft Windows Hyper-V Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-38112
Added Jul 9, 2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2024-20399
Added Jul 2, 2024
Cisco NX-OS Command Injection Vulnerability
Cisco · NX-OS
Ransomware: Unknown
CVE-2020-13965
Added Jun 26, 2024
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Roundcube · Webmail
Ransomware: Unknown
CVE-2022-24816
Added Jun 26, 2024
OSGeo GeoServer JAI-EXT Code Injection Vulnerability
OSGeo · JAI-EXT
Ransomware: Unknown
CVE-2022-2586
Added Jun 26, 2024
Linux Kernel Use-After-Free Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2024-26169
Added Jun 13, 2024
Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2024-32896
Added Jun 13, 2024
Android Pixel Privilege Escalation Vulnerability
Android · Pixel
Ransomware: Unknown
CVE-2024-4358
Added Jun 13, 2024
Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
Progress · Telerik Report Server
Ransomware: Unknown
CVE-2024-4577
Added Jun 12, 2024
PHP-CGI OS Command Injection Vulnerability
PHP Group · PHP
Ransomware: Known
CVE-2024-4610
Added Jun 12, 2024
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm · Mali GPU Kernel Driver
Ransomware: Unknown
CVE-2017-3506
Added Jun 3, 2024
Oracle WebLogic Server OS Command Injection Vulnerability
Oracle · WebLogic Server
Ransomware: Unknown
CVE-2024-1086
Added May 30, 2024
Linux Kernel Use-After-Free Vulnerability
Linux · Kernel
Ransomware: Known
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.