CVE-2023-36563
Added Oct 10, 2023
Microsoft WordPad Information Disclosure Vulnerability
Microsoft · WordPad
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 15 of 35
CVE-2023-41763
Added Oct 10, 2023
Microsoft Skype for Business Privilege Escalation Vulnerability
Microsoft · Skype for Business
Ransomware: Unknown
CVE-2023-44487
Added Oct 10, 2023
HTTP/2 Rapid Reset Attack Vulnerability
IETF · HTTP/2
Ransomware: Unknown
CVE-2023-22515
Added Oct 5, 2023
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
Atlassian · Confluence Data Center and Server
Ransomware: Known
CVE-2023-40044
Added Oct 5, 2023
Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability
Progress · WS_FTP Server
Ransomware: Known
CVE-2023-42824
Added Oct 5, 2023
Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability
Apple · iOS and iPadOS
Ransomware: Unknown
CVE-2023-28229
Added Oct 4, 2023
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Microsoft · Windows CNG Key Isolation Service
Ransomware: Unknown
CVE-2023-42793
Added Oct 4, 2023
JetBrains TeamCity Authentication Bypass Vulnerability
JetBrains · TeamCity
Ransomware: Known
CVE-2023-4211
Added Oct 3, 2023
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm · Mali GPU Kernel Driver
Ransomware: Unknown
CVE-2023-5217
Added Oct 2, 2023
Google Chromium libvpx Heap Buffer Overflow Vulnerability
Google · Chromium libvpx
Ransomware: Unknown
CVE-2018-14667
Added Sep 28, 2023
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
Red Hat · JBoss RichFaces Framework
Ransomware: Unknown
CVE-2023-41991
Added Sep 25, 2023
Apple Multiple Products Improper Certificate Validation Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2023-41992
Added Sep 25, 2023
Apple Multiple Products Kernel Privilege Escalation Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2023-41993
Added Sep 25, 2023
Apple Multiple Products WebKit Code Execution Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2023-41179
Added Sep 21, 2023
Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
Trend Micro · Apex One and Worry-Free Business Security
Ransomware: Unknown
CVE-2023-28434
Added Sep 19, 2023
MinIO Security Feature Bypass Vulnerability
MinIO · MinIO
Ransomware: Unknown
CVE-2014-8361
Added Sep 18, 2023
Realtek SDK Improper Input Validation Vulnerability
Realtek · SDK
Ransomware: Unknown
CVE-2017-6884
Added Sep 18, 2023
Zyxel EMG2926 Routers Command Injection Vulnerability
Zyxel · EMG2926 Routers
Ransomware: Known
CVE-2021-3129
Added Sep 18, 2023
Laravel Ignition File Upload Vulnerability
Laravel · Ignition
Ransomware: Known
CVE-2022-22265
Added Sep 18, 2023
Samsung Mobile Devices Use-After-Free Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2023-26369
Added Sep 14, 2023
Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability
Adobe · Acrobat and Reader
Ransomware: Unknown
CVE-2023-20269
Added Sep 13, 2023
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
Cisco · Adaptive Security Appliance and Firepower Threat Defense
Ransomware: Known
CVE-2023-35674
Added Sep 13, 2023
Android Framework Privilege Escalation Vulnerability
Android · Framework
Ransomware: Unknown
CVE-2023-4863
Added Sep 13, 2023
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Google · Chromium WebP
Ransomware: Unknown
CVE-2023-36761
Added Sep 12, 2023
Microsoft Word Information Disclosure Vulnerability
Microsoft · Word
Ransomware: Unknown
CVE-2023-36802
Added Sep 12, 2023
Microsoft Streaming Service Proxy Privilege Escalation Vulnerability
Microsoft · Streaming Service Proxy
Ransomware: Unknown
CVE-2023-41061
Added Sep 11, 2023
Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
Apple · iOS, iPadOS, and watchOS
Ransomware: Unknown
CVE-2023-41064
Added Sep 11, 2023
Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
Apple · iOS, iPadOS, and macOS
Ransomware: Unknown
CVE-2023-33246
Added Sep 6, 2023
Apache RocketMQ Command Execution Vulnerability
Apache · RocketMQ
Ransomware: Unknown
CVE-2023-32315
Added Aug 24, 2023
Ignite Realtime Openfire Path Traversal Vulnerability
Ignite Realtime · Openfire
Ransomware: Unknown
CVE-2023-38831
Added Aug 24, 2023
RARLAB WinRAR Code Execution Vulnerability
RARLAB · WinRAR
Ransomware: Known
CVE-2023-27532
Added Aug 22, 2023
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
Veeam · Backup & Replication
Ransomware: Known
CVE-2023-38035
Added Aug 22, 2023
Ivanti Sentry Authentication Bypass Vulnerability
Ivanti · Sentry
Ransomware: Known
CVE-2023-26359
Added Aug 21, 2023
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2023-24489
Added Aug 16, 2023
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
Citrix · Content Collaboration
Ransomware: Unknown
CVE-2023-38180
Added Aug 9, 2023
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
Microsoft · .NET Core and Visual Studio
Ransomware: Unknown
CVE-2017-18368
Added Aug 7, 2023
Zyxel P660HN-T1A Routers Command Injection Vulnerability
Zyxel · P660HN-T1A Routers
Ransomware: Unknown
CVE-2023-35081
Added Jul 31, 2023
Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM)
Ransomware: Unknown
CVE-2023-37580
Added Jul 27, 2023
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Unknown
CVE-2023-38606
Added Jul 26, 2023
Apple Multiple Products Kernel Unspecified Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2023-35078
Added Jul 25, 2023
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM)
Ransomware: Known
CVE-2023-29298
Added Jul 20, 2023
Adobe ColdFusion Improper Access Control Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2023-38205
Added Jul 20, 2023
Adobe ColdFusion Improper Access Control Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2023-3519
Added Jul 19, 2023
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
Citrix · NetScaler ADC and NetScaler Gateway
Ransomware: Known
CVE-2023-36884
Added Jul 17, 2023
Microsoft Windows Search Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2022-29303
Added Jul 13, 2023
SolarView Compact Command Injection Vulnerability
SolarView · Compact
Ransomware: Unknown
CVE-2023-37450
Added Jul 13, 2023
Apple Multiple Products WebKit Code Execution Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2022-31199
Added Jul 11, 2023
Netwrix Auditor Insecure Object Deserialization Vulnerability
Netwrix · Auditor
Ransomware: Known
CVE-2023-32046
Added Jul 11, 2023
Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2023-32049
Added Jul 11, 2023
Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability
Microsoft · Windows
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.