CVE-2023-35311
Added Jul 11, 2023
Microsoft Outlook Security Feature Bypass Vulnerability
Microsoft · Outlook
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 16 of 35
CVE-2023-36874
Added Jul 11, 2023
Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2021-29256
Added Jul 7, 2023
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm · Mali Graphics Processing Unit (GPU)
Ransomware: Unknown
CVE-2019-17621
Added Jun 29, 2023
D-Link DIR-859 Router Command Execution Vulnerability
D-Link · DIR-859 Router
Ransomware: Unknown
CVE-2019-20500
Added Jun 29, 2023
D-Link DWL-2600AP Access Point Command Injection Vulnerability
D-Link · DWL-2600AP Access Point
Ransomware: Unknown
CVE-2021-25371
Added Jun 29, 2023
Samsung Mobile Devices Unspecified Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2021-25372
Added Jun 29, 2023
Samsung Mobile Devices Improper Boundary Check Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2021-25394
Added Jun 29, 2023
Samsung Mobile Devices Race Condition Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2021-25395
Added Jun 29, 2023
Samsung Mobile Devices Race Condition Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2021-25487
Added Jun 29, 2023
Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2021-25489
Added Jun 29, 2023
Samsung Mobile Devices Improper Input Validation Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2023-20867
Added Jun 23, 2023
VMware Tools Authentication Bypass Vulnerability
VMware · Tools
Ransomware: Unknown
CVE-2023-27992
Added Jun 23, 2023
Zyxel Multiple NAS Devices Command Injection Vulnerability
Zyxel · Multiple Network-Attached Storage (NAS) Devices
Ransomware: Unknown
CVE-2023-32434
Added Jun 23, 2023
Apple Multiple Products Integer Overflow Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2023-32435
Added Jun 23, 2023
Apple Multiple Products WebKit Memory Corruption Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2023-32439
Added Jun 23, 2023
Apple Multiple Products WebKit Type Confusion Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2016-0165
Added Jun 22, 2023
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Unknown
CVE-2016-9079
Added Jun 22, 2023
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
Mozilla · Firefox, Firefox ESR, and Thunderbird
Ransomware: Unknown
CVE-2020-12641
Added Jun 22, 2023
Roundcube Webmail Remote Code Execution Vulnerability
Roundcube · Roundcube Webmail
Ransomware: Unknown
CVE-2020-35730
Added Jun 22, 2023
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Roundcube · Roundcube Webmail
Ransomware: Unknown
CVE-2021-44026
Added Jun 22, 2023
Roundcube Webmail SQL Injection Vulnerability
Roundcube · Roundcube Webmail
Ransomware: Unknown
CVE-2023-20887
Added Jun 22, 2023
Vmware Aria Operations for Networks Command Injection Vulnerability
VMware · Aria Operations for Networks
Ransomware: Unknown
CVE-2023-27997
Added Jun 13, 2023
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
Fortinet · FortiOS and FortiProxy SSL-VPN
Ransomware: Known
CVE-2023-3079
Added Jun 7, 2023
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2023-33009
Added Jun 5, 2023
Zyxel Multiple Firewalls Buffer Overflow Vulnerability
Zyxel · Multiple Firewalls
Ransomware: Unknown
CVE-2023-33010
Added Jun 5, 2023
Zyxel Multiple Firewalls Buffer Overflow Vulnerability
Zyxel · Multiple Firewalls
Ransomware: Unknown
CVE-2023-34362
Added Jun 2, 2023
Progress MOVEit Transfer SQL Injection Vulnerability
Progress · MOVEit Transfer
Ransomware: Known
CVE-2023-28771
Added May 31, 2023
Zyxel Multiple Firewalls OS Command Injection Vulnerability
Zyxel · Multiple Firewalls
Ransomware: Unknown
CVE-2023-2868
Added May 26, 2023
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability
Barracuda Networks · Email Security Gateway (ESG) Appliance
Ransomware: Unknown
CVE-2023-28204
Added May 22, 2023
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2023-32373
Added May 22, 2023
Apple Multiple Products WebKit Use-After-Free Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2023-32409
Added May 22, 2023
Apple Multiple Products WebKit Sandbox Escape Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2004-1464
Added May 19, 2023
Cisco IOS Denial-of-Service Vulnerability
Cisco · IOS
Ransomware: Unknown
CVE-2016-6415
Added May 19, 2023
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
Cisco · IOS, IOS XR, and IOS XE
Ransomware: Unknown
CVE-2023-21492
Added May 19, 2023
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Samsung · Mobile Devices
Ransomware: Unknown
CVE-2010-3904
Added May 12, 2023
Linux Kernel Improper Input Validation Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2014-0196
Added May 12, 2023
Linux Kernel Race Condition Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2015-5317
Added May 12, 2023
Jenkins User Interface (UI) Information Disclosure Vulnerability
Jenkins · Jenkins User Interface (UI)
Ransomware: Unknown
CVE-2016-3427
Added May 12, 2023
Oracle Java SE and JRockit Unspecified Vulnerability
Oracle · Java SE and JRockit
Ransomware: Unknown
CVE-2016-8735
Added May 12, 2023
Apache Tomcat Remote Code Execution Vulnerability
Apache · Tomcat
Ransomware: Unknown
CVE-2021-3560
Added May 12, 2023
Red Hat Polkit Incorrect Authorization Vulnerability
Red Hat · Polkit
Ransomware: Unknown
CVE-2023-25717
Added May 12, 2023
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
Ruckus Wireless · Multiple Products
Ransomware: Unknown
CVE-2023-29336
Added May 9, 2023
Microsoft Win32K Privilege Escalation Vulnerability
Microsoft · Win32k
Ransomware: Unknown
CVE-2021-45046
Added May 1, 2023
Apache Log4j2 Deserialization of Untrusted Data Vulnerability
Apache · Log4j2
Ransomware: Known
CVE-2023-1389
Added May 1, 2023
TP-Link Archer AX-21 Command Injection Vulnerability
TP-Link · Archer AX21
Ransomware: Unknown
CVE-2023-21839
Added May 1, 2023
Oracle WebLogic Server Unspecified Vulnerability
Oracle · WebLogic Server
Ransomware: Unknown
CVE-2023-2136
Added Apr 21, 2023
Google Chrome Skia Integer Overflow Vulnerability
Google · Chromium Skia
Ransomware: Unknown
CVE-2023-27350
Added Apr 21, 2023
PaperCut MF/NG Improper Access Control Vulnerability
PaperCut · MF/NG
Ransomware: Known
CVE-2023-28432
Added Apr 21, 2023
MinIO Information Disclosure Vulnerability
MinIO · MinIO
Ransomware: Unknown
CVE-2017-6742
Added Apr 19, 2023
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · IOS and IOS XE Software
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.