CVE-2019-8526
Added Apr 17, 2023
Apple macOS Use-After-Free Vulnerability
Apple · macOS
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 17 of 35
CVE-2023-2033
Added Apr 17, 2023
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2023-20963
Added Apr 13, 2023
Android Framework Privilege Escalation Vulnerability
Android · Framework
Ransomware: Unknown
CVE-2023-29492
Added Apr 13, 2023
Novi Survey Insecure Deserialization Vulnerability
Novi Survey · Novi Survey
Ransomware: Unknown
CVE-2023-28252
Added Apr 11, 2023
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2023-28205
Added Apr 10, 2023
Apple Multiple Products WebKit Use-After-Free Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2023-28206
Added Apr 10, 2023
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability
Apple · iOS, iPadOS, and macOS
Ransomware: Unknown
CVE-2019-1388
Added Apr 7, 2023
Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2021-27876
Added Apr 7, 2023
Veritas Backup Exec Agent File Access Vulnerability
Veritas · Backup Exec Agent
Ransomware: Known
CVE-2021-27877
Added Apr 7, 2023
Veritas Backup Exec Agent Improper Authentication Vulnerability
Veritas · Backup Exec Agent
Ransomware: Known
CVE-2021-27878
Added Apr 7, 2023
Veritas Backup Exec Agent Command Execution Vulnerability
Veritas · Backup Exec Agent
Ransomware: Known
CVE-2023-26083
Added Apr 7, 2023
Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
Arm · Mali Graphics Processing Unit (GPU)
Ransomware: Unknown
CVE-2022-27926
Added Apr 3, 2023
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Unknown
CVE-2013-3163
Added Mar 30, 2023
Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft · Internet Explorer
Ransomware: Unknown
CVE-2017-7494
Added Mar 30, 2023
Samba Remote Code Execution Vulnerability
Samba · Samba
Ransomware: Known
CVE-2021-30900
Added Mar 30, 2023
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
Apple · iOS, iPadOS, and macOS
Ransomware: Unknown
CVE-2022-22706
Added Mar 30, 2023
Arm Mali GPU Kernel Driver Unspecified Vulnerability
Arm · Mali Graphics Processing Unit (GPU)
Ransomware: Unknown
CVE-2022-3038
Added Mar 30, 2023
Google Chromium Network Service Use-After-Free Vulnerability
Google · Chromium Network Service
Ransomware: Unknown
CVE-2022-38181
Added Mar 30, 2023
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
Arm · Mali Graphics Processing Unit (GPU)
Ransomware: Unknown
CVE-2022-39197
Added Mar 30, 2023
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
Fortra · Cobalt Strike
Ransomware: Unknown
CVE-2022-42948
Added Mar 30, 2023
Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
Fortra · Cobalt Strike
Ransomware: Unknown
CVE-2023-0266
Added Mar 30, 2023
Linux Kernel Use-After-Free Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2023-26360
Added Mar 15, 2023
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe · ColdFusion
Ransomware: Unknown
CVE-2022-41328
Added Mar 14, 2023
Fortinet FortiOS Path Traversal Vulnerability
Fortinet · FortiOS
Ransomware: Unknown
CVE-2023-23397
Added Mar 14, 2023
Microsoft Office Outlook Privilege Escalation Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2023-24880
Added Mar 14, 2023
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2020-5741
Added Mar 10, 2023
Plex Media Server Remote Code Execution Vulnerability
Plex · Media Server
Ransomware: Unknown
CVE-2021-39144
Added Mar 10, 2023
XStream Remote Code Execution Vulnerability
XStream · XStream
Ransomware: Unknown
CVE-2022-28810
Added Mar 7, 2023
Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
Zoho · ManageEngine
Ransomware: Unknown
CVE-2022-33891
Added Mar 7, 2023
Apache Spark Command Injection Vulnerability
Apache · Spark
Ransomware: Unknown
CVE-2022-35914
Added Mar 7, 2023
Teclib GLPI Remote Code Execution Vulnerability
Teclib · GLPI
Ransomware: Unknown
CVE-2022-36537
Added Feb 27, 2023
ZK Framework AuUploader Unspecified Vulnerability
ZK Framework · AuUploader
Ransomware: Known
CVE-2022-40765
Added Feb 21, 2023
Mitel MiVoice Connect Command Injection Vulnerability
Mitel · MiVoice Connect
Ransomware: Known
CVE-2022-41223
Added Feb 21, 2023
Mitel MiVoice Connect Code Injection Vulnerability
Mitel · MiVoice Connect
Ransomware: Known
CVE-2022-47986
Added Feb 21, 2023
IBM Aspera Faspex Code Execution Vulnerability
IBM · Aspera Faspex
Ransomware: Known
CVE-2022-46169
Added Feb 16, 2023
Cacti Command Injection Vulnerability
Cacti · Cacti
Ransomware: Unknown
CVE-2023-21715
Added Feb 14, 2023
Microsoft Office Publisher Security Feature Bypass Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2023-21823
Added Feb 14, 2023
Microsoft Windows Graphic Component Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2023-23376
Added Feb 14, 2023
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2023-23529
Added Feb 14, 2023
Apple Multiple Products WebKit Type Confusion Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2015-2291
Added Feb 10, 2023
Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
Intel · Ethernet Diagnostics Driver for Windows
Ransomware: Known
CVE-2022-24990
Added Feb 10, 2023
TerraMaster OS Remote Command Execution Vulnerability
TerraMaster · TerraMaster OS
Ransomware: Known
CVE-2023-0669
Added Feb 10, 2023
Fortra GoAnywhere MFT Remote Code Execution Vulnerability
Fortra · GoAnywhere MFT
Ransomware: Known
CVE-2022-21587
Added Feb 2, 2023
Oracle E-Business Suite Unspecified Vulnerability
Oracle · E-Business Suite
Ransomware: Known
CVE-2023-22952
Added Feb 2, 2023
Multiple SugarCRM Products Remote Code Execution Vulnerability
SugarCRM · Multiple Products
Ransomware: Unknown
CVE-2017-11357
Added Jan 26, 2023
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
Telerik · User Interface (UI) for ASP.NET AJAX
Ransomware: Known
CVE-2022-47966
Added Jan 23, 2023
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
Zoho · ManageEngine
Ransomware: Known
CVE-2022-44877
Added Jan 17, 2023
CWP Control Web Panel OS Command Injection Vulnerability
CWP · Control Web Panel
Ransomware: Unknown
CVE-2022-41080
Added Jan 10, 2023
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft · Exchange Server
Ransomware: Known
CVE-2023-21674
Added Jan 10, 2023
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.