CVE-2018-7445
Added Sep 8, 2022
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
MikroTik · RouterOS
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 19 of 35
CVE-2020-9934
Added Sep 8, 2022
Apple iOS, iPadOS, and macOS Input Validation Vulnerability
Apple · iOS, iPadOS, and macOS
Ransomware: Unknown
CVE-2022-26258
Added Sep 8, 2022
D-Link DIR-820L Remote Code Execution Vulnerability
D-Link · DIR-820L
Ransomware: Unknown
CVE-2022-27593
Added Sep 8, 2022
QNAP Photo Station Externally Controlled Reference Vulnerability
QNAP · Photo Station
Ransomware: Known
CVE-2022-3075
Added Sep 8, 2022
Google Chromium Mojo Insufficient Data Validation Vulnerability
Google · Chromium Mojo
Ransomware: Unknown
CVE-2020-28949
Added Aug 25, 2022
PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
PEAR · Archive_Tar
Ransomware: Unknown
CVE-2020-36193
Added Aug 25, 2022
PEAR Archive_Tar Improper Link Resolution Vulnerability
PEAR · Archive_Tar
Ransomware: Unknown
CVE-2021-31010
Added Aug 25, 2022
Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
Apple · iOS, macOS, watchOS
Ransomware: Unknown
CVE-2021-38406
Added Aug 25, 2022
Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability
Delta Electronics · DOPSoft 2
Ransomware: Unknown
CVE-2021-39226
Added Aug 25, 2022
Grafana Authentication Bypass Vulnerability
Grafana Labs · Grafana
Ransomware: Unknown
CVE-2022-2294
Added Aug 25, 2022
WebRTC Heap Buffer Overflow Vulnerability
WebRTC · WebRTC
Ransomware: Known
CVE-2022-22963
Added Aug 25, 2022
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
VMware Tanzu · Spring Cloud
Ransomware: Unknown
CVE-2022-24112
Added Aug 25, 2022
Apache APISIX Authentication Bypass Vulnerability
Apache · APISIX
Ransomware: Unknown
CVE-2022-24706
Added Aug 25, 2022
Apache CouchDB Insecure Default Initialization of Resource Vulnerability
Apache · CouchDB
Ransomware: Unknown
CVE-2022-26352
Added Aug 25, 2022
dotCMS Unrestricted Upload of File Vulnerability
dotCMS · dotCMS
Ransomware: Known
CVE-2022-0028
Added Aug 22, 2022
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Unknown
CVE-2017-15944
Added Aug 18, 2022
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Palo Alto Networks · PAN-OS
Ransomware: Unknown
CVE-2022-21971
Added Aug 18, 2022
Microsoft Windows Runtime Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2022-22536
Added Aug 18, 2022
SAP Multiple Products HTTP Request Smuggling Vulnerability
SAP · Multiple Products
Ransomware: Unknown
CVE-2022-26923
Added Aug 18, 2022
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Microsoft · Active Directory
Ransomware: Unknown
CVE-2022-2856
Added Aug 18, 2022
Google Chromium Intents Insufficient Input Validation Vulnerability
Google · Chromium Intents
Ransomware: Unknown
CVE-2022-32893
Added Aug 18, 2022
Apple iOS and macOS Out-of-Bounds Write Vulnerability
Apple · iOS and macOS
Ransomware: Unknown
CVE-2022-32894
Added Aug 18, 2022
Apple iOS and macOS Out-of-Bounds Write Vulnerability
Apple · iOS and macOS
Ransomware: Unknown
CVE-2022-27925
Added Aug 11, 2022
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Known
CVE-2022-37042
Added Aug 11, 2022
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Known
CVE-2022-30333
Added Aug 9, 2022
RARLAB UnRAR Directory Traversal Vulnerability
RARLAB · UnRAR
Ransomware: Known
CVE-2022-34713
Added Aug 9, 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2022-27924
Added Aug 4, 2022
Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Known
CVE-2022-26138
Added Jul 29, 2022
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
Atlassian · Confluence
Ransomware: Unknown
CVE-2022-22047
Added Jul 12, 2022
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2022-26925
Added Jul 1, 2022
Microsoft Windows LSA Spoofing Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2018-4344
Added Jun 27, 2022
Apple Multiple Products Memory Corruption Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2019-8605
Added Jun 27, 2022
Apple Multiple Products Use-After-Free Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2020-3837
Added Jun 27, 2022
Apple Multiple Products Memory Corruption Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2020-9907
Added Jun 27, 2022
Apple Multiple Products Memory Corruption Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2021-30533
Added Jun 27, 2022
Google Chromium PopupBlocker Security Bypass Vulnerability
Google · Chromium PopupBlocker
Ransomware: Unknown
CVE-2021-30983
Added Jun 27, 2022
Apple iOS and iPadOS Buffer Overflow Vulnerability
Apple · iOS and iPadOS
Ransomware: Unknown
CVE-2021-4034
Added Jun 27, 2022
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
Red Hat · Polkit
Ransomware: Known
CVE-2022-29499
Added Jun 27, 2022
Mitel MiVoice Connect Data Validation Vulnerability
Mitel · MiVoice Connect
Ransomware: Known
CVE-2022-30190
Added Jun 14, 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2016-2386
Added Jun 9, 2022
SAP NetWeaver SQL Injection Vulnerability
SAP · NetWeaver
Ransomware: Unknown
CVE-2016-2388
Added Jun 9, 2022
SAP NetWeaver Information Disclosure Vulnerability
SAP · NetWeaver
Ransomware: Unknown
CVE-2021-38163
Added Jun 9, 2022
SAP NetWeaver Unrestricted File Upload Vulnerability
SAP · NetWeaver
Ransomware: Unknown
CVE-2006-2492
Added Jun 8, 2022
Microsoft Word Malformed Object Pointer Vulnerability
Microsoft · Word
Ransomware: Unknown
CVE-2007-5659
Added Jun 8, 2022
Adobe Acrobat and Reader Buffer Overflow Vulnerability
Adobe · Acrobat and Reader
Ransomware: Unknown
CVE-2008-0655
Added Jun 8, 2022
Adobe Acrobat and Reader Unspecified Vulnerability
Adobe · Acrobat and Reader
Ransomware: Unknown
CVE-2009-0557
Added Jun 8, 2022
Microsoft Office Object Record Corruption Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2009-0563
Added Jun 8, 2022
Microsoft Office Buffer Overflow Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2009-1862
Added Jun 8, 2022
Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
Adobe · Acrobat and Reader, Flash Player
Ransomware: Unknown
CVE-2009-3953
Added Jun 8, 2022
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
Adobe · Acrobat and Reader
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.