Skip to content
RequestGuard Vulnerabilities
Pricing

CISA catalog

Known exploited vulnerabilities

Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.

1,716 catalog entriesReleased Sep 18, 2026
Clear

Catalog results

1,716 vulnerabilities

Page 23 of 35

CVE-2017-0148

Added Apr 6, 2022

Microsoft SMBv1 Server Remote Code Execution Vulnerability

Microsoft · SMBv1 server

Ransomware: Known
CVE-2021-31166

Added Apr 6, 2022

Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

Microsoft · HTTP Protocol Stack

Ransomware: Unknown
CVE-2021-3156

Added Apr 6, 2022

Sudo Heap-Based Buffer Overflow Vulnerability

Sudo · Sudo

Ransomware: Unknown
CVE-2021-45382

Added Apr 4, 2022

D-Link Multiple Routers Remote Code Execution Vulnerability

D-Link · Multiple Routers

Ransomware: Unknown
CVE-2022-22674

Added Apr 4, 2022

Apple macOS Out-of-Bounds Read Vulnerability

Apple · macOS

Ransomware: Unknown
CVE-2022-22675

Added Apr 4, 2022

Apple macOS Out-of-Bounds Write Vulnerability

Apple · macOS

Ransomware: Unknown
CVE-2022-22965

Added Apr 4, 2022

Spring Framework JDK 9+ Remote Code Execution Vulnerability

VMware · Spring Framework

Ransomware: Unknown
CVE-2018-10561

Added Mar 31, 2022

Dasan GPON Routers Authentication Bypass Vulnerability

Dasan · Gigabit Passive Optical Network (GPON) Routers

Ransomware: Unknown
CVE-2018-10562

Added Mar 31, 2022

Dasan GPON Routers Command Injection Vulnerability

Dasan · Gigabit Passive Optical Network (GPON) Routers

Ransomware: Known
CVE-2021-21551

Added Mar 31, 2022

Dell dbutil Driver Insufficient Access Control Vulnerability

Dell · dbutil Driver

Ransomware: Unknown
CVE-2021-28799

Added Mar 31, 2022

QNAP NAS Improper Authorization Vulnerability

QNAP · Network Attached Storage (NAS)

Ransomware: Known
CVE-2021-34484

Added Mar 31, 2022

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2022-1040

Added Mar 31, 2022

Sophos Firewall Authentication Bypass Vulnerability

Sophos · Firewall

Ransomware: Unknown
CVE-2022-26871

Added Mar 31, 2022

Trend Micro Apex Central Arbitrary File Upload Vulnerability

Trend Micro · Apex Central

Ransomware: Unknown
CVE-2010-4398

Added Mar 28, 2022

Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2011-2005

Added Mar 28, 2022

Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

Microsoft · Ancillary Function Driver (afd.sys)

Ransomware: Unknown
CVE-2012-0518

Added Mar 28, 2022

Oracle Fusion Middleware Unspecified Vulnerability

Oracle · Fusion Middleware

Ransomware: Unknown
CVE-2012-2034

Added Mar 28, 2022

Adobe Flash Player Memory Corruption Vulnerability

Adobe · Flash Player

Ransomware: Unknown
CVE-2012-2539

Added Mar 28, 2022

Microsoft Word Remote Code Execution Vulnerability

Microsoft · Word

Ransomware: Unknown
CVE-2012-5076

Added Mar 28, 2022

Oracle Java SE Sandbox Bypass Vulnerability

Oracle · Java SE

Ransomware: Unknown
CVE-2013-1690

Added Mar 28, 2022

Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

Mozilla · Firefox and Thunderbird

Ransomware: Unknown
CVE-2013-2465

Added Mar 28, 2022

Oracle Java SE Unspecified Vulnerability

Oracle · Java SE

Ransomware: Known
CVE-2013-2551

Added Mar 28, 2022

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorer

Ransomware: Known
CVE-2013-2729

Added Mar 28, 2022

Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability

Adobe · Reader and Acrobat

Ransomware: Unknown
CVE-2013-3660

Added Mar 28, 2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k

Ransomware: Unknown
CVE-2015-1770

Added Mar 28, 2022

Microsoft Office Uninitialized Memory Use Vulnerability

Microsoft · Office

Ransomware: Unknown
CVE-2015-2419

Added Mar 28, 2022

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer

Ransomware: Unknown
CVE-2015-2426

Added Mar 28, 2022

Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2016-0040

Added Mar 28, 2022

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2016-0151

Added Mar 28, 2022

Microsoft Windows CSRSS Security Feature Bypass Vulnerability

Microsoft · Client-Server Run-time Subsystem (CSRSS)

Ransomware: Known
CVE-2016-0189

Added Mar 28, 2022

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer

Ransomware: Known
CVE-2016-7200

Added Mar 28, 2022

Microsoft Edge Memory Corruption Vulnerability

Microsoft · Edge

Ransomware: Unknown
CVE-2016-7201

Added Mar 28, 2022

Microsoft Edge Memory Corruption Vulnerability

Microsoft · Edge

Ransomware: Unknown
CVE-2017-0037

Added Mar 28, 2022

Microsoft Edge and Internet Explorer Type Confusion Vulnerability

Microsoft · Edge and Internet Explorer

Ransomware: Unknown
CVE-2017-0059

Added Mar 28, 2022

Microsoft Internet Explorer Information Disclosure Vulnerability

Microsoft · Internet Explorer

Ransomware: Unknown
CVE-2017-0213

Added Mar 28, 2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Known
CVE-2018-8405

Added Mar 28, 2022

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL)

Ransomware: Known
CVE-2018-8406

Added Mar 28, 2022

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL)

Ransomware: Known
CVE-2018-8440

Added Mar 28, 2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Known
CVE-2019-7483

Added Mar 28, 2022

SonicWall SMA100 Directory Traversal Vulnerability

SonicWall · SMA100

Ransomware: Unknown
CVE-2021-20028

Added Mar 28, 2022

SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

SonicWall · Secure Remote Access (SRA)

Ransomware: Known
CVE-2021-26085

Added Mar 28, 2022

Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

Atlassian · Confluence Server

Ransomware: Known
CVE-2021-34486

Added Mar 28, 2022

Microsoft Windows Event Tracing Privilege Escalation Vulnerability

Microsoft · Windows

Ransomware: Unknown
CVE-2021-38646

Added Mar 28, 2022

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft · Office

Ransomware: Known
CVE-2022-0543

Added Mar 28, 2022

Debian-specific Redis Server Lua Sandbox Escape Vulnerability

Redis · Debian-specific Redis Servers

Ransomware: Unknown
CVE-2022-1096

Added Mar 28, 2022

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8

Ransomware: Unknown
CVE-2005-2773

Added Mar 25, 2022

HP OpenView Network Node Manager Remote Code Execution Vulnerability

Hewlett Packard (HP) · OpenView Network Node Manager

Ransomware: Unknown
CVE-2009-0927

Added Mar 25, 2022

Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

Adobe · Reader and Acrobat

Ransomware: Unknown
CVE-2009-1151

Added Mar 25, 2022

phpMyAdmin Remote Code Execution Vulnerability

phpMyAdmin · phpMyAdmin

Ransomware: Unknown
CVE-2009-2055

Added Mar 25, 2022

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco · IOS XR

Ransomware: Unknown

Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.