CVE-2012-1854
Added Apr 13, 2026
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability
Microsoft · Visual Basic for Applications (VBA)
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 4 of 35
CVE-2020-9715
Added Apr 13, 2026
Adobe Acrobat Use-After-Free Vulnerability
Adobe · Acrobat
Ransomware: Unknown
CVE-2023-21529
Added Apr 13, 2026
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft · Exchange Server
Ransomware: Known
CVE-2023-36424
Added Apr 13, 2026
Microsoft Windows Out-of-Bounds Read Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-60710
Added Apr 13, 2026
Microsoft Windows Link Following Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2026-21643
Added Apr 13, 2026
Fortinet FortiClient EMS SQL Injection Vulnerability
Fortinet · FortiClient EMS
Ransomware: Unknown
CVE-2026-34621
Added Apr 13, 2026
Adobe Acrobat and Reader Prototype Pollution Vulnerability
Adobe · Acrobat and Reader
Ransomware: Unknown
CVE-2026-1340
Added Apr 8, 2026
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM)
Ransomware: Unknown
CVE-2026-35616
Added Apr 6, 2026
Fortinet FortiClient EMS Improper Access Control Vulnerability
Fortinet · FortiClient EMS
Ransomware: Unknown
CVE-2026-3502
Added Apr 2, 2026
TrueConf Client Download of Code Without Integrity Check Vulnerability
TrueConf · Client
Ransomware: Unknown
CVE-2026-5281
Added Apr 1, 2026
Google Dawn Use-After-Free Vulnerability
Google · Dawn
Ransomware: Unknown
CVE-2026-3055
Added Mar 30, 2026
Citrix NetScaler Out-of-Bounds Read Vulnerability
Citrix · NetScaler
Ransomware: Unknown
CVE-2025-53521
Added Mar 27, 2026
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
F5 · BIG-IP
Ransomware: Unknown
CVE-2026-33634
Added Mar 26, 2026
Aquasecurity Trivy Embedded Malicious Code Vulnerability
Aquasecurity · Trivy
Ransomware: Unknown
CVE-2026-33017
Added Mar 25, 2026
Langflow Code Injection Vulnerability
Langflow · Langflow
Ransomware: Unknown
CVE-2025-31277
Added Mar 20, 2026
Apple Multiple Products Buffer Overflow Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2025-32432
Added Mar 20, 2026
Craft CMS Code Injection Vulnerability
Craft CMS · Craft CMS
Ransomware: Unknown
CVE-2025-43510
Added Mar 20, 2026
Apple Multiple Products Improper Locking Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2025-43520
Added Mar 20, 2026
Apple Multiple Products Classic Buffer Overflow Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2025-54068
Added Mar 20, 2026
Laravel Livewire Code Injection Vulnerability
Laravel · Livewire
Ransomware: Unknown
CVE-2026-20131
Added Mar 19, 2026
Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability
Cisco · Secure Firewall Management Center (FMC)
Ransomware: Known
CVE-2025-66376
Added Mar 18, 2026
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Unknown
CVE-2026-20963
Added Mar 18, 2026
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft · SharePoint
Ransomware: Unknown
CVE-2025-47813
Added Mar 16, 2026
Wing FTP Server Information Disclosure Vulnerability
Wing FTP Server · Wing FTP Server
Ransomware: Unknown
CVE-2026-3909
Added Mar 13, 2026
Google Skia Out-of-Bounds Write Vulnerability
Google · Skia
Ransomware: Unknown
CVE-2026-3910
Added Mar 13, 2026
Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2025-68613
Added Mar 11, 2026
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability
n8n · n8n
Ransomware: Unknown
CVE-2021-22054
Added Mar 9, 2026
Omnissa Workspace ONE Server-Side Request Forgery
Omnissa · Workspace One UEM
Ransomware: Unknown
CVE-2025-26399
Added Mar 9, 2026
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds · Web Help Desk
Ransomware: Known
CVE-2026-1603
Added Mar 9, 2026
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
Ivanti · Endpoint Manager (EPM)
Ransomware: Unknown
CVE-2017-7921
Added Mar 5, 2026
Hikvision Multiple Products Improper Authentication Vulnerability
Hikvision · Multiple Products
Ransomware: Unknown
CVE-2021-22681
Added Mar 5, 2026
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
Rockwell · Multiple Products
Ransomware: Unknown
CVE-2021-30952
Added Mar 5, 2026
Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2023-41974
Added Mar 5, 2026
Apple iOS and iPadOS Use-After-Free Vulnerability
Apple · iOS and iPadOS
Ransomware: Unknown
CVE-2023-43000
Added Mar 5, 2026
Apple Multiple products Use-After-Free Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2026-21385
Added Mar 3, 2026
Qualcomm Multiple Chipsets Memory Corruption Vulnerability
Qualcomm · Multiple Chipsets
Ransomware: Unknown
CVE-2026-22719
Added Mar 3, 2026
Broadcom VMware Aria Operations Command Injection Vulnerability
Broadcom · VMware Aria Operations
Ransomware: Unknown
CVE-2022-20775
Added Feb 25, 2026
Cisco SD-WAN Path Traversal Vulnerability
Cisco · SD-WAN
Ransomware: Unknown
CVE-2026-20127
Added Feb 25, 2026
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
Cisco · Catalyst SD-WAN Controller and Manager
Ransomware: Unknown
CVE-2026-25108
Added Feb 24, 2026
Soliton Systems K.K FileZen OS Command Injection Vulnerability
Soliton Systems K.K · FileZen
Ransomware: Unknown
CVE-2025-49113
Added Feb 20, 2026
RoundCube Webmail Deserialization of Untrusted Data Vulnerability
Roundcube · Webmail
Ransomware: Unknown
CVE-2025-68461
Added Feb 20, 2026
RoundCube Webmail Cross-site Scripting Vulnerability
Roundcube · Webmail
Ransomware: Unknown
CVE-2021-22175
Added Feb 18, 2026
GitLab Server-Side Request Forgery (SSRF) Vulnerability
GitLab · GitLab
Ransomware: Unknown
CVE-2026-22769
Added Feb 18, 2026
Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability
Dell · RecoverPoint for Virtual Machines (RP4VMs)
Ransomware: Unknown
CVE-2008-0015
Added Feb 17, 2026
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2020-7796
Added Feb 17, 2026
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability
Synacor · Zimbra Collaboration Suite
Ransomware: Unknown
CVE-2024-7694
Added Feb 17, 2026
TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability
TeamT5 · ThreatSonar Anti-Ransomware
Ransomware: Unknown
CVE-2026-2441
Added Feb 17, 2026
Google Chromium CSS Use-After-Free Vulnerability
Google · Chromium
Ransomware: Unknown
CVE-2026-1731
Added Feb 13, 2026
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability
BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)
Ransomware: Known
CVE-2024-43468
Added Feb 12, 2026
Microsoft Configuration Manager SQL Injection Vulnerability
Microsoft · Configuration Manager
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.