CVE-2025-15556
Added Feb 12, 2026
Notepad++ Download of Code Without Integrity Check Vulnerability
Notepad++ · Notepad++
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 5 of 35
CVE-2025-40536
Added Feb 12, 2026
SolarWinds Web Help Desk Security Control Bypass Vulnerability
SolarWinds · Web Help Desk
Ransomware: Unknown
CVE-2026-20700
Added Feb 12, 2026
Apple Multiple Buffer Overflow Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2026-21510
Added Feb 10, 2026
Microsoft Windows Shell Protection Mechanism Failure Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2026-21513
Added Feb 10, 2026
Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2026-21514
Added Feb 10, 2026
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2026-21519
Added Feb 10, 2026
Microsoft Windows Type Confusion Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2026-21525
Added Feb 10, 2026
Microsoft Windows NULL Pointer Dereference Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2026-21533
Added Feb 10, 2026
Microsoft Windows Improper Privilege Management Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-11953
Added Feb 5, 2026
React Native Community CLI OS Command Injection Vulnerability
React Native Community · CLI
Ransomware: Unknown
CVE-2026-24423
Added Feb 5, 2026
SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
SmarterTools · SmarterMail
Ransomware: Known
CVE-2019-19006
Added Feb 3, 2026
Sangoma FreePBX Improper Authentication Vulnerability
Sangoma · FreePBX
Ransomware: Unknown
CVE-2021-39935
Added Feb 3, 2026
GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability
GitLab · Community and Enterprise Editions
Ransomware: Unknown
CVE-2025-40551
Added Feb 3, 2026
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
SolarWinds · Web Help Desk
Ransomware: Unknown
CVE-2025-64328
Added Feb 3, 2026
Sangoma FreePBX OS Command Injection Vulnerability
Sangoma · FreePBX
Ransomware: Unknown
CVE-2026-1281
Added Jan 29, 2026
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM)
Ransomware: Unknown
CVE-2026-24858
Added Jan 27, 2026
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
Fortinet · Multiple Products
Ransomware: Unknown
CVE-2018-14634
Added Jan 26, 2026
Linux Kernel Integer Overflow Vulnerability
Linux · Kernel
Ransomware: Unknown
CVE-2025-52691
Added Jan 26, 2026
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
SmarterTools · SmarterMail
Ransomware: Known
CVE-2026-21509
Added Jan 26, 2026
Microsoft Office Security Feature Bypass Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2026-23760
Added Jan 26, 2026
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
SmarterTools · SmarterMail
Ransomware: Known
CVE-2026-24061
Added Jan 26, 2026
GNU InetUtils Argument Injection Vulnerability
GNU · InetUtils
Ransomware: Unknown
CVE-2024-37079
Added Jan 23, 2026
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
Broadcom · VMware vCenter Server
Ransomware: Unknown
CVE-2025-31125
Added Jan 22, 2026
Vite Vitejs Improper Access Control Vulnerability
Vite · Vitejs
Ransomware: Unknown
CVE-2025-34026
Added Jan 22, 2026
Versa Concerto Improper Authentication Vulnerability
Versa · Concerto
Ransomware: Unknown
CVE-2025-54313
Added Jan 22, 2026
Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
Prettier · eslint-config-prettier
Ransomware: Unknown
CVE-2025-68645
Added Jan 22, 2026
Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
Ransomware: Unknown
CVE-2026-20045
Added Jan 21, 2026
Cisco Unified Communications Products Code Injection Vulnerability
Cisco · Unified Communications Manager
Ransomware: Unknown
CVE-2026-20805
Added Jan 13, 2026
Microsoft Windows Information Disclosure Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2025-8110
Added Jan 12, 2026
Gogs Path Traversal Vulnerability
Gogs · Gogs
Ransomware: Unknown
CVE-2009-0556
Added Jan 7, 2026
Microsoft Office PowerPoint Code Injection Vulnerability
Microsoft · Office
Ransomware: Unknown
CVE-2025-37164
Added Jan 7, 2026
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
Hewlett Packard Enterprise (HPE) · OneView
Ransomware: Unknown
CVE-2025-14847
Added Dec 29, 2025
MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability
MongoDB · MongoDB and MongoDB Server
Ransomware: Unknown
CVE-2023-52163
Added Dec 22, 2025
Digiever DS-2105 Pro Missing Authorization Vulnerability
Digiever · DS-2105 Pro
Ransomware: Unknown
CVE-2025-14733
Added Dec 19, 2025
WatchGuard Firebox Out of Bounds Write Vulnerability
WatchGuard · Firebox
Ransomware: Known
CVE-2025-20393
Added Dec 17, 2025
Cisco Multiple Products Improper Input Validation Vulnerability
Cisco · Multiple Products
Ransomware: Unknown
CVE-2025-40602
Added Dec 17, 2025
SonicWall SMA1000 Missing Authorization Vulnerability
SonicWall · SMA1000 appliance
Ransomware: Unknown
CVE-2025-59374
Added Dec 17, 2025
ASUS Live Update Embedded Malicious Code Vulnerability
ASUS · Live Update
Ransomware: Unknown
CVE-2025-59718
Added Dec 16, 2025
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
Fortinet · Multiple Products
Ransomware: Unknown
CVE-2025-14611
Added Dec 15, 2025
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
Gladinet · CentreStack and Triofox
Ransomware: Unknown
CVE-2025-43529
Added Dec 15, 2025
Apple Multiple Products Use-After-Free WebKit Vulnerability
Apple · Multiple Products
Ransomware: Unknown
CVE-2018-4063
Added Dec 12, 2025
Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
Sierra Wireless · AirLink ALEOS
Ransomware: Unknown
CVE-2025-14174
Added Dec 12, 2025
Google Chromium Out of Bounds Memory Access Vulnerability
Google · Chromium
Ransomware: Unknown
CVE-2025-58360
Added Dec 11, 2025
OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability
OSGeo · GeoServer
Ransomware: Unknown
CVE-2025-6218
Added Dec 9, 2025
RARLAB WinRAR Path Traversal Vulnerability
RARLAB · WinRAR
Ransomware: Unknown
CVE-2025-62221
Added Dec 9, 2025
Microsoft Windows Use After Free Vulnerability
Microsoft · Windows
Ransomware: Unknown
CVE-2022-37055
Added Dec 8, 2025
D-Link Routers Buffer Overflow Vulnerability
D-Link · Routers
Ransomware: Unknown
CVE-2025-66644
Added Dec 8, 2025
Array Networks ArrayOS AG OS Command Injection Vulnerability
Array Networks · ArrayOS AG
Ransomware: Unknown
CVE-2025-55182
Added Dec 5, 2025
Meta React Server Components Remote Code Execution Vulnerability
Meta · React Server Components
Ransomware: Known
CVE-2021-26828
Added Dec 3, 2025
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
OpenPLC · ScadaBR
Ransomware: Unknown
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.