[ Exploited · 1,754 CVEs ]
Exploited in the wild.
Every CVE on CISA's Known Exploited Vulnerabilities catalogue, most recently added first. If you run one of these products, patch it now.
KEV catalogue version 2026.10.21
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2019-0863 | 16 May 2019 | CVSS 7.8 | Microsoft Windows Error Reporting (WER) Privilege EscalationAn elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of… | ExploitedFix |
| CVE-2019-0859 | 9 Apr 2019 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… | ExploitedFix |
| CVE-2019-0808 | 9 Apr 2019 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… | ExploitedFix |
| CVE-2019-0803 | 9 Apr 2019 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… | ExploitedFix |
| CVE-2019-0797 | 9 Apr 2019 | CVSS 7.8 | Microsoft Win32k Privilege EscalationAn elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation… | ExploitedFix |
| CVE-2019-0708 | 16 May 2019 | CVSS 9.8 | Microsoft Remote Desktop Services Remote Code ExecutionA remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects… | ExploitedFix |
| CVE-2019-0604 | 5 Mar 2019 | CVSS 9.8 | Microsoft SharePoint Remote Code ExecutionA remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package… | ExploitedFix |
| CVE-2019-0541 | 8 Jan 2019 | CVSS 8.8 | Microsoft MSHTML Remote Code ExecutionA remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution… | ExploitedFix |
| CVE-2019-0211 | 8 Apr 2019 | CVSS 7.8 | Apache HTTP Server Privilege EscalationIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads… | ExploitedFix |
| CVE-2018-8653 | 20 Dec 2018 | CVSS 7.5 | Microsoft Internet Explorer Scripting Engine Memory CorruptionA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting… | ExploitedFix |
| CVE-2018-7600 | 29 Mar 2018 | CVSS 9.8 | Drupal Core Remote Code ExecutionDrupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an… | ExploitedFix |
| CVE-2018-6789 | 8 Feb 2018 | CVSS 9.8 | Exim Buffer OverflowAn issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may… | ExploitedFix |
| CVE-2018-4939 | 19 May 2018 | CVSS 9.8 | Adobe ColdFusion Deserialization of Untrusted DataAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data… | Exploited |
| CVE-2018-4878 | 6 Feb 2018 | CVSS 7.8 | Adobe Flash Player Use-After-FreeA use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the… | Exploited |
| CVE-2018-2380 | 1 Mar 2018 | CVSS 6.6 | SAP Customer Relationship Management (CRM) Path TraversalSAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus… | Exploited |
| CVE-2018-20062 | 11 Dec 2018 | CVSS 9.8 | ThinkPHP "noneCms" Remote Code ExecutionAn issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the… | Exploited |
| CVE-2018-18325 | 3 Jul 2019 | CVSS 7.5 | DotNetNuke (DNN) Inadequate Encryption StrengthDNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete… | Exploited |
| CVE-2018-15961 | 25 Sep 2018 | CVSS 9.8 | Adobe ColdFusion Unrestricted File UploadAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload… | Exploited |
| CVE-2018-15811 | 3 Jul 2019 | CVSS 7.5 | DotNetNuke (DNN) Inadequate Encryption StrengthDNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters. | Exploited |
| CVE-2018-14558 | 30 Oct 2018 | CVSS 9.8 | Tenda AC7, AC9, and AC10 Routers Command InjectionAn issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through… | Exploited |
| CVE-2018-13379 | 4 Jun 2019 | CVSS 9.8 | Fortinet FortiOS SSL VPN Path TraversalAn Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to… | Exploited |
| CVE-2018-11776 | 22 Aug 2018 | CVSS 8.1 | Apache Struts Remote Code ExecutionApache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by… | ExploitedFix |
| CVE-2018-0802 | 10 Jan 2018 | CVSS 7.8 | Microsoft Office Memory CorruptionEquation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution… | ExploitedFix |
| CVE-2018-0798 | 10 Jan 2018 | CVSS 8.8 | Microsoft Office Memory CorruptionEquation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… | ExploitedFix |
| CVE-2018-0296 | 7 Jun 2018 | CVSS 7.5 | Cisco Adaptive Security Appliance (ASA) Denial-of-ServiceA vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an… | Exploited |
| CVE-2018-0171 | 28 Mar 2018 | CVSS 9.8 | Cisco IOS and IOS XE Software Smart Install Remote Code ExecutionA vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to… | Exploited |
| CVE-2017-9822 | 20 Jul 2017 | CVSS 8.8 | DotNetNuke (DNN) Remote Code ExecutionDNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites." | Exploited |
| CVE-2017-9805 | 15 Sep 2017 | CVSS 8.1 | Apache Struts Deserialization of Untrusted DataThe REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for… | ExploitedFix |
| CVE-2017-9248 | 3 Jul 2017 | CVSS 9.8 | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic WeaknessTelerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect… | Exploited |
| CVE-2017-8759 | 13 Sep 2017 | CVSS 7.8 | Microsoft .NET Framework Remote Code ExecutionMicrosoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or… | ExploitedFix |
| CVE-2017-7269 | 27 Mar 2017 | CVSS 9.8 | Microsoft Windows Server Buffer OverflowBuffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server… | ExploitedFix |
| CVE-2017-6327 | 11 Aug 2017 | CVSS 8.8 | Symantec Messaging Gateway Remote Code ExecutionThe Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual… | Exploited |
| CVE-2017-5638 | 11 Mar 2017 | CVSS 9.8 | Apache Struts Remote Code ExecutionThe Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message… | ExploitedFix |
| CVE-2017-16651 | 9 Nov 2017 | CVSS 7.8 | Roundcube Webmail File DisclosureRoundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem… | ExploitedFix |
| CVE-2017-11882 | 15 Nov 2017 | CVSS 7.8 | Microsoft Office Memory CorruptionMicrosoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an… | ExploitedFix |
| CVE-2017-11774 | 13 Oct 2017 | CVSS 7.8 | Microsoft Office Outlook Security Feature BypassMicrosoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft… | ExploitedFix |
| CVE-2017-0199 | 12 Apr 2017 | CVSS 7.8 | Microsoft Office and WordPad Remote Code ExecutionMicrosoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server… | ExploitedFix |
| CVE-2017-0143 | 17 Mar 2017 | CVSS 8.8 | Microsoft Windows Server Message Block (SMBv1) Remote Code ExecutionThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2… | ExploitedFix |
| CVE-2016-9563 | 23 Nov 2016 | CVSS 6.5 | SAP NetWeaver XML External Entity (XXE)BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the… | Exploited |
| CVE-2016-7255 | 10 Nov 2016 | CVSS 7.8 | Microsoft Win32k Privilege EscalationThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… | ExploitedFix |
| CVE-2016-4437 | 7 Jun 2016 | CVSS 9.8 | Apache Shiro Code ExecutionApache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code… | Exploited |
| CVE-2016-3976 | 7 Apr 2016 | CVSS 7.5 | SAP NetWeaver Directory TraversalDirectory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot… | Exploited |
| CVE-2016-3718 | 5 May 2016 | CVSS 5.5 | ImageMagick Server-Side Request Forgery (SSRF)The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery… | ExploitedFix |
| CVE-2016-3715 | 5 May 2016 | CVSS 5.5 | ImageMagick Arbitrary File DeletionThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. | ExploitedFix |
| CVE-2016-3643 | 17 Jun 2016 | CVSS 7.8 | SolarWinds Virtualization Manager Privilege EscalationSolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by… | Exploited |
| CVE-2016-3235 | 16 Jun 2016 | CVSS 7.8 | Microsoft Office OLE DLL Side LoadingMicrosoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which… | ExploitedFix |
| CVE-2016-0185 | 11 May 2016 | CVSS 7.8 | Microsoft Windows Media Center Remote Code ExecutionMedia Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media… | ExploitedFix |
| CVE-2016-0167 | 12 Apr 2016 | CVSS 7.8 | Microsoft Win32k Privilege EscalationThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… | ExploitedFix |
| CVE-2015-4852 | 18 Nov 2015 | CVSS 9.8 | Oracle WebLogic Server Deserialization of Untrusted DataThe WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands… | ExploitedFix |
| CVE-2015-1641 | 14 Apr 2015 | CVSS 7.8 | Microsoft Office Memory CorruptionMicrosoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word… | ExploitedFix |
| CVE-2014-1812 | 14 May 2014 | CVSS 8.8 | Microsoft Windows Group Policy Preferences Password Privilege EscalationThe Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and… | ExploitedFix |
| CVE-2012-3152 | 16 Oct 2012 | CVSS 9.1 | Oracle Fusion Middleware UnspecifiedUnspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote… | ExploitedFix |
| CVE-2012-0158 | 10 Apr 2012 | CVSS 8.8 | Microsoft MSCOMCTL.OCX Remote Code ExecutionThe (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003… | ExploitedFix |
| CVE-2010-5326 | 13 May 2016 | CVSS 10.0 | SAP NetWeaver Remote Code ExecutionThe Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote… | Exploited |
Page 18 of 18