Known Exploited Vulnerabilities

Focus on What Matters

There are 298,217 vulnerabilities in the CVE database.
Whilst only 0.6% are ever actively exploited.

This list contains the vulnerabilities that are actively exploited by malware and threat actors that you should prioritize first.

This table displays known exploited vulnerabilities (KEVs) that have been cataloged from over 60 public sources, including CISA, and our own private sensors. Each entry links to a CVE identifier, where the CVE details are enriched with EPSS scores, online mentions, scanner inclusion, exploitation, tags, and other metadata. The goal is to be an early warning system, even before being published by CISA. More data and features coming soon!

CVE ID	Title	Vendor	Product	Added	Source
CVE-2010-1297	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and...	Adobe	["Flash Player", "AIR", "Reader", "Acrobat"]	2022-06-08 00:00:00 UTC	CISA
CVE-2009-4324	Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on...	Adobe	Reader and Acrobat	2022-06-08 00:00:00 UTC	CISA
CVE-2009-3953	The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote...	Adobe	Reader and Acrobat	2022-06-08 00:00:00 UTC	CISA
CVE-2009-1862	Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87,...	Adobe	Reader and Acrobat, Flash Player	2022-06-08 00:00:00 UTC	CISA
CVE-2009-0563	Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML...	Microsoft	Office	2022-06-08 00:00:00 UTC	CISA
CVE-2009-0557	Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and...	Microsoft	Office	2022-06-08 00:00:00 UTC	CISA
CVE-2008-0655	Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.	Adobe	Reader and Acrobat	2022-06-08 00:00:00 UTC	CISA
CVE-2007-5659	Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long...	Adobe	Reader and Acrobat	2022-06-08 00:00:00 UTC	CISA
CVE-2006-2492	Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows...	Microsoft	Word	2022-06-08 00:00:00 UTC	CISA
CVE-2022-26134	In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to...	Atlassian	Confluence Data Center, Confluence Server	2022-06-02 00:00:00 UTC	CISA
CVE-2014-0546	Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and...	Adobe	Reader and Acrobat	2022-05-25 00:00:00 UTC	CISA
CVE-2014-8439	Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before...	Adobe	Flash Player	2022-05-25 00:00:00 UTC	CISA
CVE-2014-4148	win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...	Microsoft	Windows	2022-05-25 00:00:00 UTC	CISA
CVE-2019-3010	Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily...	Oracle Corporation	Solaris Operating System	2022-05-25 00:00:00 UTC	CISA
CVE-2016-3393	Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows...	Microsoft	Windows	2022-05-25 00:00:00 UTC	CISA
CVE-2015-0310	Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly...	Adobe	Flash Player	2022-05-25 00:00:00 UTC	CISA
CVE-2016-0034	Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or...	Microsoft	Silverlight	2022-05-25 00:00:00 UTC	CISA
CVE-2016-0984	Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before...	Adobe	Flash Player	2022-05-25 00:00:00 UTC	CISA
CVE-2016-1010	Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on...	Adobe	Flash Player	2022-05-25 00:00:00 UTC	CISA
CVE-2015-1769	Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold...	Microsoft	Windows	2022-05-25 00:00:00 UTC	CISA
CVE-2015-2425	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web...	Microsoft	Internet Explorer	2022-05-25 00:00:00 UTC	CISA
CVE-2015-2360	win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...	Microsoft	Windows	2022-05-25 00:00:00 UTC	CISA
CVE-2014-4123	Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of...	Microsoft	Internet Explorer	2022-05-25 00:00:00 UTC	CISA
CVE-2015-0071	Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet...	Microsoft	Internet Explorer	2022-05-25 00:00:00 UTC	CISA
CVE-2016-7256	atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows...	Microsoft	Windows	2022-05-25 00:00:00 UTC	CISA

Displaying vulnerabilities 951 - 975 of 1856 in total