Known Exploited Vulnerabilities

Focus on What Matters

There are 303,822 vulnerabilities in the CVE database.
Whilst only 0.7% are ever actively exploited.

This list contains the vulnerabilities that are actively exploited by malware and threat actors that you should prioritize first.

This table displays known exploited vulnerabilities (KEVs) that have been cataloged from over 60 public sources, including CISA, and our own private sensors. Each entry links to a CVE identifier, where the CVE details are enriched with EPSS scores, online mentions, scanner inclusion, exploitation, tags, and other metadata. The goal is to be an early warning system, even before being published by CISA. More data and features coming soon!

CVE ID	Title	Vendor	Product	Added	Source
CVE-2017-6740	The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an...	Cisco, IntelliShield	IOS, Universal Product	2022-03-03 00:00:00 UTC	CISA
CVE-2017-6739	A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely...	IntelliShield	Universal Product	2022-03-03 00:00:00 UTC	CISA
CVE-2017-6738	The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an...	Cisco	IOS, Cisco IOS XE Software	2022-03-03 00:00:00 UTC	CISA
CVE-2017-6737	A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely...	Cisco	IOS	2022-03-03 00:00:00 UTC	CISA
CVE-2017-6736	The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an...	Cisco, IntelliShield	IOS, Universal Product	2022-03-03 00:00:00 UTC	CISA
CVE-2017-6663	A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent...	Cisco	Cisco IOS and IOS XE	2022-03-03 00:00:00 UTC	CISA
CVE-2017-12319	A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an...	Cisco	Cisco IOS XE	2022-03-03 00:00:00 UTC	CISA
CVE-2017-12240	The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated,...	Cisco	Cisco IOS and IOS XE	2022-03-03 00:00:00 UTC	CISA
CVE-2017-12238	A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow...	Cisco	Cisco IOS	2022-03-03 00:00:00 UTC	CISA
CVE-2017-12237	A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow...	Cisco	Cisco IOS and IOS XE	2022-03-03 00:00:00 UTC	CISA
CVE-2017-12235	A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an...	Cisco	Cisco IOS	2022-03-03 00:00:00 UTC	CISA
CVE-2017-12234	Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an...	Cisco	Cisco IOS	2022-03-03 00:00:00 UTC	CISA
CVE-2017-12233	Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an...	Cisco	Cisco IOS	2022-03-03 00:00:00 UTC	CISA
CVE-2017-12232	A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0...	Cisco	Cisco IOS	2022-03-03 00:00:00 UTC	CISA
CVE-2017-12231	A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an...	Cisco	Cisco IOS	2022-03-03 00:00:00 UTC	CISA
CVE-2017-11826	Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word...	Microsoft Corporation	Microsoft Office	2022-03-03 00:00:00 UTC	CISA
CVE-2017-11292	Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in...	Adobe	Adobe Flash Player version 27.0.0.159 and earlier	2022-03-03 00:00:00 UTC	CISA
CVE-2017-0261	Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle...	Microsoft Corporation	Microsoft Office	2022-03-03 00:00:00 UTC	CISA
CVE-2017-0001	The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server...	Microsoft Corporation	Windows GDI	2022-03-03 00:00:00 UTC	CISA
CVE-2016-8562	A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under...	Siemens	SIMATIC CP 1543-1, SIPLUS NET CP 1543-1	2022-03-03 00:00:00 UTC	CISA
CVE-2016-7855	Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers...	Adobe	Flash Player	2022-03-03 00:00:00 UTC	CISA
CVE-2016-7262	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow...	Microsoft	Excel	2022-03-03 00:00:00 UTC	CISA
CVE-2016-7193	Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility...	Microsoft	Word	2022-03-03 00:00:00 UTC	CISA
CVE-2016-5195	Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling...	Linux	Linux Kernel	2022-03-03 00:00:00 UTC	CISA
CVE-2016-4117	Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in...	Adobe	Flash Player	2022-03-03 00:00:00 UTC	CISA

Displaying vulnerabilities 1401 - 1425 of 2004 in total