KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

KEV / Ransomware

KEV vulnerabilities used in ransomware campaigns

Entries where CISA's knownRansomwareCampaignUse field is "Known". "Unknown" means not confirmed, not ruled out.

Catalog
2026.09.23
Entries
361

Answer 361 of 1,721 KEV entries (21%) are flagged as known to be used in ransomware campaigns as of catalog 2026.09.23. The vendor with the most is Microsoft (117).

RShare flagged, by year added

Share of KEV additions flagged as known ransomware use, by year added2021: 27% of 311; 2022: 23.8% of 555; 2023: 23% of 187; 2024: 23.7% of 186; 2025: 12.7% of 245; 2026: 11.4% of 23701020302021: 27% flagged known2720212022: 23.8% flagged known23.820222023: 23% flagged known2320232024: 23.7% flagged known23.720242025: 12.7% flagged known12.720252026: 11.4% flagged known11.42026
Known ransomware use by year added
YearAddedKnownShare
20213118427%
202255513223.8%
20231874323%
20241864423.7%
20252453112.7%
20262372711.4%

VVendors with most ransomware-linked entries

Vendors by ransomware-linked KEV entries
VendorEntriesShare
Microsoft11732.4%
Fortinet143.9%
SonicWall133.6%
Oracle133.6%
Ivanti123.3%
Adobe113%
VMware92.5%
QNAP92.5%
Atlassian82.2%
Apache82.2%
Cisco71.9%
Citrix71.9%

EAll ransomware-linked entries

KEV entries with known ransomware campaign use
CVEVendorProductVulnerabilityAddedCWE
CVE-2026-59310BroadcomVMware vCenterBroadcom VMware vCenter Path Traversal VulnerabilityCWE-22
CVE-2026-63077JetBrainsTeamCityJetBrains TeamCity Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2026-20316CiscoSecure Firewall Management Center (FMC)Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityCWE-259
CVE-2026-15410SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Code Injection VulnerabilityCWE-94
CVE-2026-15409SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityCWE-918
CVE-2026-45659MicrosoftSharePoint ServerMicrosoft SharePoint Server Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2026-12569PTCWindchill and FlexPLMPTC Windchill and FlexPLM Improper Input Validation VulnerabilityCWE-20, CWE-502
CVE-2026-35273Oracle PeopleSoft Enterprise PeopleToolsOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityCWE-306
CVE-2026-50751Check PointSecurity GatewayCheck Point Security Gateway Improper Authentication VulnerabilityCWE-287
CVE-2026-0257Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Authentication Bypass VulnerabilityCWE-565
CVE-2026-48027NxNx ConsoleNx Console Embedded Malicious Code VulnerabilityCWE-506
CVE-2026-45321TanStackTanStackTanStack Unspecified Vulnerabilitynone listed
CVE-2026-41940WebProscPanel & WHM and WP2 (WordPress Squared)WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityCWE-306
CVE-2024-1708ConnectWiseScreenConnectConnectWise ScreenConnect Path Traversal VulnerabilityCWE-22
CVE-2024-57728SimpleHelp SimpleHelpSimpleHelp Path Traversal VulnerabilityCWE-22
CVE-2024-57726SimpleHelp SimpleHelpSimpleHelp Missing Authorization VulnerabilityCWE-862
CVE-2026-33825MicrosoftDefenderMicrosoft Defender Insufficient Granularity of Access Control VulnerabilityCWE-1220
CVE-2024-27199JetBrainsTeamCityJetBrains TeamCity Relative Path Traversal VulnerabilityCWE-23
CVE-2023-27351PaperCutNG/MFPaperCut NG/MF Improper Authentication VulnerabilityCWE-287
CVE-2025-60710MicrosoftWindowsMicrosoft Windows Link Following VulnerabilityCWE-59
CVE-2023-21529MicrosoftExchange ServerMicrosoft Exchange Server Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2026-20131CiscoSecure Firewall Management Center (FMC)Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2025-26399SolarWindsWeb Help DeskSolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2026-1731BeyondTrustRemote Support (RS) and Privileged Remote Access (PRA)BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection VulnerabilityCWE-78
CVE-2026-24423SmarterToolsSmarterMailSmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityCWE-306
CVE-2026-23760SmarterToolsSmarterMailSmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityCWE-288
CVE-2025-52691SmarterToolsSmarterMailSmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityCWE-434
CVE-2025-14733WatchGuardFireboxWatchGuard Firebox Out of Bounds Write VulnerabilityCWE-787
CVE-2025-55182MetaReact Server ComponentsMeta React Server Components Remote Code Execution Vulnerabilitynone listed
CVE-2025-61884OracleE-Business SuiteOracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityCWE-918
CVE-2025-61882OracleE-Business SuiteOracle E-Business Suite Unspecified Vulnerabilitynone listed
CVE-2021-43226MicrosoftWindowsMicrosoft Windows Privilege Escalation Vulnerabilitynone listed
CVE-2025-10035FortraGoAnywhere MFTFortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityCWE-502, CWE-77
CVE-2025-8088RARLABWinRARRARLAB WinRAR Path Traversal VulnerabilityCWE-35
CVE-2025-49706MicrosoftSharePointMicrosoft SharePoint Improper Authentication VulnerabilityCWE-287
CVE-2025-49704MicrosoftSharePointMicrosoft SharePoint Code Injection VulnerabilityCWE-94
CVE-2025-53770MicrosoftSharePointMicrosoft SharePoint Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2025-5777CitrixNetScaler ADC and GatewayCitrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityCWE-125
CVE-2019-6693FortinetFortiOSFortinet FortiOS Use of Hard-Coded Credentials VulnerabilityCWE-798
CVE-2025-42999SAPNetWeaverSAP NetWeaver Deserialization VulnerabilityCWE-502
CVE-2025-3248LangflowLangflowLangflow Missing Authentication VulnerabilityCWE-306
CVE-2025-31324SAPNetWeaverSAP NetWeaver Unrestricted File Upload VulnerabilityCWE-434
CVE-2025-29824MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityCWE-416
CVE-2025-31161CrushFTPCrushFTPCrushFTP Authentication Bypass VulnerabilityCWE-305
CVE-2025-22457IvantiConnect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityCWE-121
CVE-2025-24472FortinetFortiOS and FortiProxyFortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityCWE-288
CVE-2025-26633MicrosoftWindowsMicrosoft Windows Management Console (MMC) Improper Neutralization VulnerabilityCWE-707
CVE-2025-22225VMwareESXiVMware ESXi Arbitrary Write VulnerabilityCWE-123
CVE-2018-8639MicrosoftWindowsMicrosoft Windows Win32k Improper Resource Shutdown or Release VulnerabilityCWE-404
CVE-2024-53704SonicWallSonicOSSonicWall SonicOS SSLVPN Improper Authentication VulnerabilityCWE-287
CVE-2024-57727SimpleHelp SimpleHelpSimpleHelp Path Traversal VulnerabilityCWE-22
CVE-2020-29574SophosCyberoamOSCyberoamOS (CROS) SQL Injection VulnerabilityCWE-89
CVE-2025-23006SonicWallSMA1000 AppliancesSonicWall SMA1000 Appliances Deserialization VulnerabilityCWE-502
CVE-2024-55591FortinetFortiOS and FortiProxyFortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityCWE-288
CVE-2023-48365QlikSenseQlik Sense HTTP Tunneling VulnerabilityCWE-444
CVE-2025-0282IvantiConnect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityCWE-121
CVE-2024-55550MitelMiCollabMitel MiCollab Path Traversal VulnerabilityCWE-22
CVE-2024-41713MitelMiCollabMitel MiCollab Path Traversal VulnerabilityCWE-22
CVE-2024-55956CleoMultiple ProductsCleo Multiple Products Unauthenticated File Upload VulnerabilityCWE-276
CVE-2024-50623CleoMultiple ProductsCleo Multiple Products Unrestricted File Upload VulnerabilityCWE-434
CVE-2024-51378CyberPersonsCyberPanelCyberPanel Incorrect Default Permissions VulnerabilityCWE-276
CVE-2024-11667ZyxelMultiple FirewallsZyxel Multiple Firewalls Path Traversal VulnerabilityCWE-22
CVE-2023-28461Array Networks AG/vxAG ArrayOSArray Networks AG and vxAG ArrayOS Missing Authentication for Critical Function VulnerabilityCWE-306
CVE-2024-9474Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityCWE-77
CVE-2024-0012Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityCWE-306
CVE-2024-49039MicrosoftWindowsMicrosoft Windows Task Scheduler Privilege Escalation VulnerabilityCWE-287
CVE-2024-51567CyberPersonsCyberPanelCyberPanel Incorrect Default Permissions VulnerabilityCWE-276
CVE-2024-38094MicrosoftSharePointMicrosoft SharePoint Deserialization VulnerabilityCWE-502
CVE-2024-40711VeeamBackup & ReplicationVeeam Backup and Replication Deserialization VulnerabilityCWE-502
CVE-2024-9680MozillaFirefoxMozilla Firefox Use-After-Free VulnerabilityCWE-416
CVE-2024-30088MicrosoftWindows Microsoft Windows Kernel TOCTOU Race Condition VulnerabilityCWE-367
CVE-2020-0618MicrosoftSQL ServerMicrosoft SQL Server Reporting Services Remote Code Execution VulnerabilityCWE-502
CVE-2024-6670ProgressWhatsUp GoldProgress WhatsUp Gold SQL Injection VulnerabilityCWE-89
CVE-2024-40766SonicWallSonicOSSonicWall SonicOS Improper Access Control VulnerabilityCWE-284
CVE-2017-1000253LinuxKernelLinux Kernel PIE Stack Buffer Corruption Vulnerability CWE-119
CVE-2024-23897JenkinsJenkins Command Line Interface (CLI)Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityCWE-27
CVE-2024-37085VMwareESXiVMware ESXi Authentication Bypass VulnerabilityCWE-305
CVE-2024-23692RejettoHTTP File ServerRejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityCWE-1336
CVE-2024-26169MicrosoftWindowsMicrosoft Windows Error Reporting Service Improper Privilege Management VulnerabilityCWE-269
CVE-2024-4577PHP GroupPHPPHP-CGI OS Command Injection VulnerabilityCWE-78
CVE-2024-24919Check PointQuantum Security GatewaysCheck Point Quantum Security Gateways Information Disclosure VulnerabilityCWE-200
CVE-2024-1086LinuxKernelLinux Kernel Use-After-Free VulnerabilityCWE-416
CVE-2023-43208NextGen HealthcareMirth ConnectNextGen Healthcare Mirth Connect Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2024-30051MicrosoftDWM Core Library Microsoft DWM Core Library Privilege Escalation VulnerabilityCWE-122
CVE-2024-3400Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Command Injection VulnerabilityCWE-20, CWE-77
CVE-2023-24955MicrosoftSharePoint ServerMicrosoft SharePoint Server Code Injection VulnerabilityCWE-94
CVE-2023-48788FortinetFortiClient EMSFortinet FortiClient EMS SQL Injection VulnerabilityCWE-89
CVE-2021-44529IvantiEndpoint Manager Cloud Service Appliance (EPM CSA)Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability CWE-94
CVE-2024-27198JetBrainsTeamCityJetBrains TeamCity Authentication Bypass VulnerabilityCWE-288
CVE-2024-21338MicrosoftWindowsMicrosoft Windows Kernel Exposed IOCTL with Insufficient Access Control VulnerabilityCWE-822
CVE-2024-1709ConnectWiseScreenConnectConnectWise ScreenConnect Authentication Bypass VulnerabilityCWE-288
CVE-2020-3259CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Information Disclosure VulnerabilityCWE-200
CVE-2024-21412MicrosoftWindowsMicrosoft Windows Internet Shortcut Files Security Feature Bypass VulnerabilityCWE-693
CVE-2024-21762FortinetFortiOSFortinet FortiOS Out-of-Bound Write VulnerabilityCWE-787
CVE-2024-21893IvantiConnect Secure, Policy Secure, and NeuronsIvanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityCWE-918
CVE-2023-22527AtlassianConfluence Data Center and ServerAtlassian Confluence Data Center and Server Template Injection VulnerabilityCWE-74
CVE-2023-35082IvantiEndpoint Manager Mobile (EPMM) and MobileIron CoreIvanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass VulnerabilityCWE-287
CVE-2024-21887IvantiConnect Secure and Policy SecureIvanti Connect Secure and Policy Secure Command Injection VulnerabilityCWE-77
CVE-2023-46805IvantiConnect Secure and Policy SecureIvanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityCWE-287
CVE-2023-29357MicrosoftSharePoint ServerMicrosoft SharePoint Server Privilege Escalation VulnerabilityCWE-303
CVE-2023-38203AdobeColdFusionAdobe ColdFusion Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2023-29300AdobeColdFusionAdobe ColdFusion Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2023-41266QlikSenseQlik Sense Path Traversal VulnerabilityCWE-20
CVE-2023-41265QlikSenseQlik Sense HTTP Tunneling VulnerabilityCWE-444
CVE-2023-47246SysAidSysAid ServerSysAid Server Path Traversal VulnerabilityCWE-22
CVE-2023-22518AtlassianConfluence Data Center and ServerAtlassian Confluence Data Center and Server Improper Authorization VulnerabilityCWE-863
CVE-2023-46604ApacheActiveMQApache ActiveMQ Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2023-46747F5BIG-IP Configuration UtilityF5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityCWE-288
CVE-2023-4966CitrixNetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityCWE-119
CVE-2023-40044ProgressWS_FTP ServerProgress WS_FTP Server Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2023-22515AtlassianConfluence Data Center and ServerAtlassian Confluence Data Center and Server Broken Access Control Vulnerabilitynone listed
CVE-2023-42793JetBrainsTeamCityJetBrains TeamCity Authentication Bypass VulnerabilityCWE-288
CVE-2021-3129LaravelIgnitionLaravel Ignition File Upload Vulnerabilitynone listed
CVE-2017-6884ZyxelEMG2926 RoutersZyxel EMG2926 Routers Command Injection VulnerabilityCWE-78
CVE-2023-20269CiscoAdaptive Security Appliance and Firepower Threat DefenseCisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityCWE-288
CVE-2023-38831RARLABWinRARRARLAB WinRAR Code Execution VulnerabilityCWE-351
CVE-2023-38035IvantiSentryIvanti Sentry Authentication Bypass VulnerabilityCWE-863
CVE-2023-27532VeeamBackup & ReplicationVeeam Backup & Replication Cloud Connect Missing Authentication for Critical Function VulnerabilityCWE-306
CVE-2023-35078IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile Authentication Bypass VulnerabilityCWE-287
CVE-2023-3519CitrixNetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityCWE-94
CVE-2023-36884MicrosoftWindowsMicrosoft Windows Search Remote Code Execution VulnerabilityCWE-362
CVE-2022-31199NetwrixAuditorNetwrix Auditor Insecure Object Deserialization VulnerabilityCWE-502, CWE-122
CVE-2023-27997FortinetFortiOS and FortiProxy SSL-VPNFortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityCWE-122
CVE-2023-34362ProgressMOVEit TransferProgress MOVEit Transfer SQL Injection VulnerabilityCWE-89
CVE-2021-45046ApacheLog4j2Apache Log4j2 Deserialization of Untrusted Data VulnerabilityCWE-917
CVE-2023-27350PaperCutMF/NGPaperCut MF/NG Improper Access Control VulnerabilityCWE-284
CVE-2023-28252MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityCWE-122
CVE-2021-27878VeritasBackup Exec AgentVeritas Backup Exec Agent Command Execution VulnerabilityCWE-287
CVE-2021-27877VeritasBackup Exec AgentVeritas Backup Exec Agent Improper Authentication VulnerabilityCWE-287
CVE-2021-27876VeritasBackup Exec AgentVeritas Backup Exec Agent File Access VulnerabilityCWE-287
CVE-2019-1388MicrosoftWindowsMicrosoft Windows Certificate Dialog Privilege Escalation VulnerabilityCWE-269
CVE-2017-7494SambaSambaSamba Remote Code Execution VulnerabilityCWE-94
CVE-2023-24880MicrosoftWindowsMicrosoft Windows SmartScreen Security Feature Bypass VulnerabilityCWE-863
CVE-2022-36537ZK FrameworkAuUploaderZK Framework AuUploader Unspecified VulnerabilityCWE-441
CVE-2022-47986IBMAspera FaspexIBM Aspera Faspex Code Execution VulnerabilityCWE-502
CVE-2022-41223MitelMiVoice ConnectMitel MiVoice Connect Code Injection VulnerabilityCWE-94
CVE-2022-40765MitelMiVoice ConnectMitel MiVoice Connect Command Injection VulnerabilityCWE-77
CVE-2023-23376MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityCWE-122
CVE-2023-0669FortraGoAnywhere MFTFortra GoAnywhere MFT Remote Code Execution VulnerabilityCWE-502
CVE-2022-24990TerraMasterTerraMaster OSTerraMaster OS Remote Command Execution VulnerabilityCWE-306
CVE-2015-2291IntelEthernet Diagnostics Driver for WindowsIntel Ethernet Diagnostics Driver for Windows Denial-of-Service VulnerabilityCWE-20
CVE-2022-21587OracleE-Business SuiteOracle E-Business Suite Unspecified VulnerabilityCWE-306
CVE-2017-11357TelerikUser Interface (UI) for ASP.NET AJAXTelerik UI for ASP.NET AJAX Insecure Direct Object Reference VulnerabilityCWE-20
CVE-2022-47966ZohoManageEngineZoho ManageEngine Multiple Products Remote Code Execution Vulnerabilitynone listed
CVE-2022-41080MicrosoftExchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerabilitynone listed
CVE-2022-44698MicrosoftDefenderMicrosoft Defender SmartScreen Security Feature Bypass VulnerabilityCWE-755
CVE-2022-42475FortinetFortiOSFortinet FortiOS Heap-Based Buffer Overflow VulnerabilityCWE-197
CVE-2022-26501VeeamBackup & ReplicationVeeam Backup & Replication Remote Code Execution VulnerabilityCWE-306
CVE-2022-26500VeeamBackup & ReplicationVeeam Backup & Replication Remote Code Execution VulnerabilityCWE-22
CVE-2022-41091MicrosoftWindowsMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityCWE-863
CVE-2022-41073MicrosoftWindowsMicrosoft Windows Print Spooler Privilege Escalation VulnerabilityCWE-787
CVE-2020-3433CiscoAnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityCWE-427
CVE-2020-3153CiscoAnyConnect SecureCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityCWE-427
CVE-2018-19323GIGABYTEMultiple ProductsGIGABYTE Multiple Products Privilege Escalation Vulnerabilitynone listed
CVE-2018-19322GIGABYTEMultiple ProductsGIGABYTE Multiple Products Code Execution VulnerabilityCWE-749
CVE-2018-19321GIGABYTEMultiple ProductsGIGABYTE Multiple Products Privilege Escalation Vulnerabilitynone listed
CVE-2018-19320GIGABYTEMultiple ProductsGIGABYTE Multiple Products Unspecified Vulnerabilitynone listed
CVE-2022-41352SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityCWE-22
CVE-2022-40684FortinetMultiple ProductsFortinet Multiple Products Authentication Bypass VulnerabilityCWE-288
CVE-2022-41082MicrosoftExchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityCWE-502
CVE-2022-41040MicrosoftExchange ServerMicrosoft Exchange Server Server-Side Request Forgery VulnerabilityCWE-918
CVE-2022-37969MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityCWE-20, CWE-787
CVE-2022-27593QNAPPhoto StationQNAP Photo Station Externally Controlled Reference VulnerabilityCWE-610
CVE-2018-6530D-LinkMultiple RoutersD-Link Multiple Routers OS Command Injection VulnerabilityCWE-78
CVE-2018-13374FortinetFortiOS and FortiADCFortinet FortiOS and FortiADC Improper Access Control VulnerabilityCWE-732
CVE-2022-26352dotCMSdotCMSdotCMS Unrestricted Upload of File VulnerabilityCWE-22, CWE-138
CVE-2022-2294WebRTCWebRTCWebRTC Heap Buffer Overflow VulnerabilityCWE-122
CVE-2022-37042SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityCWE-23
CVE-2022-27925SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityCWE-22
CVE-2022-30333RARLABUnRARRARLAB UnRAR Directory Traversal VulnerabilityCWE-22, CWE-59
CVE-2022-27924SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityCWE-93
CVE-2022-29499MitelMiVoice ConnectMitel MiVoice Connect Data Validation VulnerabilityCWE-20
CVE-2021-4034Red HatPolkitRed Hat Polkit Out-of-Bounds Read and Write VulnerabilityCWE-787
CVE-2022-30190MicrosoftWindowsMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityCWE-610
CVE-2019-7195QNAPPhoto StationQNAP Photo Station Path Traversal VulnerabilityCWE-22
CVE-2019-7194QNAPPhoto StationQNAP Photo Station Path Traversal VulnerabilityCWE-22
CVE-2019-7193QNAPQTSQNAP QTS Improper Input Validation VulnerabilityCWE-20
CVE-2019-7192QNAPPhoto StationQNAP Photo Station Improper Access Control VulnerabilityCWE-863
CVE-2022-26134AtlassianConfluence Server/Data CenterAtlassian Confluence Server and Data Center Remote Code Execution VulnerabilityCWE-917
CVE-2016-0034MicrosoftSilverlightMicrosoft Silverlight Runtime Remote Code Execution VulnerabilityCWE-20
CVE-2013-3993IBMInfoSphere BigInsightsIBM InfoSphere BigInsights Invalid Input VulnerabilityCWE-264
CVE-2013-0431OracleJava Runtime Environment (JRE)Oracle JRE Sandbox Bypass Vulnerabilitynone listed
CVE-2013-0422OracleJava Runtime Environment (JRE)Oracle JRE Remote Code Execution VulnerabilityCWE-264
CVE-2013-0074MicrosoftSilverlightMicrosoft Silverlight Double Dereference Vulnerabilitynone listed
CVE-2012-1710OracleFusion MiddlewareOracle Fusion Middleware Unspecified Vulnerabilitynone listed
CVE-2010-1428Red HatJBossRed Hat JBoss Information Disclosure VulnerabilityCWE-264
CVE-2010-0738Red HatJBossRed Hat JBoss Authentication Bypass VulnerabilityCWE-264
CVE-2018-19953QNAPNetwork Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting VulnerabilityCWE-79, CWE-80
CVE-2018-19949QNAPNetwork Attached Storage (NAS)QNAP NAS File Station Command Injection VulnerabilityCWE-20, CWE-77, CWE-78
CVE-2018-19943QNAPNetwork Attached Storage (NAS)QNAP NAS File Station Cross-Site Scripting VulnerabilityCWE-79, CWE-80
CVE-2017-18362KaseyaVirtual System/Server Administrator (VSA)Kaseya VSA SQL Injection VulnerabilityCWE-89
CVE-2017-0147MicrosoftSMBv1 serverMicrosoft Windows SMBv1 Information Disclosure VulnerabilityCWE-200
CVE-2016-3351MicrosoftInternet Explorer and EdgeMicrosoft Internet Explorer and Edge Information Disclosure VulnerabilityCWE-200
CVE-2020-0638MicrosoftUpdate Notification ManagerMicrosoft Update Notification Manager Privilege Escalation Vulnerabilitynone listed
CVE-2019-1385MicrosoftWindowsMicrosoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityCWE-59
CVE-2019-1130MicrosoftWindowsMicrosoft Windows AppX Deployment Service Privilege Escalation VulnerabilityCWE-59
CVE-2022-1388F5BIG-IPF5 BIG-IP Missing Authentication VulnerabilityCWE-306
CVE-2022-29464WSO2Multiple ProductsWSO2 Multiple Products Unrestrictive Upload of File VulnerabilityCWE-22
CVE-2018-6882SynacorZimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityCWE-79
CVE-2019-16057D-LinkDNS-320 Storage DeviceD-Link DNS-320 Remote Code Execution VulnerabilityCWE-78
CVE-2022-22954VMwareWorkspace ONE Access and Identity ManagerVMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityCWE-94
CVE-2022-24521MicrosoftWindowsMicrosoft Windows CLFS Driver Privilege Escalation VulnerabilityCWE-787, CWE-1285
CVE-2018-7602DrupalCoreDrupal Core Remote Code Execution Vulnerabilitynone listed
CVE-2018-20753KaseyaVirtual System/Server Administrator (VSA)Kaseya VSA Remote Code Execution Vulnerabilitynone listed
CVE-2021-42287MicrosoftActive DirectoryMicrosoft Active Directory Domain Services Privilege Escalation VulnerabilityCWE-269
CVE-2021-42278MicrosoftActive DirectoryMicrosoft Active Directory Domain Services Privilege Escalation VulnerabilityCWE-20
CVE-2017-0148MicrosoftSMBv1 serverMicrosoft SMBv1 Server Remote Code Execution VulnerabilityCWE-20
CVE-2021-28799QNAPNetwork Attached Storage (NAS)QNAP NAS Improper Authorization VulnerabilityCWE-285
CVE-2018-10562DasanGigabit Passive Optical Network (GPON) RoutersDasan GPON Routers Command Injection VulnerabilityCWE-78
CVE-2021-38646MicrosoftOfficeMicrosoft Office Access Connectivity Engine Remote Code Execution Vulnerabilitynone listed
CVE-2021-26085AtlassianConfluence ServerAtlassian Confluence Server Pre-Authorization Arbitrary File Read VulnerabilityCWE-425
CVE-2021-20028SonicWallSecure Remote Access (SRA)SonicWall Secure Remote Access (SRA) SQL Injection VulnerabilityCWE-89
CVE-2018-8440MicrosoftWindowsMicrosoft Windows Privilege Escalation Vulnerabilitynone listed
CVE-2018-8406MicrosoftDirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityCWE-404
CVE-2018-8405MicrosoftDirectX Graphics Kernel (DXGKRNL)Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityCWE-404
CVE-2017-0213MicrosoftWindowsMicrosoft Windows Privilege Escalation Vulnerabilitynone listed
CVE-2016-0189MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption VulnerabilityCWE-119
CVE-2016-0151MicrosoftClient-Server Run-time Subsystem (CSRSS)Microsoft Windows CSRSS Security Feature Bypass VulnerabilityCWE-264
CVE-2013-2551MicrosoftInternet ExplorerMicrosoft Internet Explorer Use-After-Free VulnerabilityCWE-416
CVE-2013-2465OracleJava SEOracle Java SE Unspecified Vulnerabilitynone listed
CVE-2022-21999MicrosoftWindowsMicrosoft Windows Print Spooler Privilege Escalation VulnerabilityCWE-40, CWE-1386
CVE-2021-42237SitecoreXPSitecore XP Remote Command Execution VulnerabilityCWE-502
CVE-2021-22941CitrixShareFileCitrix ShareFile Improper Access Control VulnerabilityCWE-284
CVE-2020-2021Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Authentication Bypass VulnerabilityCWE-347
CVE-2019-15107WebminWebminWebmin Command Injection VulnerabilityCWE-78
CVE-2019-11043PHPFastCGI Process Manager (FPM)PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityCWE-120
CVE-2018-1273VMware TanzuSpring Data CommonsVMware Tanzu Spring Data Commons Property Binder VulnerabilityCWE-94
CVE-2018-11138QuestKACE System Management ApplianceQuest KACE System Management Appliance Remote Command Execution VulnerabilityCWE-78
CVE-2017-12615ApacheTomcatApache Tomcat on Windows Remote Code Execution VulnerabilityCWE-434
CVE-2017-0146MicrosoftWindowsMicrosoft Windows SMB Remote Code Execution VulnerabilityCWE-20
CVE-2010-2861AdobeColdFusionAdobe ColdFusion Directory Traversal VulnerabilityCWE-22
CVE-2020-5135SonicWallSonicOSSonicWall SonicOS Buffer Overflow VulnerabilityCWE-120
CVE-2019-1405MicrosoftWindowsMicrosoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerabilitynone listed
CVE-2019-1322MicrosoftWindowsMicrosoft Windows Privilege Escalation Vulnerabilitynone listed
CVE-2019-1315MicrosoftWindowsMicrosoft Windows Error Reporting Manager Privilege Escalation VulnerabilityCWE-59
CVE-2019-1253MicrosoftWindowsMicrosoft Windows AppX Deployment Server Privilege Escalation VulnerabilityCWE-59
CVE-2019-1129MicrosoftWindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityCWE-59
CVE-2019-1069MicrosoftTask SchedulerMicrosoft Task Scheduler Privilege Escalation VulnerabilityCWE-59
CVE-2019-1064MicrosoftWindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityCWE-59
CVE-2019-0841MicrosoftWindowsMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityCWE-59
CVE-2019-0543MicrosoftWindowsMicrosoft Windows Privilege Escalation VulnerabilityCWE-287
CVE-2018-8120MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityCWE-404
CVE-2017-0101MicrosoftWindowsMicrosoft Windows Transaction Manager Privilege Escalation VulnerabilityCWE-119
CVE-2016-3309MicrosoftWindowsMicrosoft Windows Kernel Privilege Escalation VulnerabilityCWE-264
CVE-2015-2546MicrosoftWin32kMicrosoft Win32k Memory Corruption VulnerabilityCWE-119
CVE-2009-3960AdobeBlazeDSAdobe BlazeDS Information Disclosure Vulnerabilitynone listed
CVE-2021-41379MicrosoftWindowsMicrosoft Windows Installer Privilege Escalation VulnerabilityCWE-1386
CVE-2018-8581MicrosoftExchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerabilitynone listed
CVE-2016-4117AdobeFlash PlayerAdobe Flash Player Arbitrary Code Execution Vulnerabilitynone listed
CVE-2016-1019AdobeFlash PlayerAdobe Flash Player Arbitrary Code Execution Vulnerabilitynone listed
CVE-2016-0099MicrosoftWindowsMicrosoft Windows Secondary Logon Service Privilege Escalation VulnerabilityCWE-264
CVE-2015-7645AdobeFlash PlayerAdobe Flash Player Arbitrary Code Execution Vulnerabilitynone listed
CVE-2015-1701MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityCWE-264
CVE-2012-4681OracleJava SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerabilitynone listed
CVE-2012-1723OracleJava SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerabilitynone listed
CVE-2012-0507OracleJava SEOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerabilitynone listed
CVE-2010-0188AdobeReader and AcrobatAdobe Reader and Acrobat Arbitrary Code Execution VulnerabilityCWE-94
CVE-2008-2992AdobeAcrobat and ReaderAdobe Reader and Acrobat Input Validation VulnerabilityCWE-119
CVE-2022-24682SynacorZimbra Collaborate Suite (ZCS)Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityCWE-79, CWE-116
CVE-2019-0752MicrosoftInternet ExplorerMicrosoft Internet Explorer Type Confusion VulnerabilityCWE-843
CVE-2018-8174MicrosoftWindowsMicrosoft Windows VBScript Engine Out-of-Bounds Write VulnerabilityCWE-787
CVE-2018-20250RARLABWinRARWinRAR Absolute Path Traversal VulnerabilityCWE-36
CVE-2018-15982AdobeFlash PlayerAdobe Flash Player Use-After-Free VulnerabilityCWE-416
CVE-2020-0796MicrosoftSMBv3Microsoft SMBv3 Remote Code Execution VulnerabilityCWE-119
CVE-2017-10271OracleWebLogic ServerOracle Corporation WebLogic Server Remote Code Execution Vulnerabilitynone listed
CVE-2017-0145MicrosoftSMBv1Microsoft SMBv1 Remote Code Execution VulnerabilityCWE-20
CVE-2017-0144MicrosoftSMBv1Microsoft SMBv1 Remote Code Execution VulnerabilityCWE-20
CVE-2022-21882MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityCWE-787
CVE-2021-20038SonicWallSMA 100 AppliancesSonicWall SMA 100 Appliances Stack-Based Buffer Overflow VulnerabilityCWE-121
CVE-2020-0787MicrosoftWindowsMicrosoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management VulnerabilityCWE-269, CWE-59
CVE-2018-8453MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityCWE-404
CVE-2021-21975VMwarevRealize Operations Manager APIVMware Server Side Request Forgery in vRealize Operations Manager APICWE-918
CVE-2019-2725OracleWebLogic ServerOracle WebLogic Server, InjectionCWE-74
CVE-2019-1579Palo Alto NetworksPAN-OSPalo Alto Networks PAN-OS Remote Code Execution VulnerabilityCWE-134
CVE-2019-1458MicrosoftWin32kMicrosoft Win32k Privilege Escalation Vulnerabilitynone listed
CVE-2018-13383FortinetFortiOS and FortiProxyFortinet FortiOS and FortiProxy Out-of-bounds WriteCWE-787
CVE-2018-13382FortinetFortiOS and FortiProxyFortinet FortiOS and FortiProxy Improper AuthorizationCWE-285
CVE-2021-43890MicrosoftWindowsMicrosoft Windows AppX Installer Spoofing Vulnerabilitynone listed
CVE-2021-44228ApacheLog4j2Apache Log4j2 Remote Code Execution VulnerabilityCWE-20, CWE-400, CWE-502
CVE-2017-12149Red HatJBoss Application ServerRed Hat JBoss Application Server Remote Code Execution VulnerabilityCWE-502
CVE-2021-40438ApacheApacheApache HTTP Server-Side Request Forgery (SSRF)CWE-918
CVE-2021-42321MicrosoftExchangeMicrosoft Exchange Server Remote Code Execution VulnerabilityCWE-184, CWE-502
CVE-2021-40449MicrosoftWindowsMicrosoft Windows Win32k Privilege Escalation VulnerabilityCWE-416
CVE-2021-42258BQEBillQuick Web SuiteBQE BillQuick Web Suite SQL Injection VulnerabilityCWE-89
CVE-2021-42013ApacheHTTP ServerApache HTTP Server Path Traversal VulnerabilityCWE-22
CVE-2021-41773ApacheHTTP ServerApache HTTP Server Path Traversal VulnerabilityCWE-22
CVE-2021-40539ZohoManageEngineZoho ManageEngine ADSelfService Plus Authentication Bypass VulnerabilityCWE-55
CVE-2021-40444MicrosoftMSHTMLMicrosoft MSHTML Remote Code Execution VulnerabilityCWE-22
CVE-2021-38647MicrosoftOpen Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Remote Code Execution VulnerabilityCWE-1390
CVE-2021-36955MicrosoftWindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerabilitynone listed
CVE-2021-36942MicrosoftWindowsMicrosoft Windows Local Security Authority (LSA) Spoofing VulnerabilityCWE-749
CVE-2021-35464ForgeRockAccess Management (AM)ForgeRock Access Management (AM) Core Server Remote Code Execution VulnerabilityCWE-502
CVE-2021-35211SolarWindsServ-USolarWinds Serv-U Remote Code Execution VulnerabilityCWE-787
CVE-2021-34527MicrosoftWindowsMicrosoft Windows Print Spooler Remote Code Execution VulnerabilityCWE-269
CVE-2021-34523MicrosoftExchange ServerMicrosoft Exchange Server Privilege Escalation VulnerabilityCWE-287
CVE-2021-34473MicrosoftExchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityCWE-918
CVE-2021-31207MicrosoftExchange ServerMicrosoft Exchange Server Security Feature Bypass VulnerabilityCWE-20, CWE-434
CVE-2021-30116KaseyaVirtual System/Server Administrator (VSA)Kaseya Virtual System/Server Administrator (VSA) Information Disclosure VulnerabilityCWE-522
CVE-2021-27104AccellionFTAAccellion FTA OS Command Injection VulnerabilityCWE-20, CWE-78
CVE-2021-27103AccellionFTAAccellion FTA Server-Side Request Forgery (SSRF) VulnerabilityCWE-918
CVE-2021-27102AccellionFTAAccellion FTA OS Command Injection VulnerabilityCWE-20, CWE-78
CVE-2021-27101AccellionFTAAccellion FTA SQL Injection VulnerabilityCWE-89, CWE-138
CVE-2021-27065MicrosoftExchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityCWE-39
CVE-2021-26858MicrosoftExchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerabilitynone listed
CVE-2021-26857MicrosoftExchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityCWE-502
CVE-2021-26855MicrosoftExchange ServerMicrosoft Exchange Server Remote Code Execution VulnerabilityCWE-918
CVE-2021-26411MicrosoftInternet ExplorerMicrosoft Internet Explorer Memory Corruption VulnerabilityCWE-416
CVE-2021-26084AtlassianConfluence Server and Data CenterAtlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection VulnerabilityCWE-917
CVE-2021-22986F5BIG-IP and BIG-IQ Centralized ManagementF5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution VulnerabilityCWE-863
CVE-2021-22893IvantiPulse Connect SecureIvanti Pulse Connect Secure Use-After-Free VulnerabilityCWE-287
CVE-2021-22205GitLabCommunity and Enterprise EditionsGitLab Community and Enterprise Editions Remote Code Execution VulnerabilityCWE-20, CWE-95
CVE-2021-22005VMwarevCenter ServerVMware vCenter Server File Upload VulnerabilityCWE-23
CVE-2021-21985VMwarevCenter ServerVMware vCenter Server Improper Input Validation VulnerabilityCWE-20, CWE-470, CWE-918
CVE-2021-21972VMwarevCenter ServerVMware vCenter Server Remote Code Execution VulnerabilityCWE-23
CVE-2021-20023SonicWallSonicWall Email SecuritySonicWall Email Security Path Traversal VulnerabilityCWE-22
CVE-2021-20022SonicWallSonicWall Email SecuritySonicWall Email Security Unrestricted Upload of File VulnerabilityCWE-434
CVE-2021-20021SonicWallSonicWall Email SecuritySonicWall Email Security Improper Privilege Management VulnerabilityCWE-306
CVE-2021-20016SonicWallSSLVPN SMA100SonicWall SSLVPN SMA100 SQL Injection VulnerabilityCWE-89
CVE-2021-1732MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityCWE-787
CVE-2021-1675MicrosoftWindowsMicrosoft Windows Print Spooler Remote Code Execution VulnerabilityCWE-285
CVE-2020-5902F5BIG-IPF5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution VulnerabilityCWE-22
CVE-2020-3992VMwareESXiVMware ESXi OpenSLP Use-After-Free VulnerabilityCWE-416
CVE-2020-3580CiscoAdaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityCWE-79
CVE-2020-1472MicrosoftNetlogonMicrosoft Netlogon Privilege Escalation VulnerabilityCWE-330
CVE-2020-12812FortinetFortiOSFortinet FortiOS SSL VPN Improper Authentication VulnerabilityCWE-178, CWE-287
CVE-2020-12271SophosSFOSSophos SFOS SQL Injection VulnerabilityCWE-89
CVE-2020-0968MicrosoftInternet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityCWE-787
CVE-2020-0878MicrosoftEdge and Internet ExplorerMicrosoft Edge and Internet Explorer Memory Corruption VulnerabilityCWE-787
CVE-2020-0688MicrosoftExchange ServerMicrosoft Exchange Server Validation Key Remote Code Execution VulnerabilityCWE-287
CVE-2019-7481SonicWallSMA100SonicWall SMA100 SQL Injection VulnerabilityCWE-89
CVE-2019-5591FortinetFortiOSFortinet FortiOS Default Configuration VulnerabilityCWE-306
CVE-2019-5544VMwareVMware ESXi and Horizon DaaSVMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityCWE-787
CVE-2019-3396AtlassianConfluence Server and Data ServerAtlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityCWE-22
CVE-2019-19781CitrixApplication Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceCitrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution VulnerabilityCWE-22
CVE-2019-18935ProgressTelerik UI for ASP.NET AJAXProgress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data VulnerabilityCWE-502
CVE-2019-1367MicrosoftInternet ExplorerMicrosoft Internet Explorer Scripting Engine Memory Corruption VulnerabilityCWE-787
CVE-2019-13608CitrixStoreFront ServerCitrix StoreFront Server XML External Entity (XXE) Processing VulnerabilityCWE-611
CVE-2019-1215MicrosoftWindowsMicrosoft Windows Privilege Escalation Vulnerabilitynone listed
CVE-2019-11634CitrixWorkspace Application and Receiver for WindowsCitrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerabilitynone listed
CVE-2019-11580AtlassianCrowd and Crowd Data CenterAtlassian Crowd and Crowd Data Center Remote Code Execution Vulnerabilitynone listed
CVE-2019-11539IvantiPulse Connect Secure and Pulse Policy SecureIvanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityCWE-78
CVE-2019-11510IvantiPulse Connect SecureIvanti Pulse Connect Secure Arbitrary File Read VulnerabilityCWE-22
CVE-2019-0859MicrosoftWin32kMicrosoft Win32k Privilege Escalation Vulnerabilitynone listed
CVE-2019-0803MicrosoftWin32kMicrosoft Win32k Privilege Escalation Vulnerabilitynone listed
CVE-2019-0708MicrosoftRemote Desktop ServicesMicrosoft Remote Desktop Services Remote Code Execution VulnerabilityCWE-416
CVE-2019-0604MicrosoftSharePointMicrosoft SharePoint Remote Code Execution VulnerabilityCWE-20
CVE-2018-7600DrupalDrupal CoreDrupal Core Remote Code Execution VulnerabilityCWE-20
CVE-2018-6789EximEximExim Buffer Overflow VulnerabilityCWE-119
CVE-2018-4878AdobeFlash PlayerAdobe Flash Player Use-After-Free VulnerabilityCWE-416
CVE-2018-2380SAPCustomer Relationship Management (CRM)SAP Customer Relationship Management (CRM) Path Traversal VulnerabilityCWE-22
CVE-2018-13379FortinetFortiOSFortinet FortiOS SSL VPN Path Traversal VulnerabilityCWE-22
CVE-2018-0802MicrosoftOfficeMicrosoft Office Memory Corruption VulnerabilityCWE-787
CVE-2017-9822DotNetNuke (DNN)DotNetNuke (DNN)DotNetNuke (DNN) Remote Code Execution VulnerabilityCWE-20
CVE-2017-5638ApacheStrutsApache Struts Remote Code Execution VulnerabilityCWE-20
CVE-2017-11882MicrosoftOfficeMicrosoft Office Memory Corruption VulnerabilityCWE-119
CVE-2017-0199MicrosoftOffice and WordPadMicrosoft Office and WordPad Remote Code Execution Vulnerabilitynone listed
CVE-2017-0143MicrosoftWindowsMicrosoft Windows Server Message Block (SMBv1) Remote Code Execution VulnerabilityCWE-20
CVE-2016-7255MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityCWE-264
CVE-2016-0167MicrosoftWin32kMicrosoft Win32k Privilege Escalation VulnerabilityCWE-264
CVE-2014-1812MicrosoftWindowsMicrosoft Windows Group Policy Preferences Password Privilege Escalation VulnerabilityCWE-255
CVE-2012-0158MicrosoftMSCOMCTL.OCXMicrosoft MSCOMCTL.OCX Remote Code Execution VulnerabilityCWE-94

Cite this

361 of 1,721 CISA KEV entries (21%) are flagged as known to be used in ransomware campaigns. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/kev/ransomware/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API