CISA Known Exploited Vulnerabilities
Vulnerabilities CISA has confirmed are being actively exploited. These are the top priority — federal agencies have a mandated patch-by date, and so should you. 1,716 entries.
| CVE | Added | Patch by | EPSS | CVSS | Ransomware | What |
|---|---|---|---|---|---|---|
| CVE-2016-0167 | 2021-11-03 | 2022-05-03 | 5.7% | — | yes | Microsoft Win32k contains an unspecified vulnerability that allows for… |
| CVE-2016-3235 | 2021-11-03 | 2022-05-03 | 43.3% | — | Microsoft Office Object Linking & Embedding (OLE) dynamic link library… | |
| CVE-2016-3643 | 2021-11-03 | 2022-05-03 | 3.7% | — | SolarWinds Virtualization Manager allows for privilege escalation thro… | |
| CVE-2012-0158 | 2021-11-03 | 2022-05-03 | 100.0% | — | yes | Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allo… |
| CVE-2012-3152 | 2021-11-03 | 2022-05-03 | 98.8% | — | Oracle Fusion Middleware Reports Developer contains an unspecified vul… | |
| CVE-2010-5326 | 2021-11-03 | 2022-05-03 | 17.8% | — | SAP NetWeaver Application Server Java Platforms Invoker Servlet does n… | |
| CVE-2018-15961 | 2021-11-03 | 2022-05-03 | 100.0% | — | Adobe ColdFusion contains an unrestricted file upload vulnerability th… | |
| CVE-2015-1641 | 2021-11-03 | 2022-05-03 | 96.7% | — | Microsoft Office contains a memory corruption vulnerability due to fai… | |
| CVE-2017-6327 | 2021-11-03 | 2022-05-03 | 35.9% | — | Symantec Messaging Gateway contains an unspecified vulnerability which… | |
| CVE-2017-5638 | 2021-11-03 | 2022-05-03 | 100.0% | — | yes | Apache Struts Jakarta Multipart parser allows for malicious file uploa… |
| CVE-2015-4852 | 2021-11-03 | 2022-05-03 | 96.0% | — | Oracle WebLogic Server contains a deserialization of untrusted data vu… | |
| CVE-2017-11882 | 2021-11-03 | 2022-05-03 | 99.9% | — | yes | Microsoft Office contains a memory corruption vulnerability that allow… |
| CVE-2017-11774 | 2021-11-03 | 2022-05-03 | 59.6% | — | Microsoft Office Outlook contains a security feature bypass vulnerabil… | |
| CVE-2016-7255 | 2021-11-03 | 2022-05-03 | 81.0% | 7.8 | yes | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server… |
| CVE-2017-0199 | 2021-11-03 | 2022-05-03 | 99.9% | — | yes | Microsoft Office and WordPad contain an unspecified vulnerability due … |
| CVE-2016-9563 | 2021-11-03 | 2022-05-03 | 24.2% | — | SAP NetWeaver Application Server Java Platforms contains an unspecifie… |
← Prev Page 18 of 18