VulnTideExploited vulnerabilities, by vendor. Data as of 28 Oct 2026.

Vulnerabilities added to CISA KEV in 2023

187 entries, newest first.

CVENameVendorAddedRansomware
CVE-2023-47565QNAP VioStor NVR OS Command Injection VulnerabilityQNAP21 Dec 2023Unknown
CVE-2023-49897FXC AE1021, AE1021PE OS Command Injection VulnerabilityFXC21 Dec 2023Unknown
CVE-2023-6448Unitronics Vision PLC and HMI Insecure Default Password VulnerabilityUnitronics11 Dec 2023Unknown
CVE-2023-41265Qlik Sense HTTP Tunneling VulnerabilityQlik7 Dec 2023Known
CVE-2023-41266Qlik Sense Path Traversal VulnerabilityQlik7 Dec 2023Known
CVE-2022-22071Qualcomm Multiple Chipsets Use-After-Free VulnerabilityQualcomm5 Dec 2023Unknown
CVE-2023-33063Qualcomm Multiple Chipsets Use-After-Free VulnerabilityQualcomm5 Dec 2023Unknown
CVE-2023-33106Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset VulnerabilityQualcomm5 Dec 2023Unknown
CVE-2023-33107Qualcomm Multiple Chipsets Integer Overflow VulnerabilityQualcomm5 Dec 2023Unknown
CVE-2023-42916Apple Multiple Products WebKit Out-of-Bounds Read VulnerabilityApple4 Dec 2023Unknown
CVE-2023-42917Apple Multiple Products WebKit Memory Corruption VulnerabilityApple4 Dec 2023Unknown
CVE-2023-49103ownCloud graphapi Information Disclosure VulnerabilityownCloud30 Nov 2023Unknown
CVE-2023-6345Google Skia Integer Overflow VulnerabilityGoogle30 Nov 2023Unknown
CVE-2023-4911GNU C Library Buffer Overflow VulnerabilityGNU21 Nov 2023Unknown
CVE-2020-2551Oracle Fusion Middleware Unspecified VulnerabilityOracle16 Nov 2023Unknown
CVE-2023-1671Sophos Web Appliance Command Injection VulnerabilitySophos16 Nov 2023Unknown
CVE-2023-36584Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityMicrosoft16 Nov 2023Unknown
CVE-2023-36025Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft14 Nov 2023Unknown
CVE-2023-36033Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation VulnerabilityMicrosoft14 Nov 2023Unknown
CVE-2023-36036Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation VulnerabilityMicrosoft14 Nov 2023Unknown
CVE-2023-36844Juniper Junos OS EX Series PHP External Variable Modification VulnerabilityJuniper13 Nov 2023Unknown
CVE-2023-36845Juniper Junos OS EX Series and SRX Series PHP External Variable Modification VulnerabilityJuniper13 Nov 2023Unknown
CVE-2023-36846Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityJuniper13 Nov 2023Unknown
CVE-2023-36847Juniper Junos OS EX Series Missing Authentication for Critical Function VulnerabilityJuniper13 Nov 2023Unknown
CVE-2023-36851Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityJuniper13 Nov 2023Unknown
CVE-2023-47246SysAid Server Path Traversal VulnerabilitySysAid13 Nov 2023Known
CVE-2023-29552Service Location Protocol (SLP) Denial-of-Service VulnerabilityIETF8 Nov 2023Unknown
CVE-2023-22518Atlassian Confluence Data Center and Server Improper Authorization VulnerabilityAtlassian7 Nov 2023Known
CVE-2023-46604Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityApache2 Nov 2023Known
CVE-2023-46747F5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityF531 Oct 2023Known
CVE-2023-46748F5 BIG-IP Configuration Utility SQL Injection VulnerabilityF531 Oct 2023Unknown
CVE-2023-5631Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityRoundcube26 Oct 2023Unknown
CVE-2023-20273Cisco IOS XE Web UI Command Injection VulnerabilityCisco23 Oct 2023Unknown
CVE-2023-4966Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityCitrix18 Oct 2023Known
CVE-2023-20198Cisco IOS XE Web UI Privilege Escalation VulnerabilityCisco16 Oct 2023Unknown
CVE-2023-20109Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write VulnerabilityCisco10 Oct 2023Unknown
CVE-2023-21608Adobe Acrobat and Reader Use-After-Free VulnerabilityAdobe10 Oct 2023Unknown
CVE-2023-36563Microsoft WordPad Information Disclosure VulnerabilityMicrosoft10 Oct 2023Unknown
CVE-2023-41763Microsoft Skype for Business Privilege Escalation VulnerabilityMicrosoft10 Oct 2023Unknown
CVE-2023-44487HTTP/2 Rapid Reset Attack VulnerabilityIETF10 Oct 2023Unknown
CVE-2023-22515Atlassian Confluence Data Center and Server Broken Access Control VulnerabilityAtlassian5 Oct 2023Known
CVE-2023-40044Progress WS_FTP Server Deserialization of Untrusted Data VulnerabilityProgress5 Oct 2023Known
CVE-2023-42824Apple iOS and iPadOS Kernel Privilege Escalation VulnerabilityApple5 Oct 2023Unknown
CVE-2023-28229Microsoft Windows CNG Key Isolation Service Privilege Escalation VulnerabilityMicrosoft4 Oct 2023Unknown
CVE-2023-42793JetBrains TeamCity Authentication Bypass VulnerabilityJetBrains4 Oct 2023Known
CVE-2023-4211Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityArm3 Oct 2023Unknown
CVE-2023-5217Google Chromium libvpx Heap Buffer Overflow VulnerabilityGoogle2 Oct 2023Unknown
CVE-2018-14667Red Hat JBoss RichFaces Framework Expression Language Injection VulnerabilityRed Hat28 Sep 2023Unknown
CVE-2023-41991Apple Multiple Products Improper Certificate Validation VulnerabilityApple25 Sep 2023Unknown
CVE-2023-41992Apple Multiple Products Kernel Privilege Escalation VulnerabilityApple25 Sep 2023Unknown
CVE-2023-41993Apple Multiple Products WebKit Code Execution VulnerabilityApple25 Sep 2023Unknown
CVE-2023-41179Trend Micro Apex One and Worry-Free Business Security Remote Code Execution VulnerabilityTrend Micro21 Sep 2023Unknown
CVE-2023-28434MinIO Security Feature Bypass VulnerabilityMinIO19 Sep 2023Unknown
CVE-2014-8361Realtek SDK Improper Input Validation VulnerabilityRealtek18 Sep 2023Unknown
CVE-2017-6884Zyxel EMG2926 Routers Command Injection VulnerabilityZyxel18 Sep 2023Known
CVE-2021-3129Laravel Ignition File Upload VulnerabilityLaravel18 Sep 2023Known
CVE-2022-22265Samsung Mobile Devices Use-After-Free VulnerabilitySamsung18 Sep 2023Unknown
CVE-2023-26369Adobe Acrobat and Reader Out-of-Bounds Write VulnerabilityAdobe14 Sep 2023Unknown
CVE-2023-20269Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityCisco13 Sep 2023Known
CVE-2023-35674Android Framework Privilege Escalation VulnerabilityAndroid13 Sep 2023Unknown
CVE-2023-4863Google Chromium WebP Heap-Based Buffer Overflow VulnerabilityGoogle13 Sep 2023Unknown
CVE-2023-36761Microsoft Word Information Disclosure VulnerabilityMicrosoft12 Sep 2023Unknown
CVE-2023-36802Microsoft Streaming Service Proxy Privilege Escalation VulnerabilityMicrosoft12 Sep 2023Unknown
CVE-2023-41061Apple iOS, iPadOS, and watchOS Wallet Code Execution VulnerabilityApple11 Sep 2023Unknown
CVE-2023-41064Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow VulnerabilityApple11 Sep 2023Unknown
CVE-2023-33246Apache RocketMQ Command Execution VulnerabilityApache6 Sep 2023Unknown
CVE-2023-32315Ignite Realtime Openfire Path Traversal VulnerabilityIgnite Realtime24 Aug 2023Unknown
CVE-2023-38831RARLAB WinRAR Code Execution VulnerabilityRARLAB24 Aug 2023Known
CVE-2023-27532Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function VulnerabilityVeeam22 Aug 2023Known
CVE-2023-38035Ivanti Sentry Authentication Bypass VulnerabilityIvanti22 Aug 2023Known
CVE-2023-26359Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityAdobe21 Aug 2023Unknown
CVE-2023-24489Citrix Content Collaboration ShareFile Improper Access Control VulnerabilityCitrix16 Aug 2023Unknown
CVE-2023-38180Microsoft .NET Core and Visual Studio Denial-of-Service VulnerabilityMicrosoft9 Aug 2023Unknown
CVE-2017-18368Zyxel P660HN-T1A Routers Command Injection VulnerabilityZyxel7 Aug 2023Unknown
CVE-2023-35081Ivanti Endpoint Manager Mobile (EPMM) Path Traversal VulnerabilityIvanti31 Jul 2023Unknown
CVE-2023-37580Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilitySynacor27 Jul 2023Unknown
CVE-2023-38606Apple Multiple Products Kernel Unspecified VulnerabilityApple26 Jul 2023Unknown
CVE-2023-35078Ivanti Endpoint Manager Mobile Authentication Bypass VulnerabilityIvanti25 Jul 2023Known
CVE-2023-29298Adobe ColdFusion Improper Access Control VulnerabilityAdobe20 Jul 2023Unknown
CVE-2023-38205Adobe ColdFusion Improper Access Control VulnerabilityAdobe20 Jul 2023Unknown
CVE-2023-3519Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityCitrix19 Jul 2023Known
CVE-2023-36884Microsoft Windows Search Remote Code Execution VulnerabilityMicrosoft17 Jul 2023Known
CVE-2022-29303SolarView Compact Command Injection VulnerabilitySolarView13 Jul 2023Unknown
CVE-2023-37450Apple Multiple Products WebKit Code Execution VulnerabilityApple13 Jul 2023Unknown
CVE-2022-31199Netwrix Auditor Insecure Object Deserialization VulnerabilityNetwrix11 Jul 2023Known
CVE-2023-32046Microsoft Windows MSHTML Platform Privilege Escalation VulnerabilityMicrosoft11 Jul 2023Unknown
CVE-2023-32049Microsoft Windows Defender SmartScreen Security Feature Bypass VulnerabilityMicrosoft11 Jul 2023Unknown
CVE-2023-35311Microsoft Outlook Security Feature Bypass VulnerabilityMicrosoft11 Jul 2023Unknown
CVE-2023-36874Microsoft Windows Error Reporting Service Privilege Escalation VulnerabilityMicrosoft11 Jul 2023Unknown
CVE-2021-29256Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityArm7 Jul 2023Unknown
CVE-2019-17621D-Link DIR-859 Router Command Execution VulnerabilityD-Link29 Jun 2023Unknown
CVE-2019-20500D-Link DWL-2600AP Access Point Command Injection VulnerabilityD-Link29 Jun 2023Unknown
CVE-2021-25371Samsung Mobile Devices Unspecified VulnerabilitySamsung29 Jun 2023Unknown
CVE-2021-25372Samsung Mobile Devices Improper Boundary Check VulnerabilitySamsung29 Jun 2023Unknown
CVE-2021-25394Samsung Mobile Devices Race Condition VulnerabilitySamsung29 Jun 2023Unknown
CVE-2021-25395Samsung Mobile Devices Race Condition VulnerabilitySamsung29 Jun 2023Unknown
CVE-2021-25487Samsung Mobile Devices Out-of-Bounds Read VulnerabilitySamsung29 Jun 2023Unknown
CVE-2021-25489Samsung Mobile Devices Improper Input Validation VulnerabilitySamsung29 Jun 2023Unknown
CVE-2023-20867VMware Tools Authentication Bypass VulnerabilityVMware23 Jun 2023Unknown
CVE-2023-27992Zyxel Multiple NAS Devices Command Injection VulnerabilityZyxel23 Jun 2023Unknown
CVE-2023-32434Apple Multiple Products Integer Overflow VulnerabilityApple23 Jun 2023Unknown
CVE-2023-32435Apple Multiple Products WebKit Memory Corruption VulnerabilityApple23 Jun 2023Unknown
CVE-2023-32439Apple Multiple Products WebKit Type Confusion VulnerabilityApple23 Jun 2023Unknown
CVE-2016-0165Microsoft Win32k Privilege Escalation VulnerabilityMicrosoft22 Jun 2023Unknown
CVE-2016-9079Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free VulnerabilityMozilla22 Jun 2023Unknown
CVE-2020-12641Roundcube Webmail Remote Code Execution VulnerabilityRoundcube22 Jun 2023Unknown
CVE-2020-35730Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityRoundcube22 Jun 2023Unknown
CVE-2021-44026Roundcube Webmail SQL Injection VulnerabilityRoundcube22 Jun 2023Unknown
CVE-2023-20887Vmware Aria Operations for Networks Command Injection VulnerabilityVMware22 Jun 2023Unknown
CVE-2023-27997Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityFortinet13 Jun 2023Known
CVE-2023-3079Google Chromium V8 Type Confusion VulnerabilityGoogle7 Jun 2023Unknown
CVE-2023-33009Zyxel Multiple Firewalls Buffer Overflow VulnerabilityZyxel5 Jun 2023Unknown
CVE-2023-33010Zyxel Multiple Firewalls Buffer Overflow VulnerabilityZyxel5 Jun 2023Unknown
CVE-2023-34362Progress MOVEit Transfer SQL Injection VulnerabilityProgress2 Jun 2023Known
CVE-2023-28771Zyxel Multiple Firewalls OS Command Injection VulnerabilityZyxel31 May 2023Unknown
CVE-2023-2868Barracuda Networks ESG Appliance Improper Input Validation VulnerabilityBarracuda Networks26 May 2023Unknown
CVE-2023-28204Apple Multiple Products WebKit Out-of-Bounds Read VulnerabilityApple22 May 2023Unknown
CVE-2023-32373Apple Multiple Products WebKit Use-After-Free VulnerabilityApple22 May 2023Unknown
CVE-2023-32409Apple Multiple Products WebKit Sandbox Escape VulnerabilityApple22 May 2023Unknown
CVE-2004-1464Cisco IOS Denial-of-Service VulnerabilityCisco19 May 2023Unknown
CVE-2016-6415Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure VulnerabilityCisco19 May 2023Unknown
CVE-2023-21492Samsung Mobile Devices Insertion of Sensitive Information Into Log File VulnerabilitySamsung19 May 2023Unknown
CVE-2010-3904Linux Kernel Improper Input Validation VulnerabilityLinux12 May 2023Unknown
CVE-2014-0196Linux Kernel Race Condition VulnerabilityLinux12 May 2023Unknown
CVE-2015-5317Jenkins User Interface (UI) Information Disclosure VulnerabilityJenkins12 May 2023Unknown
CVE-2016-3427Oracle Java SE and JRockit Unspecified VulnerabilityOracle12 May 2023Unknown
CVE-2016-8735Apache Tomcat Remote Code Execution VulnerabilityApache12 May 2023Unknown
CVE-2021-3560Red Hat Polkit Incorrect Authorization VulnerabilityRed Hat12 May 2023Unknown
CVE-2023-25717Multiple Ruckus Wireless Products CSRF and RCE VulnerabilityRuckus Wireless12 May 2023Unknown
CVE-2023-29336Microsoft Win32K Privilege Escalation VulnerabilityMicrosoft9 May 2023Unknown
CVE-2021-45046Apache Log4j2 Deserialization of Untrusted Data VulnerabilityApache1 May 2023Known
CVE-2023-1389TP-Link Archer AX-21 Command Injection VulnerabilityTP-Link1 May 2023Unknown
CVE-2023-21839Oracle WebLogic Server Unspecified VulnerabilityOracle1 May 2023Unknown
CVE-2023-2136Google Chrome Skia Integer Overflow VulnerabilityGoogle21 Apr 2023Unknown
CVE-2023-27350PaperCut MF/NG Improper Access Control VulnerabilityPaperCut21 Apr 2023Known
CVE-2023-28432MinIO Information Disclosure VulnerabilityMinIO21 Apr 2023Unknown
CVE-2017-6742Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco19 Apr 2023Unknown
CVE-2019-8526Apple macOS Use-After-Free VulnerabilityApple17 Apr 2023Unknown
CVE-2023-2033Google Chromium V8 Type Confusion VulnerabilityGoogle17 Apr 2023Unknown
CVE-2023-20963Android Framework Privilege Escalation VulnerabilityAndroid13 Apr 2023Unknown
CVE-2023-29492Novi Survey Insecure Deserialization VulnerabilityNovi Survey13 Apr 2023Unknown
CVE-2023-28252Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityMicrosoft11 Apr 2023Known
CVE-2023-28205Apple Multiple Products WebKit Use-After-Free VulnerabilityApple10 Apr 2023Unknown
CVE-2023-28206Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write VulnerabilityApple10 Apr 2023Unknown
CVE-2019-1388Microsoft Windows Certificate Dialog Privilege Escalation VulnerabilityMicrosoft7 Apr 2023Known
CVE-2021-27876Veritas Backup Exec Agent File Access VulnerabilityVeritas7 Apr 2023Known
CVE-2021-27877Veritas Backup Exec Agent Improper Authentication VulnerabilityVeritas7 Apr 2023Known
CVE-2021-27878Veritas Backup Exec Agent Command Execution VulnerabilityVeritas7 Apr 2023Known
CVE-2023-26083Arm Mali GPU Kernel Driver Information Disclosure VulnerabilityArm7 Apr 2023Unknown
CVE-2022-27926Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilitySynacor3 Apr 2023Unknown
CVE-2013-3163Microsoft Internet Explorer Memory Corruption VulnerabilityMicrosoft30 Mar 2023Unknown
CVE-2017-7494Samba Remote Code Execution VulnerabilitySamba30 Mar 2023Known
CVE-2021-30900Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityApple30 Mar 2023Unknown
CVE-2022-22706Arm Mali GPU Kernel Driver Unspecified VulnerabilityArm30 Mar 2023Unknown
CVE-2022-3038Google Chromium Network Service Use-After-Free VulnerabilityGoogle30 Mar 2023Unknown
CVE-2022-38181Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityArm30 Mar 2023Unknown
CVE-2022-39197Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) VulnerabilityFortra30 Mar 2023Unknown
CVE-2022-42948Fortra Cobalt Strike User Interface Remote Code Execution VulnerabilityFortra30 Mar 2023Unknown
CVE-2023-0266Linux Kernel Use-After-Free VulnerabilityLinux30 Mar 2023Unknown
CVE-2023-26360Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityAdobe15 Mar 2023Unknown
CVE-2022-41328Fortinet FortiOS Path Traversal VulnerabilityFortinet14 Mar 2023Unknown
CVE-2023-23397Microsoft Office Outlook Privilege Escalation VulnerabilityMicrosoft14 Mar 2023Unknown
CVE-2023-24880Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft14 Mar 2023Known
CVE-2020-5741Plex Media Server Remote Code Execution VulnerabilityPlex10 Mar 2023Unknown
CVE-2021-39144XStream Remote Code Execution VulnerabilityXStream10 Mar 2023Unknown
CVE-2022-28810Zoho ManageEngine ADSelfService Plus Remote Code Execution VulnerabilityZoho7 Mar 2023Unknown
CVE-2022-33891Apache Spark Command Injection VulnerabilityApache7 Mar 2023Unknown
CVE-2022-35914Teclib GLPI Remote Code Execution VulnerabilityTeclib7 Mar 2023Unknown
CVE-2022-36537ZK Framework AuUploader Unspecified VulnerabilityZK Framework27 Feb 2023Known
CVE-2022-40765Mitel MiVoice Connect Command Injection VulnerabilityMitel21 Feb 2023Known
CVE-2022-41223Mitel MiVoice Connect Code Injection VulnerabilityMitel21 Feb 2023Known
CVE-2022-47986IBM Aspera Faspex Code Execution VulnerabilityIBM21 Feb 2023Known
CVE-2022-46169Cacti Command Injection VulnerabilityCacti16 Feb 2023Unknown
CVE-2023-21715Microsoft Office Publisher Security Feature Bypass VulnerabilityMicrosoft14 Feb 2023Unknown
CVE-2023-21823Microsoft Windows Graphic Component Privilege Escalation VulnerabilityMicrosoft14 Feb 2023Unknown
CVE-2023-23376Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation VulnerabilityMicrosoft14 Feb 2023Known
CVE-2023-23529Apple Multiple Products WebKit Type Confusion VulnerabilityApple14 Feb 2023Unknown
CVE-2015-2291Intel Ethernet Diagnostics Driver for Windows Denial-of-Service VulnerabilityIntel10 Feb 2023Known
CVE-2022-24990TerraMaster OS Remote Command Execution VulnerabilityTerraMaster10 Feb 2023Known
CVE-2023-0669Fortra GoAnywhere MFT Remote Code Execution VulnerabilityFortra10 Feb 2023Known
CVE-2022-21587Oracle E-Business Suite Unspecified VulnerabilityOracle2 Feb 2023Known
CVE-2023-22952Multiple SugarCRM Products Remote Code Execution VulnerabilitySugarCRM2 Feb 2023Unknown
CVE-2017-11357Telerik UI for ASP.NET AJAX Insecure Direct Object Reference VulnerabilityTelerik26 Jan 2023Known
CVE-2022-47966Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityZoho23 Jan 2023Known
CVE-2022-44877CWP Control Web Panel OS Command Injection VulnerabilityCWP17 Jan 2023Unknown
CVE-2022-41080Microsoft Exchange Server Privilege Escalation VulnerabilityMicrosoft10 Jan 2023Known
CVE-2023-21674Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation VulnerabilityMicrosoft10 Jan 2023Unknown

Source: CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.28, as of 28 Oct 2026. About the data.

All years