Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2023-41991 | Apple | Multiple Products | 5.5 Medium | Apple Multiple Products Improper Certificate Validation Vulnerability | 2023-09-25 | 2023-10-16 | Unknown |
| CVE-2023-41179 | Trend Micro | Apex One and Worry-Free Business Security | 7.2 High | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | 2023-09-21 | 2023-10-12 | Unknown |
| CVE-2023-28434 | MinIO | MinIO | 8.8 High | MinIO Security Feature Bypass Vulnerability | 2023-09-19 | 2023-10-10 | Unknown |
| CVE-2022-22265 | Samsung | Mobile Devices | 7.8 High | Samsung Mobile Devices Use-After-Free Vulnerability | 2023-09-18 | 2023-10-09 | Unknown |
| CVE-2021-3129 | Laravel | Ignition | 9.8 Critical | Laravel Ignition File Upload Vulnerability | 2023-09-18 | 2023-10-09 | Known |
| CVE-2017-6884 | Zyxel | EMG2926 Routers | 8.8 High | Zyxel EMG2926 Routers Command Injection Vulnerability | 2023-09-18 | 2023-10-09 | Known |
| CVE-2014-8361 | Realtek | SDK | 9.8 Critical | Realtek SDK Improper Input Validation Vulnerability | 2023-09-18 | 2023-10-09 | Unknown |
| CVE-2023-26369 | Adobe | Acrobat and Reader | 7.8 High | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | 2023-09-14 | 2023-10-05 | Unknown |
| CVE-2023-4863 | Chromium WebP | 8.8 High | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | 2023-09-13 | 2023-10-04 | Unknown | |
| CVE-2023-35674 | Android | Framework | 7.8 High | Android Framework Privilege Escalation Vulnerability | 2023-09-13 | 2023-10-04 | Unknown |
| CVE-2023-20269 | Cisco | Adaptive Security Appliance and Firepower Threat Defense | 9.1 Critical | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | 2023-09-13 | 2023-10-04 | Known |
| CVE-2023-36802 | Microsoft | Streaming Service Proxy | 7.8 High | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | 2023-09-12 | 2023-10-03 | Unknown |
| CVE-2023-36761 | Microsoft | Word | 6.5 Medium | Microsoft Word Information Disclosure Vulnerability | 2023-09-12 | 2023-10-03 | Unknown |
| CVE-2023-41064 | Apple | iOS, iPadOS, and macOS | 7.8 High | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | 2023-09-11 | 2023-10-02 | Unknown |
| CVE-2023-41061 | Apple | iOS, iPadOS, and watchOS | 7.8 High | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | 2023-09-11 | 2023-10-02 | Unknown |
| CVE-2023-33246 | Apache | RocketMQ | 9.8 Critical | Apache RocketMQ Command Execution Vulnerability | 2023-09-06 | 2023-09-27 | Unknown |
| CVE-2023-38831 | RARLAB | WinRAR | 7.8 High | RARLAB WinRAR Code Execution Vulnerability | 2023-08-24 | 2023-09-14 | Known |
| CVE-2023-32315 | Ignite Realtime | Openfire | 7.5 High | Ignite Realtime Openfire Path Traversal Vulnerability | 2023-08-24 | 2023-09-14 | Unknown |
| CVE-2023-38035 | Ivanti | Sentry | 9.8 Critical | Ivanti Sentry Authentication Bypass Vulnerability | 2023-08-22 | 2023-09-12 | Known |
| CVE-2023-27532 | Veeam | Backup & Replication | 7.5 High | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability | 2023-08-22 | 2023-09-12 | Known |
| CVE-2023-26359 | Adobe | ColdFusion | 9.8 Critical | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 2023-08-21 | 2023-09-11 | Unknown |
| CVE-2023-24489 | Citrix | Content Collaboration | 9.8 Critical | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | 2023-08-16 | 2023-09-06 | Unknown |
| CVE-2023-38180 | Microsoft | .NET Core and Visual Studio | 7.5 High | Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability | 2023-08-09 | 2023-08-30 | Unknown |
| CVE-2017-18368 | Zyxel | P660HN-T1A Routers | 9.8 Critical | Zyxel P660HN-T1A Routers Command Injection Vulnerability | 2023-08-07 | 2023-08-28 | Unknown |
| CVE-2023-35081 | Ivanti | Endpoint Manager Mobile (EPMM) | 7.2 High | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 2023-07-31 | 2023-08-21 | Unknown |
| CVE-2023-37580 | Synacor | Zimbra Collaboration Suite (ZCS) | 6.1 Medium | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 2023-07-27 | 2023-08-17 | Unknown |
| CVE-2023-38606 | Apple | Multiple Products | 5.5 Medium | Apple Multiple Products Kernel Unspecified Vulnerability | 2023-07-26 | 2023-08-16 | Unknown |
| CVE-2023-35078 | Ivanti | Endpoint Manager Mobile (EPMM) | 9.8 Critical | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 2023-07-25 | 2023-08-15 | Known |
| CVE-2023-38205 | Adobe | ColdFusion | 7.5 High | Adobe ColdFusion Improper Access Control Vulnerability | 2023-07-20 | 2023-08-10 | Unknown |
| CVE-2023-29298 | Adobe | ColdFusion | 7.5 High | Adobe ColdFusion Improper Access Control Vulnerability | 2023-07-20 | 2023-08-10 | Unknown |
| CVE-2023-3519 | Citrix | NetScaler ADC and NetScaler Gateway | 9.8 Critical | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 2023-07-19 | 2023-08-09 | Known |
| CVE-2023-36884 | Microsoft | Windows | 7.5 High | Microsoft Windows Search Remote Code Execution Vulnerability | 2023-07-17 | 2023-08-29 | Known |
| CVE-2023-37450 | Apple | Multiple Products | 8.8 High | Apple Multiple Products WebKit Code Execution Vulnerability | 2023-07-13 | 2023-08-03 | Unknown |
| CVE-2022-29303 | SolarView | Compact | 9.8 Critical | SolarView Compact Command Injection Vulnerability | 2023-07-13 | 2023-08-03 | Unknown |
| CVE-2023-36874 | Microsoft | Windows | 7.8 High | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | 2023-07-11 | 2023-08-01 | Unknown |
| CVE-2023-35311 | Microsoft | Outlook | 8.8 High | Microsoft Outlook Security Feature Bypass Vulnerability | 2023-07-11 | 2023-08-01 | Unknown |
| CVE-2023-32049 | Microsoft | Windows | 8.8 High | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | 2023-07-11 | 2023-08-01 | Unknown |
| CVE-2023-32046 | Microsoft | Windows | 7.8 High | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | 2023-07-11 | 2023-08-01 | Unknown |
| CVE-2022-31199 | Netwrix | Auditor | 9.8 Critical | Netwrix Auditor Insecure Object Deserialization Vulnerability | 2023-07-11 | 2023-08-01 | Known |
| CVE-2021-29256 | Arm | Mali Graphics Processing Unit (GPU) | 8.8 High | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 2023-07-07 | 2023-07-28 | Unknown |
| CVE-2021-25489 | Samsung | Mobile Devices | 5.5 Medium | Samsung Mobile Devices Improper Input Validation Vulnerability | 2023-06-29 | 2023-07-20 | Unknown |
| CVE-2021-25487 | Samsung | Mobile Devices | 7.8 High | Samsung Mobile Devices Out-of-Bounds Read Vulnerability | 2023-06-29 | 2023-07-20 | Unknown |
| CVE-2021-25395 | Samsung | Mobile Devices | 6.4 Medium | Samsung Mobile Devices Race Condition Vulnerability | 2023-06-29 | 2023-07-20 | Unknown |
| CVE-2021-25394 | Samsung | Mobile Devices | 6.4 Medium | Samsung Mobile Devices Race Condition Vulnerability | 2023-06-29 | 2023-07-20 | Unknown |
| CVE-2021-25372 | Samsung | Mobile Devices | 6.7 Medium | Samsung Mobile Devices Improper Boundary Check Vulnerability | 2023-06-29 | 2023-07-20 | Unknown |
| CVE-2021-25371 | Samsung | Mobile Devices | 6.7 Medium | Samsung Mobile Devices Unspecified Vulnerability | 2023-06-29 | 2023-07-20 | Unknown |
| CVE-2019-20500 | D-Link | DWL-2600AP Access Point | 7.8 High | D-Link DWL-2600AP Access Point Command Injection Vulnerability | 2023-06-29 | 2023-07-20 | Unknown |
| CVE-2019-17621 | D-Link | DIR-859 Router | 9.8 Critical | D-Link DIR-859 Router Command Execution Vulnerability | 2023-06-29 | 2023-07-20 | Unknown |
| CVE-2023-32439 | Apple | Multiple Products | 8.8 High | Apple Multiple Products WebKit Type Confusion Vulnerability | 2023-06-23 | 2023-07-14 | Unknown |
| CVE-2023-32435 | Apple | Multiple Products | 8.8 High | Apple Multiple Products WebKit Memory Corruption Vulnerability | 2023-06-23 | 2023-07-14 | Unknown |