Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2023-32434 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Integer Overflow Vulnerability | 2023-06-23 | 2023-07-14 | Unknown |
| CVE-2023-27992 | Zyxel | Multiple Network-Attached Storage (NAS) Devices | 9.8 Critical | Zyxel Multiple NAS Devices Command Injection Vulnerability | 2023-06-23 | 2023-07-14 | Unknown |
| CVE-2023-20867 | VMware | Tools | 3.9 Low | VMware Tools Authentication Bypass Vulnerability | 2023-06-23 | 2023-07-14 | Unknown |
| CVE-2023-20887 | VMware | Aria Operations for Networks | 9.8 Critical | Vmware Aria Operations for Networks Command Injection Vulnerability | 2023-06-22 | 2023-07-13 | Unknown |
| CVE-2021-44026 | Roundcube | Roundcube Webmail | 9.8 Critical | Roundcube Webmail SQL Injection Vulnerability | 2023-06-22 | 2023-07-13 | Unknown |
| CVE-2020-35730 | Roundcube | Roundcube Webmail | 6.1 Medium | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 2023-06-22 | 2023-07-13 | Unknown |
| CVE-2020-12641 | Roundcube | Roundcube Webmail | 9.8 Critical | Roundcube Webmail Remote Code Execution Vulnerability | 2023-06-22 | 2023-07-13 | Unknown |
| CVE-2016-9079 | Mozilla | Firefox, Firefox ESR, and Thunderbird | 7.5 High | Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability | 2023-06-22 | 2023-07-13 | Unknown |
| CVE-2016-0165 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2023-06-22 | 2023-07-13 | Unknown |
| CVE-2023-27997 | Fortinet | FortiOS and FortiProxy SSL-VPN | 9.8 Critical | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | 2023-06-13 | 2023-07-04 | Known |
| CVE-2023-3079 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2023-06-07 | 2023-06-28 | Unknown | |
| CVE-2023-33010 | Zyxel | Multiple Firewalls | 9.8 Critical | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 2023-06-05 | 2023-06-26 | Unknown |
| CVE-2023-33009 | Zyxel | Multiple Firewalls | 9.8 Critical | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 2023-06-05 | 2023-06-26 | Unknown |
| CVE-2023-34362 | Progress | MOVEit Transfer | 9.8 Critical | Progress MOVEit Transfer SQL Injection Vulnerability | 2023-06-02 | 2023-06-23 | Known |
| CVE-2023-28771 | Zyxel | Multiple Firewalls | 9.8 Critical | Zyxel Multiple Firewalls OS Command Injection Vulnerability | 2023-05-31 | 2023-06-21 | Unknown |
| CVE-2023-2868 | Barracuda Networks | Email Security Gateway (ESG) Appliance | 9.8 Critical | Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | 2023-05-26 | 2023-06-16 | Unknown |
| CVE-2023-32409 | Apple | Multiple Products | 8.6 High | Apple Multiple Products WebKit Sandbox Escape Vulnerability | 2023-05-22 | 2023-06-12 | Unknown |
| CVE-2023-32373 | Apple | Multiple Products | 8.8 High | Apple Multiple Products WebKit Use-After-Free Vulnerability | 2023-05-22 | 2023-06-12 | Unknown |
| CVE-2023-28204 | Apple | Multiple Products | 6.5 Medium | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 2023-05-22 | 2023-06-12 | Unknown |
| CVE-2023-21492 | Samsung | Mobile Devices | 4.4 Medium | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | 2023-05-19 | 2023-06-09 | Unknown |
| CVE-2016-6415 | Cisco | IOS, IOS XR, and IOS XE | 7.5 High | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | 2023-05-19 | 2023-06-09 | Unknown |
| CVE-2004-1464 | Cisco | IOS | 5.9 Medium | Cisco IOS Denial-of-Service Vulnerability | 2023-05-19 | 2023-06-09 | Unknown |
| CVE-2023-25717 | Ruckus Wireless | Multiple Products | 9.8 Critical | Multiple Ruckus Wireless Products CSRF and RCE Vulnerability | 2023-05-12 | 2023-06-02 | Unknown |
| CVE-2021-3560 | Red Hat | Polkit | 7.8 High | Red Hat Polkit Incorrect Authorization Vulnerability | 2023-05-12 | 2023-06-02 | Unknown |
| CVE-2016-8735 | Apache | Tomcat | 9.8 Critical | Apache Tomcat Remote Code Execution Vulnerability | 2023-05-12 | 2023-06-02 | Unknown |
| CVE-2016-3427 | Oracle | Java SE and JRockit | 9.8 Critical | Oracle Java SE and JRockit Unspecified Vulnerability | 2023-05-12 | 2023-06-02 | Unknown |
| CVE-2015-5317 | Jenkins | Jenkins User Interface (UI) | 7.5 High | Jenkins User Interface (UI) Information Disclosure Vulnerability | 2023-05-12 | 2023-06-02 | Unknown |
| CVE-2014-0196 | Linux | Kernel | 5.5 Medium | Linux Kernel Race Condition Vulnerability | 2023-05-12 | 2023-06-02 | Unknown |
| CVE-2010-3904 | Linux | Kernel | 7.8 High | Linux Kernel Improper Input Validation Vulnerability | 2023-05-12 | 2023-06-02 | Unknown |
| CVE-2023-29336 | Microsoft | Win32k | 7.8 High | Microsoft Win32K Privilege Escalation Vulnerability | 2023-05-09 | 2023-05-30 | Unknown |
| CVE-2023-21839 | Oracle | WebLogic Server | 7.5 High | Oracle WebLogic Server Unspecified Vulnerability | 2023-05-01 | 2023-05-22 | Unknown |
| CVE-2023-1389 | TP-Link | Archer AX21 | 8.8 High | TP-Link Archer AX-21 Command Injection Vulnerability | 2023-05-01 | 2023-05-22 | Unknown |
| CVE-2021-45046 | Apache | Log4j2 | 9.0 Critical | Apache Log4j2 Deserialization of Untrusted Data Vulnerability | 2023-05-01 | 2023-05-22 | Known |
| CVE-2023-28432 | MinIO | MinIO | 7.5 High | MinIO Information Disclosure Vulnerability | 2023-04-21 | 2023-05-12 | Unknown |
| CVE-2023-27350 | PaperCut | MF/NG | 9.8 Critical | PaperCut MF/NG Improper Access Control Vulnerability | 2023-04-21 | 2023-05-12 | Known |
| CVE-2023-2136 | Chromium Skia | 9.6 Critical | Google Chrome Skia Integer Overflow Vulnerability | 2023-04-21 | 2023-05-12 | Unknown | |
| CVE-2017-6742 | Cisco | IOS and IOS XE Software | 8.8 High | Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 2023-04-19 | 2023-05-10 | Unknown |
| CVE-2023-2033 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2023-04-17 | 2023-05-08 | Unknown | |
| CVE-2019-8526 | Apple | macOS | 7.8 High | Apple macOS Use-After-Free Vulnerability | 2023-04-17 | 2023-05-08 | Unknown |
| CVE-2023-29492 | Novi Survey | Novi Survey | 9.8 Critical | Novi Survey Insecure Deserialization Vulnerability | 2023-04-13 | 2023-05-04 | Unknown |
| CVE-2023-20963 | Android | Framework | 7.8 High | Android Framework Privilege Escalation Vulnerability | 2023-04-13 | 2023-05-04 | Unknown |
| CVE-2023-28252 | Microsoft | Windows | 7.8 High | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 2023-04-11 | 2023-05-02 | Known |
| CVE-2023-28206 | Apple | iOS, iPadOS, and macOS | 8.6 High | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | 2023-04-10 | 2023-05-01 | Unknown |
| CVE-2023-28205 | Apple | Multiple Products | 8.8 High | Apple Multiple Products WebKit Use-After-Free Vulnerability | 2023-04-10 | 2023-05-01 | Unknown |
| CVE-2023-26083 | Arm | Mali Graphics Processing Unit (GPU) | 3.3 Low | Arm Mali GPU Kernel Driver Information Disclosure Vulnerability | 2023-04-07 | 2023-04-28 | Unknown |
| CVE-2021-27878 | Veritas | Backup Exec Agent | 8.8 High | Veritas Backup Exec Agent Command Execution Vulnerability | 2023-04-07 | 2023-04-28 | Known |
| CVE-2021-27877 | Veritas | Backup Exec Agent | 9.8 Critical | Veritas Backup Exec Agent Improper Authentication Vulnerability | 2023-04-07 | 2023-04-28 | Known |
| CVE-2021-27876 | Veritas | Backup Exec Agent | 8.1 High | Veritas Backup Exec Agent File Access Vulnerability | 2023-04-07 | 2023-04-28 | Known |
| CVE-2019-1388 | Microsoft | Windows | 7.8 High | Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability | 2023-04-07 | 2023-04-28 | Known |
| CVE-2022-27926 | Synacor | Zimbra Collaboration Suite (ZCS) | 6.1 Medium | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 2023-04-03 | 2023-04-24 | Unknown |