Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 18:42:25 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
Google Chromium Network Service Use-After-Free Vulnerability
Google — Chromium Network Service
Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromiu…
CVE-2022-22706 · KEV 2023-03-30Arm Mali GPU Kernel Driver Unspecified Vulnerability
Arm — Mali Graphics Processing Unit (GPU)
Arm Mali GPU Kernel Driver contains an unspecified vulnerability that allows a non-privileged user to achieve write access to read-only memory pages.
CVE-2021-30900 · KEV 2023-03-30Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
Apple — iOS, iPadOS, and macOS
Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application to execute code with kernel privileges.
CVE-2017-7494 · KEV 2023-03-30Samba Remote Code Execution Vulnerability
Samba — Samba
Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.
Ransomware use reportedCVE-2013-3163 · KEV 2023-03-30Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft — Internet Explorer
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website.
CVE-2023-26360 · KEV 2023-03-15Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe — ColdFusion
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution.
CVE-2023-24880 · KEV 2023-03-14Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft — Windows
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.
Ransomware use reportedCVE-2023-23397 · KEV 2023-03-14Microsoft Office Outlook Privilege Escalation Vulnerability
Microsoft — Office
Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.
CVE-2022-41328 · KEV 2023-03-14Fortinet FortiOS Path Traversal Vulnerability
Fortinet — FortiOS
Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.
CVE-2021-39144 · KEV 2023-03-10XStream Remote Code Execution Vulnerability
XStream — XStream
XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affe…
CVE-2020-5741 · KEV 2023-03-10Plex Media Server Remote Code Execution Vulnerability
Plex — Media Server
Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.
CVE-2022-35914 · KEV 2023-03-07Teclib GLPI Remote Code Execution Vulnerability
Teclib — GLPI
Teclib GLPI contains a remote code execution vulnerability in the third-party library, htmlawed.
CVE-2022-33891 · KEV 2023-03-07Apache Spark Command Injection Vulnerability
Apache — Spark
Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled.
CVE-2022-28810 · KEV 2023-03-07Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
Zoho — ManageEngine
Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.
CVE-2022-36537 · KEV 2023-02-27ZK Framework AuUploader Unspecified Vulnerability
ZK Framework — AuUploader
ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file located in the web context. The ZK Framework is an open-source Java framework. This vulnerability can impac…
Ransomware use reportedCVE-2022-47986 · KEV 2023-02-21IBM Aspera Faspex Code Execution Vulnerability
IBM — Aspera Faspex
IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.
Ransomware use reportedCVE-2022-41223 · KEV 2023-02-21Mitel MiVoice Connect Code Injection Vulnerability
Mitel — MiVoice Connect
The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.
Ransomware use reportedCVE-2022-40765 · KEV 2023-02-21Mitel MiVoice Connect Command Injection Vulnerability
Mitel — MiVoice Connect
The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.
Ransomware use reportedCVE-2022-46169 · KEV 2023-02-16Cacti Command Injection Vulnerability
Cacti — Cacti
Cacti contains a command injection vulnerability that allows an unauthenticated user to execute code.
CVE-2023-23529 · KEV 2023-02-14Apple Multiple Products WebKit Type Confusion Vulnerability
Apple — Multiple Products
Apple iOS, MacOS, Safari and iPadOS WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not …
CVE-2023-23376 · KEV 2023-02-14Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
Ransomware use reportedCVE-2023-21823 · KEV 2023-02-14Microsoft Windows Graphic Component Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation.
CVE-2023-21715 · KEV 2023-02-14Microsoft Office Publisher Security Feature Bypass Vulnerability
Microsoft — Office
Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted system.
CVE-2023-0669 · KEV 2023-02-10Fortra GoAnywhere MFT Remote Code Execution Vulnerability
Fortra — GoAnywhere MFT
Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.
Ransomware use reportedCVE-2022-24990 · KEV 2023-02-10TerraMaster OS Remote Command Execution Vulnerability
TerraMaster — TerraMaster OS
TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint.
Ransomware use reportedCVE-2015-2291 · KEV 2023-02-10Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
Intel — Ethernet Diagnostics Driver for Windows
Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).
Ransomware use reportedCVE-2023-22952 · KEV 2023-02-02Multiple SugarCRM Products Remote Code Execution Vulnerability
SugarCRM — Multiple Products
Multiple SugarCRM products contain a remote code execution vulnerability in the EmailTemplates. Using a specially crafted request, custom PHP code can be injected through the EmailTemplates.
CVE-2022-21587 · KEV 2023-02-02Oracle E-Business Suite Unspecified Vulnerability
Oracle — E-Business Suite
Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.
Ransomware use reportedCVE-2017-11357 · KEV 2023-01-26Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
Telerik — User Interface (UI) for ASP.NET AJAX
Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.
Ransomware use reportedCVE-2022-47966 · KEV 2023-01-23Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
Zoho — ManageEngine
Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.
Ransomware use reportedSource: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.