Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 18:42:25 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
Apple Multiple Products Use-After-Free Vulnerability
Apple — Multiple Products
A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges.
CVE-2018-4344 · KEV 2022-06-27Apple Multiple Products Memory Corruption Vulnerability
Apple — Multiple Products
Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.
CVE-2022-30190 · KEV 2022-06-14Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Microsoft — Windows
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling applic…
Ransomware use reportedCVE-2021-38163 · KEV 2022-06-09SAP NetWeaver Unrestricted File Upload Vulnerability
SAP — NetWeaver
SAP NetWeaver contains a vulnerability that allows unrestricted file upload.
CVE-2016-2388 · KEV 2022-06-09SAP NetWeaver Information Disclosure Vulnerability
SAP — NetWeaver
The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request.
CVE-2016-2386 · KEV 2022-06-09SAP NetWeaver SQL Injection Vulnerability
SAP — NetWeaver
SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2019-7195 · KEV 2022-06-08QNAP Photo Station Path Traversal Vulnerability
QNAP — Photo Station
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
Ransomware use reportedCVE-2019-7194 · KEV 2022-06-08QNAP Photo Station Path Traversal Vulnerability
QNAP — Photo Station
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
Ransomware use reportedCVE-2019-7193 · KEV 2022-06-08QNAP QTS Improper Input Validation Vulnerability
QNAP — QTS
QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system.
Ransomware use reportedCVE-2019-7192 · KEV 2022-06-08QNAP Photo Station Improper Access Control Vulnerability
QNAP — Photo Station
QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.
Ransomware use reportedCVE-2019-5825 · KEV 2022-06-08Google Chromium V8 Out-of-Bounds Write Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromiu…
CVE-2019-15271 · KEV 2022-06-08Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability
Cisco — RV Series Routers
A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an attacker to execute code with root privileges.
CVE-2018-6065 · KEV 2022-06-08Google Chromium V8 Integer Overflow Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, …
CVE-2018-4990 · KEV 2022-06-08Adobe Acrobat and Reader Double Free Vulnerability
Adobe — Acrobat and Reader
Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.
CVE-2018-17480 · KEV 2022-06-08Google Chromium V8 Out-of-Bounds Write Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, includ…
CVE-2018-17463 · KEV 2022-06-08Google Chromium V8 Remote Code Execution Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, …
CVE-2017-6862 · KEV 2022-06-08NETGEAR Multiple Devices Buffer Overflow Vulnerability
NETGEAR — Multiple Devices
Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution.
CVE-2017-5070 · KEV 2022-06-08Google Chromium V8 Type Confusion Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including…
CVE-2017-5030 · KEV 2022-06-08Google Chromium V8 Memory Corruption Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limi…
CVE-2016-5198 · KEV 2022-06-08Google Chromium V8 Out-of-Bounds Memory Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web…
CVE-2016-1646 · KEV 2022-06-08Google Chromium V8 Out-of-Bounds Read Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multi…
CVE-2013-1331 · KEV 2022-06-08Microsoft Office Buffer Overflow Vulnerability
Microsoft — Office
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.
CVE-2012-5054 · KEV 2022-06-08Adobe Flash Player Integer Overflow Vulnerability
Adobe — Flash Player
Adobe Flash Player contains an integer overflow vulnerability that allows remote attackers to execute code via malformed arguments.
CVE-2012-4969 · KEV 2022-06-08Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft — Internet Explorer
Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.
CVE-2012-1889 · KEV 2022-06-08Microsoft XML Core Services Memory Corruption Vulnerability
Microsoft — XML Core Services
Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.
CVE-2012-0767 · KEV 2022-06-08Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
Adobe — Flash Player
Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.
CVE-2012-0754 · KEV 2022-06-08Adobe Flash Player Memory Corruption Vulnerability
Adobe — Flash Player
Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
CVE-2012-0151 · KEV 2022-06-08Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability
Microsoft — Windows
The Authenticode Signature Verification function in Microsoft Windows (WinVerifyTrust) does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute code.
CVE-2011-2462 · KEV 2022-06-08Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
Adobe — Reader and Acrobat
The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
CVE-2011-0609 · KEV 2022-06-08Adobe Flash Player Unspecified Vulnerability
Adobe — Flash Player
Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Source: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.