Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 18:42:25 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
Apple Multiple Products Type Confusion Vulnerability
Apple — Multiple Products
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
CVE-2019-8506 · KEV 2022-05-04Apple Multiple Products Type Confusion Vulnerability
Apple — Multiple Products
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
CVE-2014-4113 · KEV 2022-05-04Microsoft Win32k Privilege Escalation Vulnerability
Microsoft — Win32k
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
CVE-2014-0322 · KEV 2022-05-04Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft — Internet Explorer
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.
CVE-2014-0160 · KEV 2022-05-04OpenSSL Information Disclosure Vulnerability
OpenSSL — OpenSSL
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.
CVE-2022-29464 · KEV 2022-04-25WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
WSO2 — Multiple Products
Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.
Ransomware use reportedCVE-2022-26904 · KEV 2022-04-25Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
CVE-2022-21919 · KEV 2022-04-25Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
CVE-2022-0847 · KEV 2022-04-25Linux Kernel Privilege Escalation Vulnerability
Linux — Kernel
Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."
CVE-2021-41357 · KEV 2022-04-25Microsoft Win32k Privilege Escalation Vulnerability
Microsoft — Win32k
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
CVE-2021-40450 · KEV 2022-04-25Microsoft Win32k Privilege Escalation Vulnerability
Microsoft — Win32k
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
CVE-2019-1003029 · KEV 2022-04-25Jenkins Script Security Plugin Sandbox Bypass Vulnerability
Jenkins — Script Security Plugin
Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.
CVE-2022-22718 · KEV 2022-04-19Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.
CVE-2019-3568 · KEV 2022-04-19WhatsApp VOIP Stack Buffer Overflow Vulnerability
Meta Platforms — WhatsApp
A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number.
CVE-2018-6882 · KEV 2022-04-19Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor — Zimbra Collaboration Suite (ZCS)
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML.
Ransomware use reportedCVE-2022-22960 · KEV 2022-04-15VMware Multiple Products Privilege Escalation Vulnerability
VMware — Multiple Products
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
CVE-2022-1364 · KEV 2022-04-15Google Chromium V8 Type Confusion Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, inc…
CVE-2019-3929 · KEV 2022-04-15Crestron Multiple Products Command Injection Vulnerability
Crestron — Multiple Products
Multiple Crestron products are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
CVE-2019-16057 · KEV 2022-04-15D-Link DNS-320 Remote Code Execution Vulnerability
D-Link — DNS-320 Storage Device
The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution.
Ransomware use reportedCVE-2018-7841 · KEV 2022-04-15Schneider Electric U.motion Builder SQL Injection Vulnerability
Schneider Electric — U.motion Builder
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.
CVE-2016-4523 · KEV 2022-04-15Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
Trihedral — VTScada (formerly VTS)
The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).
CVE-2014-0780 · KEV 2022-04-15InduSoft Web Studio NTWebServer Directory Traversal Vulnerability
InduSoft — Web Studio
InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.
CVE-2010-5330 · KEV 2022-04-15Ubiquiti AirOS Command Injection Vulnerability
Ubiquiti — AirOS
Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.
CVE-2007-3010 · KEV 2022-04-15Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability
Alcatel — OmniPCX Enterprise
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary commands.
CVE-2022-22954 · KEV 2022-04-14VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
VMware — Workspace ONE Access and Identity Manager
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
Ransomware use reportedCVE-2022-24521 · KEV 2022-04-13Microsoft Windows CLFS Driver Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.
Ransomware use reportedCVE-2018-7602 · KEV 2022-04-13Drupal Core Remote Code Execution Vulnerability
Drupal — Core
A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.
Ransomware use reportedCVE-2018-20753 · KEV 2022-04-13Kaseya VSA Remote Code Execution Vulnerability
Kaseya — Virtual System/Server Administrator (VSA)
Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.
Ransomware use reportedCVE-2015-5123 · KEV 2022-04-13Adobe Flash Player Use-After-Free Vulnerability
Adobe — Flash Player
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
CVE-2015-5122 · KEV 2022-04-13Adobe Flash Player Use-After-Free Vulnerability
Adobe — Flash Player
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
Source: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.