Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 18:42:25 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
Adobe ColdFusion Directory Traversal Vulnerability
Adobe — ColdFusion
A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.
Ransomware use reportedCVE-2009-2055 · KEV 2022-03-25Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Cisco — IOS XR
Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).
CVE-2009-1151 · KEV 2022-03-25phpMyAdmin Remote Code Execution Vulnerability
phpMyAdmin — phpMyAdmin
Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.
CVE-2009-0927 · KEV 2022-03-25Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
Adobe — Reader and Acrobat
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.
CVE-2005-2773 · KEV 2022-03-25HP OpenView Network Node Manager Remote Code Execution Vulnerability
Hewlett Packard (HP) — OpenView Network Node Manager
HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.
CVE-2020-5135 · KEV 2022-03-15SonicWall SonicOS Buffer Overflow Vulnerability
SonicWall — SonicOS
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.
Ransomware use reportedCVE-2019-1405 · KEV 2022-03-15Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
Microsoft — Windows
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
Ransomware use reportedCVE-2019-1322 · KEV 2022-03-15Microsoft Windows Privilege Escalation Vulnerability
Microsoft — Windows
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Ransomware use reportedCVE-2019-1315 · KEV 2022-03-15Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
Microsoft — Windows
A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.
Ransomware use reportedCVE-2019-1253 · KEV 2022-03-15Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
Microsoft — Windows
A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.
Ransomware use reportedCVE-2019-1132 · KEV 2022-03-15Microsoft Win32k Privilege Escalation Vulnerability
Microsoft — Win32k
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
CVE-2019-1129 · KEV 2022-03-15Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft — Windows
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Ransomware use reportedCVE-2019-1069 · KEV 2022-03-15Microsoft Task Scheduler Privilege Escalation Vulnerability
Microsoft — Task Scheduler
A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.
Ransomware use reportedCVE-2019-1064 · KEV 2022-03-15Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft — Windows
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Ransomware use reportedCVE-2019-0841 · KEV 2022-03-15Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft — Windows
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Ransomware use reportedCVE-2019-0543 · KEV 2022-03-15Microsoft Windows Privilege Escalation Vulnerability
Microsoft — Windows
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Ransomware use reportedCVE-2018-8120 · KEV 2022-03-15Microsoft Win32k Privilege Escalation Vulnerability
Microsoft — Win32k
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
Ransomware use reportedCVE-2017-0101 · KEV 2022-03-15Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
Microsoft — Windows
A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.
Ransomware use reportedCVE-2016-3309 · KEV 2022-03-15Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft — Windows
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
Ransomware use reportedCVE-2015-2546 · KEV 2022-03-15Microsoft Win32k Memory Corruption Vulnerability
Microsoft — Win32k
The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.
Ransomware use reportedCVE-2022-26486 · KEV 2022-03-07Mozilla Firefox Use-After-Free Vulnerability
Mozilla — Firefox
Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.
CVE-2022-26485 · KEV 2022-03-07Mozilla Firefox Use-After-Free Vulnerability
Mozilla — Firefox
Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.
CVE-2021-21973 · KEV 2022-03-07VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
VMware — vCenter Server and Cloud Foundation
VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.
CVE-2020-8218 · KEV 2022-03-07Pulse Connect Secure Code Injection Vulnerability
Pulse Secure — Pulse Connect Secure
A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
CVE-2019-11581 · KEV 2022-03-07Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
Atlassian — Jira Server and Data Center
Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.
CVE-2017-6077 · KEV 2022-03-07NETGEAR DGN2200 Remote Code Execution Vulnerability
NETGEAR — Wireless Router DGN2200
NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
CVE-2016-6277 · KEV 2022-03-07NETGEAR Multiple Routers Remote Code Execution Vulnerability
NETGEAR — Multiple Routers
NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
CVE-2013-0631 · KEV 2022-03-07Adobe ColdFusion Information Disclosure Vulnerability
Adobe — ColdFusion
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.
CVE-2013-0629 · KEV 2022-03-07Adobe ColdFusion Directory Traversal Vulnerability
Adobe — ColdFusion
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.
CVE-2013-0625 · KEV 2022-03-07Adobe ColdFusion Authentication Bypass Vulnerability
Adobe — ColdFusion
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.
Source: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.