Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 18:42:25 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
Microsoft Excel Featheader Record Memory Corruption Vulnerability
Microsoft — Excel
Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset.
CVE-2009-1123 · KEV 2022-03-03Microsoft Windows Improper Input Validation Vulnerability
Microsoft — Windows
The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.
CVE-2008-3431 · KEV 2022-03-03Oracle VirtualBox Insufficient Input Validation Vulnerability
Oracle — VirtualBox
An input validation vulnerability exists in the VBoxDrv.sys driver of Sun xVM VirtualBox which allows attackers to locally execute arbitrary code.
CVE-2008-2992 · KEV 2022-03-03Adobe Reader and Acrobat Input Validation Vulnerability
Adobe — Acrobat and Reader
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.
Ransomware use reportedCVE-2004-0210 · KEV 2022-03-03Microsoft Windows Privilege Escalation Vulnerability
Microsoft — Windows
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.
CVE-2002-0367 · KEV 2022-03-03Microsoft Windows Privilege Escalation Vulnerability
Microsoft — Windows
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.
CVE-2022-24682 · KEV 2022-02-25Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor — Zimbra Collaborate Suite (ZCS)
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.
Ransomware use reportedCVE-2017-8570 · KEV 2022-02-25Microsoft Office Remote Code Execution Vulnerability
Microsoft — Office
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.
CVE-2017-0222 · KEV 2022-02-25Microsoft Internet Explorer Remote Code Execution Vulnerability
Microsoft — Internet Explorer
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.
CVE-2014-6352 · KEV 2022-02-25Microsoft Windows Code Injection Vulnerability
Microsoft — Windows
Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object.
CVE-2022-23134 · KEV 2022-02-22Zabbix Frontend Improper Access Control Vulnerability
Zabbix — Frontend
Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.
CVE-2022-23131 · KEV 2022-02-22Zabbix Frontend Authentication Bypass Vulnerability
Zabbix — Frontend
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.
CVE-2022-24086 · KEV 2022-02-15Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability
Adobe — Commerce and Magento Open Source
Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.
CVE-2022-0609 · KEV 2022-02-15Google Chromium Animation Use-After-Free Vulnerability
Google — Chromium Animation
Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, inc…
CVE-2019-0752 · KEV 2022-02-15Microsoft Internet Explorer Type Confusion Vulnerability
Microsoft — Internet Explorer
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer
Ransomware use reportedCVE-2018-8174 · KEV 2022-02-15Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
Microsoft — Windows
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"
Ransomware use reportedCVE-2018-20250 · KEV 2022-02-15WinRAR Absolute Path Traversal Vulnerability
RARLAB — WinRAR
WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution
Ransomware use reportedCVE-2018-15982 · KEV 2022-02-15Adobe Flash Player Use-After-Free Vulnerability
Adobe — Flash Player
Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability
Ransomware use reportedCVE-2017-9841 · KEV 2022-02-15PHPUnit Command Injection Vulnerability
PHPUnit — PHPUnit
PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpuni…
CVE-2014-1761 · KEV 2022-02-15Microsoft Word Memory Corruption Vulnerability
Microsoft — Word
Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.
CVE-2013-3906 · KEV 2022-02-15Microsoft Graphics Component Memory Corruption Vulnerability
Microsoft — Graphics Component
Microsoft Graphics Component contains a memory corruption vulnerability which can allow for remote code execution.
CVE-2022-22620 · KEV 2022-02-11Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
Apple — iOS, iPadOS, and macOS
Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited…
CVE-2021-36934 · KEV 2022-02-10Microsoft Windows SAM Local Privilege Escalation Vulnerability
Microsoft — Windows
If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to escalate privileges to SYSTEM level.
CVE-2020-0796 · KEV 2022-02-10Microsoft SMBv3 Remote Code Execution Vulnerability
Microsoft — SMBv3
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code…
Ransomware use reportedCVE-2018-1000861 · KEV 2022-02-10Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
Jenkins — Jenkins Stapler Web Framework
A code execution vulnerability exists in the Stapler web framework used by Jenkins
CVE-2017-9791 · KEV 2022-02-10Apache Struts 1 Improper Input Validation Vulnerability
Apache — Struts 1
The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
CVE-2017-8464 · KEV 2022-02-10Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
Microsoft — Windows
Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file
CVE-2017-10271 · KEV 2022-02-10Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
Oracle — WebLogic Server
Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.
Ransomware use reportedCVE-2017-0263 · KEV 2022-02-10Microsoft Win32k Privilege Escalation Vulnerability
Microsoft — Win32k
Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.
CVE-2017-0262 · KEV 2022-02-10Microsoft Office Remote Code Execution Vulnerability
Microsoft — Office
A remote code execution vulnerability exists in Microsoft Office.
Source: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.