CISA Known Exploited Vulnerabilities
Vulnerabilities CISA has confirmed are being actively exploited. These are the top priority — federal agencies have a mandated patch-by date, and so should you. 1,716 entries.
| CVE | Added | Patch by | EPSS | CVSS | Ransomware | What |
|---|---|---|---|---|---|---|
| CVE-2012-3152 | 2021-11-03 | 2022-05-03 | 98.8% | — | Oracle Fusion Middleware Reports Developer contains an unspecified vul… | |
| CVE-2017-11774 | 2021-11-03 | 2022-05-03 | 59.6% | — | Microsoft Office Outlook contains a security feature bypass vulnerabil… | |
| CVE-2017-0199 | 2021-11-03 | 2022-05-03 | 99.9% | — | yes | Microsoft Office and WordPad contain an unspecified vulnerability due … |
| CVE-2017-0143 | 2021-11-03 | 2022-05-03 | 93.3% | — | yes | Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspeci… |
| CVE-2016-9563 | 2021-11-03 | 2022-05-03 | 24.2% | — | SAP NetWeaver Application Server Java Platforms contains an unspecifie… | |
| CVE-2016-3235 | 2021-11-03 | 2022-05-03 | 43.3% | — | Microsoft Office Object Linking & Embedding (OLE) dynamic link library… | |
| CVE-2016-3643 | 2021-11-03 | 2022-05-03 | 3.7% | — | SolarWinds Virtualization Manager allows for privilege escalation thro… | |
| CVE-2016-3715 | 2021-11-03 | 2022-05-03 | 75.3% | — | ImageMagick contains an unspecified vulnerability that could allow use… | |
| CVE-2016-3718 | 2021-11-03 | 2022-05-03 | 76.7% | — | ImageMagick contains an unspecified vulnerability that allows attacker… | |
| CVE-2016-3976 | 2021-11-03 | 2022-05-03 | 47.3% | — | SAP NetWeaver Application Server Java Platforms contains a directory t… | |
| CVE-2016-4437 | 2021-11-03 | 2022-05-03 | 93.0% | — | Apache Shiro contains a vulnerability which may allow remote attackers… | |
| CVE-2016-7255 | 2021-11-03 | 2022-05-03 | 81.0% | 7.8 | yes | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server… |
| CVE-2015-4852 | 2021-11-03 | 2022-05-03 | 96.0% | — | Oracle WebLogic Server contains a deserialization of untrusted data vu… | |
| CVE-2016-0167 | 2021-11-03 | 2022-05-03 | 5.7% | — | yes | Microsoft Win32k contains an unspecified vulnerability that allows for… |
| CVE-2016-0185 | 2021-11-03 | 2022-05-03 | 69.8% | — | Microsoft Windows Media Center contains a remote code execution vulner… | |
| CVE-2015-1641 | 2021-11-03 | 2022-05-03 | 96.7% | — | Microsoft Office contains a memory corruption vulnerability due to fai… |
← Prev Page 18 of 18