Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-24488 | CVE-2023-24488 | MEDIUM | 6.1 | 80.91% | cvelistv5 | |
| cve-2023-23752 | Joomla! Improper Access Control Vulnerability | MEDIUM | 5.3 | 99.83% | cvelistv5 | 2024-01-08 |
| cve-2023-23529 | SUSE CVE CVE-2023-23529 | HIGH | 8.8 | 9.50% | cvelistv5 | 2026-09-01 |
| cve-2023-23489 | CVE-2023-23489 | CRITICAL | 9.8 | 11.17% | cvelistv5 | |
| cve-2023-23397 | Microsoft Office Outlook Privilege Escalation Vulnerability | HIGH | N/A | 97.16% | cvelistv5 | 2023-03-14 |
| cve-2023-23376 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | HIGH | 7.8 | 10.85% | cvelistv5 | 2023-02-14 |
| cve-2023-23333 | CVE-2023-23333 | CRITICAL | 9.8 | 99.29% | cvelistv5 | |
| cve-2023-23295 | CVE-2023-23295 | HIGH | 8.8 | 3.83% | cvelistv5 | |
| cve-2023-23063 | CVE-2023-23063 | HIGH | N/A | 2.43% | cvelistv5 | |
| cve-2023-22952 | Multiple SugarCRM Products Remote Code Execution Vulnerability | HIGH | N/A | 80.14% | cvelistv5 | 2023-02-02 |
| cve-2023-22897 | CVE-2023-22897 | MEDIUM | 6.5 | 4.07% | cvelistv5 | |
| cve-2023-22620 | CVE-2023-22620 | HIGH | 7.5 | 3.92% | cvelistv5 | |
| cve-2023-22527 | Atlassian Confluence Data Center and Server Template Injection Vulnerability | CRITICAL | 10.0 | 99.98% | cvelistv5 | 2024-01-24 |
| cve-2023-22518 | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | CRITICAL | 10.0 | 100.00% | cvelistv5 | 2023-11-07 |
| cve-2023-22515 | Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | CRITICAL | 10.0 | 99.16% | cvelistv5 | 2023-10-05 |
| cve-2023-22478 | CVE-2023-22478 | HIGH | 7.3 | 3.57% | cvelistv5 | |
| cve-2023-21839 | Oracle WebLogic Server Unspecified Vulnerability | HIGH | 7.5 | 99.90% | cvelistv5 | 2023-05-01 |
| cve-2023-21823 | Microsoft Windows Graphic Component Privilege Escalation Vulnerability | HIGH | 7.8 | 5.56% | cvelistv5 | 2023-02-14 |
| cve-2023-21715 | Microsoft Office Publisher Security Feature Bypass Vulnerability | HIGH | 7.3 | 12.01% | cvelistv5 | 2023-02-14 |
| cve-2023-21674 | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | HIGH | N/A | 40.99% | cvelistv5 | 2023-01-10 |
| cve-2023-21608 | Adobe Acrobat and Reader Use-After-Free Vulnerability | HIGH | 7.8 | 61.48% | cvelistv5 | 2023-10-10 |
| cve-2023-21529 | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | CRITICAL | N/A | 59.29% | cvelistv5 | 2026-04-13 |
| cve-2023-21492 | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | MEDIUM | 4.4 | 2.55% | cvelistv5 | 2023-05-19 |
| cve-2023-2136 | Google Chrome Skia Integer Overflow Vulnerability | HIGH | N/A | 5.74% | cvelistv5 | 2023-04-21 |
| cve-2023-21237 | Android Pixel Information Disclosure Vulnerability | HIGH | N/A | 0.27% | cvelistv5 | 2024-03-05 |
| cve-2023-20963 | Android Framework Privilege Escalation Vulnerability | HIGH | 7.8 | 1.47% | cvelistv5 | 2023-04-13 |
| cve-2023-20887 | Vmware Aria Operations for Networks Command Injection Vulnerability | CRITICAL | 9.8 | 98.28% | cvelistv5 | 2023-06-22 |
| cve-2023-20867 | SUSE CVE CVE-2023-20867 | LOW | 3.9 | 13.53% | cvelistv5 | 2026-09-01 |
| cve-2023-2033 | Google Chromium V8 Type Confusion Vulnerability | HIGH | N/A | 40.80% | cvelistv5 | 2023-04-17 |
| cve-2023-20273 | Cisco IOS XE Web UI Command Injection Vulnerability | HIGH | 7.2 | 89.63% | cvelistv5 | 2023-10-23 |