Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2020-9715 Adobe Acrobat Use-After-Free Vulnerability HIGH N/A 48.59% cvelistv5 2026-04-13
cve-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability HIGH 7.8 21.03% cvelistv5 2026-04-13
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-04-08
cve-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2026-04-06
cve-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability HIGH N/A N/A cvelistv5 2026-04-06
cve-2026-3502 TrueConf Client Download of Code Without Integrity Check Vulnerability HIGH N/A N/A cvelistv5 2026-04-02
cve-2026-5281 chromium-browser: Use after free in Dawn CRITICAL 9.0 N/A cvelistv5 2026-06-28
cve-2026-3055 Citrix NetScaler Out-of-Bounds Read Vulnerability HIGH N/A N/A cvelistv5 2026-03-30
cve-2025-53521 F5 BIG-IP Stack-Based Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2026-03-27
cve-2026-33634 Aquasecurity Trivy Embedded Malicious Code Vulnerability HIGH N/A N/A cvelistv5 2026-03-26
cve-2026-33017 Langflow Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-03-25
cve-2025-54068 Laravel Livewire Code Injection Vulnerability HIGH N/A N/A cvelistv5 2026-03-20
cve-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2026-03-20
cve-2025-43510 Apple Multiple Products Improper Locking Vulnerability HIGH N/A N/A cvelistv5 2026-03-20
cve-2025-32432 Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond CRITICAL 10.0 N/A cvelistv5 2026-09-24
cve-2025-31277 SUSE CVE CVE-2025-31277 HIGH 8.8 N/A cvelistv5 2026-08-30
cve-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability CRITICAL N/A N/A cvelistv5 2026-03-19
cve-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH N/A N/A cvelistv5 2026-03-18
cve-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability HIGH 7.2 N/A cvelistv5 2026-03-18
cve-2025-47813 Wing FTP Server Information Disclosure Vulnerability HIGH N/A N/A cvelistv5 2026-03-16
cve-2026-3910 chromium-browser: Inappropriate implementation in V8 HIGH 8.8 N/A cvelistv5 2026-06-28
cve-2026-3909 chromium-browser: skia: chromium-browser: skia: Out of bounds write in Skia HIGH 8.8 N/A cvelistv5 2026-09-04
cve-2024-13030 CVE-2024-13030 HIGH 7.5 N/A cvelistv5
cve-2021-35394 Realtek Jungle SDK Remote Code Execution Vulnerability CRITICAL 9.8 99.86% cvelistv5 2021-12-10
cve-2017-17215 Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code. HIGH 8.8 78.28% cvelistv5 2026-06-17
cve-2014-8361 Realtek SDK Improper Input Validation Vulnerability CRITICAL 9.8 99.98% cvelistv5 2023-09-18
cve-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources Vulnerability HIGH N/A N/A cvelistv5 2026-03-11
cve-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-03-09
cve-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2026-03-09
cve-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery HIGH N/A 99.68% cvelistv5 2026-03-09