Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2023-43000 A use-after-free issue was addressed with improved memory management HIGH 8.8 N/A cvelistv5 2026-09-21
cve-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability HIGH N/A N/A cvelistv5 2026-03-05
cve-2021-30952 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution HIGH 7.8 6.96% cvelistv5 2026-03-06
cve-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability CRITICAL 9.8 63.63% cvelistv5 2026-03-05
cve-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability CRITICAL 9.8 100.00% cvelistv5 2026-03-05
cve-2026-22719 Broadcom VMware Aria Operations Command Injection Vulnerability HIGH N/A N/A cvelistv5 2026-03-03
cve-2026-21385 Qualcomm Multiple Chipsets Memory Corruption Vulnerability HIGH N/A N/A cvelistv5 2026-03-03
cve-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2026-02-24
cve-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-02-25
cve-2022-20775 Cisco SD-WAN Path Traversal Vulnerability HIGH 7.8 N/A cvelistv5 2026-02-25
cve-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability HIGH N/A N/A cvelistv5 2026-02-24
cve-2025-68461 roundcubemail: Roundcube Webmail: Cross-Site Scripting (XSS) vulnerability via crafted SVG animate tag MEDIUM 6.1 N/A cvelistv5 2026-06-28
cve-2025-49113 SUSE CVE CVE-2025-49113 UNKNOWN N/A N/A cvelistv5 2025-06-03
cve-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability HIGH N/A N/A cvelistv5 2026-02-18
cve-2021-22175 GitLab Server-Side Request Forgery (SSRF) Vulnerability MEDIUM 6.8 53.37% cvelistv5 2026-02-18
cve-2026-2441 chromium-browser: Use after free in CSS HIGH 8.8 N/A cvelistv5 2026-06-28
cve-2024-7694 TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability HIGH 7.2 N/A cvelistv5 2026-02-17
cve-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability CRITICAL 9.8 84.42% cvelistv5 2026-02-17
cve-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability HIGH 8.8 76.73% cvelistv5 2026-02-17
cve-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability CRITICAL N/A N/A cvelistv5 2026-02-13
cve-2026-20700 Apple Multiple Buffer Overflow Vulnerability HIGH N/A N/A cvelistv5 2026-02-12
cve-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability HIGH N/A N/A cvelistv5 2026-02-12
cve-2025-15556 Notepad++ Download of Code Without Integrity Check Vulnerability HIGH N/A N/A cvelistv5 2026-02-12
cve-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability HIGH N/A N/A cvelistv5 2026-02-12
cve-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability HIGH N/A N/A cvelistv5 2026-02-10
cve-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability HIGH N/A N/A cvelistv5 2026-02-10
cve-2026-21519 Microsoft Windows Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2026-02-10
cve-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability HIGH N/A N/A cvelistv5 2026-02-10
cve-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability HIGH N/A N/A cvelistv5 2026-02-10
cve-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability HIGH N/A N/A cvelistv5 2026-02-10