Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-38014 Microsoft Windows Installer Improper Privilege Management Vulnerability HIGH 7.8 6.26% cvelistv5 2024-09-10
cve-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability CRITICAL N/A 18.18% cvelistv5 2024-09-09
cve-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability CRITICAL N/A 10.70% cvelistv5 2024-09-09
cve-2016-3714 ImageMagick Improper Input Validation Vulnerability HIGH N/A 97.48% cvelistv5 2024-09-09
cve-2024-7262 Kingsoft WPS Office Path Traversal Vulnerability CRITICAL 9.3 2.94% cvelistv5 2024-09-03
cve-2021-20124 Draytek VigorConnect Path Traversal Vulnerability HIGH 7.5 96.31% cvelistv5 2024-09-03
cve-2021-20123 Draytek VigorConnect Path Traversal Vulnerability HIGH 7.5 90.23% cvelistv5 2024-09-03
cve-2024-7965 chromium-browser: Inappropriate implementation in V8 in Google Chrome allows a remote attacker to potentially exploit heap corruption HIGH 8.8 18.53% cvelistv5 2025-11-21
cve-2024-38856 Apache OFBiz Incorrect Authorization Vulnerability HIGH 8.1 99.43% cvelistv5 2024-08-27
cve-2024-7971 chromium-browser: Type confusion in V8 in Google Chrome allows a remote attacker to exploit heap corruption via a crafted HTML page CRITICAL 9.6 20.71% cvelistv5 2025-11-21
cve-2024-39717 Versa Director Dangerous File Type Upload Vulnerability MEDIUM 6.6 4.01% cvelistv5 2024-08-23
cve-2022-0185 Linux Kernel Heap-Based Buffer Overflow Vulnerability HIGH N/A 25.15% cvelistv5 2024-08-21
cve-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability HIGH N/A 99.56% cvelistv5 2024-08-21
cve-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability HIGH N/A 99.87% cvelistv5 2024-08-21
cve-2021-31196 Microsoft Exchange Server Information Disclosure Vulnerability HIGH 7.2 54.06% cvelistv5 2024-08-21
cve-2024-23897 jenkins: Arbitrary file read vulnerability through the CLI can lead to RCE CRITICAL 9.8 100.00% cvelistv5 2025-11-21
cve-2024-28986 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 84.63% cvelistv5 2024-08-15
cve-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability MEDIUM 6.5 13.63% cvelistv5 2024-08-13
cve-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability HIGH 7.8 28.53% cvelistv5 2024-08-13
cve-2024-38189 Microsoft Project Remote Code Execution Vulnerability HIGH 8.8 8.19% cvelistv5 2024-08-13
cve-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability HIGH 7.5 41.38% cvelistv5 2024-08-13
cve-2024-38107 Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability HIGH 7.8 1.64% cvelistv5 2024-08-13
cve-2024-38106 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH 7.0 6.34% cvelistv5 2024-08-13
cve-2024-36971 Android Kernel Remote Code Execution Vulnerability HIGH N/A 2.70% cvelistv5 2024-08-07
cve-2024-32113 Apache OFBiz Path Traversal Vulnerability HIGH N/A 99.44% cvelistv5 2024-08-07
cve-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability HIGH 7.5 73.19% cvelistv5 2024-08-05
cve-2024-37085 VMware ESXi Authentication Bypass Vulnerability MEDIUM 6.8 26.77% cvelistv5 2024-07-30
cve-2024-5217 ServiceNow Incomplete List of Disallowed Inputs Vulnerability CRITICAL 9.8 99.63% cvelistv5 2024-07-29
cve-2024-4879 ServiceNow Improper Input Validation Vulnerability CRITICAL 9.8 99.98% cvelistv5 2024-07-29
cve-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability CRITICAL 9.8 53.25% cvelistv5 2024-07-29