Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2023-28252 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability HIGH 7.8 48.97% cvelistv5 2023-04-11
cve-2023-28206 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. HIGH 8.6 22.97% cvelistv5 2026-06-17
cve-2023-28205 Apple Multiple Products WebKit Use-After-Free Vulnerability HIGH N/A 27.08% cvelistv5 2023-04-10
cve-2023-26083 Arm Mali GPU Kernel Driver Information Disclosure Vulnerability HIGH N/A 1.22% cvelistv5 2023-04-07
cve-2021-27878 Veritas Backup Exec Agent Command Execution Vulnerability HIGH 8.8 23.95% cvelistv5 2023-04-07
cve-2021-27877 Veritas Backup Exec Agent Improper Authentication Vulnerability HIGH 8.2 64.91% cvelistv5 2023-04-07
cve-2021-27876 Veritas Backup Exec Agent File Access Vulnerability HIGH 8.1 13.52% cvelistv5 2023-04-07
cve-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability HIGH 7.8 8.59% cvelistv5 2023-04-07
cve-2022-27926 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 17.63% cvelistv5 2023-04-03
cve-2023-0266 ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF HIGH 7.8 3.70% cvelistv5 2026-08-06
cve-2022-42948 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability CRITICAL 9.8 2.71% cvelistv5 2023-03-30
cve-2022-39197 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability MEDIUM 6.1 46.45% cvelistv5 2023-03-30
cve-2022-38181 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability HIGH 8.8 13.56% cvelistv5 2023-03-30
cve-2022-3038 SUSE CVE CVE-2022-3038 HIGH 8.8 24.74% cvelistv5 2025-03-15
cve-2022-22706 Arm Mali GPU Kernel Driver Unspecified Vulnerability HIGH N/A 1.06% cvelistv5 2023-03-30
cve-2021-30900 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability HIGH 7.8 5.20% cvelistv5 2023-03-30
cve-2017-7494 SUSE CVE CVE-2017-7494 HIGH 8.8 99.45% cvelistv5 2026-08-23
cve-2013-3163 Microsoft Internet Explorer Memory Corruption Vulnerability HIGH 8.8 70.68% cvelistv5 2023-03-30
cve-2023-26360 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability HIGH 8.6 97.34% cvelistv5 2023-03-15
cve-2023-24880 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability CRITICAL N/A 78.00% cvelistv5 2023-03-14
cve-2023-23397 Microsoft Outlook Elevation of Privilege Vulnerability CRITICAL 9.8 97.41% cvelistv5 2026-06-17
cve-2022-41328 Fortinet FortiOS Path Traversal Vulnerability MEDIUM 6.5 10.68% cvelistv5 2023-03-14
cve-2021-39144 XStream Remote Code Execution Vulnerability HIGH N/A 98.12% cvelistv5 2023-03-10
cve-2020-5741 Plex Media Server Remote Code Execution Vulnerability HIGH 7.2 72.94% cvelistv5 2023-03-10
cve-2022-35914 Teclib GLPI Remote Code Execution Vulnerability HIGH N/A 99.88% cvelistv5 2023-03-07
cve-2022-33891 SUSE CVE CVE-2022-33891 HIGH 8.8 93.08% cvelistv5 2025-07-02
cve-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability MEDIUM 6.8 70.97% cvelistv5 2023-03-07
cve-2022-36537 ZK Framework AuUploader Unspecified Vulnerability CRITICAL N/A 95.40% cvelistv5 2023-02-27
cve-2022-47986 IBM Aspera Faspex Code Execution Vulnerability CRITICAL 9.8 99.97% cvelistv5 2023-02-21
cve-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability MEDIUM 6.8 10.57% cvelistv5 2023-02-21