Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2022-40765 Mitel MiVoice Connect Command Injection Vulnerability CRITICAL N/A 10.57% cvelistv5 2023-02-21
cve-2022-46169 cacti: unauthenticated command injection CRITICAL 9.8 99.83% cvelistv5 2026-02-25
cve-2023-23529 webkitgtk: processing maliciously crafted web content may be exploited for arbitrary code execution HIGH 8.8 9.50% cvelistv5 2025-11-21
cve-2023-23376 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability HIGH 7.8 10.85% cvelistv5 2023-02-14
cve-2023-21823 Microsoft Windows Graphic Component Privilege Escalation Vulnerability HIGH 7.8 5.56% cvelistv5 2023-02-14
cve-2023-21715 Microsoft Office Publisher Security Feature Bypass Vulnerability HIGH 7.3 12.01% cvelistv5 2023-02-14
cve-2023-0669 Fortra GoAnywhere MFT Remote Code Execution Vulnerability HIGH 7.2 100.00% cvelistv5 2023-02-10
cve-2022-24990 TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response. HIGH 7.5 83.55% cvelistv5 2026-06-17
cve-2015-2291 Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability HIGH 7.8 9.01% cvelistv5 2023-02-10
cve-2023-22952 Multiple SugarCRM Products Remote Code Execution Vulnerability HIGH N/A 80.14% cvelistv5 2023-02-02
cve-2022-21587 Oracle E-Business Suite Unspecified Vulnerability CRITICAL 9.8 98.34% cvelistv5 2023-02-02
cve-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability CRITICAL 9.8 77.68% cvelistv5 2023-01-26
cve-2022-47966 ManageEngine: remote code execution vulnerability in multiple ManageEngine products HIGH 8.1 99.75% cvelistv5 2025-11-21
cve-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability CRITICAL 9.8 100.00% cvelistv5 2023-01-17
cve-2023-21674 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability HIGH 8.8 41.81% cvelistv5 2026-06-17
cve-2022-41080 Microsoft Exchange Server Privilege Escalation Vulnerability HIGH 8.8 77.33% cvelistv5 2023-01-10
cve-2018-5430 TIBCO JasperReports Server Information Disclosure Vulnerability HIGH N/A 49.63% cvelistv5 2022-12-29
cve-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability CRITICAL 9.9 79.06% cvelistv5 2022-12-29
cve-2022-42856 webkitgtk: processing maliciously crafted web content may lead to an arbitrary code execution HIGH 8.8 8.52% cvelistv5 2025-11-21
cve-2022-44698 Microsoft Defender SmartScreen Security Feature Bypass Vulnerability MEDIUM 5.4 76.27% cvelistv5 2022-12-13
cve-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability CRITICAL 9.3 99.47% cvelistv5 2022-12-13
cve-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability HIGH N/A 6.68% cvelistv5 2022-12-13
cve-2022-26501 Veeam Backup & Replication Remote Code Execution Vulnerability CRITICAL 9.8 4.10% cvelistv5 2022-12-13
cve-2022-26500 Veeam Backup & Replication Remote Code Execution Vulnerability HIGH 8.8 5.83% cvelistv5 2022-12-13
cve-2022-4262 chromium-browser: Type Confusion in V8 HIGH 8.8 15.98% cvelistv5 2025-11-21
cve-2022-4135 chromium-browser: Heap buffer overflow in GPU HIGH 8.8 31.86% cvelistv5 2025-11-21
cve-2021-35587 Oracle Fusion Middleware Unspecified Vulnerability CRITICAL 9.8 96.28% cvelistv5 2022-11-28
cve-2022-41049 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability HIGH N/A 2.49% cvelistv5 2022-11-14
cve-2022-41128 Microsoft Windows Scripting Languages Remote Code Execution Vulnerability HIGH 8.8 24.62% cvelistv5 2022-11-08
cve-2022-41125 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability HIGH N/A 3.05% cvelistv5 2022-11-08