Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2020-17530 struts2: using forced OGNL evaluation on untrusted user input can lead to a RCE and security degradation HIGH 8.1 95.93% cvelistv5 2026-08-05
cve-2020-17496 vBulletin PHP Module Remote Code Execution Vulnerability CRITICAL 9.8 87.74% cvelistv5 2021-11-03
cve-2020-17144 Microsoft Exchange Server Remote Code Execution Vulnerability HIGH 8.4 36.51% cvelistv5 2021-11-03
cve-2020-17087 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH 7.8 5.43% cvelistv5 2021-11-03
cve-2020-16846 salt: sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection CRITICAL 9.8 99.59% cvelistv5 2025-11-21
cve-2020-16017 Google Chrome Use-After-Free Vulnerability HIGH N/A 2.75% cvelistv5 2021-11-03
cve-2020-16013 chromium-browser: Inappropriate implementation in V8 HIGH 8.8 2.75% cvelistv5 2026-06-28
cve-2020-16010 Google Chrome for Android UI Heap Buffer Overflow Vulnerability CRITICAL 9.6 6.36% cvelistv5 2021-11-03
cve-2020-16009 chromium-browser: Inappropriate implementation in V8 HIGH 8.8 48.29% cvelistv5 2026-06-28
cve-2020-15999 freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png HIGH 8.6 44.30% cvelistv5 2026-06-28
cve-2020-15505 Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability CRITICAL 9.8 99.74% cvelistv5 2021-11-03
cve-2020-14883 Oracle WebLogic Server Unspecified Vulnerability HIGH 7.2 97.93% cvelistv5 2021-11-03
cve-2020-14882 Oracle WebLogic Server Remote Code Execution Vulnerability CRITICAL 9.8 100.00% cvelistv5 2021-11-03
cve-2020-14871 Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability HIGH N/A 80.16% cvelistv5 2021-11-03
cve-2020-14750 Oracle WebLogic Server Remote Code Execution Vulnerability CRITICAL 9.8 99.27% cvelistv5 2021-11-03
cve-2020-1472 Microsoft Netlogon Privilege Escalation Vulnerability CRITICAL N/A 99.39% cvelistv5 2021-11-03
cve-2020-1464 Microsoft Windows Spoofing Vulnerability HIGH 7.8 38.95% cvelistv5 2021-11-03
cve-2020-1380 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability HIGH 7.8 24.19% cvelistv5 2021-11-03
cve-2020-1350 Microsoft Windows DNS Server Remote Code Execution Vulnerability CRITICAL 10.0 91.35% cvelistv5 2021-11-03
cve-2020-12812 Fortinet FortiOS SSL VPN Improper Authentication Vulnerability CRITICAL 9.8 49.34% cvelistv5 2021-11-03
cve-2020-12271 Sophos SFOS SQL Injection Vulnerability CRITICAL 10.0 42.43% cvelistv5 2021-11-03
cve-2020-11738 WordPress Snap Creek Duplicator Plugin File Download Vulnerability HIGH 7.5 97.82% cvelistv5 2021-11-03
cve-2020-11652 salt: salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths MEDIUM 6.5 86.18% cvelistv5 2025-11-21
cve-2020-11651 salt: salt-master process ClearFuncs class does not properly validate method calls CRITICAL 9.8 96.61% cvelistv5 2025-11-21
cve-2020-1147 dotnet: XML source markup processing remote code execution HIGH 8.8 93.97% cvelistv5 2026-06-28
cve-2020-10987 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 9.8 79.81% cvelistv5 2021-11-03
cve-2020-1054 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.0 54.16% cvelistv5 2021-11-03
cve-2020-1040 Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability CRITICAL 9.0 7.32% cvelistv5 2021-11-03
cve-2020-10221 rConfig OS Command Injection Vulnerability HIGH 8.8 80.22% cvelistv5 2021-11-03
cve-2020-1020 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability HIGH 8.8 65.04% cvelistv5 2021-11-03