Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability HIGH 7.3 99.99% cvelistv5 2026-04-20
cve-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability HIGH 8.2 78.05% cvelistv5 2026-04-20
cve-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability HIGH N/A 98.26% cvelistv5 2026-04-16
cve-2026-32201 Microsoft SharePoint Server Improper Input Validation Vulnerability HIGH N/A 43.38% cvelistv5 2026-04-14
cve-2009-0238 Microsoft Office Remote Code Execution HIGH N/A 43.21% cvelistv5 2026-04-14
cve-2026-34621 Adobe Acrobat and Reader Prototype Pollution Vulnerability HIGH 8.6 7.09% cvelistv5 2026-04-13
cve-2026-21643 Fortinet FortiClient EMS SQL Injection Vulnerability CRITICAL 9.1 94.08% cvelistv5 2026-04-13
cve-2025-60710 Microsoft Windows Link Following Vulnerability HIGH 7.8 4.60% cvelistv5 2026-04-13
cve-2023-36424 Microsoft Windows Out-of-Bounds Read Vulnerability HIGH 7.8 12.18% cvelistv5 2026-04-13
cve-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability HIGH 8.8 62.10% cvelistv5 2026-04-13
cve-2020-9715 Adobe Acrobat Use-After-Free Vulnerability HIGH N/A 48.59% cvelistv5 2026-04-13
cve-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability HIGH 7.8 21.03% cvelistv5 2026-04-13
cve-2026-1340 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.68% cvelistv5 2026-04-08
cve-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability CRITICAL 9.1 90.75% cvelistv5 2026-04-06
cve-2026-3502 TrueConf Client Download of Code Without Integrity Check Vulnerability HIGH 7.8 5.75% cvelistv5 2026-04-02
cve-2026-5281 chromium-browser: Use after free in Dawn CRITICAL 9.0 4.94% cvelistv5 2026-06-28
cve-2026-3055 Citrix NetScaler Out-of-Bounds Read Vulnerability CRITICAL 9.3 87.17% cvelistv5 2026-03-30
cve-2025-53521 F5 BIG-IP Stack-Based Buffer Overflow Vulnerability HIGH N/A 2.30% cvelistv5 2026-03-27
cve-2026-33634 Aquasecurity Trivy Embedded Malicious Code Vulnerability HIGH N/A 59.16% cvelistv5 2026-03-26
cve-2026-33017 Langflow Code Injection Vulnerability CRITICAL 9.3 96.18% cvelistv5 2026-03-25
cve-2025-54068 Laravel Livewire Code Injection Vulnerability HIGH N/A 97.07% cvelistv5 2026-03-20
cve-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability HIGH N/A 0.43% cvelistv5 2026-03-20
cve-2025-43510 Apple Multiple Products Improper Locking Vulnerability HIGH N/A 0.36% cvelistv5 2026-03-20
cve-2025-32432 Craft CMS Code Injection Vulnerability HIGH N/A 99.78% cvelistv5 2026-03-20
cve-2025-31277 Apple Multiple Products Buffer Overflow Vulnerability HIGH N/A 1.53% cvelistv5 2026-03-20
cve-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability CRITICAL N/A 33.38% cvelistv5 2026-03-19
cve-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH N/A 32.61% cvelistv5 2026-03-18
cve-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability HIGH 7.2 19.56% cvelistv5 2026-03-18
cve-2025-47813 Wing FTP Server Information Disclosure Vulnerability HIGH N/A 62.97% cvelistv5 2026-03-16
cve-2026-3910 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability HIGH N/A 2.00% cvelistv5 2026-03-13