Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-22175 GitLab Server-Side Request Forgery (SSRF) Vulnerability MEDIUM 6.8 53.37% cvelistv5 2026-02-18
cve-2026-2441 Google Chromium CSS Use-After-Free Vulnerability HIGH N/A 55.10% cvelistv5 2026-02-17
cve-2024-7694 TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability HIGH 7.2 1.81% cvelistv5 2026-02-17
cve-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability CRITICAL 9.8 84.42% cvelistv5 2026-02-17
cve-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability HIGH 8.8 76.73% cvelistv5 2026-02-17
cve-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability CRITICAL N/A 90.96% cvelistv5 2026-02-13
cve-2026-20700 Apple Multiple Buffer Overflow Vulnerability HIGH N/A 1.34% cvelistv5 2026-02-12
cve-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability HIGH N/A 73.56% cvelistv5 2026-02-12
cve-2025-15556 Notepad++ Download of Code Without Integrity Check Vulnerability HIGH N/A 1.75% cvelistv5 2026-02-12
cve-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability HIGH N/A 80.91% cvelistv5 2026-02-12
cve-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability HIGH N/A 4.12% cvelistv5 2026-02-10
cve-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability HIGH N/A 4.80% cvelistv5 2026-02-10
cve-2026-21519 Microsoft Windows Type Confusion Vulnerability HIGH N/A 2.46% cvelistv5 2026-02-10
cve-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability HIGH N/A 1.54% cvelistv5 2026-02-10
cve-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability HIGH N/A 15.64% cvelistv5 2026-02-10
cve-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability HIGH N/A 24.23% cvelistv5 2026-02-10
cve-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability CRITICAL N/A 88.18% cvelistv5 2026-02-05
cve-2025-11953 @react-native-community/cli-server-api: Command injection in React Native CLI HIGH 8.1 93.98% cvelistv5 2026-03-26
cve-2025-64328 Sangoma FreePBX OS Command Injection Vulnerability HIGH 8.6 84.62% cvelistv5 2026-02-03
cve-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability HIGH N/A 84.18% cvelistv5 2026-02-03
cve-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability MEDIUM 6.8 35.65% cvelistv5 2026-02-03
cve-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability HIGH N/A 55.95% cvelistv5 2026-02-03
cve-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability HIGH N/A 98.69% cvelistv5 2026-01-29
cve-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability HIGH N/A 85.80% cvelistv5 2026-01-27
cve-2026-24061 GNU InetUtils Argument Injection Vulnerability HIGH N/A 98.98% cvelistv5 2026-01-26
cve-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL N/A 96.54% cvelistv5 2026-01-26
cve-2026-21509 Microsoft Office Security Feature Bypass Vulnerability HIGH N/A 70.80% cvelistv5 2026-01-26
cve-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 10.0 85.66% cvelistv5 2026-01-26
cve-2018-14634 Linux Kernel Integer Overflow Vulnerability HIGH N/A 14.69% cvelistv5 2026-01-26
cve-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability CRITICAL 9.8 22.38% cvelistv5 2026-01-23