Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2023-29552 | Service Location Protocol (SLP) Denial-of-Service Vulnerability | HIGH | N/A | 63.98% | cvelistv5 | 2023-11-08 |
| cve-2023-29492 | Novi Survey Insecure Deserialization Vulnerability | CRITICAL | 9.8 | 2.69% | cvelistv5 | 2023-04-13 |
| cve-2023-29360 | Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability | HIGH | N/A | 21.62% | cvelistv5 | 2024-02-29 |
| cve-2023-29357 | Microsoft SharePoint Server Privilege Escalation Vulnerability | CRITICAL | 9.8 | 99.98% | cvelistv5 | 2024-01-10 |
| cve-2023-29336 | Microsoft Win32K Privilege Escalation Vulnerability | HIGH | 7.8 | 40.92% | cvelistv5 | 2023-05-09 |
| cve-2023-29300 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | CRITICAL | 9.8 | 99.99% | cvelistv5 | 2024-01-08 |
| cve-2023-29298 | Adobe ColdFusion Improper Access Control Vulnerability | HIGH | N/A | 99.79% | cvelistv5 | 2023-07-20 |
| cve-2023-28771 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | CRITICAL | 9.8 | 99.28% | cvelistv5 | 2023-05-31 |
| cve-2023-28770 | CVE-2023-28770 | HIGH | 7.5 | 57.78% | cvelistv5 | |
| cve-2023-2868 | Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | HIGH | N/A | 87.69% | cvelistv5 | 2023-05-26 |
| cve-2023-28461 | Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability | CRITICAL | 9.8 | 68.08% | cvelistv5 | 2024-11-25 |
| cve-2023-28434 | MinIO Security Feature Bypass Vulnerability | HIGH | N/A | 7.92% | cvelistv5 | 2023-09-19 |
| cve-2023-28432 | MinIO Information Disclosure Vulnerability | HIGH | 7.5 | 83.96% | cvelistv5 | 2023-04-21 |
| cve-2023-28343 | CVE-2023-28343 | HIGH | N/A | 84.75% | cvelistv5 | |
| cve-2023-28252 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | HIGH | 7.8 | 48.97% | cvelistv5 | 2023-04-11 |
| cve-2023-2825 | CVE-2023-2825 | CRITICAL | 10.0 | 71.64% | cvelistv5 | |
| cve-2023-28229 | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | HIGH | 7.0 | 1.67% | cvelistv5 | 2023-10-04 |
| cve-2023-28206 | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | HIGH | N/A | 23.21% | cvelistv5 | 2023-04-10 |
| cve-2023-28205 | WebKitGTK: use-after-free leads to arbitrary code execution | HIGH | 8.8 | 27.08% | cvelistv5 | 2025-11-21 |
| cve-2023-28204 | webkitgtk: an out-of-bounds read when processing malicious content | MEDIUM | 6.5 | 14.29% | cvelistv5 | 2025-11-21 |
| cve-2023-28121 | CVE-2023-28121 | HIGH | N/A | 86.51% | cvelistv5 | |
| cve-2023-2806 | CVE-2023-2806 | MEDIUM | 5.5 | 0.98% | cvelistv5 | |
| cve-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | CRITICAL | 9.2 | 85.69% | cvelistv5 | 2023-06-13 |
| cve-2023-27992 | Zyxel Multiple NAS Devices Command Injection Vulnerability | HIGH | N/A | 82.83% | cvelistv5 | 2023-06-23 |
| cve-2023-2796 | CVE-2023-2796 | HIGH | N/A | 42.67% | cvelistv5 | |
| cve-2023-27640 | CVE-2023-27640 | HIGH | 7.5 | 3.57% | cvelistv5 | |
| cve-2023-27639 | CVE-2023-27639 | HIGH | 7.5 | 3.55% | cvelistv5 | |
| cve-2023-27637 | CVE-2023-27637 | CRITICAL | 9.8 | 3.30% | cvelistv5 | |
| cve-2023-27587 | CVE-2023-27587 | HIGH | 7.4 | 3.86% | cvelistv5 | |
| cve-2023-27532 | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability | CRITICAL | N/A | 81.33% | cvelistv5 | 2023-08-22 |