Is it exploited?
Vulnerabilities under active attack
Every vulnerability with evidence of exploitation in the wild — 1,655 of them. Not a list of everything that has a CVE number. A list of what someone has already used against someone.
- CVE-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability Rockwell · Multiple Products
- CVE-2023-43000 Apple Multiple products Use-After-Free Vulnerability Apple · Multiple Products
- CVE-2021-30952 Apple Multiple Products Integer Overflow or Wraparound Vulnerability Apple · Multiple Products
- CVE-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability Apple · iOS and iPadOS
- CVE-2026-22719 Broadcom VMware Aria Operations Command Injection Vulnerability Broadcom · VMware Aria Operations
- CVE-2026-21385 Qualcomm Multiple Chipsets Memory Corruption Vulnerability Qualcomm · Multiple Chipsets
- CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability Cisco · SD-WAN
- CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability Cisco · Catalyst SD-WAN Controller and Manager
- CVE-2026-25108 Soliton Systems K.K FileZen OS Command Injection Vulnerability Soliton Systems K.K · FileZen
- CVE-2025-49113 RoundCube Webmail Deserialization of Untrusted Data Vulnerability Roundcube · Webmail
- CVE-2025-68461 RoundCube Webmail Cross-site Scripting Vulnerability Roundcube · Webmail
- CVE-2021-22175 GitLab Server-Side Request Forgery (SSRF) Vulnerability GitLab · GitLab
- CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Dell · RecoverPoint for Virtual Machines (RP4VMs)
- CVE-2020-7796 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability Synacor · Zimbra Collaboration Suite
- CVE-2024-7694 TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability TeamT5 · ThreatSonar Anti-Ransomware
- CVE-2008-0015 Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2026-2441 Google Chromium CSS Use-After-Free Vulnerability Google · Chromium
- CVE-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability BeyondTrust · Remote Support (RS) and Privileged Remote Access (PRA)
- CVE-2026-20700 Apple Multiple Buffer Overflow Vulnerability Apple · Multiple Products
- CVE-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability Microsoft · Configuration Manager
- CVE-2025-15556 Notepad++ Download of Code Without Integrity Check Vulnerability Notepad++ · Notepad++
- CVE-2025-40536 SolarWinds Web Help Desk Security Control Bypass Vulnerability SolarWinds · Web Help Desk
- CVE-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2026-21525 Microsoft Windows NULL Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure Vulnerability Microsoft · Windows
- CVE-2026-21533 Microsoft Windows Improper Privilege Management Vulnerability Microsoft · Windows
- CVE-2026-21519 Microsoft Windows Type Confusion Vulnerability Microsoft · Windows
- CVE-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability Microsoft · Office
- CVE-2025-11953 React Native Community CLI OS Command Injection Vulnerability React Native Community · CLI
- CVE-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability SmarterTools · SmarterMail
- CVE-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability GitLab · Community and Enterprise Editions
- CVE-2025-64328 Sangoma FreePBX OS Command Injection Vulnerability Sangoma · FreePBX
- CVE-2019-19006 Sangoma FreePBX Improper Authentication Vulnerability Sangoma · FreePBX
- CVE-2025-40551 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability SolarWinds · Web Help Desk
- CVE-2026-1281 Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability Ivanti · Endpoint Manager Mobile (EPMM)
- CVE-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Fortinet · Multiple Products
- CVE-2018-14634 Linux Kernel Integer Overflow Vulnerability Linux · Kernel
- CVE-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability SmarterTools · SmarterMail
- CVE-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability SmarterTools · SmarterMail
- CVE-2026-24061 GNU InetUtils Argument Injection Vulnerability GNU · InetUtils
- CVE-2026-21509 Microsoft Office Security Feature Bypass Vulnerability Microsoft · Office
- CVE-2024-37079 Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability Broadcom · VMware vCenter Server
- CVE-2025-68645 Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2025-34026 Versa Concerto Improper Authentication Vulnerability Versa · Concerto
- CVE-2025-31125 Vite Vitejs Improper Access Control Vulnerability Vite · Vitejs
- CVE-2025-54313 Prettier eslint-config-prettier Embedded Malicious Code Vulnerability Prettier · eslint-config-prettier
- CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability Cisco · Unified Communications Manager
- CVE-2026-20805 Microsoft Windows Information Disclosure Vulnerability Microsoft · Windows
- CVE-2025-8110 Gogs Path Traversal Vulnerability Gogs · Gogs
- CVE-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability Microsoft · Office
- CVE-2025-37164 Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability Hewlett Packard Enterprise (HPE) · OneView
- CVE-2025-14847 MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability MongoDB · MongoDB and MongoDB Server
- CVE-2023-52163 Digiever DS-2105 Pro Missing Authorization Vulnerability Digiever · DS-2105 Pro
- CVE-2025-14733 WatchGuard Firebox Out of Bounds Write Vulnerability WatchGuard · Firebox
- CVE-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability ASUS · Live Update
- CVE-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability SonicWall · SMA1000 appliance
- CVE-2025-20393 Cisco Multiple Products Improper Input Validation Vulnerability Cisco · Multiple Products
- CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Fortinet · Multiple Products
- CVE-2025-14611 Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability Gladinet · CentreStack and Triofox
- CVE-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability Apple · Multiple Products
- CVE-2018-4063 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability Sierra Wireless · AirLink ALEOS
- CVE-2025-14174 Google Chromium Out of Bounds Memory Access Vulnerability Google · Chromium
- CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability OSGeo · GeoServer
- CVE-2025-6218 RARLAB WinRAR Path Traversal Vulnerability RARLAB · WinRAR
- CVE-2025-62221 Microsoft Windows Use After Free Vulnerability Microsoft · Windows
- CVE-2022-37055 D-Link Routers Buffer Overflow Vulnerability D-Link · Routers
- CVE-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability Array Networks · ArrayOS AG
- CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability Meta · React Server Components
- CVE-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability OpenPLC · ScadaBR
- CVE-2025-48633 Android Framework Information Disclosure Vulnerability Android · Framework
- CVE-2025-48572 Android Framework Privilege Escalation Vulnerability Android · Framework
- CVE-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability OpenPLC · ScadaBR
- CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability Oracle · Fusion Middleware
- CVE-2025-13223 Google Chromium V8 Type Confusion Vulnerability Google · Chromium V8
- CVE-2025-58034 Fortinet FortiWeb OS Command Injection Vulnerability Fortinet · FortiWeb
- CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability Fortinet · FortiWeb
- CVE-2025-12480 Gladinet Triofox Improper Access Control Vulnerability Gladinet · Triofox
- CVE-2025-62215 Microsoft Windows Race Condition Vulnerability Microsoft · Windows
- CVE-2025-9242 WatchGuard Firebox Out-of-Bounds Write Vulnerability WatchGuard · Firebox
- CVE-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung · Mobile Devices
- CVE-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability CWP · Control Web Panel
- CVE-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Gladinet · CentreStack and Triofox
- CVE-2025-41244 Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability Broadcom · VMware Aria Operations and VMware Tools
- CVE-2025-24893 XWiki Platform Eval Injection Vulnerability XWiki · Platform
- CVE-2025-6204 Dassault Systèmes DELMIA Apriso Code Injection Vulnerability Dassault Systèmes · DELMIA Apriso
- CVE-2025-6205 Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability Dassault Systèmes · DELMIA Apriso
- CVE-2025-54236 Adobe Commerce and Magento Improper Input Validation Vulnerability Adobe · Commerce and Magento
- CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability Microsoft · Windows
- CVE-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability Motex · LANSCOPE Endpoint Manager
- CVE-2022-48503 Apple Multiple Products Unspecified Vulnerability Apple · Multiple Products
- CVE-2025-2746 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico · Xperience CMS
- CVE-2025-2747 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Kentico · Xperience CMS
- CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability Microsoft · Windows
- CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability Oracle · E-Business Suite
- CVE-2025-54253 Adobe Experience Manager Forms Code Execution Vulnerability Adobe · Experience Manager (AEM) Forms
- CVE-2025-47827 IGEL OS Use of a Key Past its Expiration Date Vulnerability IGEL · IGEL OS
- CVE-2025-24990 Microsoft Windows Untrusted Pointer Dereference Vulnerability Microsoft · Windows
- CVE-2025-59230 Microsoft Windows Improper Access Control Vulnerability Microsoft · Windows
- CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability SKYSEA · Client View
- CVE-2021-43798 Grafana Path Traversal Vulnerability Grafana Labs · Grafana
- CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability Synacor · Zimbra Collaboration Suite (ZCS)
- CVE-2021-22555 Linux Kernel Heap Out-of-Bounds Write Vulnerability Linux · Kernel
- CVE-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability Microsoft · Internet Explorer
- CVE-2021-43226 Microsoft Windows Privilege Escalation Vulnerability Microsoft · Windows
- CVE-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability Microsoft · Windows
- CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability Microsoft · Windows
- CVE-2010-3765 Mozilla Multiple Products Remote Code Execution Vulnerability Mozilla · Multiple Products
- CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability Oracle · E-Business Suite
- CVE-2014-6278 GNU Bash OS Command Injection Vulnerability GNU · GNU Bash
- CVE-2017-1000353 Jenkins Remote Code Execution Vulnerability Jenkins · Jenkins
- CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability Juniper · ScreenOS
- CVE-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Samsung · Mobile Devices
- CVE-2025-4008 Smartbedded Meteobridge Command Injection Vulnerability Smartbedded · Meteobridge
- CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability Sudo · Sudo
- CVE-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability Libraesva · Email Security Gateway
- CVE-2025-10035 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Fortra · GoAnywhere MFT
- CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability Cisco · IOS and IOS XE
- CVE-2021-21311 Adminer Server-Side Request Forgery Vulnerability Adminer · Adminer
- CVE-2025-20362 Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
Nothing on this page matches that filter.