Used by ransomware
Known exploited vulnerabilities used by ransomware
The entries CISA marks as known to be used in ransomware campaigns. If you run any of these products, this is the list to patch first.
361 CVEs
- CVE-2026-59310 ransomwareBroadcom VMware vCenter Path Traversal Vulnerability · added August 18, 2026
- CVE-2026-63077 ransomwareJetBrains TeamCity Deserialization of Untrusted Data Vulnerability · added August 5, 2026
- CVE-2026-20316 ransomwareCisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability · added July 29, 2026
- CVE-2026-15410 ransomwareSonicWall SMA1000 Appliances Code Injection Vulnerability · added July 14, 2026
- CVE-2026-15409 ransomwareSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability · added July 14, 2026
- CVE-2026-45659 ransomwareMicrosoft SharePoint Server Deserialization of Untrusted Data Vulnerability · added July 1, 2026
- CVE-2026-12569 ransomwarePTC Windchill and FlexPLM Improper Input Validation Vulnerability · added June 25, 2026
- CVE-2026-35273 ransomwareOracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability · added June 12, 2026
- CVE-2026-50751 ransomwareCheck Point Security Gateway Improper Authentication Vulnerability · added June 8, 2026
- CVE-2026-0257 ransomwarePalo Alto Networks PAN-OS Authentication Bypass Vulnerability · added May 29, 2026
- CVE-2026-48027 ransomwareNx Console Embedded Malicious Code Vulnerability · added May 27, 2026
- CVE-2026-45321 ransomwareTanStack Unspecified Vulnerability · added May 27, 2026
- CVE-2026-41940 ransomwareWebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability · added April 30, 2026
- CVE-2024-1708 ransomwareConnectWise ScreenConnect Path Traversal Vulnerability · added April 28, 2026
- CVE-2024-57728 ransomwareSimpleHelp Path Traversal Vulnerability · added April 24, 2026
- CVE-2024-57726 ransomwareSimpleHelp Missing Authorization Vulnerability · added April 24, 2026
- CVE-2026-33825 ransomwareMicrosoft Defender Insufficient Granularity of Access Control Vulnerability · added April 22, 2026
- CVE-2024-27199 ransomwareJetBrains TeamCity Relative Path Traversal Vulnerability · added April 20, 2026
- CVE-2023-27351 ransomwarePaperCut NG/MF Improper Authentication Vulnerability · added April 20, 2026
- CVE-2025-60710 ransomwareMicrosoft Windows Link Following Vulnerability · added April 13, 2026
- CVE-2023-21529 ransomwareMicrosoft Exchange Server Deserialization of Untrusted Data Vulnerability · added April 13, 2026
- CVE-2026-20131 ransomwareCisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability · added March 19, 2026
- CVE-2025-26399 ransomwareSolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability · added March 9, 2026
- CVE-2026-1731 ransomwareBeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability · added February 13, 2026
- CVE-2026-24423 ransomwareSmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability · added February 5, 2026
- CVE-2026-23760 ransomwareSmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability · added January 26, 2026
- CVE-2025-52691 ransomwareSmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability · added January 26, 2026
- CVE-2025-14733 ransomwareWatchGuard Firebox Out of Bounds Write Vulnerability · added December 19, 2025
- CVE-2025-55182 ransomwareMeta React Server Components Remote Code Execution Vulnerability · added December 5, 2025
- CVE-2025-61884 ransomwareOracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability · added October 20, 2025
- CVE-2025-61882 ransomwareOracle E-Business Suite Unspecified Vulnerability · added October 6, 2025
- CVE-2021-43226 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added October 6, 2025
- CVE-2025-10035 ransomwareFortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability · added September 29, 2025
- CVE-2025-8088 ransomwareRARLAB WinRAR Path Traversal Vulnerability · added August 12, 2025
- CVE-2025-49706 ransomwareMicrosoft SharePoint Improper Authentication Vulnerability · added July 22, 2025
- CVE-2025-49704 ransomwareMicrosoft SharePoint Code Injection Vulnerability · added July 22, 2025
- CVE-2025-53770 ransomwareMicrosoft SharePoint Deserialization of Untrusted Data Vulnerability · added July 20, 2025
- CVE-2025-5777 ransomwareCitrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability · added July 10, 2025
- CVE-2019-6693 ransomwareFortinet FortiOS Use of Hard-Coded Credentials Vulnerability · added June 25, 2025
- CVE-2025-42999 ransomwareSAP NetWeaver Deserialization Vulnerability · added May 15, 2025
- CVE-2025-3248 ransomwareLangflow Missing Authentication Vulnerability · added May 5, 2025
- CVE-2025-31324 ransomwareSAP NetWeaver Unrestricted File Upload Vulnerability · added April 29, 2025
- CVE-2025-29824 ransomwareMicrosoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability · added April 8, 2025
- CVE-2025-31161 ransomwareCrushFTP Authentication Bypass Vulnerability · added April 7, 2025
- CVE-2025-22457 ransomwareIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability · added April 4, 2025
- CVE-2025-24472 ransomwareFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability · added March 18, 2025
- CVE-2025-26633 ransomwareMicrosoft Windows Management Console (MMC) Improper Neutralization Vulnerability · added March 11, 2025
- CVE-2025-22225 ransomwareVMware ESXi Arbitrary Write Vulnerability · added March 4, 2025
- CVE-2018-8639 ransomwareMicrosoft Windows Win32k Improper Resource Shutdown or Release Vulnerability · added March 3, 2025
- CVE-2024-53704 ransomwareSonicWall SonicOS SSLVPN Improper Authentication Vulnerability · added February 18, 2025
- CVE-2024-57727 ransomwareSimpleHelp Path Traversal Vulnerability · added February 13, 2025
- CVE-2020-29574 ransomwareCyberoamOS (CROS) SQL Injection Vulnerability · added February 6, 2025
- CVE-2025-23006 ransomwareSonicWall SMA1000 Appliances Deserialization Vulnerability · added January 24, 2025
- CVE-2024-55591 ransomwareFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability · added January 14, 2025
- CVE-2023-48365 ransomwareQlik Sense HTTP Tunneling Vulnerability · added January 13, 2025
- CVE-2025-0282 ransomwareIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability · added January 8, 2025
- CVE-2024-55550 ransomwareMitel MiCollab Path Traversal Vulnerability · added January 7, 2025
- CVE-2024-41713 ransomwareMitel MiCollab Path Traversal Vulnerability · added January 7, 2025
- CVE-2024-55956 ransomwareCleo Multiple Products Unauthenticated File Upload Vulnerability · added December 17, 2024
- CVE-2024-50623 ransomwareCleo Multiple Products Unrestricted File Upload Vulnerability · added December 13, 2024
- CVE-2024-51378 ransomwareCyberPanel Incorrect Default Permissions Vulnerability · added December 4, 2024
- CVE-2024-11667 ransomwareZyxel Multiple Firewalls Path Traversal Vulnerability · added December 3, 2024
- CVE-2023-28461 ransomwareArray Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability · added November 25, 2024
- CVE-2024-9474 ransomwarePalo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability · added November 18, 2024
- CVE-2024-0012 ransomwarePalo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability · added November 18, 2024
- CVE-2024-49039 ransomwareMicrosoft Windows Task Scheduler Privilege Escalation Vulnerability · added November 12, 2024
- CVE-2024-51567 ransomwareCyberPanel Incorrect Default Permissions Vulnerability · added November 7, 2024
- CVE-2024-38094 ransomwareMicrosoft SharePoint Deserialization Vulnerability · added October 22, 2024
- CVE-2024-40711 ransomwareVeeam Backup and Replication Deserialization Vulnerability · added October 17, 2024
- CVE-2024-30088 ransomwareMicrosoft Windows Kernel TOCTOU Race Condition Vulnerability · added October 15, 2024
- CVE-2024-9680 ransomwareMozilla Firefox Use-After-Free Vulnerability · added October 15, 2024
- CVE-2020-0618 ransomwareMicrosoft SQL Server Reporting Services Remote Code Execution Vulnerability · added September 18, 2024
- CVE-2024-6670 ransomwareProgress WhatsUp Gold SQL Injection Vulnerability · added September 16, 2024
- CVE-2024-40766 ransomwareSonicWall SonicOS Improper Access Control Vulnerability · added September 9, 2024
- CVE-2017-1000253 ransomwareLinux Kernel PIE Stack Buffer Corruption Vulnerability · added September 9, 2024
- CVE-2024-23897 ransomwareJenkins Command Line Interface (CLI) Path Traversal Vulnerability · added August 19, 2024
- CVE-2024-37085 ransomwareVMware ESXi Authentication Bypass Vulnerability · added July 30, 2024
- CVE-2024-23692 ransomwareRejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability · added July 9, 2024
- CVE-2024-26169 ransomwareMicrosoft Windows Error Reporting Service Improper Privilege Management Vulnerability · added June 13, 2024
- CVE-2024-4577 ransomwarePHP-CGI OS Command Injection Vulnerability · added June 12, 2024
- CVE-2024-24919 ransomwareCheck Point Quantum Security Gateways Information Disclosure Vulnerability · added May 30, 2024
- CVE-2024-1086 ransomwareLinux Kernel Use-After-Free Vulnerability · added May 30, 2024
- CVE-2023-43208 ransomwareNextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability · added May 20, 2024
- CVE-2024-30051 ransomware Microsoft DWM Core Library Privilege Escalation Vulnerability · added May 14, 2024
- CVE-2024-3400 ransomwarePalo Alto Networks PAN-OS Command Injection Vulnerability · added April 12, 2024
- CVE-2023-24955 ransomwareMicrosoft SharePoint Server Code Injection Vulnerability · added March 26, 2024
- CVE-2023-48788 ransomwareFortinet FortiClient EMS SQL Injection Vulnerability · added March 25, 2024
- CVE-2021-44529 ransomwareIvanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability · added March 25, 2024
- CVE-2024-27198 ransomwareJetBrains TeamCity Authentication Bypass Vulnerability · added March 7, 2024
- CVE-2024-21338 ransomwareMicrosoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability · added March 4, 2024
- CVE-2024-1709 ransomwareConnectWise ScreenConnect Authentication Bypass Vulnerability · added February 22, 2024
- CVE-2020-3259 ransomwareCisco ASA and FTD Information Disclosure Vulnerability · added February 15, 2024
- CVE-2024-21412 ransomwareMicrosoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability · added February 13, 2024
- CVE-2024-21762 ransomwareFortinet FortiOS Out-of-Bound Write Vulnerability · added February 9, 2024
- CVE-2024-21893 ransomwareIvanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability · added January 31, 2024
- CVE-2023-22527 ransomwareAtlassian Confluence Data Center and Server Template Injection Vulnerability · added January 24, 2024
- CVE-2023-35082 ransomwareIvanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability · added January 18, 2024
- CVE-2024-21887 ransomwareIvanti Connect Secure and Policy Secure Command Injection Vulnerability · added January 10, 2024
- CVE-2023-46805 ransomwareIvanti Connect Secure and Policy Secure Authentication Bypass Vulnerability · added January 10, 2024
- CVE-2023-29357 ransomwareMicrosoft SharePoint Server Privilege Escalation Vulnerability · added January 10, 2024
- CVE-2023-38203 ransomwareAdobe ColdFusion Deserialization of Untrusted Data Vulnerability · added January 8, 2024
- CVE-2023-29300 ransomwareAdobe ColdFusion Deserialization of Untrusted Data Vulnerability · added January 8, 2024
- CVE-2023-41266 ransomwareQlik Sense Path Traversal Vulnerability · added December 7, 2023
- CVE-2023-41265 ransomwareQlik Sense HTTP Tunneling Vulnerability · added December 7, 2023
- CVE-2023-47246 ransomwareSysAid Server Path Traversal Vulnerability · added November 13, 2023
- CVE-2023-22518 ransomwareAtlassian Confluence Data Center and Server Improper Authorization Vulnerability · added November 7, 2023
- CVE-2023-46604 ransomwareApache ActiveMQ Deserialization of Untrusted Data Vulnerability · added November 2, 2023
- CVE-2023-46747 ransomwareF5 BIG-IP Configuration Utility Authentication Bypass Vulnerability · added October 31, 2023
- CVE-2023-4966 ransomwareCitrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability · added October 18, 2023
- CVE-2023-40044 ransomwareProgress WS_FTP Server Deserialization of Untrusted Data Vulnerability · added October 5, 2023
- CVE-2023-22515 ransomwareAtlassian Confluence Data Center and Server Broken Access Control Vulnerability · added October 5, 2023
- CVE-2023-42793 ransomwareJetBrains TeamCity Authentication Bypass Vulnerability · added October 4, 2023
- CVE-2021-3129 ransomwareLaravel Ignition File Upload Vulnerability · added September 18, 2023
- CVE-2017-6884 ransomwareZyxel EMG2926 Routers Command Injection Vulnerability · added September 18, 2023
- CVE-2023-20269 ransomwareCisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability · added September 13, 2023
- CVE-2023-38831 ransomwareRARLAB WinRAR Code Execution Vulnerability · added August 24, 2023
- CVE-2023-38035 ransomwareIvanti Sentry Authentication Bypass Vulnerability · added August 22, 2023
- CVE-2023-27532 ransomwareVeeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability · added August 22, 2023
- CVE-2023-35078 ransomwareIvanti Endpoint Manager Mobile Authentication Bypass Vulnerability · added July 25, 2023
- CVE-2023-3519 ransomwareCitrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability · added July 19, 2023
- CVE-2023-36884 ransomwareMicrosoft Windows Search Remote Code Execution Vulnerability · added July 17, 2023
- CVE-2022-31199 ransomwareNetwrix Auditor Insecure Object Deserialization Vulnerability · added July 11, 2023
- CVE-2023-27997 ransomwareFortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability · added June 13, 2023
- CVE-2023-34362 ransomwareProgress MOVEit Transfer SQL Injection Vulnerability · added June 2, 2023
- CVE-2021-45046 ransomwareApache Log4j2 Deserialization of Untrusted Data Vulnerability · added May 1, 2023
- CVE-2023-27350 ransomwarePaperCut MF/NG Improper Access Control Vulnerability · added April 21, 2023
- CVE-2023-28252 ransomwareMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability · added April 11, 2023
- CVE-2021-27878 ransomwareVeritas Backup Exec Agent Command Execution Vulnerability · added April 7, 2023
- CVE-2021-27877 ransomwareVeritas Backup Exec Agent Improper Authentication Vulnerability · added April 7, 2023
- CVE-2021-27876 ransomwareVeritas Backup Exec Agent File Access Vulnerability · added April 7, 2023
- CVE-2019-1388 ransomwareMicrosoft Windows Certificate Dialog Privilege Escalation Vulnerability · added April 7, 2023
- CVE-2017-7494 ransomwareSamba Remote Code Execution Vulnerability · added March 30, 2023
- CVE-2023-24880 ransomwareMicrosoft Windows SmartScreen Security Feature Bypass Vulnerability · added March 14, 2023
- CVE-2022-36537 ransomwareZK Framework AuUploader Unspecified Vulnerability · added February 27, 2023
- CVE-2022-47986 ransomwareIBM Aspera Faspex Code Execution Vulnerability · added February 21, 2023
- CVE-2022-41223 ransomwareMitel MiVoice Connect Code Injection Vulnerability · added February 21, 2023
- CVE-2022-40765 ransomwareMitel MiVoice Connect Command Injection Vulnerability · added February 21, 2023
- CVE-2023-23376 ransomwareMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability · added February 14, 2023
- CVE-2023-0669 ransomwareFortra GoAnywhere MFT Remote Code Execution Vulnerability · added February 10, 2023
- CVE-2022-24990 ransomwareTerraMaster OS Remote Command Execution Vulnerability · added February 10, 2023
- CVE-2015-2291 ransomwareIntel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability · added February 10, 2023
- CVE-2022-21587 ransomwareOracle E-Business Suite Unspecified Vulnerability · added February 2, 2023
- CVE-2017-11357 ransomwareTelerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability · added January 26, 2023
- CVE-2022-47966 ransomwareZoho ManageEngine Multiple Products Remote Code Execution Vulnerability · added January 23, 2023
- CVE-2022-41080 ransomwareMicrosoft Exchange Server Privilege Escalation Vulnerability · added January 10, 2023
- CVE-2022-44698 ransomwareMicrosoft Defender SmartScreen Security Feature Bypass Vulnerability · added December 13, 2022
- CVE-2022-42475 ransomwareFortinet FortiOS Heap-Based Buffer Overflow Vulnerability · added December 13, 2022
- CVE-2022-26501 ransomwareVeeam Backup & Replication Remote Code Execution Vulnerability · added December 13, 2022
- CVE-2022-26500 ransomwareVeeam Backup & Replication Remote Code Execution Vulnerability · added December 13, 2022
- CVE-2022-41091 ransomwareMicrosoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability · added November 8, 2022
- CVE-2022-41073 ransomwareMicrosoft Windows Print Spooler Privilege Escalation Vulnerability · added November 8, 2022
- CVE-2020-3433 ransomwareCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability · added October 24, 2022
- CVE-2020-3153 ransomwareCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability · added October 24, 2022
- CVE-2018-19323 ransomwareGIGABYTE Multiple Products Privilege Escalation Vulnerability · added October 24, 2022
- CVE-2018-19322 ransomwareGIGABYTE Multiple Products Code Execution Vulnerability · added October 24, 2022
- CVE-2018-19321 ransomwareGIGABYTE Multiple Products Privilege Escalation Vulnerability · added October 24, 2022
- CVE-2018-19320 ransomwareGIGABYTE Multiple Products Unspecified Vulnerability · added October 24, 2022
- CVE-2022-41352 ransomwareSynacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability · added October 20, 2022
- CVE-2022-40684 ransomwareFortinet Multiple Products Authentication Bypass Vulnerability · added October 11, 2022
- CVE-2022-41082 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added September 30, 2022
- CVE-2022-41040 ransomwareMicrosoft Exchange Server Server-Side Request Forgery Vulnerability · added September 30, 2022
- CVE-2022-37969 ransomwareMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability · added September 14, 2022
- CVE-2022-27593 ransomwareQNAP Photo Station Externally Controlled Reference Vulnerability · added September 8, 2022
- CVE-2018-13374 ransomwareFortinet FortiOS and FortiADC Improper Access Control Vulnerability · added September 8, 2022
- CVE-2018-6530 ransomwareD-Link Multiple Routers OS Command Injection Vulnerability · added September 8, 2022
- CVE-2022-26352 ransomwaredotCMS Unrestricted Upload of File Vulnerability · added August 25, 2022
- CVE-2022-2294 ransomwareWebRTC Heap Buffer Overflow Vulnerability · added August 25, 2022
- CVE-2022-37042 ransomwareSynacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability · added August 11, 2022
- CVE-2022-27925 ransomwareSynacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability · added August 11, 2022
- CVE-2022-30333 ransomwareRARLAB UnRAR Directory Traversal Vulnerability · added August 9, 2022
- CVE-2022-27924 ransomwareSynacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability · added August 4, 2022
- CVE-2022-29499 ransomwareMitel MiVoice Connect Data Validation Vulnerability · added June 27, 2022
- CVE-2021-4034 ransomwareRed Hat Polkit Out-of-Bounds Read and Write Vulnerability · added June 27, 2022
- CVE-2022-30190 ransomwareMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability · added June 14, 2022
- CVE-2019-7195 ransomwareQNAP Photo Station Path Traversal Vulnerability · added June 8, 2022
- CVE-2019-7194 ransomwareQNAP Photo Station Path Traversal Vulnerability · added June 8, 2022
- CVE-2019-7193 ransomwareQNAP QTS Improper Input Validation Vulnerability · added June 8, 2022
- CVE-2019-7192 ransomwareQNAP Photo Station Improper Access Control Vulnerability · added June 8, 2022
- CVE-2022-26134 ransomwareAtlassian Confluence Server and Data Center Remote Code Execution Vulnerability · added June 2, 2022
- CVE-2016-0034 ransomwareMicrosoft Silverlight Runtime Remote Code Execution Vulnerability · added May 25, 2022
- CVE-2013-3993 ransomwareIBM InfoSphere BigInsights Invalid Input Vulnerability · added May 25, 2022
- CVE-2013-0431 ransomwareOracle JRE Sandbox Bypass Vulnerability · added May 25, 2022
- CVE-2013-0422 ransomwareOracle JRE Remote Code Execution Vulnerability · added May 25, 2022
- CVE-2013-0074 ransomwareMicrosoft Silverlight Double Dereference Vulnerability · added May 25, 2022
- CVE-2012-1710 ransomwareOracle Fusion Middleware Unspecified Vulnerability · added May 25, 2022
- CVE-2010-1428 ransomwareRed Hat JBoss Information Disclosure Vulnerability · added May 25, 2022
- CVE-2010-0738 ransomwareRed Hat JBoss Authentication Bypass Vulnerability · added May 25, 2022
- CVE-2018-19953 ransomwareQNAP NAS File Station Cross-Site Scripting Vulnerability · added May 24, 2022
- CVE-2018-19949 ransomwareQNAP NAS File Station Command Injection Vulnerability · added May 24, 2022
- CVE-2018-19943 ransomwareQNAP NAS File Station Cross-Site Scripting Vulnerability · added May 24, 2022
- CVE-2017-18362 ransomwareKaseya VSA SQL Injection Vulnerability · added May 24, 2022
- CVE-2017-0147 ransomwareMicrosoft Windows SMBv1 Information Disclosure Vulnerability · added May 24, 2022
- CVE-2016-3351 ransomwareMicrosoft Internet Explorer and Edge Information Disclosure Vulnerability · added May 24, 2022
- CVE-2020-0638 ransomwareMicrosoft Update Notification Manager Privilege Escalation Vulnerability · added May 23, 2022
- CVE-2019-1385 ransomwareMicrosoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability · added May 23, 2022
- CVE-2019-1130 ransomwareMicrosoft Windows AppX Deployment Service Privilege Escalation Vulnerability · added May 23, 2022
- CVE-2022-1388 ransomwareF5 BIG-IP Missing Authentication Vulnerability · added May 10, 2022
- CVE-2022-29464 ransomwareWSO2 Multiple Products Unrestrictive Upload of File Vulnerability · added April 25, 2022
- CVE-2018-6882 ransomwareSynacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability · added April 19, 2022
- CVE-2019-16057 ransomwareD-Link DNS-320 Remote Code Execution Vulnerability · added April 15, 2022
- CVE-2022-22954 ransomwareVMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability · added April 14, 2022
- CVE-2022-24521 ransomwareMicrosoft Windows CLFS Driver Privilege Escalation Vulnerability · added April 13, 2022
- CVE-2018-20753 ransomwareKaseya VSA Remote Code Execution Vulnerability · added April 13, 2022
- CVE-2018-7602 ransomwareDrupal Core Remote Code Execution Vulnerability · added April 13, 2022
- CVE-2021-42287 ransomwareMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability · added April 11, 2022
- CVE-2021-42278 ransomwareMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability · added April 11, 2022
- CVE-2017-0148 ransomwareMicrosoft SMBv1 Server Remote Code Execution Vulnerability · added April 6, 2022
- CVE-2021-28799 ransomwareQNAP NAS Improper Authorization Vulnerability · added March 31, 2022
- CVE-2018-10562 ransomwareDasan GPON Routers Command Injection Vulnerability · added March 31, 2022
- CVE-2021-38646 ransomwareMicrosoft Office Access Connectivity Engine Remote Code Execution Vulnerability · added March 28, 2022
- CVE-2021-26085 ransomwareAtlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability · added March 28, 2022
- CVE-2021-20028 ransomwareSonicWall Secure Remote Access (SRA) SQL Injection Vulnerability · added March 28, 2022
- CVE-2018-8440 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added March 28, 2022
- CVE-2018-8406 ransomwareMicrosoft DirectX Graphics Kernel Privilege Escalation Vulnerability · added March 28, 2022
- CVE-2018-8405 ransomwareMicrosoft DirectX Graphics Kernel Privilege Escalation Vulnerability · added March 28, 2022
- CVE-2017-0213 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added March 28, 2022
- CVE-2016-0189 ransomwareMicrosoft Internet Explorer Memory Corruption Vulnerability · added March 28, 2022
- CVE-2016-0151 ransomwareMicrosoft Windows CSRSS Security Feature Bypass Vulnerability · added March 28, 2022
- CVE-2013-2551 ransomwareMicrosoft Internet Explorer Use-After-Free Vulnerability · added March 28, 2022
- CVE-2013-2465 ransomwareOracle Java SE Unspecified Vulnerability · added March 28, 2022
- CVE-2022-21999 ransomwareMicrosoft Windows Print Spooler Privilege Escalation Vulnerability · added March 25, 2022
- CVE-2021-42237 ransomwareSitecore XP Remote Command Execution Vulnerability · added March 25, 2022
- CVE-2021-22941 ransomwareCitrix ShareFile Improper Access Control Vulnerability · added March 25, 2022
- CVE-2020-2021 ransomwarePalo Alto Networks PAN-OS Authentication Bypass Vulnerability · added March 25, 2022
- CVE-2019-15107 ransomwareWebmin Command Injection Vulnerability · added March 25, 2022
- CVE-2019-11043 ransomwarePHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability · added March 25, 2022
- CVE-2018-11138 ransomwareQuest KACE System Management Appliance Remote Command Execution Vulnerability · added March 25, 2022
- CVE-2018-1273 ransomwareVMware Tanzu Spring Data Commons Property Binder Vulnerability · added March 25, 2022
- CVE-2017-12615 ransomwareApache Tomcat on Windows Remote Code Execution Vulnerability · added March 25, 2022
- CVE-2017-0146 ransomwareMicrosoft Windows SMB Remote Code Execution Vulnerability · added March 25, 2022
- CVE-2010-2861 ransomwareAdobe ColdFusion Directory Traversal Vulnerability · added March 25, 2022
- CVE-2020-5135 ransomwareSonicWall SonicOS Buffer Overflow Vulnerability · added March 15, 2022
- CVE-2019-1405 ransomwareMicrosoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1322 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1315 ransomwareMicrosoft Windows Error Reporting Manager Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1253 ransomwareMicrosoft Windows AppX Deployment Server Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1129 ransomwareMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1069 ransomwareMicrosoft Task Scheduler Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-1064 ransomwareMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-0841 ransomwareMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2019-0543 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2018-8120 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2017-0101 ransomwareMicrosoft Windows Transaction Manager Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2016-3309 ransomwareMicrosoft Windows Kernel Privilege Escalation Vulnerability · added March 15, 2022
- CVE-2015-2546 ransomwareMicrosoft Win32k Memory Corruption Vulnerability · added March 15, 2022
- CVE-2009-3960 ransomwareAdobe BlazeDS Information Disclosure Vulnerability · added March 7, 2022
- CVE-2021-41379 ransomwareMicrosoft Windows Installer Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2018-8581 ransomwareMicrosoft Exchange Server Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2016-4117 ransomwareAdobe Flash Player Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2016-1019 ransomwareAdobe Flash Player Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2016-0099 ransomwareMicrosoft Windows Secondary Logon Service Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2015-7645 ransomwareAdobe Flash Player Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2015-1701 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added March 3, 2022
- CVE-2012-4681 ransomwareOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2012-1723 ransomwareOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2012-0507 ransomwareOracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2010-0188 ransomwareAdobe Reader and Acrobat Arbitrary Code Execution Vulnerability · added March 3, 2022
- CVE-2008-2992 ransomwareAdobe Reader and Acrobat Input Validation Vulnerability · added March 3, 2022
- CVE-2022-24682 ransomwareSynacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability · added February 25, 2022
- CVE-2019-0752 ransomwareMicrosoft Internet Explorer Type Confusion Vulnerability · added February 15, 2022
- CVE-2018-20250 ransomwareWinRAR Absolute Path Traversal Vulnerability · added February 15, 2022
- CVE-2018-15982 ransomwareAdobe Flash Player Use-After-Free Vulnerability · added February 15, 2022
- CVE-2018-8174 ransomwareMicrosoft Windows VBScript Engine Out-of-Bounds Write Vulnerability · added February 15, 2022
- CVE-2020-0796 ransomwareMicrosoft SMBv3 Remote Code Execution Vulnerability · added February 10, 2022
- CVE-2017-10271 ransomwareOracle Corporation WebLogic Server Remote Code Execution Vulnerability · added February 10, 2022
- CVE-2017-0145 ransomwareMicrosoft SMBv1 Remote Code Execution Vulnerability · added February 10, 2022
- CVE-2017-0144 ransomwareMicrosoft SMBv1 Remote Code Execution Vulnerability · added February 10, 2022
- CVE-2022-21882 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added February 4, 2022
- CVE-2021-20038 ransomwareSonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability · added January 28, 2022
- CVE-2020-0787 ransomwareMicrosoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability · added January 28, 2022
- CVE-2018-8453 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added January 21, 2022
- CVE-2021-21975 ransomwareVMware Server Side Request Forgery in vRealize Operations Manager API · added January 18, 2022
- CVE-2019-2725 ransomwareOracle WebLogic Server, Injection · added January 10, 2022
- CVE-2019-1579 ransomwarePalo Alto Networks PAN-OS Remote Code Execution Vulnerability · added January 10, 2022
- CVE-2019-1458 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added January 10, 2022
- CVE-2018-13383 ransomwareFortinet FortiOS and FortiProxy Out-of-bounds Write · added January 10, 2022
- CVE-2018-13382 ransomwareFortinet FortiOS and FortiProxy Improper Authorization · added January 10, 2022
- CVE-2021-43890 ransomwareMicrosoft Windows AppX Installer Spoofing Vulnerability · added December 15, 2021
- CVE-2021-44228 ransomwareApache Log4j2 Remote Code Execution Vulnerability · added December 10, 2021
- CVE-2017-12149 ransomwareRed Hat JBoss Application Server Remote Code Execution Vulnerability · added December 10, 2021
- CVE-2021-40438 ransomwareApache HTTP Server-Side Request Forgery (SSRF) · added December 1, 2021
- CVE-2021-42321 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 17, 2021
- CVE-2021-40449 ransomwareMicrosoft Windows Win32k Privilege Escalation Vulnerability · added November 17, 2021
- CVE-2021-42258 ransomwareBQE BillQuick Web Suite SQL Injection Vulnerability · added November 3, 2021
- CVE-2021-42013 ransomwareApache HTTP Server Path Traversal Vulnerability · added November 3, 2021
- CVE-2021-41773 ransomwareApache HTTP Server Path Traversal Vulnerability · added November 3, 2021
- CVE-2021-40539 ransomwareZoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability · added November 3, 2021
- CVE-2021-40444 ransomwareMicrosoft MSHTML Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-38647 ransomwareMicrosoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-36955 ransomwareMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-36942 ransomwareMicrosoft Windows Local Security Authority (LSA) Spoofing Vulnerability · added November 3, 2021
- CVE-2021-35464 ransomwareForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-35211 ransomwareSolarWinds Serv-U Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-34527 ransomwareMicrosoft Windows Print Spooler Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-34523 ransomwareMicrosoft Exchange Server Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-34473 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-31207 ransomwareMicrosoft Exchange Server Security Feature Bypass Vulnerability · added November 3, 2021
- CVE-2021-30116 ransomwareKaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability · added November 3, 2021
- CVE-2021-27104 ransomwareAccellion FTA OS Command Injection Vulnerability · added November 3, 2021
- CVE-2021-27103 ransomwareAccellion FTA Server-Side Request Forgery (SSRF) Vulnerability · added November 3, 2021
- CVE-2021-27102 ransomwareAccellion FTA OS Command Injection Vulnerability · added November 3, 2021
- CVE-2021-27101 ransomwareAccellion FTA SQL Injection Vulnerability · added November 3, 2021
- CVE-2021-27065 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-26858 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-26857 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-26855 ransomwareMicrosoft Exchange Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-26411 ransomwareMicrosoft Internet Explorer Memory Corruption Vulnerability · added November 3, 2021
- CVE-2021-26084 ransomwareAtlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability · added November 3, 2021
- CVE-2021-22986 ransomwareF5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-22893 ransomwareIvanti Pulse Connect Secure Use-After-Free Vulnerability · added November 3, 2021
- CVE-2021-22205 ransomwareGitLab Community and Enterprise Editions Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-22005 ransomwareVMware vCenter Server File Upload Vulnerability · added November 3, 2021
- CVE-2021-21985 ransomwareVMware vCenter Server Improper Input Validation Vulnerability · added November 3, 2021
- CVE-2021-21972 ransomwareVMware vCenter Server Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2021-20023 ransomwareSonicWall Email Security Path Traversal Vulnerability · added November 3, 2021
- CVE-2021-20022 ransomwareSonicWall Email Security Unrestricted Upload of File Vulnerability · added November 3, 2021
- CVE-2021-20021 ransomwareSonicWall Email Security Improper Privilege Management Vulnerability · added November 3, 2021
- CVE-2021-20016 ransomwareSonicWall SSLVPN SMA100 SQL Injection Vulnerability · added November 3, 2021
- CVE-2021-1732 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2021-1675 ransomwareMicrosoft Windows Print Spooler Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-12812 ransomwareFortinet FortiOS SSL VPN Improper Authentication Vulnerability · added November 3, 2021
- CVE-2020-12271 ransomwareSophos SFOS SQL Injection Vulnerability · added November 3, 2021
- CVE-2020-5902 ransomwareF5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-3992 ransomwareVMware ESXi OpenSLP Use-After-Free Vulnerability · added November 3, 2021
- CVE-2020-3580 ransomwareCisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability · added November 3, 2021
- CVE-2020-1472 ransomwareMicrosoft Netlogon Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2020-0968 ransomwareMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability · added November 3, 2021
- CVE-2020-0878 ransomwareMicrosoft Edge and Internet Explorer Memory Corruption Vulnerability · added November 3, 2021
- CVE-2020-0688 ransomwareMicrosoft Exchange Server Validation Key Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2019-19781 ransomwareCitrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability · added November 3, 2021
- CVE-2019-18935 ransomwareProgress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability · added November 3, 2021
- CVE-2019-13608 ransomwareCitrix StoreFront Server XML External Entity (XXE) Processing Vulnerability · added November 3, 2021
- CVE-2019-11634 ransomwareCitrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2019-11580 ransomwareAtlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2019-11539 ransomwareIvanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability · added November 3, 2021
- CVE-2019-11510 ransomwareIvanti Pulse Connect Secure Arbitrary File Read Vulnerability · added November 3, 2021
- CVE-2019-7481 ransomwareSonicWall SMA100 SQL Injection Vulnerability · added November 3, 2021
- CVE-2019-5591 ransomwareFortinet FortiOS Default Configuration Vulnerability · added November 3, 2021
- CVE-2019-5544 ransomwareVMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability · added November 3, 2021
- CVE-2019-3396 ransomwareAtlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability · added November 3, 2021
- CVE-2019-1367 ransomwareMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability · added November 3, 2021
- CVE-2019-1215 ransomwareMicrosoft Windows Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2019-0859 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2019-0803 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2019-0708 ransomwareMicrosoft Remote Desktop Services Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2019-0604 ransomwareMicrosoft SharePoint Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2018-13379 ransomwareFortinet FortiOS SSL VPN Path Traversal Vulnerability · added November 3, 2021
- CVE-2018-7600 ransomwareDrupal Core Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2018-6789 ransomwareExim Buffer Overflow Vulnerability · added November 3, 2021
- CVE-2018-4878 ransomwareAdobe Flash Player Use-After-Free Vulnerability · added November 3, 2021
- CVE-2018-2380 ransomwareSAP Customer Relationship Management (CRM) Path Traversal Vulnerability · added November 3, 2021
- CVE-2018-0802 ransomwareMicrosoft Office Memory Corruption Vulnerability · added November 3, 2021
- CVE-2017-11882 ransomwareMicrosoft Office Memory Corruption Vulnerability · added November 3, 2021
- CVE-2017-9822 ransomwareDotNetNuke (DNN) Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2017-5638 ransomwareApache Struts Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2017-0199 ransomwareMicrosoft Office and WordPad Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2017-0143 ransomwareMicrosoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2016-7255 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2016-0167 ransomwareMicrosoft Win32k Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2014-1812 ransomwareMicrosoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability · added November 3, 2021
- CVE-2012-0158 ransomwareMicrosoft MSCOMCTL.OCX Remote Code Execution Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).