Exploited vulnerabilities
The vulnerabilities attackers actually use, gathered from public sources and ranked by priority. Updated automatically, every day.
1,784exploited vulnerabilities tracked
7added in 7 days
36added in 30 days
38rising fast
361used by ransomware
665to fix within 24 h
| CVE | Product | EPSS |
|---|---|---|
| CVE-2022-47986 | IBM Aspera Faspex Code Execution Vulnerability | 99.97% |
| CVE-2022-41223 | Mitel MiVoice Connect Code Injection Vulnerability | 10.7% |
| CVE-2022-40765 | Mitel MiVoice Connect Command Injection Vulnerability | 10.6% |
| CVE-2022-46169 | Cacti Command Injection Vulnerability | 99.8% |
| CVE-2023-23529 | Apple Multiple Products WebKit Type Confusion Vulnerability | 9.4% |
| CVE-2023-23376 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 10.9% |
| CVE-2023-21823 | Microsoft Windows Graphic Component Privilege Escalation Vulnerability | 5.6% |
| CVE-2023-21715 | Microsoft Office Publisher Security Feature Bypass Vulnerability | 12.0% |
| CVE-2023-0669 | Fortra GoAnywhere MFT Remote Code Execution Vulnerability | 100.00% |
| CVE-2022-24990 | TerraMaster OS Remote Command Execution Vulnerability | 83.2% |
| CVE-2015-2291 | Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability | 15.7% |
| CVE-2023-22952 | Multiple SugarCRM Products Remote Code Execution Vulnerability | 80.1% |
| CVE-2022-21587 | Oracle E-Business Suite Unspecified Vulnerability | 98.3% |
| CVE-2017-11357 | Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability | 77.7% |
| CVE-2022-47966 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 99.8% |
| CVE-2022-44877 | CWP Control Web Panel OS Command Injection Vulnerability | 99.99% |
| CVE-2023-21674 | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | 34.2% |
| CVE-2022-41080 | Microsoft Exchange Server Privilege Escalation Vulnerability | 77.3% |
| CVE-2018-18809 | TIBCO JasperReports Library Directory Traversal Vulnerability | 79.1% |
| CVE-2018-5430 | TIBCO JasperReports Server Information Disclosure Vulnerability | 48.1% |
| CVE-2022-42856 | Apple iOS Type Confusion Vulnerability | 8.5% |
| CVE-2022-44698 | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | 74.8% |
| CVE-2022-42475 | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 99.5% |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | 6.9% |
| CVE-2022-26501 | Veeam Backup & Replication Remote Code Execution Vulnerability | 4.1% |
| CVE-2022-26500 | Veeam Backup & Replication Remote Code Execution Vulnerability | 5.8% |
| CVE-2022-4262 | Google Chromium V8 Type Confusion Vulnerability | 23.5% |
| CVE-2022-4135 | Google Chromium GPU Heap Buffer Overflow Vulnerability | 31.9% |
| CVE-2021-35587 | Oracle Fusion Middleware Unspecified Vulnerability | 96.3% |
| CVE-2022-41049 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2.6% |
How we rank vulnerabilities
A vulnerability joins this list as soon as CISA adds it to its KEV catalog or ENISA flags it as exploited in the EUVD.
The CheckOps priority index, out of 10, combines severity (CVSS), the probability of exploitation within 30 days (EPSS, FIRST) and public exploitation signals.
Above 8, we recommend patching within 24 hours; above 6, or as soon as a vulnerability is exploited, within 7 days.
Sources: CISA KEV · ENISA EUVD · FIRST EPSS · OSV. Public data aggregated by CheckOps, updated automatically. Source texts remain the property of their authors.