Exploited vulnerabilities
The vulnerabilities attackers actually use, gathered from public sources and ranked by priority. Updated automatically, every day.
1,786exploited vulnerabilities tracked
5added in 7 days
38added in 30 days
38rising fast
361used by ransomware
667to fix within 24 h
| CVE | Product | EPSS |
|---|---|---|
| CVE-2021-27103 | Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability | 11.4% |
| CVE-2021-27102 | Accellion FTA OS Command Injection Vulnerability | 3.7% |
| CVE-2021-27101 | Accellion FTA SQL Injection Vulnerability | 6.0% |
| CVE-2021-27085 | Microsoft Internet Explorer Remote Code Execution Vulnerability | 5.4% |
| CVE-2021-27065 | Microsoft Exchange Server Remote Code Execution Vulnerability | 99.9% |
| CVE-2021-27059 | Microsoft Office Remote Code Execution Vulnerability | 6.1% |
| CVE-2021-26858 | Microsoft Exchange Server Remote Code Execution Vulnerability | 93.7% |
| CVE-2021-26857 | Microsoft Exchange Server Remote Code Execution Vulnerability | 95.8% |
| CVE-2021-26855 | Microsoft Exchange Server Remote Code Execution Vulnerability | 100.00% |
| CVE-2021-26411 | Microsoft Internet Explorer Memory Corruption Vulnerability | 81.7% |
| CVE-2021-26084 | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 100.00% |
| CVE-2021-23874 | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | 1.0% |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | 99.9% |
| CVE-2021-22900 | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 14.1% |
| CVE-2021-22899 | Ivanti Pulse Connect Secure Command Injection Vulnerability | 22.9% |
| CVE-2021-22894 | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | 41.3% |
| CVE-2021-22893 | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | 47.2% |
| CVE-2021-22506 | Micro Focus Access Manager Information Leakage Vulnerability | 25.7% |
| CVE-2021-22502 | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | 96.7% |
| CVE-2021-22205 | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability | 99.7% |
| CVE-2021-22005 | VMware vCenter Server File Upload Vulnerability | 100.00% |
| CVE-2021-21985 | VMware vCenter Server Improper Input Validation Vulnerability | 100.00% |
| CVE-2021-21972 | VMware vCenter Server Remote Code Execution Vulnerability | 99.9% |
| CVE-2021-21224 | Google Chromium V8 Type Confusion Vulnerability | 84.2% |
| CVE-2021-21220 | Google Chromium V8 Improper Input Validation Vulnerability | 70.4% |
| CVE-2021-21206 | Google Chromium Blink Use-After-Free Vulnerability | 9.3% |
| CVE-2021-21193 | Google Chromium Blink Use-After-Free Vulnerability | 10.0% |
| CVE-2021-21166 | Google Chromium Race Condition Vulnerability | 24.0% |
| CVE-2021-21148 | Google Chromium V8 Heap Buffer Overflow Vulnerability | 20.0% |
| CVE-2021-21017 | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 86.3% |
How we rank vulnerabilities
A vulnerability joins this list as soon as CISA adds it to its KEV catalog or ENISA flags it as exploited in the EUVD.
The CheckOps priority index, out of 10, combines severity (CVSS), the probability of exploitation within 30 days (EPSS, FIRST) and public exploitation signals.
Above 8, we recommend patching within 24 hours; above 6, or as soon as a vulnerability is exploited, within 7 days.
Sources: CISA KEV · ENISA EUVD · FIRST EPSS · OSV. Public data aggregated by CheckOps, updated automatically. Source texts remain the property of their authors.