Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability CRITICAL N/A 93.98% cvelistv5 2026-04-04
cve-2026-3502 TrueConf Client Download of Code Without Integrity Check Vulnerability HIGH N/A 5.85% cvelistv5 2026-03-31
cve-2026-5281 Google Dawn Use-After-Free Vulnerability HIGH N/A 13.74% cvelistv5 2026-03-31
cve-2026-3055 Citrix NetScaler Out-of-Bounds Read Vulnerability HIGH N/A 91.49% cvelistv5 2026-03-29
cve-2025-53521 F5 BIG-IP Stack-Based Buffer Overflow Vulnerability CRITICAL 9.3 2.30% cvelistv5 2026-03-27
cve-2026-33634 Aquasecurity Trivy Embedded Malicious Code Vulnerability HIGH N/A 59.73% cvelistv5 2026-03-23
cve-2026-33017 Langflow Code Injection Vulnerability HIGH N/A 96.18% cvelistv5 2026-03-19
cve-2025-54068 Laravel Livewire Code Injection Vulnerability HIGH N/A 96.28% cvelistv5 2026-02-17
cve-2025-43520 Apple Multiple Products Classic Buffer Overflow Vulnerability MEDIUM 5.5 0.43% cvelistv5 2026-03-18
cve-2025-43510 Apple Multiple Products Improper Locking Vulnerability HIGH 7.8 0.36% cvelistv5 2026-03-18
cve-2025-32432 Craft CMS Code Injection Vulnerability CRITICAL 10.0 99.79% cvelistv5 2025-04-18
cve-2025-31277 webkitgtk: Processing maliciously crafted web content may lead to memory corruption HIGH 8.8 1.68% cvelistv5 2026-08-31
cve-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability CRITICAL N/A 44.43% cvelistv5 2026-03-18
cve-2026-20963 Microsoft SharePoint Deserialization of Untrusted Data Vulnerability HIGH N/A 29.20% cvelistv5 2026-03-18
cve-2025-66376 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability HIGH 7.2 20.23% cvelistv5 2026-03-17
cve-2025-47813 Wing FTP Server Information Disclosure Vulnerability HIGH N/A 62.51% cvelistv5 2026-03-16
cve-2026-3910 Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability HIGH N/A 2.69% cvelistv5 2026-03-12
cve-2026-3909 Google Skia Out-of-Bounds Write Vulnerability HIGH N/A 2.34% cvelistv5 2026-03-12
cve-2025-68613 n8n Improper Control of Dynamically-Managed Code Resources Vulnerability CRITICAL 9.9 98.99% cvelistv5 2026-02-21
cve-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability HIGH N/A 88.33% cvelistv5 2026-02-17
cve-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 90.56% cvelistv5 2026-01-20
cve-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery HIGH 7.5 99.68% cvelistv5 2025-03-11
cve-2023-43000 SUSE CVE CVE-2023-43000 HIGH 8.8 4.04% cvelistv5 2026-08-29
cve-2023-41974 Apple iOS and iPadOS Use-After-Free Vulnerability HIGH N/A 1.96% cvelistv5 2026-03-03
cve-2021-30952 webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution HIGH 7.8 6.96% cvelistv5 2026-03-06
cve-2021-22681 Rockwell Multiple Products Insufficient Protected Credentials Vulnerability CRITICAL 9.8 63.63% cvelistv5 2026-03-05
cve-2017-7921 Hikvision Multiple Products Improper Authentication Vulnerability CRITICAL 9.8 100.00% cvelistv5 2023-11-18
cve-2026-22719 Broadcom VMware Aria Operations Command Injection Vulnerability HIGH N/A 18.32% cvelistv5 2026-03-03
cve-2026-21385 Qualcomm Multiple Chipsets Memory Corruption Vulnerability HIGH N/A 1.32% cvelistv5 2026-03-02
cve-2026-20127 Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability HIGH N/A 89.29% cvelistv5 2026-02-25