CVE Database
Tracked vulnerabilities — sorted by priority for IT practitioners.
1005
Critical
521
Exploited in Wild
521
CISA KEV
| CVE ID | Severity | Vendor | CVSS | KEV | Exploited | Patched | Published | Actions |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-3066 | CRITICAL | Adobe | 9.8 | KEV | Yes | ✓ | April 27, 2017 | Patch |
| CVE-2014-3931 | CRITICAL | Looking Glass | 9.8 | KEV | Yes | ✓ | March 31, 2017 | Patch |
| CVE-2016-10033 | CRITICAL | PHP | 9.8 | KEV | Yes | ✓ | December 30, 2016 | Patch |
| CVE-2015-7755 | CRITICAL | Juniper | 9.8 | KEV | Yes | ✓ | December 19, 2015 | Patch |
| CVE-2014-0497 | CRITICAL | Adobe | 9.8 | KEV | Yes | ✓ | February 5, 2014 | Patch |
| CVE-2010-3765 | CRITICAL | Mozilla | 9.8 | KEV | Yes | ✓ | October 28, 2010 | Patch |
| CVE-2008-4250 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | October 23, 2008 | Patch |
| CVE-2026-45321 | CRITICAL | TanStack | 9.6 | KEV | Yes | ✓ | May 12, 2026 | Patch |
| CVE-2026-82078 | CRITICAL | PaperCut | 9.4 | KEV | Yes | ✗ | August 28, 2026 | |
| CVE-2025-62593 | CRITICAL | Ray-Project | 9.4 | KEV | Yes | ✗ | November 26, 2025 | |
| CVE-2024-8963 | CRITICAL | Ivanti | 9.4 | KEV | Yes | ✓ | September 19, 2024 | Patch |
| CVE-2026-64849 | CRITICAL | MLflow | 9.3 | KEV | Yes | ✓ | August 17, 2026 | Patch |
| CVE-2026-50751 | CRITICAL | Check Point | 9.3 | KEV | Yes | ✓ | June 8, 2026 | Patch |
| CVE-2025-32463 | CRITICAL | Sudo | 9.3 | KEV | Yes | ✓ | June 30, 2025 | Patch |
| CVE-2025-2775 | CRITICAL | SysAid | 9.3 | KEV | Yes | ✓ | May 7, 2025 | Patch |
| CVE-2025-22224 | CRITICAL | VMware | 9.3 | KEV | Yes | ✓ | March 4, 2025 | Patch |
| CVE-2024-42009 | CRITICAL | Roundcube | 9.3 | KEV | Yes | ✓ | August 5, 2024 | Patch |
| CVE-2026-16232 | CRITICAL | Check Point | 9.1 | KEV | Yes | ✗ | July 22, 2026 | |
| CVE-2026-60137 | CRITICAL | WordPress | 9.1 | KEV | Yes | ✓ | July 17, 2026 | Patch |
| CVE-2026-55040 | CRITICAL | Microsoft | 9.1 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-0257 | CRITICAL | Palo Alto Networks | 9.1 | KEV | Yes | ✓ | May 13, 2026 | Patch |
| CVE-2025-12480 | CRITICAL | Gladinet | 9.1 | KEV | Yes | ✓ | November 10, 2025 | Patch |
| CVE-2025-54236 | CRITICAL | Adobe | 9.1 | KEV | Yes | ✓ | September 9, 2025 | Patch |
| CVE-2025-6205 | CRITICAL | Dassault Systèmes | 9.1 | KEV | Yes | ✓ | August 4, 2025 | Patch |
| CVE-2025-42999 | CRITICAL | SAP | 9.1 | KEV | Yes | ✓ | May 13, 2025 | Patch |
| CVE-2025-0108 | CRITICAL | Palo Alto Networks | 9.1 | KEV | Yes | ✓ | February 12, 2025 | Patch |
| CVE-2024-57727 | CRITICAL | SimpleHelp | 9.1 | KEV | Yes | ✓ | January 15, 2025 | Patch |
| CVE-2024-41713 | CRITICAL | Mitel | 9.1 | KEV | Yes | ✓ | October 21, 2024 | Patch |
| CVE-2024-9465 | CRITICAL | Palo Alto Networks | 9.1 | KEV | Yes | ✓ | October 9, 2024 | Patch |
| CVE-2024-8956 | CRITICAL | PTZOptics | 9.1 | KEV | Yes | ✓ | September 17, 2024 | Patch |
| CVE-2024-28987 | CRITICAL | SolarWinds | 9.1 | KEV | Yes | ✓ | August 21, 2024 | Patch |
| CVE-2024-38475 | CRITICAL | Apache | 9.1 | KEV | Yes | ✓ | July 1, 2024 | Patch |
| CVE-2026-72530 | CRITICAL | TrueConf | 9.0 | KEV | Yes | ✓ | August 19, 2026 | Patch |
| CVE-2025-48703 | CRITICAL | CWP | 9.0 | KEV | Yes | ✓ | September 19, 2025 | Patch |
| CVE-2025-53690 | CRITICAL | Sitecore | 9.0 | KEV | Yes | ✓ | September 3, 2025 | Patch |
| CVE-2025-5086 | CRITICAL | Dassault Systèmes | 9.0 | KEV | Yes | ✓ | June 2, 2025 | Patch |
| CVE-2025-22457 | CRITICAL | Ivanti | 9.0 | KEV | Yes | ✓ | April 3, 2025 | Patch |
| CVE-2025-0282 | CRITICAL | Ivanti | 9.0 | KEV | Yes | ✓ | January 8, 2025 | Patch |
| CVE-2023-34192 | CRITICAL | Synacor | 9.0 | KEV | Yes | ✓ | July 6, 2023 | Patch |
| CVE-2026-73570 | HIGH | Synacor | 8.9 | KEV | Yes | ✓ | August 13, 2026 | Patch |
| CVE-2026-81578 | HIGH | PaperCut | 8.8 | KEV | Yes | ✗ | August 28, 2026 | |
| CVE-2026-11645 | HIGH | 8.8 | KEV | Yes | ✓ | June 9, 2026 | Patch | |
| CVE-2026-45659 | HIGH | Microsoft | 8.8 | KEV | Yes | ✓ | May 22, 2026 | Patch |
| CVE-2026-42271 | HIGH | BerriAI | 8.8 | KEV | Yes | ✓ | May 8, 2026 | Patch |
| CVE-2026-34197 | HIGH | Apache | 8.8 | KEV | Yes | ✓ | April 7, 2026 | Patch |
| CVE-2026-5281 | HIGH | 8.8 | KEV | Yes | ✓ | April 1, 2026 | Patch | |
| CVE-2026-33634 | HIGH | Aquasecurity | 8.8 | KEV | Yes | ✓ | March 23, 2026 | Patch |
| CVE-2026-3910 | HIGH | 8.8 | KEV | Yes | ✓ | March 13, 2026 | Patch | |
| CVE-2026-3909 | HIGH | 8.8 | KEV | Yes | ✓ | March 13, 2026 | Patch | |
| CVE-2026-2441 | HIGH | 8.8 | KEV | Yes | ✓ | February 13, 2026 | Patch |