DuyTa/cve-kgrag-db huggingface dataset:
Known Exploited Vulnerability: CVE-2018-8298
Vendor/Project: ChakraCore
Product: ChakraCore scripting engine
Vulnerability Name: ChakraCore Scripting Engine Type Confusion Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-8298']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-30116
Vendor/Project: Kaseya
Product: Virtual System/Server Administrator (VSA)
Vulnerability Name: Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-30116']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-20963
Vendor/Project: Android
Product: Framework
Vulnerability Name: Android Framework Privilege Escalation Vulnerability
Date Added to KEV: 2023-04-13
Required Action: Apply updates per vendor instructions.
Due Date: 2023-05-04
Known Ransomware Campaign Use: Unknown
Notes: ['https://source.android.com/docs/security/bulletin/2023-03-01', '  https://nvd.nist.gov/vuln/detail/CVE-2023-20963']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-36845
Vendor/Project: Juniper
Product: Junos OS
Vulnerability Name: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
Date Added to KEV: 2023-11-13
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US ', '  https://nvd.nist.gov/vuln/detail/CVE-2023-36845']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-21017
Vendor/Project: Adobe
Product: Acrobat and Reader
Vulnerability Name: Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-21017']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-20352
Vendor/Project: Cisco
Product: IOS and IOS XE
Vulnerability Name: Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
Date Added to KEV: 2025-09-29
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-10-20
Known Ransomware Campaign Use: Unknown
Notes: ['https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-20352']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-19943
Vendor/Project: QNAP
Product: Network Attached Storage (NAS)
Vulnerability Name: QNAP NAS File Station Cross-Site Scripting Vulnerability
Date Added to KEV: 2022-05-24
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-14
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-19943']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-59230
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Improper Access Control Vulnerability
Date Added to KEV: 2025-10-14
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-11-04
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-59230 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-59230']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-2551
Vendor/Project: Oracle
Product: Fusion Middleware
Vulnerability Name: Oracle Fusion Middleware Unspecified Vulnerability
Date Added to KEV: 2023-11-16
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-12-07
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.oracle.com/security-alerts/cpujan2020.html', ' https://nvd.nist.gov/vuln/detail/CVE-2020-2551']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-35939
Vendor/Project: Craft CMS
Product: Craft CMS
Vulnerability Name: Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability
Date Added to KEV: 2025-06-02
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-06-23
Known Ransomware Campaign Use: Unknown
Notes: ['https://github.com/craftcms/cms/pull/17220 ', '   https://nvd.nist.gov/vuln/detail/CVE-2025-35939']
Severity: Critical
Known Exploited Vulnerability: CVE-2013-2465
Vendor/Project: Oracle
Product: Java SE
Vulnerability Name: Oracle Java SE Unspecified Vulnerability
Date Added to KEV: 2022-03-28
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-18
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2013-2465']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-15069
Vendor/Project: Sophos
Product: XG Firewall
Vulnerability Name: Sophos XG Firewall Buffer Overflow Vulnerability
Date Added to KEV: 2025-02-06
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-02-27
Known Ransomware Campaign Use: Unknown
Notes: ['https://community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-portal ', ' https://nvd.nist.gov/vuln/detail/CVE-2020-15069']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-31201
Vendor/Project: Apple
Product: Multiple Products
Vulnerability Name: Apple Multiple Products Arbitrary Read and Write Vulnerability
Date Added to KEV: 2025-04-17
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-05-08
Known Ransomware Campaign Use: Unknown
Notes: ['https://support.apple.com/en-us/122282 ', ' https://support.apple.com/en-us/122400 ', ' https://support.apple.com/en-us/122401 ', ' https://support.apple.com/en-us/122402 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-31201']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-6223
Vendor/Project: Apple
Product: iOS and macOS
Vulnerability Name: Apple iOS and macOS Group Facetime Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-6223']
Severity: Critical
Known Exploited Vulnerability: CVE-2026-34197
Vendor/Project: Apache
Product: ActiveMQ
Vulnerability Name: Apache ActiveMQ Improper Input Validation Vulnerability
Date Added to KEV: 2026-04-16
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-04-30
Known Ransomware Campaign Use: Unknown
Notes: ['https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt ', ' https://nvd.nist.gov/vuln/detail/CVE-2026-34197']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-31207
Vendor/Project: Microsoft
Product: Exchange Server
Vulnerability Name: Microsoft Exchange Server Security Feature Bypass Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-31207']
Severity: Critical
Known Exploited Vulnerability: CVE-2017-5689
Vendor/Project: Intel
Product: Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability
Vulnerability Name: Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
Date Added to KEV: 2022-01-28
Required Action: Apply updates per vendor instructions.
Due Date: 2022-07-28
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2017-5689']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-23176
Vendor/Project: WatchGuard
Product: Firebox and XTM
Vulnerability Name: WatchGuard Firebox and XTM Privilege Escalation Vulnerability
Date Added to KEV: 2022-04-11
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-02
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2022-23176']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-20753
Vendor/Project: Kaseya
Product: Virtual System/Server Administrator (VSA)
Vulnerability Name: Kaseya VSA Remote Code Execution Vulnerability
Date Added to KEV: 2022-04-13
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-04
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-20753']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-4939
Vendor/Project: Adobe
Product: ColdFusion
Vulnerability Name: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-4939']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-9819
Vendor/Project: Apple
Product: iOS, iPadOS, and watchOS
Vulnerability Name: Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-9819']
Severity: Critical
Known Exploited Vulnerability: CVE-2014-0502
Vendor/Project: Adobe
Product: Flash Player
Vulnerability Name: Adobe Flash Player Double Free Vulnerablity
Date Added to KEV: 2024-09-17
Required Action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Due Date: 2024-10-08
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ', ' https://nvd.nist.gov/vuln/detail/CVE-2014-0502']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-36025
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Date Added to KEV: 2023-11-14
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-12-05
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36025', '  https://nvd.nist.gov/vuln/detail/CVE-2023-36025']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-21492
Vendor/Project: Samsung
Product: Mobile Devices
Vulnerability Name: Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Date Added to KEV: 2023-05-19
Required Action: Apply updates per vendor instructions.
Due Date: 2023-06-09
Known Ransomware Campaign Use: Unknown
Notes: ['https://security.samsungmobile.com/securityUpdate.smsb', '  https://nvd.nist.gov/vuln/detail/CVE-2023-21492']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-21893
Vendor/Project: Ivanti
Product: Connect Secure, Policy Secure, and Neurons
Vulnerability Name: Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
Date Added to KEV: 2024-01-31
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-02-02
Known Ransomware Campaign Use: Known
Notes: ['https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-21893']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-37580
Vendor/Project: Synacor
Product: Zimbra Collaboration Suite (ZCS)
Vulnerability Name: Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Date Added to KEV: 2023-07-27
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-08-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://wiki.zimbra.com/wiki/Security_Center ', '  https://nvd.nist.gov/vuln/detail/CVE-2023-37580']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-9377
Vendor/Project: D-Link
Product: DIR-610 Devices
Vulnerability Name: D-Link DIR-610 Devices Remote Command Execution
Date Added to KEV: 2022-03-25
Required Action: The impacted product is end-of-life and should be disconnected if still in use.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-9377']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-22587
Vendor/Project: Apple
Product: iOS and macOS
Vulnerability Name: Apple Memory Corruption Vulnerability
Date Added to KEV: 2022-01-28
Required Action: Apply updates per vendor instructions.
Due Date: 2022-02-11
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2022-22587']
Severity: Critical
Known Exploited Vulnerability: CVE-2013-0632
Vendor/Project: Adobe
Product: ColdFusion
Vulnerability Name: Adobe ColdFusion Authentication Bypass Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-24
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2013-0632']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-45046
Vendor/Project: Apache
Product: Log4j2
Vulnerability Name: Apache Log4j2 Deserialization of Untrusted Data Vulnerability
Date Added to KEV: 2023-05-01
Required Action: Apply updates per vendor instructions.
Due Date: 2023-05-22
Known Ransomware Campaign Use: Known
Notes: ['https://logging.apache.org/log4j/2.x/security.html', ' https://nvd.nist.gov/vuln/detail/CVE-2021-45046']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-30761
Vendor/Project: Apple
Product: iOS
Vulnerability Name: Apple iOS WebKit Memory Corruption Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-30761']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-43573
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows MSHTML Platform Spoofing Vulnerability
Date Added to KEV: 2024-10-08
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-10-29
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43573 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-43573']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-0604
Vendor/Project: Microsoft
Product: SharePoint
Vulnerability Name: Microsoft SharePoint Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-0604']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-31277
Vendor/Project: Apple
Product: Multiple Products
Vulnerability Name: Apple Multiple Products Buffer Overflow Vulnerability
Date Added to KEV: 2026-03-20
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-04-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://support.apple.com/en-us/124147 ', ' https://support.apple.com/en-us/124149 ', ' https://support.apple.com/en-us/124152 ', ' https://support.apple.com/en-us/124153 ', ' https://support.apple.com/en-us/124155 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-31277']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-41713
Vendor/Project: Mitel
Product: MiCollab
Vulnerability Name: Mitel MiCollab Path Traversal Vulnerability
Date Added to KEV: 2025-01-07
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-01-28
Known Ransomware Campaign Use: Known
Notes: ['https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-41713 ']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-35395
Vendor/Project: Realtek
Product: AP-Router SDK
Vulnerability Name: Realtek AP-Router SDK Buffer Overflow Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-35395']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-9377
Vendor/Project: TP-Link
Product: Multiple Routers
Vulnerability Name: TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
Date Added to KEV: 2025-09-03
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-09-24
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.tp-link.com/us/support/faq/4308/ ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-9377']
Severity: Critical
Known Exploited Vulnerability: CVE-2015-2424
Vendor/Project: Microsoft
Product: PowerPoint
Vulnerability Name: Microsoft PowerPoint Memory Corruption Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-24
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2015-2424']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-17519
Vendor/Project: Apache
Product: Flink
Vulnerability Name: Apache Flink Improper Access Control Vulnerability
Date Added to KEV: 2024-05-23
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-06-13
Known Ransomware Campaign Use: Unknown
Notes: ['This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/typ0h03zyfrzjqlnb7plh64df1g2383d', ' https://nvd.nist.gov/vuln/detail/CVE-2020-17519']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-42793
Vendor/Project: JetBrains
Product: TeamCity
Vulnerability Name: JetBrains TeamCity Authentication Bypass Vulnerability
Date Added to KEV: 2023-10-04
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-10-25
Known Ransomware Campaign Use: Known
Notes: ['https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/ ', '  https://nvd.nist.gov/vuln/detail/CVE-2023-42793']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-3273
Vendor/Project: D-Link
Product: Multiple NAS Devices
Vulnerability Name: D-Link Multiple NAS Devices Command Injection Vulnerability
Date Added to KEV: 2024-04-11
Required Action: This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.
Due Date: 2024-05-02
Known Ransomware Campaign Use: Unknown
Notes: ['https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383', ' https://nvd.nist.gov/vuln/detail/CVE-2024-3273']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-37976
Vendor/Project: Google
Product: Chromium
Vulnerability Name: Google Chromium Information Disclosure Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-37976']
Severity: Critical
Known Exploited Vulnerability: CVE-2017-6627
Vendor/Project: Cisco
Product: IOS and IOS XE Software
Vulnerability Name: Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-24
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2017-6627']
Severity: Critical
Known Exploited Vulnerability: CVE-2012-1889
Vendor/Project: Microsoft
Product: XML Core Services
Vulnerability Name: Microsoft XML Core Services Memory Corruption Vulnerability
Date Added to KEV: 2022-06-08
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-22
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2012-1889']
Severity: Critical
Known Exploited Vulnerability: CVE-2010-5326
Vendor/Project: SAP
Product: NetWeaver
Vulnerability Name: SAP NetWeaver Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2010-5326']
Severity: Critical
Known Exploited Vulnerability: CVE-2016-4656
Vendor/Project: Apple
Product: iOS
Vulnerability Name: Apple iOS Memory Corruption Vulnerability
Date Added to KEV: 2022-05-24
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-14
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2016-4656']
Severity: Critical
Known Exploited Vulnerability: CVE-2012-0518
Vendor/Project: Oracle
Product: Fusion Middleware
Vulnerability Name: Oracle Fusion Middleware Unspecified Vulnerability
Date Added to KEV: 2022-03-28
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-18
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2012-0518']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-27348
Vendor/Project: Apache
Product: HugeGraph-Server
Vulnerability Name: Apache HugeGraph-Server Improper Access Control Vulnerability
Date Added to KEV: 2024-09-18
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-10-09
Known Ransomware Campaign Use: Unknown
Notes: ['This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see:  https://lists.apache.org/thread/nx6g6htyhpgtzsocybm242781o8w5kq9 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-27348']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-4428
Vendor/Project: IBM
Product: Data Risk Manager
Vulnerability Name: IBM Data Risk Manager Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-4428']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-31200
Vendor/Project: Apple
Product: Multiple Products
Vulnerability Name: Apple Multiple Products Memory Corruption Vulnerability
Date Added to KEV: 2025-04-17
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-05-08
Known Ransomware Campaign Use: Unknown
Notes: ['https://support.apple.com/en-us/122282 ', ' https://support.apple.com/en-us/122400 ', ' https://support.apple.com/en-us/122401 ', ' https://support.apple.com/en-us/122402 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-31200']
Severity: Critical
Known Exploited Vulnerability: CVE-2014-0546
Vendor/Project: Adobe
Product: Reader and Acrobat
Vulnerability Name: Adobe Reader and Acrobat Sandbox Bypass Vulnerability
Date Added to KEV: 2022-05-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2014-0546']
Severity: Critical