DuyTa/cve-kgrag-db huggingface dataset:
Known Exploited Vulnerability: CVE-2024-4978
Vendor/Project: Justice AV Solutions
Product: Viewer 
Vulnerability Name: Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability
Date Added to KEV: 2024-05-29
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-06-19
Known Ransomware Campaign Use: Unknown
Notes: ['Please follow the vendor’s instructions as outlined in the public statements at https://www.rapid7.com/blog/post/2024/05/23/cve-2024-4978-backdoored-justice-av-solutions-viewer-software-used-in-apparent-supply-chain-attack#remediation and https://www.javs.com/downloads', '  https://nvd.nist.gov/vuln/detail/CVE-2024-4978']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-0903
Vendor/Project: Microsoft
Product: Graphics Device Interface (GDI)
Vulnerability Name: Microsoft GDI Remote Code Execution Vulnerability
Date Added to KEV: 2022-03-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-0903']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-20333
Vendor/Project: Cisco
Product: Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
Vulnerability Name: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
Date Added to KEV: 2025-09-25
Required Action: The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
Due Date: 2025-09-26
Known Ransomware Campaign Use: Unknown
Notes: ['CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ', ' https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ', ' https://www.cisa.gov/eviction-strategies-tool/create-from-template ', ' https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ', '    https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ', ' https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-20333']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-41128
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
Date Added to KEV: 2022-11-08
Required Action: Apply updates per vendor instructions.
Due Date: 2022-12-09
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128', '  https://nvd.nist.gov/vuln/detail/CVE-2022-41128']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-53704
Vendor/Project: SonicWall
Product: SonicOS
Vulnerability Name: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
Date Added to KEV: 2025-02-18
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-03-11
Known Ransomware Campaign Use: Known
Notes: ['https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-53704']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-54948
Vendor/Project: Trend Micro
Product: Apex One
Vulnerability Name: Trend Micro Apex One OS Command Injection Vulnerability
Date Added to KEV: 2025-08-18
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-09-08
Known Ransomware Campaign Use: Unknown
Notes: ['https://success.trendmicro.com/en-US/solution/KA-0020652 ', ' N/A ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-54948']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-57968
Vendor/Project: Advantive
Product: VeraCore
Vulnerability Name: Advantive VeraCore Unrestricted File Upload Vulnerability
Date Added to KEV: 2025-03-10
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-03-31
Known Ransomware Campaign Use: Unknown
Notes: ['https://advantive.my.site.com/support/s/article/VeraCore-Release-Notes-2024-4-2-1 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-57968']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-26923
Vendor/Project: Microsoft
Product: Active Directory
Vulnerability Name: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Date Added to KEV: 2022-08-18
Required Action: Apply updates per vendor instructions.
Due Date: 2022-09-08
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-26923', '  https://nvd.nist.gov/vuln/detail/CVE-2022-26923']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-25280
Vendor/Project: D-Link
Product: DIR-820 Router
Vulnerability Name: D-Link DIR-820 Router OS Command Injection Vulnerability
Date Added to KEV: 2024-09-30
Required Action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Due Date: 2024-10-21
Known Ransomware Campaign Use: Unknown
Notes: ['https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10358 ', ' https://nvd.nist.gov/vuln/detail/CVE-2023-25280']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-19320
Vendor/Project: GIGABYTE
Product: Multiple Products
Vulnerability Name: GIGABYTE Multiple Products Unspecified Vulnerability
Date Added to KEV: 2022-10-24
Required Action: Apply updates per vendor instructions.
Due Date: 2022-11-14
Known Ransomware Campaign Use: Known
Notes: ['https://www.gigabyte.com/Support/Security/1801', ' https://nvd.nist.gov/vuln/detail/CVE-2018-19320']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-1879
Vendor/Project: Apple
Product: iOS, iPadOS, and watchOS
Vulnerability Name: Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-1879']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-41179
Vendor/Project: Trend Micro
Product: Apex One and Worry-Free Business Security
Vulnerability Name: Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
Date Added to KEV: 2023-09-21
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-10-12
Known Ransomware Campaign Use: Unknown
Notes: ['https://success.trendmicro.com/dcx/s/solution/000294994?language=en_US ', ' https://nvd.nist.gov/vuln/detail/CVE-2023-41179']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-36036
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability
Date Added to KEV: 2023-11-14
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-12-05
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36036 ', '  https://nvd.nist.gov/vuln/detail/CVE-2023-36036']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-0519
Vendor/Project: Google
Product: Chromium V8
Vulnerability Name: Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
Date Added to KEV: 2024-01-17
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-02-07
Known Ransomware Campaign Use: Unknown
Notes: ['https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html', ' https://nvd.nist.gov/vuln/detail/CVE-2024-0519']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-43451
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
Date Added to KEV: 2024-11-12
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-12-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43451 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-43451']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-4008
Vendor/Project: Smartbedded
Product: Meteobridge
Vulnerability Name: Smartbedded Meteobridge Command Injection Vulnerability
Date Added to KEV: 2025-10-02
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-10-23
Known Ransomware Campaign Use: Unknown
Notes: ['https://forum.meteohub.de/viewtopic.php?t=18687 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-4008']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-0041
Vendor/Project: Android
Product: Android Kernel
Vulnerability Name: Android Kernel Out-of-Bounds Write Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-0041']
Severity: Critical
Known Exploited Vulnerability: CVE-2017-8543
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Search Remote Code Execution Vulnerability
Date Added to KEV: 2022-05-24
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-14
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2017-8543']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-38813
Vendor/Project: VMware
Product: vCenter Server
Vulnerability Name: VMware vCenter Server Privilege Escalation Vulnerability
Date Added to KEV: 2024-11-20
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-12-11
Known Ransomware Campaign Use: Unknown
Notes: ['https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-38813']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-48618
Vendor/Project: Apple
Product: Multiple Products
Vulnerability Name: Apple Multiple Products Memory Corruption Vulnerability
Date Added to KEV: 2024-01-31
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-02-21
Known Ransomware Campaign Use: Unknown
Notes: ['https://support.apple.com/en-us/HT213530, https://support.apple.com/en-us/HT213532, https://support.apple.com/en-us/HT213535, https://support.apple.com/en-us/HT213536', '  https://nvd.nist.gov/vuln/detail/CVE-2022-48618']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-31979
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Kernel Privilege Escalation Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-31979']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-21206
Vendor/Project: Google
Product: Chromium Blink
Vulnerability Name: Google Chromium Blink Use-After-Free Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-21206']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-3272
Vendor/Project: D-Link
Product: Multiple NAS Devices
Vulnerability Name: D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
Date Added to KEV: 2024-04-11
Required Action: This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.
Due Date: 2024-05-02
Known Ransomware Campaign Use: Unknown
Notes: ['https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383', ' https://nvd.nist.gov/vuln/detail/CVE-2024-3272']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-11776
Vendor/Project: Apache
Product: Struts
Vulnerability Name: Apache Struts Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-11776']
Severity: Critical
Known Exploited Vulnerability: CVE-2016-10033
Vendor/Project: PHP
Product: PHPMailer
Vulnerability Name: PHPMailer Command Injection Vulnerability
Date Added to KEV: 2025-07-07
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-07-28
Known Ransomware Campaign Use: Unknown
Notes: ['This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18 ', ' https://github.com/advisories/GHSA-5f37-gxvh-23v6 ', ' https://nvd.nist.gov/vuln/detail/CVE-2016-10033']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-16920
Vendor/Project: D-Link
Product: Multiple Routers
Vulnerability Name: D-Link Multiple Routers Command Injection Vulnerability
Date Added to KEV: 2022-03-25
Required Action: The impacted product is end-of-life and should be disconnected if still in use.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-16920']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-37079
Vendor/Project: Broadcom
Product: VMware vCenter Server
Vulnerability Name: Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
Date Added to KEV: 2026-01-23
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-02-13
Known Ransomware Campaign Use: Unknown
Notes: ['https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-37079']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-30525
Vendor/Project: Zyxel
Product: Multiple Firewalls
Vulnerability Name: Zyxel Multiple Firewalls OS Command Injection Vulnerability
Date Added to KEV: 2022-05-16
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-06
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2022-30525']
Severity: Critical
Known Exploited Vulnerability: CVE-2016-6366
Vendor/Project: Cisco
Product: Adaptive Security Appliance (ASA)
Vulnerability Name: Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
Date Added to KEV: 2022-05-24
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-14
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2016-6366']
Severity: Critical
Known Exploited Vulnerability: CVE-2010-0188
Vendor/Project: Adobe
Product: Reader and Acrobat
Vulnerability Name: Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-24
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2010-0188']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-42916
Vendor/Project: Apple
Product: Multiple Products
Vulnerability Name: Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
Date Added to KEV: 2023-12-04
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Due Date: 2023-12-25
Known Ransomware Campaign Use: Unknown
Notes: ['https://support.apple.com/en-us/HT214031, https://support.apple.com/en-us/HT214032, https://support.apple.com/en-us/HT214033 ', '  https://nvd.nist.gov/vuln/detail/CVE-2023-42916']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-22536
Vendor/Project: SAP
Product: Multiple Products
Vulnerability Name: SAP Multiple Products HTTP Request Smuggling Vulnerability
Date Added to KEV: 2022-08-18
Required Action: Apply updates per vendor instructions.
Due Date: 2022-09-08
Known Ransomware Campaign Use: Unknown
Notes: ['SAP users must have an account in order to login and access the patch. https://accounts.sap.com/saml2/idp/sso', '  https://nvd.nist.gov/vuln/detail/CVE-2022-22536']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-27351
Vendor/Project: PaperCut
Product: NG/MF
Vulnerability Name: PaperCut NG/MF Improper Authentication Vulnerability
Date Added to KEV: 2026-04-20
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-05-04
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.papercut.com/kb/Main/PO-1216-and-PO-1219 ', ' https://nvd.nist.gov/vuln/detail/CVE-2023-27351']
Severity: Critical
Known Exploited Vulnerability: CVE-2026-20963
Vendor/Project: Microsoft
Product: SharePoint
Vulnerability Name: Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Date Added to KEV: 2026-03-18
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-03-21
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20963 ', ' https://nvd.nist.gov/vuln/detail/CVE-2026-20963']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-49103
Vendor/Project: ownCloud
Product: ownCloud graphapi
Vulnerability Name: ownCloud graphapi Information Disclosure Vulnerability
Date Added to KEV: 2023-11-30
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-12-21
Known Ransomware Campaign Use: Unknown
Notes: ['https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/ ', '  https://nvd.nist.gov/vuln/detail/CVE-2023-49103']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-24893
Vendor/Project: XWiki
Product: Platform
Vulnerability Name: XWiki Platform Eval Injection Vulnerability
Date Added to KEV: 2025-10-30
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-11-20
Known Ransomware Campaign Use: Unknown
Notes: ['https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rr6p-3pfg-562j ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-24893']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-13965
Vendor/Project: Roundcube
Product: Webmail
Vulnerability Name: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Date Added to KEV: 2024-06-26
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-07-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12', ' https://nvd.nist.gov/vuln/detail/CVE-2020-13965']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-26871
Vendor/Project: Trend Micro
Product: Apex Central
Vulnerability Name: Trend Micro Apex Central Arbitrary File Upload Vulnerability
Date Added to KEV: 2022-03-31
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-21
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2022-26871']
Severity: Critical
Known Exploited Vulnerability: CVE-2017-7269
Vendor/Project: Microsoft
Product: Internet Information Services (IIS)
Vulnerability Name: Microsoft Windows Server Buffer Overflow Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2017-7269']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-20701
Vendor/Project: Cisco
Product: Small Business RV160, RV260, RV340, and RV345 Series Routers
Vulnerability Name: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2022-20701']
Severity: Critical
Known Exploited Vulnerability: CVE-2007-0671
Vendor/Project: Microsoft
Product: Office
Vulnerability Name: Microsoft Office Excel Remote Code Execution Vulnerability
Date Added to KEV: 2025-08-12
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-09-02
Known Ransomware Campaign Use: Unknown
Notes: ['https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 ', ' https://nvd.nist.gov/vuln/detail/CVE-2007-0671']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-40407
Vendor/Project: Reolink
Product: RLC-410W IP Camera
Vulnerability Name: Reolink RLC-410W IP Camera OS Command Injection Vulnerability 
Date Added to KEV: 2024-12-18
Required Action: The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.
Due Date: 2025-01-08
Known Ransomware Campaign Use: Unknown
Notes: ['https://reolink.com/product-eol/ ', ' https://reolink.com/download-center/ ', ' https://nvd.nist.gov/vuln/detail/CVE-2021-40407']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-0282
Vendor/Project: Ivanti
Product: Connect Secure, Policy Secure, and ZTA Gateways
Vulnerability Name: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Date Added to KEV: 2025-01-08
Required Action: Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.
Due Date: 2025-01-15
Known Ransomware Campaign Use: Known
Notes: ['CISA Mitigation Instructions: https://www.cisa.gov/cisa-mitigation-instructions-CVE-2025-0282 Additional References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-0282']
Severity: Critical
Known Exploited Vulnerability: CVE-2010-3333
Vendor/Project: Microsoft
Product: Office
Vulnerability Name: Microsoft Office Stack-based Buffer Overflow Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-24
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2010-3333']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-34523
Vendor/Project: Microsoft
Product: Exchange Server
Vulnerability Name: Microsoft Exchange Server Privilege Escalation Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-34523']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-8406
Vendor/Project: Microsoft
Product: DirectX Graphics Kernel (DXGKRNL)
Vulnerability Name: Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
Date Added to KEV: 2022-03-28
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-18
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-8406']
Severity: Critical
Known Exploited Vulnerability: CVE-2026-25108
Vendor/Project: Soliton Systems K.K
Product: FileZen
Vulnerability Name: Soliton Systems K.K FileZen OS Command Injection Vulnerability
Date Added to KEV: 2026-02-24
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-03-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://jvn.jp/en/jp/JVN84622767/ ', ' https://nvd.nist.gov/vuln/detail/CVE-2026-25108']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-3837
Vendor/Project: Apple
Product: Multiple Products
Vulnerability Name: Apple Multiple Products Memory Corruption Vulnerability
Date Added to KEV: 2022-06-27
Required Action: Apply updates per vendor instructions.
Due Date: 2022-07-18
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-3837']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-22893
Vendor/Project: Ivanti
Product: Pulse Connect Secure
Vulnerability Name: Ivanti Pulse Connect Secure Use-After-Free Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Known
Notes: ["Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2021-22893"]
Severity: Critical
Known Exploited Vulnerability: CVE-2025-20393
Vendor/Project: Cisco
Product: Multiple Products
Vulnerability Name: Cisco Multiple Products Improper Input Validation Vulnerability
Date Added to KEV: 2025-12-17
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-12-24
Known Ransomware Campaign Use: Unknown
Notes: ["Please adhere to Cisco's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible Cisco products affected by this vulnerability. Apply any final mitigations provided by the vendor as soon as they become available. For more information please see: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-attack-N9bf4 ", ' https://nvd.nist.gov/vuln/detail/CVE-2025-20393']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-26318
Vendor/Project: WatchGuard
Product: Firebox and XTM Appliances
Vulnerability Name: WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
Date Added to KEV: 2022-03-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2022-26318']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-7609
Vendor/Project: Elastic
Product: Kibana
Vulnerability Name: Kibana Arbitrary Code Execution
Date Added to KEV: 2022-01-10
Required Action: Apply updates per vendor instructions.
Due Date: 2022-07-10
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-7609']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-1631
Vendor/Project: Juniper
Product: Junos OS
Vulnerability Name: Juniper Junos OS Path Traversal Vulnerability
Date Added to KEV: 2022-03-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-1631']
Severity: Critical
Known Exploited Vulnerability: CVE-2015-2425
Vendor/Project: Microsoft
Product: Internet Explorer
Vulnerability Name: Microsoft Internet Explorer Memory Corruption Vulnerability
Date Added to KEV: 2022-05-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2015-2425']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-48700
Vendor/Project: Synacor
Product: Zimbra Collaboration Suite (ZCS)
Vulnerability Name: Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
Date Added to KEV: 2026-04-20
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-04-23
Known Ransomware Campaign Use: Unknown
Notes: ['https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-48700']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-24990
Vendor/Project: TerraMaster
Product: TerraMaster OS
Vulnerability Name: TerraMaster OS Remote Command Execution Vulnerability
Date Added to KEV: 2023-02-10
Required Action: Apply updates per vendor instructions.
Due Date: 2023-03-03
Known Ransomware Campaign Use: Known
Notes: ['https://forum.terra-master.com/en/viewtopic.php?t=3030', '  https://nvd.nist.gov/vuln/detail/CVE-2022-24990']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-1653
Vendor/Project: Cisco
Product: Small Business RV320 and RV325 Routers
Vulnerability Name: Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-1653']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-3129
Vendor/Project: Laravel
Product: Ignition
Vulnerability Name: Laravel Ignition File Upload Vulnerability
Date Added to KEV: 2023-09-18
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-10-09
Known Ransomware Campaign Use: Known
Notes: ['https://github.com/facade/ignition/releases/tag/2.5.2', ' https://nvd.nist.gov/vuln/detail/CVE-2021-3129']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-13608
Vendor/Project: Citrix
Product: StoreFront Server
Vulnerability Name: Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-13608']
Severity: Critical
Known Exploited Vulnerability: CVE-2017-0059
Vendor/Project: Microsoft
Product: Internet Explorer
Vulnerability Name: Microsoft Internet Explorer Information Disclosure Vulnerability
Date Added to KEV: 2022-03-28
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-18
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2017-0059']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-8581
Vendor/Project: Microsoft
Product: Exchange Server
Vulnerability Name: Microsoft Exchange Server Privilege Escalation Vulnerability
Date Added to KEV: 2022-03-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-03-17
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-8581']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-27561
Vendor/Project: Yealink
Product: Device Management
Vulnerability Name: Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-27561']
Severity: Critical
Known Exploited Vulnerability: CVE-2017-8759
Vendor/Project: Microsoft
Product: .NET Framework
Vulnerability Name: Microsoft .NET Framework Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2017-8759']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-32648
Vendor/Project: October CMS
Product: October CMS
Vulnerability Name: October CMS Improper Authentication
Date Added to KEV: 2022-01-18
Required Action: Apply updates per vendor instructions.
Due Date: 2022-02-01
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-32648']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-0880
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Privilege Escalation Vulnerability
Date Added to KEV: 2022-05-23
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-13
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-0880']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-41082
Vendor/Project: Microsoft
Product: Exchange Server
Vulnerability Name: Microsoft Exchange Server Remote Code Execution Vulnerability
Date Added to KEV: 2022-09-30
Required Action: Apply updates per vendor instructions.
Due Date: 2022-10-21
Known Ransomware Campaign Use: Known
Notes: ['https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/', '  https://nvd.nist.gov/vuln/detail/CVE-2022-41082']
Severity: Critical
Known Exploited Vulnerability: CVE-2018-15961
Vendor/Project: Adobe
Product: ColdFusion
Vulnerability Name: Adobe ColdFusion Unrestricted File Upload Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2018-15961']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-1027
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Kernel Privilege Escalation Vulnerability
Date Added to KEV: 2022-05-23
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-13
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-1027']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-40711
Vendor/Project: Veeam
Product: Backup & Replication
Vulnerability Name: Veeam Backup and Replication Deserialization Vulnerability
Date Added to KEV: 2024-10-17
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-11-07
Known Ransomware Campaign Use: Known
Notes: ['https://www.veeam.com/kb4649 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-40711']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-59718
Vendor/Project: Fortinet
Product: Multiple Products
Vulnerability Name: Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
Date Added to KEV: 2025-12-16
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-12-23
Known Ransomware Campaign Use: Unknown
Notes: ['https://fortiguard.fortinet.com/psirt/FG-IR-25-647 ', ' https://docs.fortinet.com/upgrade-tool/fortigate ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-59718']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-21887
Vendor/Project: Ivanti
Product: Connect Secure and Policy Secure
Vulnerability Name: Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
Date Added to KEV: 2024-01-10
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-01-22
Known Ransomware Campaign Use: Known
Notes: ['Please apply mitigations per vendor instructions. For more information, please see: https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-21887']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-29748
Vendor/Project: Android
Product: Pixel
Vulnerability Name: Android Pixel Privilege Escalation Vulnerability
Date Added to KEV: 2024-04-04
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-04-25
Known Ransomware Campaign Use: Unknown
Notes: ['https://source.android.com/docs/security/bulletin/pixel/2024-04-01', ' https://nvd.nist.gov/vuln/detail/CVE-2024-29748']
Severity: Critical
Known Exploited Vulnerability: CVE-2009-0563
Vendor/Project: Microsoft
Product: Office
Vulnerability Name: Microsoft Office Buffer Overflow Vulnerability
Date Added to KEV: 2022-06-08
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-22
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2009-0563']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-38035
Vendor/Project: Ivanti
Product: Sentry
Vulnerability Name: Ivanti Sentry Authentication Bypass Vulnerability
Date Added to KEV: 2023-08-22
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2023-09-12
Known Ransomware Campaign Use: Known
Notes: ['https://forums.ivanti.com/s/article/CVE-2023-38035-API-Authentication-Bypass-on-Sentry-Administrator-Interface?language=en_US ', '  https://nvd.nist.gov/vuln/detail/CVE-2023-38035']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-38217
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
Date Added to KEV: 2024-09-10
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-10-01
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38217', ' https://nvd.nist.gov/vuln/detail/CVE-2024-38217']
Severity: Critical
Known Exploited Vulnerability: CVE-2010-1871
Vendor/Project: Red Hat
Product: JBoss Seam 2
Vulnerability Name: Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
Date Added to KEV: 2021-12-10
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-10
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2010-1871']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-11707
Vendor/Project: Mozilla
Product: Firefox and Thunderbird
Vulnerability Name: Mozilla Firefox and Thunderbird Type Confusion Vulnerability
Date Added to KEV: 2022-05-23
Required Action: Apply updates per vendor instructions.
Due Date: 2022-06-13
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-11707']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-49704
Vendor/Project: Microsoft
Product: SharePoint
Vulnerability Name: Microsoft SharePoint Code Injection Vulnerability
Date Added to KEV: 2025-07-22
Required Action: Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
Due Date: 2025-07-23
Known Ransomware Campaign Use: Known
Notes: ['CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770', ' https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/ ', ' https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-49704']
Severity: Critical
Known Exploited Vulnerability: CVE-2025-32432
Vendor/Project: Craft CMS
Product: Craft CMS
Vulnerability Name: Craft CMS Code Injection Vulnerability
Date Added to KEV: 2026-03-20
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2026-04-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://craftcms.com/knowledge-base/craft-cms-cve-2025-32432 ', ' https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3 ', ' https://nvd.nist.gov/vuln/detail/CVE-2025-32432']
Severity: Critical
Known Exploited Vulnerability: CVE-2017-9822
Vendor/Project: DotNetNuke (DNN)
Product: DotNetNuke (DNN)
Vulnerability Name: DotNetNuke (DNN) Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2017-9822']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-28550
Vendor/Project: Adobe
Product: Acrobat and Reader
Vulnerability Name: Adobe Acrobat and Reader Use-After-Free Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-28550']
Severity: Critical
Known Exploited Vulnerability: CVE-2022-26904
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Date Added to KEV: 2022-04-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-16
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2022-26904']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-22900
Vendor/Project: Ivanti
Product: Pulse Connect Secure
Vulnerability Name: Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ["Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2021-22900"]
Severity: Critical
Known Exploited Vulnerability: CVE-2018-13374
Vendor/Project: Fortinet
Product: FortiOS and FortiADC
Vulnerability Name: Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
Date Added to KEV: 2022-09-08
Required Action: Apply updates per vendor instructions.
Due Date: 2022-09-29
Known Ransomware Campaign Use: Known
Notes: ['https://www.fortiguard.com/psirt/FG-IR-18-157', ' https://nvd.nist.gov/vuln/detail/CVE-2018-13374']
Severity: Critical
Known Exploited Vulnerability: CVE-2020-1020
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2022-05-03
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2020-1020']
Severity: Critical
Known Exploited Vulnerability: CVE-2009-0927
Vendor/Project: Adobe
Product: Reader and Acrobat
Vulnerability Name: Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
Date Added to KEV: 2022-03-25
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2009-0927']
Severity: Critical
Known Exploited Vulnerability: CVE-2024-56145
Vendor/Project: Craft CMS
Product: Craft CMS
Vulnerability Name: Craft CMS Code Injection Vulnerability
Date Added to KEV: 2025-06-02
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-06-23
Known Ransomware Campaign Use: Unknown
Notes: ['https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9 ', ' https://nvd.nist.gov/vuln/detail/CVE-2024-56145']
Severity: Critical
Known Exploited Vulnerability: CVE-2019-0543
Vendor/Project: Microsoft
Product: Windows
Vulnerability Name: Microsoft Windows Privilege Escalation Vulnerability
Date Added to KEV: 2022-03-15
Required Action: Apply updates per vendor instructions.
Due Date: 2022-04-05
Known Ransomware Campaign Use: Known
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2019-0543']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-28461
Vendor/Project: Array Networks 
Product: AG/vxAG ArrayOS
Vulnerability Name: Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
Date Added to KEV: 2024-11-25
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due Date: 2024-12-16
Known Ransomware Campaign Use: Known
Notes: ['https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf ', ' https://nvd.nist.gov/vuln/detail/CVE-2023-28461']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-1871
Vendor/Project: Apple
Product: iOS, iPadOS, and macOS
Vulnerability Name: Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Date Added to KEV: 2021-11-03
Required Action: Apply updates per vendor instructions.
Due Date: 2021-11-17
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-1871']
Severity: Critical
Known Exploited Vulnerability: CVE-2010-3765
Vendor/Project: Mozilla
Product: Multiple Products
Vulnerability Name: Mozilla Multiple Products Remote Code Execution Vulnerability
Date Added to KEV: 2025-10-06
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due Date: 2025-10-27
Known Ransomware Campaign Use: Unknown
Notes: ['https://www.mozilla.org/en-US/security/advisories/mfsa2010-73 ', ' https://nvd.nist.gov/vuln/detail/CVE-2010-3765']
Severity: Critical
Known Exploited Vulnerability: CVE-2023-35311
Vendor/Project: Microsoft
Product: Outlook
Vulnerability Name: Microsoft Outlook Security Feature Bypass Vulnerability
Date Added to KEV: 2023-07-11
Required Action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Due Date: 2023-08-01
Known Ransomware Campaign Use: Unknown
Notes: ['https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-35311', '  https://nvd.nist.gov/vuln/detail/CVE-2023-35311']
Severity: Critical
Known Exploited Vulnerability: CVE-2021-37415
Vendor/Project: Zoho
Product: ManageEngine ServiceDesk Plus (SDP)
Vulnerability Name: Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
Date Added to KEV: 2021-12-01
Required Action: Apply updates per vendor instructions.
Due Date: 2021-12-15
Known Ransomware Campaign Use: Unknown
Notes: ['https://nvd.nist.gov/vuln/detail/CVE-2021-37415']
Severity: Critical