CVE Database
Tracked vulnerabilities — sorted by priority for IT practitioners.
556
Critical
510
Exploited in Wild
510
CISA KEV
| CVE ID | Severity | Vendor | CVSS | KEV | Exploited | Patched | Published | Actions |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-11001 | HIGH | Reolink | 7.2 | KEV | Yes | ✓ | April 8, 2019 | Patch |
| CVE-2018-9276 | HIGH | Paessler | 7.2 | KEV | Yes | ✓ | July 2, 2018 | Patch |
| CVE-2025-22226 | HIGH | VMware | 7.1 | KEV | Yes | ✓ | March 4, 2025 | Patch |
| CVE-2025-21391 | HIGH | Microsoft | 7.1 | KEV | Yes | ✓ | February 11, 2025 | Patch |
| CVE-2024-53150 | HIGH | Linux | 7.1 | KEV | Yes | ✓ | December 24, 2024 | Patch |
| CVE-2026-68820 | HIGH | Microsoft | 7.0 | KEV | Yes | ✓ | August 11, 2026 | Patch |
| CVE-2025-62215 | HIGH | Microsoft | 7.0 | KEV | Yes | ✓ | November 11, 2025 | Patch |
| CVE-2025-26633 | HIGH | Microsoft | 7.0 | KEV | Yes | ✓ | March 11, 2025 | Patch |
| CVE-2025-24983 | HIGH | Microsoft | 7.0 | KEV | Yes | ✓ | March 11, 2025 | Patch |
| CVE-2025-0411 | HIGH | 7-Zip | 7.0 | KEV | Yes | ✓ | January 25, 2025 | Patch |
| CVE-2024-30088 | HIGH | Microsoft | 7.0 | KEV | Yes | ✓ | June 11, 2024 | Patch |
| CVE-2026-34926 | MEDIUM | Trend Micro | 6.7 | KEV | Yes | ✓ | May 21, 2026 | Patch |
| CVE-2025-1976 | MEDIUM | Broadcom | 6.7 | KEV | Yes | ✓ | April 24, 2025 | Patch |
| CVE-2025-40602 | MEDIUM | SonicWall | 6.6 | KEV | Yes | ✓ | December 18, 2025 | Patch |
| CVE-2026-20262 | MEDIUM | Cisco | 6.5 | KEV | Yes | ✓ | June 15, 2026 | Patch |
| CVE-2026-32201 | MEDIUM | Microsoft | 6.5 | KEV | Yes | ✓ | April 14, 2026 | Patch |
| CVE-2025-49706 | MEDIUM | Microsoft | 6.5 | KEV | Yes | ✓ | July 8, 2025 | Patch |
| CVE-2025-24054 | MEDIUM | Microsoft | 6.5 | KEV | Yes | ✓ | March 11, 2025 | Patch |
| CVE-2025-0111 | MEDIUM | Palo Alto Networks | 6.5 | KEV | Yes | ✓ | February 12, 2025 | Patch |
| CVE-2024-43451 | MEDIUM | Microsoft | 6.5 | KEV | Yes | ✓ | November 12, 2024 | Patch |
| CVE-2023-50224 | MEDIUM | TP-Link | 6.5 | KEV | Yes | ✓ | May 3, 2024 | Patch |
| CVE-2021-20035 | MEDIUM | SonicWall | 6.5 | KEV | Yes | ✓ | September 27, 2021 | Patch |
| CVE-2019-6693 | MEDIUM | Fortinet | 6.5 | KEV | Yes | ✓ | November 21, 2019 | Patch |
| CVE-2024-44309 | MEDIUM | Apple | 6.3 | KEV | Yes | ✓ | November 20, 2024 | Patch |
| CVE-2026-21525 | MEDIUM | Microsoft | 6.2 | KEV | Yes | ✓ | February 10, 2026 | Patch |
| CVE-2025-59689 | MEDIUM | Libraesva | 6.1 | KEV | Yes | ✓ | September 19, 2025 | Patch |
| CVE-2025-48700 | MEDIUM | Synacor | 6.1 | KEV | Yes | ✓ | June 23, 2025 | Patch |
| CVE-2025-24200 | MEDIUM | Apple | 6.1 | KEV | Yes | ✓ | February 10, 2025 | Patch |
| CVE-2024-11182 | MEDIUM | MDaemon | 6.1 | KEV | Yes | ✓ | November 15, 2024 | Patch |
| CVE-2024-27443 | MEDIUM | Synacor | 6.1 | KEV | Yes | ✓ | August 12, 2024 | Patch |
| CVE-2024-37383 | MEDIUM | Roundcube | 6.1 | KEV | Yes | ✓ | June 7, 2024 | Patch |
| CVE-2020-11023 | MEDIUM | JQuery | 6.1 | KEV | Yes | ✓ | April 29, 2020 | Patch |
| CVE-2014-2120 | MEDIUM | Cisco | 6.1 | KEV | Yes | ✓ | March 19, 2014 | Patch |
| CVE-2025-68686 | MEDIUM | Fortinet | 5.9 | KEV | Yes | ✓ | February 10, 2026 | Patch |
| CVE-2026-7473 | MEDIUM | Arista | 5.8 | KEV | Yes | ✓ | June 5, 2026 | Patch |
| CVE-2024-20481 | MEDIUM | Cisco | 5.8 | KEV | Yes | ✓ | October 23, 2024 | Patch |
| CVE-2026-20805 | MEDIUM | Microsoft | 5.5 | KEV | Yes | ✓ | January 13, 2026 | Patch |
| CVE-2025-43520 | MEDIUM | Apple | 5.5 | KEV | Yes | ✓ | December 12, 2025 | Patch |
| CVE-2025-48633 | MEDIUM | Android | 5.5 | KEV | Yes | ✓ | December 8, 2025 | Patch |
| CVE-2025-24991 | MEDIUM | Microsoft | 5.5 | KEV | Yes | ✓ | March 11, 2025 | Patch |
| CVE-2024-50302 | MEDIUM | Linux | 5.5 | KEV | Yes | ✓ | November 19, 2024 | Patch |
| CVE-2026-20122 | MEDIUM | Cisco | 5.4 | KEV | Yes | ✓ | February 25, 2026 | Patch |
| CVE-2025-55177 | MEDIUM | Meta Platforms | 5.4 | KEV | Yes | ✓ | August 29, 2025 | Patch |
| CVE-2025-27915 | MEDIUM | Synacor | 5.4 | KEV | Yes | ✓ | March 12, 2025 | Patch |
| CVE-2024-38217 | MEDIUM | Microsoft | 5.4 | KEV | Yes | ✓ | September 10, 2024 | Patch |
| CVE-2021-26829 | MEDIUM | OpenPLC | 5.4 | KEV | Yes | ✓ | June 11, 2021 | Patch |
| CVE-2026-20316 | MEDIUM | Cisco | 5.3 | KEV | Yes | ✗ | July 29, 2026 | |
| CVE-2025-48927 | MEDIUM | TeleMessage | 5.3 | KEV | Yes | ✗ | May 28, 2025 | |
| CVE-2025-35939 | MEDIUM | Craft CMS | 5.3 | KEV | Yes | ✓ | May 7, 2025 | Patch |
| CVE-2021-26086 | MEDIUM | Atlassian | 5.3 | KEV | Yes | ✓ | August 16, 2021 | Patch |