CVE Database
Tracked vulnerabilities — sorted by priority for IT practitioners.
1550
Critical
541
Exploited in Wild
541
CISA KEV
| CVE ID | Severity | Vendor | CVSS | KEV | Exploited | Patched | Published | Actions |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-24989 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | February 19, 2025 | Patch |
| CVE-2025-23006 | CRITICAL | SonicWall | 9.8 | KEV | Yes | ✓ | January 23, 2025 | Patch |
| CVE-2024-13161 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 14, 2025 | Patch |
| CVE-2024-13160 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 14, 2025 | Patch |
| CVE-2024-13159 | CRITICAL | Ivanti | 9.8 | KEV | Yes | ✓ | January 14, 2025 | Patch |
| CVE-2024-55591 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | January 14, 2025 | Patch |
| CVE-2024-53704 | CRITICAL | SonicWall | 9.8 | KEV | Yes | ✓ | January 9, 2025 | Patch |
| CVE-2024-12987 | CRITICAL | DrayTek | 9.8 | KEV | Yes | ✓ | December 27, 2024 | Patch |
| CVE-2024-56145 | CRITICAL | Craft CMS | 9.8 | KEV | Yes | ✓ | December 18, 2024 | Patch |
| CVE-2024-12356 | CRITICAL | BeyondTrust | 9.8 | KEV | Yes | ✓ | December 17, 2024 | Patch |
| CVE-2024-55956 | CRITICAL | Cleo | 9.8 | KEV | Yes | ✓ | December 13, 2024 | Patch |
| CVE-2024-11667 | CRITICAL | Zyxel | 9.8 | KEV | Yes | ✓ | November 27, 2024 | Patch |
| CVE-2024-49035 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | November 26, 2024 | Patch |
| CVE-2024-11680 | CRITICAL | ProjectSend | 9.8 | KEV | Yes | ✓ | November 26, 2024 | Patch |
| CVE-2024-0012 | CRITICAL | Palo Alto Networks | 9.8 | KEV | Yes | ✓ | November 18, 2024 | Patch |
| CVE-2024-11120 | CRITICAL | GeoVision | 9.8 | KEV | Yes | ✓ | November 15, 2024 | Patch |
| CVE-2024-50623 | CRITICAL | Cleo | 9.8 | KEV | Yes | ✓ | October 28, 2024 | Patch |
| CVE-2024-47575 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | October 23, 2024 | Patch |
| CVE-2024-9537 | CRITICAL | ScienceLogic | 9.8 | KEV | Yes | ✓ | October 18, 2024 | Patch |
| CVE-2024-9680 | CRITICAL | Mozilla | 9.8 | KEV | Yes | ✓ | October 9, 2024 | Patch |
| CVE-2024-43468 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | October 8, 2024 | Patch |
| CVE-2024-38813 | CRITICAL | VMware | 9.8 | KEV | Yes | ✓ | September 17, 2024 | Patch |
| CVE-2024-38812 | CRITICAL | VMware | 9.8 | KEV | Yes | ✓ | September 17, 2024 | Patch |
| CVE-2024-40711 | CRITICAL | Veeam | 9.8 | KEV | Yes | ✓ | September 7, 2024 | Patch |
| CVE-2024-20439 | CRITICAL | Cisco | 9.8 | KEV | Yes | ✓ | September 4, 2024 | Patch |
| CVE-2024-45195 | CRITICAL | Apache | 9.8 | KEV | Yes | ✓ | September 4, 2024 | Patch |
| CVE-2024-7399 | CRITICAL | Samsung | 9.8 | KEV | Yes | ✓ | August 12, 2024 | Patch |
| CVE-2024-5910 | CRITICAL | Palo Alto Networks | 9.8 | KEV | Yes | ✓ | July 10, 2024 | Patch |
| CVE-2024-4885 | CRITICAL | Progress | 9.8 | KEV | Yes | ✓ | June 25, 2024 | Patch |
| CVE-2024-37079 | CRITICAL | Broadcom | 9.8 | KEV | Yes | ✓ | June 18, 2024 | Patch |
| CVE-2024-6047 | CRITICAL | GeoVision | 9.8 | KEV | Yes | ✓ | June 17, 2024 | Patch |
| CVE-2024-1212 | CRITICAL | Progress | 9.8 | KEV | Yes | ✓ | February 21, 2024 | Patch |
| CVE-2024-23113 | CRITICAL | Fortinet | 9.8 | KEV | Yes | ✓ | February 15, 2024 | Patch |
| CVE-2024-21413 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | February 13, 2024 | Patch |
| CVE-2024-0769 | CRITICAL | D-Link | 9.8 | KEV | Yes | ✓ | January 21, 2024 | Patch |
| CVE-2023-49105 | CRITICAL | ownCloud | 9.8 | KEV | Yes | ✓ | November 21, 2023 | Patch |
| CVE-2022-43939 | CRITICAL | Hitachi Vantara | 9.8 | KEV | Yes | ✓ | April 3, 2023 | Patch |
| CVE-2023-28461 | CRITICAL | Array Networks | 9.8 | KEV | Yes | ✓ | March 15, 2023 | Patch |
| CVE-2022-37055 | CRITICAL | D-Link | 9.8 | KEV | Yes | ✓ | August 28, 2022 | Patch |
| CVE-2022-23227 | CRITICAL | NUUO | 9.8 | KEV | Yes | ✓ | January 14, 2022 | Patch |
| CVE-2021-23758 | CRITICAL | Ajax.NET Professional | 9.8 | KEV | Yes | ✓ | December 3, 2021 | Patch |
| CVE-2021-22175 | CRITICAL | GitLab | 9.8 | KEV | Yes | ✓ | June 11, 2021 | Patch |
| CVE-2021-32030 | CRITICAL | ASUS | 9.8 | KEV | Yes | ✓ | May 6, 2021 | Patch |
| CVE-2021-22681 | CRITICAL | Rockwell | 9.8 | KEV | Yes | ✓ | March 3, 2021 | Patch |
| CVE-2020-29574 | CRITICAL | Sophos | 9.8 | KEV | Yes | ✓ | December 11, 2020 | Patch |
| CVE-2020-15069 | CRITICAL | Sophos | 9.8 | KEV | Yes | ✓ | June 29, 2020 | Patch |
| CVE-2020-2883 | CRITICAL | Oracle | 9.8 | KEV | Yes | ✓ | April 15, 2020 | Patch |
| CVE-2020-7796 | CRITICAL | Synacor | 9.8 | KEV | Yes | ✓ | February 18, 2020 | Patch |
| CVE-2019-19006 | CRITICAL | Sangoma | 9.8 | KEV | Yes | ✓ | November 21, 2019 | Patch |
| CVE-2019-11043 | CRITICAL | PHP | 9.8 | KEV | Yes | ✓ | October 28, 2019 | Patch |