CVE Database
Tracked vulnerabilities — sorted by priority for IT practitioners.
1550
Critical
541
Exploited in Wild
541
CISA KEV
| CVE ID | Severity | Vendor | CVSS | KEV | Exploited | Patched | Published | Actions |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-16278 | CRITICAL | Nostromo | 9.8 | KEV | Yes | ✓ | October 14, 2019 | Patch |
| CVE-2019-9874 | CRITICAL | Sitecore | 9.8 | KEV | Yes | ✓ | May 31, 2019 | Patch |
| CVE-2018-19410 | CRITICAL | Paessler | 9.8 | KEV | Yes | ✓ | November 21, 2018 | Patch |
| CVE-2018-14933 | CRITICAL | NUUO | 9.8 | KEV | Yes | ✓ | August 4, 2018 | Patch |
| CVE-2017-1000353 | CRITICAL | Jenkins | 9.8 | KEV | Yes | ✓ | January 29, 2018 | Patch |
| CVE-2016-7836 | CRITICAL | SKYSEA | 9.8 | KEV | Yes | ✓ | June 9, 2017 | Patch |
| CVE-2017-7921 | CRITICAL | Hikvision | 9.8 | KEV | Yes | ✓ | May 6, 2017 | Patch |
| CVE-2017-3066 | CRITICAL | Adobe | 9.8 | KEV | Yes | ✓ | April 27, 2017 | Patch |
| CVE-2014-3931 | CRITICAL | Looking Glass | 9.8 | KEV | Yes | ✓ | March 31, 2017 | Patch |
| CVE-2016-10033 | CRITICAL | PHP | 9.8 | KEV | Yes | ✓ | December 30, 2016 | Patch |
| CVE-2015-7755 | CRITICAL | Juniper | 9.8 | KEV | Yes | ✓ | December 19, 2015 | Patch |
| CVE-2010-3765 | CRITICAL | Mozilla | 9.8 | KEV | Yes | ✓ | October 28, 2010 | Patch |
| CVE-2008-4250 | CRITICAL | Microsoft | 9.8 | KEV | Yes | ✓ | October 23, 2008 | Patch |
| CVE-2026-45321 | CRITICAL | TanStack | 9.6 | KEV | Yes | ✓ | May 12, 2026 | Patch |
| CVE-2026-82078 | CRITICAL | PaperCut | 9.4 | KEV | Yes | ✗ | August 28, 2026 | |
| CVE-2025-62593 | CRITICAL | Ray-Project | 9.4 | KEV | Yes | ✗ | November 26, 2025 | |
| CVE-2026-19490 | CRITICAL | Citrix | 9.3 | KEV | Yes | ✗ | August 19, 2026 | |
| CVE-2026-64849 | CRITICAL | MLflow | 9.3 | KEV | Yes | ✓ | August 17, 2026 | Patch |
| CVE-2026-9586 | CRITICAL | Sangoma | 9.3 | KEV | Yes | ✗ | July 17, 2026 | |
| CVE-2026-50751 | CRITICAL | Check Point | 9.3 | KEV | Yes | ✓ | June 8, 2026 | Patch |
| CVE-2025-32463 | CRITICAL | Sudo | 9.3 | KEV | Yes | ✓ | June 30, 2025 | Patch |
| CVE-2025-2775 | CRITICAL | SysAid | 9.3 | KEV | Yes | ✓ | May 7, 2025 | Patch |
| CVE-2025-22224 | CRITICAL | VMware | 9.3 | KEV | Yes | ✓ | March 4, 2025 | Patch |
| CVE-2024-42009 | CRITICAL | Roundcube | 9.3 | KEV | Yes | ✓ | August 5, 2024 | Patch |
| CVE-2026-86060 | CRITICAL | MikroTik | 9.2 | KEV | Yes | ✗ | September 5, 2026 | |
| CVE-2026-71362 | CRITICAL | Adobe | 9.1 | KEV | Yes | ✗ | August 11, 2026 | |
| CVE-2026-16232 | CRITICAL | Check Point | 9.1 | KEV | Yes | ✗ | July 22, 2026 | |
| CVE-2026-60137 | CRITICAL | WordPress | 9.1 | KEV | Yes | ✓ | July 17, 2026 | Patch |
| CVE-2026-55040 | CRITICAL | Microsoft | 9.1 | KEV | Yes | ✓ | July 14, 2026 | Patch |
| CVE-2026-0257 | CRITICAL | Palo Alto Networks | 9.1 | KEV | Yes | ✓ | May 13, 2026 | Patch |
| CVE-2025-12480 | CRITICAL | Gladinet | 9.1 | KEV | Yes | ✓ | November 10, 2025 | Patch |
| CVE-2025-54236 | CRITICAL | Adobe | 9.1 | KEV | Yes | ✓ | September 9, 2025 | Patch |
| CVE-2025-6205 | CRITICAL | Dassault Systèmes | 9.1 | KEV | Yes | ✓ | August 4, 2025 | Patch |
| CVE-2025-42999 | CRITICAL | SAP | 9.1 | KEV | Yes | ✓ | May 13, 2025 | Patch |
| CVE-2025-0108 | CRITICAL | Palo Alto Networks | 9.1 | KEV | Yes | ✓ | February 12, 2025 | Patch |
| CVE-2024-57727 | CRITICAL | SimpleHelp | 9.1 | KEV | Yes | ✓ | January 15, 2025 | Patch |
| CVE-2024-41713 | CRITICAL | Mitel | 9.1 | KEV | Yes | ✓ | October 21, 2024 | Patch |
| CVE-2024-9465 | CRITICAL | Palo Alto Networks | 9.1 | KEV | Yes | ✓ | October 9, 2024 | Patch |
| CVE-2024-8956 | CRITICAL | PTZOptics | 9.1 | KEV | Yes | ✓ | September 17, 2024 | Patch |
| CVE-2024-28987 | CRITICAL | SolarWinds | 9.1 | KEV | Yes | ✓ | August 21, 2024 | Patch |
| CVE-2024-38475 | CRITICAL | Apache | 9.1 | KEV | Yes | ✓ | July 1, 2024 | Patch |
| CVE-2026-72530 | CRITICAL | TrueConf | 9.0 | KEV | Yes | ✓ | August 19, 2026 | Patch |
| CVE-2025-48703 | CRITICAL | CWP | 9.0 | KEV | Yes | ✓ | September 19, 2025 | Patch |
| CVE-2025-53690 | CRITICAL | Sitecore | 9.0 | KEV | Yes | ✓ | September 3, 2025 | Patch |
| CVE-2025-5086 | CRITICAL | Dassault Systèmes | 9.0 | KEV | Yes | ✓ | June 2, 2025 | Patch |
| CVE-2025-22457 | CRITICAL | Ivanti | 9.0 | KEV | Yes | ✓ | April 3, 2025 | Patch |
| CVE-2025-0282 | CRITICAL | Ivanti | 9.0 | KEV | Yes | ✓ | January 8, 2025 | Patch |
| CVE-2023-34192 | CRITICAL | Synacor | 9.0 | KEV | Yes | ✓ | July 6, 2023 | Patch |
| CVE-2026-73570 | HIGH | Synacor | 8.9 | KEV | Yes | ✓ | August 13, 2026 | Patch |
| CVE-2026-58704 | HIGH | 8.8 | KEV | Yes | ✓ | September 15, 2026 | Patch |