KEV entries known to be used in ransomware campaigns
361 entries (20% of the catalog)
| CVE | Vendor / Product | Added | Due |
|---|---|---|---|
| CVE-2026-59310 RANSOMWARE | Broadcom VMware vCenter | 2026-08-18 | 2026-08-21 |
| CVE-2026-63077 RANSOMWARE | JetBrains TeamCity | 2026-08-05 | 2026-08-08 |
| CVE-2026-20316 RANSOMWARE | Cisco Secure Firewall Management Center (FMC) | 2026-07-29 | 2026-08-01 |
| CVE-2026-15409 RANSOMWARE | SonicWall SMA1000 Appliances | 2026-07-14 | 2026-07-17 |
| CVE-2026-15410 RANSOMWARE | SonicWall SMA1000 Appliances | 2026-07-14 | 2026-07-17 |
| CVE-2026-45659 RANSOMWARE | Microsoft SharePoint Server | 2026-07-01 | 2026-07-04 |
| CVE-2026-12569 RANSOMWARE | PTC Windchill and FlexPLM | 2026-06-25 | 2026-06-28 |
| CVE-2026-35273 RANSOMWARE | Oracle PeopleSoft Enterprise PeopleTools | 2026-06-12 | 2026-06-15 |
| CVE-2026-50751 RANSOMWARE | Check Point Security Gateway | 2026-06-08 | 2026-06-11 |
| CVE-2026-0257 RANSOMWARE | Palo Alto Networks PAN-OS | 2026-05-29 | 2026-06-01 |
| CVE-2026-48027 RANSOMWARE | Nx Nx Console | 2026-05-27 | 2026-06-10 |
| CVE-2026-45321 RANSOMWARE | TanStack TanStack | 2026-05-27 | 2026-06-10 |
| CVE-2026-41940 RANSOMWARE | WebPros cPanel & WHM and WP2 (WordPress Squared) | 2026-04-30 | 2026-05-03 |
| CVE-2024-1708 RANSOMWARE | ConnectWise ScreenConnect | 2026-04-28 | 2026-05-12 |
| CVE-2024-57728 RANSOMWARE | SimpleHelp SimpleHelp | 2026-04-24 | 2026-05-08 |
| CVE-2024-57726 RANSOMWARE | SimpleHelp SimpleHelp | 2026-04-24 | 2026-05-08 |
| CVE-2026-33825 RANSOMWARE | Microsoft Defender | 2026-04-22 | 2026-05-06 |
| CVE-2023-27351 RANSOMWARE | PaperCut NG/MF | 2026-04-20 | 2026-05-04 |
| CVE-2024-27199 RANSOMWARE | JetBrains TeamCity | 2026-04-20 | 2026-05-04 |
| CVE-2025-60710 RANSOMWARE | Microsoft Windows | 2026-04-13 | 2026-04-27 |
| CVE-2023-21529 RANSOMWARE | Microsoft Exchange Server | 2026-04-13 | 2026-04-27 |
| CVE-2026-20131 RANSOMWARE | Cisco Secure Firewall Management Center (FMC) | 2026-03-19 | 2026-03-22 |
| CVE-2025-26399 RANSOMWARE | SolarWinds Web Help Desk | 2026-03-09 | 2026-03-12 |
| CVE-2026-1731 RANSOMWARE | BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) | 2026-02-13 | 2026-02-16 |
| CVE-2026-24423 RANSOMWARE | SmarterTools SmarterMail | 2026-02-05 | 2026-02-26 |
| CVE-2025-52691 RANSOMWARE | SmarterTools SmarterMail | 2026-01-26 | 2026-02-16 |
| CVE-2026-23760 RANSOMWARE | SmarterTools SmarterMail | 2026-01-26 | 2026-02-16 |
| CVE-2025-14733 RANSOMWARE | WatchGuard Firebox | 2025-12-19 | 2025-12-26 |
| CVE-2025-55182 RANSOMWARE | Meta React Server Components | 2025-12-05 | 2025-12-12 |
| CVE-2025-61884 RANSOMWARE | Oracle E-Business Suite | 2025-10-20 | 2025-11-10 |
| CVE-2021-43226 RANSOMWARE | Microsoft Windows | 2025-10-06 | 2025-10-27 |
| CVE-2025-61882 RANSOMWARE | Oracle E-Business Suite | 2025-10-06 | 2025-10-27 |
| CVE-2025-10035 RANSOMWARE | Fortra GoAnywhere MFT | 2025-09-29 | 2025-10-20 |
| CVE-2025-8088 RANSOMWARE | RARLAB WinRAR | 2025-08-12 | 2025-09-02 |
| CVE-2025-49704 RANSOMWARE | Microsoft SharePoint | 2025-07-22 | 2025-07-23 |
| CVE-2025-49706 RANSOMWARE | Microsoft SharePoint | 2025-07-22 | 2025-07-23 |
| CVE-2025-53770 RANSOMWARE | Microsoft SharePoint | 2025-07-20 | 2025-07-21 |
| CVE-2025-5777 RANSOMWARE | Citrix NetScaler ADC and Gateway | 2025-07-10 | 2025-07-11 |
| CVE-2019-6693 RANSOMWARE | Fortinet FortiOS | 2025-06-25 | 2025-07-16 |
| CVE-2025-42999 RANSOMWARE | SAP NetWeaver | 2025-05-15 | 2025-06-05 |
| CVE-2025-3248 RANSOMWARE | Langflow Langflow | 2025-05-05 | 2025-05-26 |
| CVE-2025-31324 RANSOMWARE | SAP NetWeaver | 2025-04-29 | 2025-05-20 |
| CVE-2025-29824 RANSOMWARE | Microsoft Windows | 2025-04-08 | 2025-04-29 |
| CVE-2025-31161 RANSOMWARE | CrushFTP CrushFTP | 2025-04-07 | 2025-04-28 |
| CVE-2025-22457 RANSOMWARE | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-04-04 | 2025-04-11 |
| CVE-2025-24472 RANSOMWARE | Fortinet FortiOS and FortiProxy | 2025-03-18 | 2025-04-08 |
| CVE-2025-26633 RANSOMWARE | Microsoft Windows | 2025-03-11 | 2025-04-01 |
| CVE-2025-22225 RANSOMWARE | VMware ESXi | 2025-03-04 | 2025-03-25 |
| CVE-2018-8639 RANSOMWARE | Microsoft Windows | 2025-03-03 | 2025-03-24 |
| CVE-2024-53704 RANSOMWARE | SonicWall SonicOS | 2025-02-18 | 2025-03-11 |
| CVE-2024-57727 RANSOMWARE | SimpleHelp SimpleHelp | 2025-02-13 | 2025-03-06 |
| CVE-2020-29574 RANSOMWARE | Sophos CyberoamOS | 2025-02-06 | 2025-02-27 |
| CVE-2025-23006 RANSOMWARE | SonicWall SMA1000 Appliances | 2025-01-24 | 2025-02-14 |
| CVE-2024-55591 RANSOMWARE | Fortinet FortiOS and FortiProxy | 2025-01-14 | 2025-01-21 |
| CVE-2023-48365 RANSOMWARE | Qlik Sense | 2025-01-13 | 2025-02-03 |
| CVE-2025-0282 RANSOMWARE | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-01-08 | 2025-01-15 |
| CVE-2024-55550 RANSOMWARE | Mitel MiCollab | 2025-01-07 | 2025-01-28 |
| CVE-2024-41713 RANSOMWARE | Mitel MiCollab | 2025-01-07 | 2025-01-28 |
| CVE-2024-55956 RANSOMWARE | Cleo Multiple Products | 2024-12-17 | 2025-01-07 |
| CVE-2024-50623 RANSOMWARE | Cleo Multiple Products | 2024-12-13 | 2025-01-03 |
| CVE-2024-51378 RANSOMWARE | CyberPersons CyberPanel | 2024-12-04 | 2024-12-25 |
| CVE-2024-11667 RANSOMWARE | Zyxel Multiple Firewalls | 2024-12-03 | 2024-12-24 |
| CVE-2023-28461 RANSOMWARE | Array Networks AG/vxAG ArrayOS | 2024-11-25 | 2024-12-16 |
| CVE-2024-9474 RANSOMWARE | Palo Alto Networks PAN-OS | 2024-11-18 | 2024-12-09 |
| CVE-2024-0012 RANSOMWARE | Palo Alto Networks PAN-OS | 2024-11-18 | 2024-12-09 |
| CVE-2024-49039 RANSOMWARE | Microsoft Windows | 2024-11-12 | 2024-12-03 |
| CVE-2024-51567 RANSOMWARE | CyberPersons CyberPanel | 2024-11-07 | 2024-11-28 |
| CVE-2024-38094 RANSOMWARE | Microsoft SharePoint | 2024-10-22 | 2024-11-12 |
| CVE-2024-40711 RANSOMWARE | Veeam Backup & Replication | 2024-10-17 | 2024-11-07 |
| CVE-2024-9680 RANSOMWARE | Mozilla Firefox | 2024-10-15 | 2024-11-05 |
| CVE-2024-30088 RANSOMWARE | Microsoft Windows | 2024-10-15 | 2024-11-05 |
| CVE-2020-0618 RANSOMWARE | Microsoft SQL Server | 2024-09-18 | 2024-10-09 |
| CVE-2024-6670 RANSOMWARE | Progress WhatsUp Gold | 2024-09-16 | 2024-10-07 |
| CVE-2024-40766 RANSOMWARE | SonicWall SonicOS | 2024-09-09 | 2024-09-30 |
| CVE-2017-1000253 RANSOMWARE | Linux Kernel | 2024-09-09 | 2024-09-30 |
| CVE-2024-23897 RANSOMWARE | Jenkins Jenkins Command Line Interface (CLI) | 2024-08-19 | 2024-09-09 |
| CVE-2024-37085 RANSOMWARE | VMware ESXi | 2024-07-30 | 2024-08-20 |
| CVE-2024-23692 RANSOMWARE | Rejetto HTTP File Server | 2024-07-09 | 2024-07-30 |
| CVE-2024-26169 RANSOMWARE | Microsoft Windows | 2024-06-13 | 2024-07-04 |
| CVE-2024-4577 RANSOMWARE | PHP Group PHP | 2024-06-12 | 2024-07-03 |
| CVE-2024-1086 RANSOMWARE | Linux Kernel | 2024-05-30 | 2024-06-20 |
| CVE-2024-24919 RANSOMWARE | Check Point Quantum Security Gateways | 2024-05-30 | 2024-06-20 |
| CVE-2023-43208 RANSOMWARE | NextGen Healthcare Mirth Connect | 2024-05-20 | 2024-06-10 |
| CVE-2024-30051 RANSOMWARE | Microsoft DWM Core Library | 2024-05-14 | 2024-06-04 |
| CVE-2024-3400 RANSOMWARE | Palo Alto Networks PAN-OS | 2024-04-12 | 2024-04-19 |
| CVE-2023-24955 RANSOMWARE | Microsoft SharePoint Server | 2024-03-26 | 2024-04-16 |
| CVE-2021-44529 RANSOMWARE | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) | 2024-03-25 | 2024-04-15 |
| CVE-2023-48788 RANSOMWARE | Fortinet FortiClient EMS | 2024-03-25 | 2024-04-15 |
| CVE-2024-27198 RANSOMWARE | JetBrains TeamCity | 2024-03-07 | 2024-03-28 |
| CVE-2024-21338 RANSOMWARE | Microsoft Windows | 2024-03-04 | 2024-03-25 |
| CVE-2024-1709 RANSOMWARE | ConnectWise ScreenConnect | 2024-02-22 | 2024-02-29 |
| CVE-2020-3259 RANSOMWARE | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2024-02-15 | 2024-03-07 |
| CVE-2024-21412 RANSOMWARE | Microsoft Windows | 2024-02-13 | 2024-03-05 |
| CVE-2024-21762 RANSOMWARE | Fortinet FortiOS | 2024-02-09 | 2024-02-16 |
| CVE-2024-21893 RANSOMWARE | Ivanti Connect Secure, Policy Secure, and Neurons | 2024-01-31 | 2024-02-02 |
| CVE-2023-22527 RANSOMWARE | Atlassian Confluence Data Center and Server | 2024-01-24 | 2024-02-14 |
| CVE-2023-35082 RANSOMWARE | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | 2024-01-18 | 2024-02-08 |
| CVE-2023-29357 RANSOMWARE | Microsoft SharePoint Server | 2024-01-10 | 2024-01-31 |
| CVE-2023-46805 RANSOMWARE | Ivanti Connect Secure and Policy Secure | 2024-01-10 | 2024-01-22 |
| CVE-2024-21887 RANSOMWARE | Ivanti Connect Secure and Policy Secure | 2024-01-10 | 2024-01-22 |
| CVE-2023-29300 RANSOMWARE | Adobe ColdFusion | 2024-01-08 | 2024-01-29 |
| CVE-2023-38203 RANSOMWARE | Adobe ColdFusion | 2024-01-08 | 2024-01-29 |
| CVE-2023-41266 RANSOMWARE | Qlik Sense | 2023-12-07 | 2023-12-28 |
| CVE-2023-41265 RANSOMWARE | Qlik Sense | 2023-12-07 | 2023-12-28 |
| CVE-2023-47246 RANSOMWARE | SysAid SysAid Server | 2023-11-13 | 2023-12-04 |
| CVE-2023-22518 RANSOMWARE | Atlassian Confluence Data Center and Server | 2023-11-07 | 2023-11-28 |
| CVE-2023-46604 RANSOMWARE | Apache ActiveMQ | 2023-11-02 | 2023-11-23 |
| CVE-2023-46747 RANSOMWARE | F5 BIG-IP Configuration Utility | 2023-10-31 | 2023-11-21 |
| CVE-2023-4966 RANSOMWARE | Citrix NetScaler ADC and NetScaler Gateway | 2023-10-18 | 2023-11-08 |
| CVE-2023-22515 RANSOMWARE | Atlassian Confluence Data Center and Server | 2023-10-05 | 2023-10-13 |
| CVE-2023-40044 RANSOMWARE | Progress WS_FTP Server | 2023-10-05 | 2023-10-26 |
| CVE-2023-42793 RANSOMWARE | JetBrains TeamCity | 2023-10-04 | 2023-10-25 |
| CVE-2017-6884 RANSOMWARE | Zyxel EMG2926 Routers | 2023-09-18 | 2023-10-09 |
| CVE-2021-3129 RANSOMWARE | Laravel Ignition | 2023-09-18 | 2023-10-09 |
| CVE-2023-20269 RANSOMWARE | Cisco Adaptive Security Appliance and Firepower Threat Defense | 2023-09-13 | 2023-10-04 |
| CVE-2023-38831 RANSOMWARE | RARLAB WinRAR | 2023-08-24 | 2023-09-14 |
| CVE-2023-38035 RANSOMWARE | Ivanti Sentry | 2023-08-22 | 2023-09-12 |
| CVE-2023-27532 RANSOMWARE | Veeam Backup & Replication | 2023-08-22 | 2023-09-12 |
| CVE-2023-35078 RANSOMWARE | Ivanti Endpoint Manager Mobile (EPMM) | 2023-07-25 | 2023-08-15 |
| CVE-2023-3519 RANSOMWARE | Citrix NetScaler ADC and NetScaler Gateway | 2023-07-19 | 2023-08-09 |
| CVE-2023-36884 RANSOMWARE | Microsoft Windows | 2023-07-17 | 2023-08-29 |
| CVE-2022-31199 RANSOMWARE | Netwrix Auditor | 2023-07-11 | 2023-08-01 |
| CVE-2023-27997 RANSOMWARE | Fortinet FortiOS and FortiProxy SSL-VPN | 2023-06-13 | 2023-07-04 |
| CVE-2023-34362 RANSOMWARE | Progress MOVEit Transfer | 2023-06-02 | 2023-06-23 |
| CVE-2021-45046 RANSOMWARE | Apache Log4j2 | 2023-05-01 | 2023-05-22 |
| CVE-2023-27350 RANSOMWARE | PaperCut MF/NG | 2023-04-21 | 2023-05-12 |
| CVE-2023-28252 RANSOMWARE | Microsoft Windows | 2023-04-11 | 2023-05-02 |
| CVE-2021-27876 RANSOMWARE | Veritas Backup Exec Agent | 2023-04-07 | 2023-04-28 |
| CVE-2021-27877 RANSOMWARE | Veritas Backup Exec Agent | 2023-04-07 | 2023-04-28 |
| CVE-2021-27878 RANSOMWARE | Veritas Backup Exec Agent | 2023-04-07 | 2023-04-28 |
| CVE-2019-1388 RANSOMWARE | Microsoft Windows | 2023-04-07 | 2023-04-28 |
| CVE-2017-7494 RANSOMWARE | Samba Samba | 2023-03-30 | 2023-04-20 |
| CVE-2023-24880 RANSOMWARE | Microsoft Windows | 2023-03-14 | 2023-04-04 |
| CVE-2022-36537 RANSOMWARE | ZK Framework AuUploader | 2023-02-27 | 2023-03-20 |
| CVE-2022-47986 RANSOMWARE | IBM Aspera Faspex | 2023-02-21 | 2023-03-14 |
| CVE-2022-41223 RANSOMWARE | Mitel MiVoice Connect | 2023-02-21 | 2023-03-14 |
| CVE-2022-40765 RANSOMWARE | Mitel MiVoice Connect | 2023-02-21 | 2023-03-14 |
| CVE-2023-23376 RANSOMWARE | Microsoft Windows | 2023-02-14 | 2023-03-07 |
| CVE-2015-2291 RANSOMWARE | Intel Ethernet Diagnostics Driver for Windows | 2023-02-10 | 2023-03-03 |
| CVE-2022-24990 RANSOMWARE | TerraMaster TerraMaster OS | 2023-02-10 | 2023-03-03 |
| CVE-2023-0669 RANSOMWARE | Fortra GoAnywhere MFT | 2023-02-10 | 2023-03-03 |
| CVE-2022-21587 RANSOMWARE | Oracle E-Business Suite | 2023-02-02 | 2023-02-23 |
| CVE-2017-11357 RANSOMWARE | Telerik User Interface (UI) for ASP.NET AJAX | 2023-01-26 | 2023-02-16 |
| CVE-2022-47966 RANSOMWARE | Zoho ManageEngine | 2023-01-23 | 2023-02-13 |
| CVE-2022-41080 RANSOMWARE | Microsoft Exchange Server | 2023-01-10 | 2023-01-31 |
| CVE-2022-42475 RANSOMWARE | Fortinet FortiOS | 2022-12-13 | 2023-01-03 |
| CVE-2022-44698 RANSOMWARE | Microsoft Defender | 2022-12-13 | 2023-01-03 |
| CVE-2022-26500 RANSOMWARE | Veeam Backup & Replication | 2022-12-13 | 2023-01-03 |
| CVE-2022-26501 RANSOMWARE | Veeam Backup & Replication | 2022-12-13 | 2023-01-03 |
| CVE-2022-41091 RANSOMWARE | Microsoft Windows | 2022-11-08 | 2022-12-09 |
| CVE-2022-41073 RANSOMWARE | Microsoft Windows | 2022-11-08 | 2022-12-09 |
| CVE-2020-3433 RANSOMWARE | Cisco AnyConnect Secure | 2022-10-24 | 2022-11-14 |
| CVE-2020-3153 RANSOMWARE | Cisco AnyConnect Secure | 2022-10-24 | 2022-11-14 |
| CVE-2018-19323 RANSOMWARE | GIGABYTE Multiple Products | 2022-10-24 | 2022-11-14 |
| CVE-2018-19322 RANSOMWARE | GIGABYTE Multiple Products | 2022-10-24 | 2022-11-14 |
| CVE-2018-19321 RANSOMWARE | GIGABYTE Multiple Products | 2022-10-24 | 2022-11-14 |
| CVE-2018-19320 RANSOMWARE | GIGABYTE Multiple Products | 2022-10-24 | 2022-11-14 |
| CVE-2022-41352 RANSOMWARE | Synacor Zimbra Collaboration Suite (ZCS) | 2022-10-20 | 2022-11-10 |
| CVE-2022-40684 RANSOMWARE | Fortinet Multiple Products | 2022-10-11 | 2022-11-01 |
| CVE-2022-41082 RANSOMWARE | Microsoft Exchange Server | 2022-09-30 | 2022-10-21 |
| CVE-2022-41040 RANSOMWARE | Microsoft Exchange Server | 2022-09-30 | 2022-10-21 |
| CVE-2022-37969 RANSOMWARE | Microsoft Windows | 2022-09-14 | 2022-10-05 |
| CVE-2022-27593 RANSOMWARE | QNAP Photo Station | 2022-09-08 | 2022-09-29 |
| CVE-2018-6530 RANSOMWARE | D-Link Multiple Routers | 2022-09-08 | 2022-09-29 |
| CVE-2018-13374 RANSOMWARE | Fortinet FortiOS and FortiADC | 2022-09-08 | 2022-09-29 |
| CVE-2022-26352 RANSOMWARE | dotCMS dotCMS | 2022-08-25 | 2022-09-15 |
| CVE-2022-2294 RANSOMWARE | WebRTC WebRTC | 2022-08-25 | 2022-09-15 |
| CVE-2022-27925 RANSOMWARE | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 2022-09-01 |
| CVE-2022-37042 RANSOMWARE | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 2022-09-01 |
| CVE-2022-30333 RANSOMWARE | RARLAB UnRAR | 2022-08-09 | 2022-08-30 |
| CVE-2022-27924 RANSOMWARE | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-04 | 2022-08-25 |
| CVE-2022-29499 RANSOMWARE | Mitel MiVoice Connect | 2022-06-27 | 2022-07-18 |
| CVE-2021-4034 RANSOMWARE | Red Hat Polkit | 2022-06-27 | 2022-07-18 |
| CVE-2022-30190 RANSOMWARE | Microsoft Windows | 2022-06-14 | 2022-07-05 |
| CVE-2019-7195 RANSOMWARE | QNAP Photo Station | 2022-06-08 | 2022-06-22 |
| CVE-2019-7194 RANSOMWARE | QNAP Photo Station | 2022-06-08 | 2022-06-22 |
| CVE-2019-7193 RANSOMWARE | QNAP QTS | 2022-06-08 | 2022-06-22 |
| CVE-2019-7192 RANSOMWARE | QNAP Photo Station | 2022-06-08 | 2022-06-22 |
| CVE-2022-26134 RANSOMWARE | Atlassian Confluence Server/Data Center | 2022-06-02 | 2022-06-06 |
| CVE-2016-0034 RANSOMWARE | Microsoft Silverlight | 2022-05-25 | 2022-06-15 |
| CVE-2013-3993 RANSOMWARE | IBM InfoSphere BigInsights | 2022-05-25 | 2022-06-15 |
| CVE-2013-0431 RANSOMWARE | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 2022-06-15 |
| CVE-2013-0422 RANSOMWARE | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 2022-06-15 |
| CVE-2013-0074 RANSOMWARE | Microsoft Silverlight | 2022-05-25 | 2022-06-15 |
| CVE-2012-1710 RANSOMWARE | Oracle Fusion Middleware | 2022-05-25 | 2022-06-15 |
| CVE-2010-1428 RANSOMWARE | Red Hat JBoss | 2022-05-25 | 2022-06-15 |
| CVE-2010-0738 RANSOMWARE | Red Hat JBoss | 2022-05-25 | 2022-06-15 |
| CVE-2018-19953 RANSOMWARE | QNAP Network Attached Storage (NAS) | 2022-05-24 | 2022-06-14 |
| CVE-2018-19949 RANSOMWARE | QNAP Network Attached Storage (NAS) | 2022-05-24 | 2022-06-14 |
| CVE-2018-19943 RANSOMWARE | QNAP Network Attached Storage (NAS) | 2022-05-24 | 2022-06-14 |
| CVE-2017-0147 RANSOMWARE | Microsoft SMBv1 server | 2022-05-24 | 2022-06-14 |
| CVE-2017-18362 RANSOMWARE | Kaseya Virtual System/Server Administrator (VSA) | 2022-05-24 | 2022-06-14 |
| CVE-2016-3351 RANSOMWARE | Microsoft Internet Explorer and Edge | 2022-05-24 | 2022-06-14 |
| CVE-2020-0638 RANSOMWARE | Microsoft Update Notification Manager | 2022-05-23 | 2022-06-13 |
| CVE-2019-1385 RANSOMWARE | Microsoft Windows | 2022-05-23 | 2022-06-13 |
| CVE-2019-1130 RANSOMWARE | Microsoft Windows | 2022-05-23 | 2022-06-13 |
| CVE-2022-1388 RANSOMWARE | F5 BIG-IP | 2022-05-10 | 2022-05-31 |
| CVE-2022-29464 RANSOMWARE | WSO2 Multiple Products | 2022-04-25 | 2022-05-16 |
| CVE-2018-6882 RANSOMWARE | Synacor Zimbra Collaboration Suite (ZCS) | 2022-04-19 | 2022-05-10 |
| CVE-2019-16057 RANSOMWARE | D-Link DNS-320 Storage Device | 2022-04-15 | 2022-05-06 |
| CVE-2022-22954 RANSOMWARE | VMware Workspace ONE Access and Identity Manager | 2022-04-14 | 2022-05-05 |
| CVE-2022-24521 RANSOMWARE | Microsoft Windows | 2022-04-13 | 2022-05-04 |
| CVE-2018-7602 RANSOMWARE | Drupal Core | 2022-04-13 | 2022-05-04 |
| CVE-2018-20753 RANSOMWARE | Kaseya Virtual System/Server Administrator (VSA) | 2022-04-13 | 2022-05-04 |
| CVE-2021-42287 RANSOMWARE | Microsoft Active Directory | 2022-04-11 | 2022-05-02 |
| CVE-2021-42278 RANSOMWARE | Microsoft Active Directory | 2022-04-11 | 2022-05-02 |
| CVE-2017-0148 RANSOMWARE | Microsoft SMBv1 server | 2022-04-06 | 2022-04-27 |
| CVE-2021-28799 RANSOMWARE | QNAP Network Attached Storage (NAS) | 2022-03-31 | 2022-04-21 |
| CVE-2018-10562 RANSOMWARE | Dasan Gigabit Passive Optical Network (GPON) Routers | 2022-03-31 | 2022-04-21 |
| CVE-2021-38646 RANSOMWARE | Microsoft Office | 2022-03-28 | 2022-04-18 |
| CVE-2021-26085 RANSOMWARE | Atlassian Confluence Server | 2022-03-28 | 2022-04-18 |
| CVE-2021-20028 RANSOMWARE | SonicWall Secure Remote Access (SRA) | 2022-03-28 | 2022-04-18 |
| CVE-2018-8440 RANSOMWARE | Microsoft Windows | 2022-03-28 | 2022-04-18 |
| CVE-2018-8406 RANSOMWARE | Microsoft DirectX Graphics Kernel (DXGKRNL) | 2022-03-28 | 2022-04-18 |
| CVE-2018-8405 RANSOMWARE | Microsoft DirectX Graphics Kernel (DXGKRNL) | 2022-03-28 | 2022-04-18 |
| CVE-2017-0213 RANSOMWARE | Microsoft Windows | 2022-03-28 | 2022-04-18 |
| CVE-2016-0189 RANSOMWARE | Microsoft Internet Explorer | 2022-03-28 | 2022-04-18 |
| CVE-2016-0151 RANSOMWARE | Microsoft Client-Server Run-time Subsystem (CSRSS) | 2022-03-28 | 2022-04-18 |
| CVE-2013-2551 RANSOMWARE | Microsoft Internet Explorer | 2022-03-28 | 2022-04-18 |
| CVE-2013-2465 RANSOMWARE | Oracle Java SE | 2022-03-28 | 2022-04-18 |
| CVE-2022-21999 RANSOMWARE | Microsoft Windows | 2022-03-25 | 2022-04-15 |
| CVE-2021-42237 RANSOMWARE | Sitecore XP | 2022-03-25 | 2022-04-15 |
| CVE-2021-22941 RANSOMWARE | Citrix ShareFile | 2022-03-25 | 2022-04-15 |
| CVE-2020-2021 RANSOMWARE | Palo Alto Networks PAN-OS | 2022-03-25 | 2022-04-15 |
| CVE-2019-15107 RANSOMWARE | Webmin Webmin | 2022-03-25 | 2022-04-15 |
| CVE-2019-11043 RANSOMWARE | PHP FastCGI Process Manager (FPM) | 2022-03-25 | 2022-04-15 |
| CVE-2018-1273 RANSOMWARE | VMware Tanzu Spring Data Commons | 2022-03-25 | 2022-04-15 |
| CVE-2018-11138 RANSOMWARE | Quest KACE System Management Appliance | 2022-03-25 | 2022-04-15 |
| CVE-2017-12615 RANSOMWARE | Apache Tomcat | 2022-03-25 | 2022-04-15 |
| CVE-2017-0146 RANSOMWARE | Microsoft Windows | 2022-03-25 | 2022-04-15 |
| CVE-2010-2861 RANSOMWARE | Adobe ColdFusion | 2022-03-25 | 2022-04-15 |
| CVE-2020-5135 RANSOMWARE | SonicWall SonicOS | 2022-03-15 | 2022-04-05 |
| CVE-2019-1405 RANSOMWARE | Microsoft Windows | 2022-03-15 | 2022-04-05 |
| CVE-2019-1322 RANSOMWARE | Microsoft Windows | 2022-03-15 | 2022-04-05 |
| CVE-2019-1315 RANSOMWARE | Microsoft Windows | 2022-03-15 | 2022-04-05 |
| CVE-2019-1253 RANSOMWARE | Microsoft Windows | 2022-03-15 | 2022-04-05 |
| CVE-2019-1129 RANSOMWARE | Microsoft Windows | 2022-03-15 | 2022-04-05 |
| CVE-2019-1069 RANSOMWARE | Microsoft Task Scheduler | 2022-03-15 | 2022-04-05 |
| CVE-2019-1064 RANSOMWARE | Microsoft Windows | 2022-03-15 | 2022-04-05 |
| CVE-2019-0841 RANSOMWARE | Microsoft Windows | 2022-03-15 | 2022-04-05 |
| CVE-2019-0543 RANSOMWARE | Microsoft Windows | 2022-03-15 | 2022-04-05 |
| CVE-2018-8120 RANSOMWARE | Microsoft Win32k | 2022-03-15 | 2022-04-05 |
| CVE-2017-0101 RANSOMWARE | Microsoft Windows | 2022-03-15 | 2022-04-05 |
| CVE-2016-3309 RANSOMWARE | Microsoft Windows | 2022-03-15 | 2022-04-05 |
| CVE-2015-2546 RANSOMWARE | Microsoft Win32k | 2022-03-15 | 2022-04-05 |
| CVE-2009-3960 RANSOMWARE | Adobe BlazeDS | 2022-03-07 | 2022-09-07 |
| CVE-2021-41379 RANSOMWARE | Microsoft Windows | 2022-03-03 | 2022-03-17 |
| CVE-2018-8581 RANSOMWARE | Microsoft Exchange Server | 2022-03-03 | 2022-03-17 |
| CVE-2016-4117 RANSOMWARE | Adobe Flash Player | 2022-03-03 | 2022-03-24 |
| CVE-2016-1019 RANSOMWARE | Adobe Flash Player | 2022-03-03 | 2022-03-24 |
| CVE-2016-0099 RANSOMWARE | Microsoft Windows | 2022-03-03 | 2022-03-24 |
| CVE-2015-7645 RANSOMWARE | Adobe Flash Player | 2022-03-03 | 2022-03-24 |
| CVE-2015-1701 RANSOMWARE | Microsoft Win32k | 2022-03-03 | 2022-03-24 |
| CVE-2012-4681 RANSOMWARE | Oracle Java SE | 2022-03-03 | 2022-03-24 |
| CVE-2012-1723 RANSOMWARE | Oracle Java SE | 2022-03-03 | 2022-03-24 |
| CVE-2012-0507 RANSOMWARE | Oracle Java SE | 2022-03-03 | 2022-03-24 |
| CVE-2010-0188 RANSOMWARE | Adobe Reader and Acrobat | 2022-03-03 | 2022-03-24 |
| CVE-2008-2992 RANSOMWARE | Adobe Acrobat and Reader | 2022-03-03 | 2022-03-24 |
| CVE-2022-24682 RANSOMWARE | Synacor Zimbra Collaborate Suite (ZCS) | 2022-02-25 | 2022-03-11 |
| CVE-2019-0752 RANSOMWARE | Microsoft Internet Explorer | 2022-02-15 | 2022-08-15 |
| CVE-2018-8174 RANSOMWARE | Microsoft Windows | 2022-02-15 | 2022-08-15 |
| CVE-2018-20250 RANSOMWARE | RARLAB WinRAR | 2022-02-15 | 2022-08-15 |
| CVE-2018-15982 RANSOMWARE | Adobe Flash Player | 2022-02-15 | 2022-08-15 |
| CVE-2020-0796 RANSOMWARE | Microsoft SMBv3 | 2022-02-10 | 2022-08-10 |
| CVE-2017-10271 RANSOMWARE | Oracle WebLogic Server | 2022-02-10 | 2022-08-10 |
| CVE-2017-0145 RANSOMWARE | Microsoft SMBv1 | 2022-02-10 | 2022-08-10 |
| CVE-2017-0144 RANSOMWARE | Microsoft SMBv1 | 2022-02-10 | 2022-08-10 |
| CVE-2022-21882 RANSOMWARE | Microsoft Win32k | 2022-02-04 | 2022-02-18 |
| CVE-2021-20038 RANSOMWARE | SonicWall SMA 100 Appliances | 2022-01-28 | 2022-02-11 |
| CVE-2020-0787 RANSOMWARE | Microsoft Windows | 2022-01-28 | 2022-07-28 |
| CVE-2018-8453 RANSOMWARE | Microsoft Win32k | 2022-01-21 | 2022-07-21 |
| CVE-2021-21975 RANSOMWARE | VMware vRealize Operations Manager API | 2022-01-18 | 2022-02-01 |
| CVE-2019-1458 RANSOMWARE | Microsoft Win32k | 2022-01-10 | 2022-07-10 |
| CVE-2019-2725 RANSOMWARE | Oracle WebLogic Server | 2022-01-10 | 2022-07-10 |
| CVE-2018-13382 RANSOMWARE | Fortinet FortiOS and FortiProxy | 2022-01-10 | 2022-07-10 |
| CVE-2018-13383 RANSOMWARE | Fortinet FortiOS and FortiProxy | 2022-01-10 | 2022-07-10 |
| CVE-2019-1579 RANSOMWARE | Palo Alto Networks PAN-OS | 2022-01-10 | 2022-07-10 |
| CVE-2021-43890 RANSOMWARE | Microsoft Windows | 2021-12-15 | 2021-12-29 |
| CVE-2017-12149 RANSOMWARE | Red Hat JBoss Application Server | 2021-12-10 | 2022-06-10 |
| CVE-2021-44228 RANSOMWARE | Apache Log4j2 | 2021-12-10 | 2021-12-24 |
| CVE-2021-40438 RANSOMWARE | Apache Apache | 2021-12-01 | 2021-12-15 |
| CVE-2021-40449 RANSOMWARE | Microsoft Windows | 2021-11-17 | 2021-12-01 |
| CVE-2021-42321 RANSOMWARE | Microsoft Exchange | 2021-11-17 | 2021-12-01 |
| CVE-2021-27104 RANSOMWARE | Accellion FTA | 2021-11-03 | 2021-11-17 |
| CVE-2021-27102 RANSOMWARE | Accellion FTA | 2021-11-03 | 2021-11-17 |
| CVE-2021-27101 RANSOMWARE | Accellion FTA | 2021-11-03 | 2021-11-17 |
| CVE-2021-27103 RANSOMWARE | Accellion FTA | 2021-11-03 | 2021-11-17 |
| CVE-2018-4878 RANSOMWARE | Adobe Flash Player | 2021-11-03 | 2022-05-03 |
| CVE-2021-42013 RANSOMWARE | Apache HTTP Server | 2021-11-03 | 2021-11-17 |
| CVE-2021-41773 RANSOMWARE | Apache HTTP Server | 2021-11-03 | 2021-11-17 |
| CVE-2017-5638 RANSOMWARE | Apache Struts | 2021-11-03 | 2022-05-03 |
| CVE-2021-26084 RANSOMWARE | Atlassian Confluence Server and Data Center | 2021-11-03 | 2021-11-17 |
| CVE-2019-11580 RANSOMWARE | Atlassian Crowd and Crowd Data Center | 2021-11-03 | 2022-05-03 |
| CVE-2019-3396 RANSOMWARE | Atlassian Confluence Server and Data Server | 2021-11-03 | 2022-05-03 |
| CVE-2021-42258 RANSOMWARE | BQE BillQuick Web Suite | 2021-11-03 | 2021-11-17 |
| CVE-2020-3580 RANSOMWARE | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | 2021-11-03 | 2022-05-03 |
| CVE-2019-13608 RANSOMWARE | Citrix StoreFront Server | 2021-11-03 | 2022-05-03 |
| CVE-2019-19781 RANSOMWARE | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 2022-05-03 |
| CVE-2019-11634 RANSOMWARE | Citrix Workspace Application and Receiver for Windows | 2021-11-03 | 2022-05-03 |
| CVE-2017-9822 RANSOMWARE | DotNetNuke (DNN) DotNetNuke (DNN) | 2021-11-03 | 2022-05-03 |
| CVE-2018-7600 RANSOMWARE | Drupal Drupal Core | 2021-11-03 | 2022-05-03 |
| CVE-2021-22205 RANSOMWARE | GitLab Community and Enterprise Editions | 2021-11-03 | 2021-11-17 |
| CVE-2018-6789 RANSOMWARE | Exim Exim | 2021-11-03 | 2022-05-03 |
| CVE-2020-5902 RANSOMWARE | F5 BIG-IP | 2021-11-03 | 2022-05-03 |
| CVE-2021-22986 RANSOMWARE | F5 BIG-IP and BIG-IQ Centralized Management | 2021-11-03 | 2021-11-17 |
| CVE-2021-35464 RANSOMWARE | ForgeRock Access Management (AM) | 2021-11-03 | 2021-11-17 |
| CVE-2019-5591 RANSOMWARE | Fortinet FortiOS | 2021-11-03 | 2022-05-03 |
| CVE-2020-12812 RANSOMWARE | Fortinet FortiOS | 2021-11-03 | 2022-05-03 |
| CVE-2018-13379 RANSOMWARE | Fortinet FortiOS | 2021-11-03 | 2022-05-03 |
| CVE-2021-30116 RANSOMWARE | Kaseya Virtual System/Server Administrator (VSA) | 2021-11-03 | 2021-11-17 |
| CVE-2014-1812 RANSOMWARE | Microsoft Windows | 2021-11-03 | 2022-05-03 |
| CVE-2021-38647 RANSOMWARE | Microsoft Open Management Infrastructure (OMI) | 2021-11-03 | 2021-11-17 |
| CVE-2016-0167 RANSOMWARE | Microsoft Win32k | 2021-11-03 | 2022-05-03 |
| CVE-2020-0878 RANSOMWARE | Microsoft Edge and Internet Explorer | 2021-11-03 | 2022-05-03 |
| CVE-2021-34523 RANSOMWARE | Microsoft Exchange Server | 2021-11-03 | 2021-11-17 |
| CVE-2020-0688 RANSOMWARE | Microsoft Exchange Server | 2021-11-03 | 2022-05-03 |
| CVE-2017-0143 RANSOMWARE | Microsoft Windows | 2021-11-03 | 2022-05-03 |
| CVE-2016-7255 RANSOMWARE | Microsoft Win32k | 2021-11-03 | 2022-05-03 |
| CVE-2019-0708 RANSOMWARE | Microsoft Remote Desktop Services | 2021-11-03 | 2022-05-03 |
| CVE-2021-34473 RANSOMWARE | Microsoft Exchange Server | 2021-11-03 | 2021-11-17 |
| CVE-2021-1732 RANSOMWARE | Microsoft Win32k | 2021-11-03 | 2021-11-17 |
| CVE-2021-34527 RANSOMWARE | Microsoft Windows | 2021-11-03 | 2022-05-03 |
| CVE-2021-31207 RANSOMWARE | Microsoft Exchange Server | 2021-11-03 | 2021-11-17 |
| CVE-2019-0803 RANSOMWARE | Microsoft Win32k | 2021-11-03 | 2022-05-03 |
| CVE-2021-26411 RANSOMWARE | Microsoft Internet Explorer | 2021-11-03 | 2021-11-17 |
| CVE-2019-0859 RANSOMWARE | Microsoft Win32k | 2021-11-03 | 2022-05-03 |
| CVE-2021-40444 RANSOMWARE | Microsoft MSHTML | 2021-11-03 | 2021-11-17 |
| CVE-2021-36942 RANSOMWARE | Microsoft Windows | 2021-11-03 | 2021-11-17 |
| CVE-2019-1215 RANSOMWARE | Microsoft Windows | 2021-11-03 | 2022-05-03 |
| CVE-2018-0802 RANSOMWARE | Microsoft Office | 2021-11-03 | 2022-05-03 |
| CVE-2012-0158 RANSOMWARE | Microsoft MSCOMCTL.OCX | 2021-11-03 | 2022-05-03 |
| CVE-2017-11882 RANSOMWARE | Microsoft Office | 2021-11-03 | 2022-05-03 |
| CVE-2019-1367 RANSOMWARE | Microsoft Internet Explorer | 2021-11-03 | 2022-05-03 |
| CVE-2017-0199 RANSOMWARE | Microsoft Office and WordPad | 2021-11-03 | 2022-05-03 |
| CVE-2020-0968 RANSOMWARE | Microsoft Internet Explorer | 2021-11-03 | 2022-05-03 |
| CVE-2020-1472 RANSOMWARE | Microsoft Netlogon | 2021-11-03 | 2022-05-03 |
| CVE-2021-26855 RANSOMWARE | Microsoft Exchange Server | 2021-11-03 | 2022-05-03 |
| CVE-2021-26858 RANSOMWARE | Microsoft Exchange Server | 2021-11-03 | 2022-05-03 |
| CVE-2021-27065 RANSOMWARE | Microsoft Exchange Server | 2021-11-03 | 2022-05-03 |
| CVE-2021-1675 RANSOMWARE | Microsoft Windows | 2021-11-03 | 2021-11-17 |
| CVE-2019-0604 RANSOMWARE | Microsoft SharePoint | 2021-11-03 | 2022-05-03 |
| CVE-2021-26857 RANSOMWARE | Microsoft Exchange Server | 2021-11-03 | 2022-05-03 |
| CVE-2021-36955 RANSOMWARE | Microsoft Windows | 2021-11-03 | 2021-11-17 |
| CVE-2019-18935 RANSOMWARE | Progress Telerik UI for ASP.NET AJAX | 2021-11-03 | 2022-05-03 |
| CVE-2021-22893 RANSOMWARE | Ivanti Pulse Connect Secure | 2021-11-03 | 2022-05-03 |
| CVE-2019-11510 RANSOMWARE | Ivanti Pulse Connect Secure | 2021-11-03 | 2022-05-03 |
| CVE-2019-11539 RANSOMWARE | Ivanti Pulse Connect Secure and Pulse Policy Secure | 2021-11-03 | 2022-05-03 |
| CVE-2018-2380 RANSOMWARE | SAP Customer Relationship Management (CRM) | 2021-11-03 | 2022-05-03 |
| CVE-2021-35211 RANSOMWARE | SolarWinds Serv-U | 2021-11-03 | 2021-11-17 |
| CVE-2021-20021 RANSOMWARE | SonicWall SonicWall Email Security | 2021-11-03 | 2021-11-17 |
| CVE-2019-7481 RANSOMWARE | SonicWall SMA100 | 2021-11-03 | 2022-05-03 |
| CVE-2021-20022 RANSOMWARE | SonicWall SonicWall Email Security | 2021-11-03 | 2021-11-17 |
| CVE-2021-20023 RANSOMWARE | SonicWall SonicWall Email Security | 2021-11-03 | 2021-11-17 |
| CVE-2021-20016 RANSOMWARE | SonicWall SSLVPN SMA100 | 2021-11-03 | 2021-11-17 |
| CVE-2020-12271 RANSOMWARE | Sophos SFOS | 2021-11-03 | 2022-05-03 |
| CVE-2019-5544 RANSOMWARE | VMware VMware ESXi and Horizon DaaS | 2021-11-03 | 2022-05-03 |
| CVE-2020-3992 RANSOMWARE | VMware ESXi | 2021-11-03 | 2022-05-03 |
| CVE-2021-22005 RANSOMWARE | VMware vCenter Server | 2021-11-03 | 2021-11-17 |
| CVE-2021-21972 RANSOMWARE | VMware vCenter Server | 2021-11-03 | 2021-11-17 |
| CVE-2021-21985 RANSOMWARE | VMware vCenter Server | 2021-11-03 | 2021-11-17 |
| CVE-2021-40539 RANSOMWARE | Zoho ManageEngine | 2021-11-03 | 2021-11-17 |
Cite this page: Is It On KEV? - Ransomware-linked KEV entries. Data: CISA Known Exploited Vulnerabilities catalog, version 2026.11.10 (accessed 2026-11-11). https://isitonkev.com/ransomware.html