{ "_license": { "publisher": "endoflife.ai", "sources": [ "CISA Known Exploited Vulnerabilities catalog, public domain (https://www.cisa.gov/known-exploited-vulnerabilities-catalog)" ], "terms": "https://endoflife.ai/terms", "notice": "Use of this file is subject to the terms at that URL.", "scope": "Licence scope: free for evaluation and for running, securing and planning your own IT estate, including through the official endoflife.ai integrations; a data licence from partners@endoflife.ai is required to use endoflife.ai data to assess, rate, underwrite, audit, research or report on other organisations, in any product, service or deliverable for third parties, to redistribute or resell it, or to store it in bulk to build a dataset. Data that originates from endoflife.date stays under its MIT licence and CISA KEV records stay public domain; the licence requirement applies only to what endoflife.ai adds.", "build_date": "2026-10-19" }, "_comment": "endoflife.ai — CISA Known Exploited Vulnerabilities attributed to tracked products. Attribution is derived from CISA's catalog by name with a guard against crediting another product's CVE; human overrides are recorded with reasons in the repository. Absence from this file is not evidence of safety.", "generated": "2026-10-19", "kev_catalog_version": "2026.10.16", "source": "https://endoflife.ai/exploited-and-unpatchable", "product_count": 178, "products": { "android": { "product_url": "https://endoflife.ai/android", "cve_count": 17, "latest_added": "2026-06-02", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-48595", "date_added": "2026-06-02", "due_date": "2026-06-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Android Framework Integer Overflow Vulnerability", "product_as_filed": "Android / Framework", "known_ransomware_use": false }, { "cve": "CVE-2025-48633", "date_added": "2025-12-02", "due_date": "2025-12-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Android Framework Information Disclosure Vulnerability", "product_as_filed": "Android / Framework", "known_ransomware_use": false }, { "cve": "CVE-2025-48572", "date_added": "2025-12-02", "due_date": "2025-12-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Android Framework Privilege Escalation Vulnerability", "product_as_filed": "Android / Framework", "known_ransomware_use": false }, { "cve": "CVE-2025-48543", "date_added": "2025-09-04", "due_date": "2025-09-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Android Runtime Use-After-Free Vulnerability", "product_as_filed": "Android / Runtime", "known_ransomware_use": false }, { "cve": "CVE-2024-43093", "date_added": "2024-11-07", "due_date": "2024-11-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Android Framework Privilege Escalation Vulnerability", "product_as_filed": "Android / Framework", "known_ransomware_use": false }, { "cve": "CVE-2024-36971", "date_added": "2024-08-07", "due_date": "2024-08-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Android Kernel Remote Code Execution Vulnerability", "product_as_filed": "Android / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2024-32896", "date_added": "2024-06-13", "due_date": "2024-07-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Android Pixel Privilege Escalation Vulnerability", "product_as_filed": "Android / Pixel", "known_ransomware_use": false }, { "cve": "CVE-2024-29748", "date_added": "2024-04-04", "due_date": "2024-04-25", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Android Pixel Privilege Escalation Vulnerability", "product_as_filed": "Android / Pixel", "known_ransomware_use": false }, { "cve": "CVE-2024-29745", "date_added": "2024-04-04", "due_date": "2024-04-25", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Android Pixel Information Disclosure Vulnerability", "product_as_filed": "Android / Pixel", "known_ransomware_use": false }, { "cve": "CVE-2023-21237", "date_added": "2024-03-05", "due_date": "2024-03-26", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Android Pixel Information Disclosure Vulnerability ", "product_as_filed": "Android / Pixel", "known_ransomware_use": false }, { "cve": "CVE-2023-35674", "date_added": "2023-09-13", "due_date": "2023-10-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Android Framework Privilege Escalation Vulnerability", "product_as_filed": "Android / Framework", "known_ransomware_use": false }, { "cve": "CVE-2023-20963", "date_added": "2023-04-13", "due_date": "2023-05-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Android Framework Privilege Escalation Vulnerability", "product_as_filed": "Android / Framework", "known_ransomware_use": false }, { "cve": "CVE-2011-1823", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Android OS Privilege Escalation Vulnerability", "product_as_filed": "Android / Android OS", "known_ransomware_use": false }, { "cve": "CVE-2021-1048", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Android Kernel Use-After-Free Vulnerability", "product_as_filed": "Android / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2021-0920", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Android Kernel Race Condition Vulnerability", "product_as_filed": "Android / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2019-2215", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Android Kernel Use-After-Free Vulnerability", "product_as_filed": "Android / Android Kernel", "known_ransomware_use": false }, { "cve": "CVE-2020-0041", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Android Kernel Out-of-Bounds Write Vulnerability", "product_as_filed": "Android / Android Kernel", "known_ransomware_use": false } ] }, "apache-airflow": { "product_url": "https://endoflife.ai/apache-airflow", "cve_count": 2, "latest_added": "2022-01-18", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2020-11978", "date_added": "2022-01-18", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Airflow Command Injection", "product_as_filed": "Apache / Airflow", "known_ransomware_use": false }, { "cve": "CVE-2020-13927", "date_added": "2022-01-18", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Airflow's Experimental API Authentication Bypass", "product_as_filed": "Apache / Airflow's Experimental API", "known_ransomware_use": false } ] }, "apache-flink": { "product_url": "https://endoflife.ai/apache-flink", "cve_count": 1, "latest_added": "2024-05-23", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2020-17519", "date_added": "2024-05-23", "due_date": "2024-06-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apache Flink Improper Access Control Vulnerability", "product_as_filed": "Apache / Flink", "known_ransomware_use": false } ] }, "apache-couchdb": { "product_url": "https://endoflife.ai/apache-couchdb", "cve_count": 1, "latest_added": "2022-08-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2022-24706", "date_added": "2022-08-25", "due_date": "2022-09-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache CouchDB Insecure Default Initialization of Resource Vulnerability", "product_as_filed": "Apache / CouchDB", "known_ransomware_use": false } ] }, "apache-apisix": { "product_url": "https://endoflife.ai/apache-apisix", "cve_count": 1, "latest_added": "2022-08-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2022-24112", "date_added": "2022-08-25", "due_date": "2022-09-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache APISIX Authentication Bypass Vulnerability", "product_as_filed": "Apache / APISIX", "known_ransomware_use": false } ] }, "apache-activemq": { "product_url": "https://endoflife.ai/apache-activemq", "cve_count": 3, "latest_added": "2026-04-16", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-34197", "date_added": "2026-04-16", "due_date": "2026-04-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apache ActiveMQ Improper Input Validation Vulnerability", "product_as_filed": "Apache / ActiveMQ", "known_ransomware_use": false }, { "cve": "CVE-2023-46604", "date_added": "2023-11-02", "due_date": "2023-11-23", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apache ActiveMQ Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Apache / ActiveMQ", "known_ransomware_use": true }, { "cve": "CVE-2016-3088", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache ActiveMQ Improper Input Validation Vulnerability", "product_as_filed": "Apache / ActiveMQ", "known_ransomware_use": false } ] }, "apache-http-server": { "product_url": "https://endoflife.ai/apache-http-server", "cve_count": 5, "latest_added": "2025-05-01", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2024-38475", "date_added": "2025-05-01", "due_date": "2025-05-22", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apache HTTP Server Improper Escaping of Output Vulnerability", "product_as_filed": "Apache / HTTP Server", "known_ransomware_use": false }, { "cve": "CVE-2021-40438", "date_added": "2021-12-01", "due_date": "2021-12-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache HTTP Server-Side Request Forgery (SSRF)", "product_as_filed": "Apache / Apache", "known_ransomware_use": true }, { "cve": "CVE-2021-42013", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache HTTP Server Path Traversal Vulnerability", "product_as_filed": "Apache / HTTP Server", "known_ransomware_use": true }, { "cve": "CVE-2021-41773", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache HTTP Server Path Traversal Vulnerability", "product_as_filed": "Apache / HTTP Server", "known_ransomware_use": true }, { "cve": "CVE-2019-0211", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache HTTP Server Privilege Escalation Vulnerability", "product_as_filed": "Apache / HTTP Server", "known_ransomware_use": false } ] }, "apache-spark": { "product_url": "https://endoflife.ai/apache-spark", "cve_count": 1, "latest_added": "2023-03-07", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2022-33891", "date_added": "2023-03-07", "due_date": "2023-03-28", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Spark Command Injection Vulnerability", "product_as_filed": "Apache / Spark", "known_ransomware_use": false } ] }, "artifactory": { "product_url": "https://endoflife.ai/artifactory", "cve_count": 4, "latest_added": "2026-09-11", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-42016", "date_added": "2026-09-11", "due_date": "2026-09-25", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "JFrog Artifactory Incorrect Authorization Vulnerability", "product_as_filed": "JFrog / Artifactory", "known_ransomware_use": false }, { "cve": "CVE-2026-42018", "date_added": "2026-09-11", "due_date": "2026-09-25", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "JFrog Artifactory Improper Authentication Vulnerability", "product_as_filed": "JFrog / Artifactory", "known_ransomware_use": false }, { "cve": "CVE-2026-82329", "date_added": "2026-09-02", "due_date": "2026-09-05", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "JFrog Artifactory Improper Authentication Vulnerability", "product_as_filed": "JFrog / Artifactory", "known_ransomware_use": false }, { "cve": "CVE-2026-66384", "date_added": "2026-08-27", "due_date": "2026-09-10", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability", "product_as_filed": "JFrog / Artifactory", "known_ransomware_use": false } ] }, "apache-struts": { "product_url": "https://endoflife.ai/apache-struts", "cve_count": 9, "latest_added": "2026-10-08", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2016-3081", "date_added": "2026-10-08", "due_date": "2026-10-11", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Apache Struts Command Injection Vulnerability", "product_as_filed": "Apache / Struts", "known_ransomware_use": false }, { "cve": "CVE-2013-2251", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Struts Improper Input Validation Vulnerability", "product_as_filed": "Apache / Struts", "known_ransomware_use": false }, { "cve": "CVE-2017-9791", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Struts 1 Improper Input Validation Vulnerability", "product_as_filed": "Apache / Struts 1", "known_ransomware_use": false }, { "cve": "CVE-2006-1547", "date_added": "2022-01-21", "due_date": "2022-07-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Struts 1 ActionForm Denial-of-Service Vulnerability", "product_as_filed": "Apache / Struts 1", "known_ransomware_use": false }, { "cve": "CVE-2012-0391", "date_added": "2022-01-21", "due_date": "2022-07-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Struts 2 Improper Input Validation Vulnerability", "product_as_filed": "Apache / Struts 2", "known_ransomware_use": false }, { "cve": "CVE-2017-9805", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Struts Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Apache / Struts", "known_ransomware_use": false }, { "cve": "CVE-2020-17530", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Struts Remote Code Execution Vulnerability", "product_as_filed": "Apache / Struts", "known_ransomware_use": false }, { "cve": "CVE-2017-5638", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Struts Remote Code Execution Vulnerability", "product_as_filed": "Apache / Struts", "known_ransomware_use": true }, { "cve": "CVE-2018-11776", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Struts Remote Code Execution Vulnerability", "product_as_filed": "Apache / Struts", "known_ransomware_use": false } ] }, "big-ip": { "product_url": "https://endoflife.ai/big-ip", "cve_count": 8, "latest_added": "2026-09-22", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-94127", "date_added": "2026-09-22", "due_date": "2026-09-25", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability", "product_as_filed": "F5 / BIG-IP APM", "known_ransomware_use": false }, { "cve": "CVE-2025-53521", "date_added": "2026-03-27", "due_date": "2026-03-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "F5 BIG-IP Stack-Based Buffer Overflow Vulnerability", "product_as_filed": "F5 / BIG-IP", "known_ransomware_use": false }, { "cve": "CVE-2023-46748", "date_added": "2023-10-31", "due_date": "2023-11-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "F5 BIG-IP Configuration Utility SQL Injection Vulnerability", "product_as_filed": "F5 / BIG-IP Configuration Utility", "known_ransomware_use": false }, { "cve": "CVE-2023-46747", "date_added": "2023-10-31", "due_date": "2023-11-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability", "product_as_filed": "F5 / BIG-IP Configuration Utility", "known_ransomware_use": true }, { "cve": "CVE-2022-1388", "date_added": "2022-05-10", "due_date": "2022-05-31", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "F5 BIG-IP Missing Authentication Vulnerability", "product_as_filed": "F5 / BIG-IP", "known_ransomware_use": true }, { "cve": "CVE-2021-22991", "date_added": "2022-01-18", "due_date": "2022-02-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "F5 BIG-IP Traffic Management Microkernel Buffer Overflow", "product_as_filed": "F5 / BIG-IP Traffic Management Microkernel", "known_ransomware_use": false }, { "cve": "CVE-2020-5902", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability", "product_as_filed": "F5 / BIG-IP", "known_ransomware_use": true }, { "cve": "CVE-2021-22986", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability", "product_as_filed": "F5 / BIG-IP and BIG-IQ Centralized Management", "known_ransomware_use": true } ] }, "bitbucket": { "product_url": "https://endoflife.ai/bitbucket", "cve_count": 2, "latest_added": "2026-10-15", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-21589", "date_added": "2026-10-15", "due_date": "2026-10-18", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability", "product_as_filed": "Atlassian / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-36804", "date_added": "2022-09-30", "due_date": "2022-10-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Atlassian Bitbucket Server and Data Center Command Injection Vulnerability", "product_as_filed": "Atlassian / Bitbucket Server and Data Center", "known_ransomware_use": false } ] }, "chrome": { "product_url": "https://endoflife.ai/chrome", "cve_count": 71, "latest_added": "2026-09-09", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-87491", "date_added": "2026-09-09", "due_date": "2026-09-23", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Google Chromium V8 Out of Bounds Write Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2026-85046", "date_added": "2026-09-04", "due_date": "2026-09-18", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2026-11645", "date_added": "2026-06-09", "due_date": "2026-06-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Read and Write Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2026-3910", "date_added": "2026-03-13", "due_date": "2026-03-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2026-2441", "date_added": "2026-02-17", "due_date": "2026-03-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium CSS Use-After-Free Vulnerability", "product_as_filed": "Google / Chromium", "known_ransomware_use": false }, { "cve": "CVE-2025-14174", "date_added": "2025-12-12", "due_date": "2026-01-02", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium Out of Bounds Memory Access Vulnerability", "product_as_filed": "Google / Chromium", "known_ransomware_use": false }, { "cve": "CVE-2025-13223", "date_added": "2025-11-19", "due_date": "2025-12-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2025-10585", "date_added": "2025-09-23", "due_date": "2025-10-14", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2025-6558", "date_added": "2025-07-22", "due_date": "2025-08-12", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium ANGLE and GPU Improper Input Validation Vulnerability", "product_as_filed": "Google / Chromium", "known_ransomware_use": false }, { "cve": "CVE-2025-6554", "date_added": "2025-07-02", "due_date": "2025-07-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2025-5419", "date_added": "2025-06-05", "due_date": "2025-06-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Read and Write Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2025-2783", "date_added": "2025-03-27", "due_date": "2025-04-17", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium Mojo Sandbox Escape Vulnerability", "product_as_filed": "Google / Chromium Mojo", "known_ransomware_use": false }, { "cve": "CVE-2024-7965", "date_added": "2024-08-28", "due_date": "2024-09-18", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Inappropriate Implementation Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2024-7971", "date_added": "2024-08-26", "due_date": "2024-09-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2024-5274", "date_added": "2024-05-28", "due_date": "2024-06-18", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2024-4947", "date_added": "2024-05-20", "due_date": "2024-06-10", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2024-4761", "date_added": "2024-05-16", "due_date": "2024-06-06", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Memory Write Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2024-4671", "date_added": "2024-05-13", "due_date": "2024-06-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium Visuals Use-After-Free Vulnerability", "product_as_filed": "Google / Chromium", "known_ransomware_use": false }, { "cve": "CVE-2023-4762", "date_added": "2024-02-06", "due_date": "2024-02-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2024-0519", "date_added": "2024-01-17", "due_date": "2024-02-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Memory Access Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2023-7024", "date_added": "2024-01-02", "due_date": "2024-01-23", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium WebRTC Heap Buffer Overflow Vulnerability", "product_as_filed": "Google / Chromium WebRTC", "known_ransomware_use": false }, { "cve": "CVE-2023-6345", "date_added": "2023-11-30", "due_date": "2023-12-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Skia Integer Overflow Vulnerability", "product_as_filed": "Google / Chromium Skia", "known_ransomware_use": false }, { "cve": "CVE-2023-5217", "date_added": "2023-10-02", "due_date": "2023-10-23", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium libvpx Heap Buffer Overflow Vulnerability", "product_as_filed": "Google / Chromium libvpx", "known_ransomware_use": false }, { "cve": "CVE-2023-4863", "date_added": "2023-09-13", "due_date": "2023-10-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Google Chromium WebP Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Google / Chromium WebP", "known_ransomware_use": false }, { "cve": "CVE-2023-3079", "date_added": "2023-06-07", "due_date": "2023-06-28", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2023-2136", "date_added": "2023-04-21", "due_date": "2023-05-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chrome Skia Integer Overflow Vulnerability", "product_as_filed": "Google / Chromium Skia", "known_ransomware_use": false }, { "cve": "CVE-2023-2033", "date_added": "2023-04-17", "due_date": "2023-05-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2022-3038", "date_added": "2023-03-30", "due_date": "2023-04-20", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium Network Service Use-After-Free Vulnerability", "product_as_filed": "Google / Chromium Network Service", "known_ransomware_use": false }, { "cve": "CVE-2022-4262", "date_added": "2022-12-05", "due_date": "2022-12-26", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2022-4135", "date_added": "2022-11-28", "due_date": "2022-12-19", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium GPU Heap Buffer Overflow Vulnerability", "product_as_filed": "Google / Chromium GPU", "known_ransomware_use": false }, { "cve": "CVE-2022-3723", "date_added": "2022-10-28", "due_date": "2022-11-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2022-3075", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium Mojo Insufficient Data Validation Vulnerability", "product_as_filed": "Google / Chromium Mojo", "known_ransomware_use": false }, { "cve": "CVE-2022-2856", "date_added": "2022-08-18", "due_date": "2022-09-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium Intents Insufficient Input Validation Vulnerability", "product_as_filed": "Google / Chromium Intents", "known_ransomware_use": false }, { "cve": "CVE-2021-30533", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium PopupBlocker Security Bypass Vulnerability", "product_as_filed": "Google / Chromium PopupBlocker", "known_ransomware_use": false }, { "cve": "CVE-2019-5825", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Write Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2018-6065", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Integer Overflow Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2018-17480", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Write Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2018-17463", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Remote Code Execution Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2017-5070", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2017-5030", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Memory Corruption Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2016-5198", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Memory Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2016-1646", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Read Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2019-5786", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chrome Blink Use-After-Free Vulnerability", "product_as_filed": "Google / Chrome Blink", "known_ransomware_use": false }, { "cve": "CVE-2019-13720", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chrome WebAudio Use-After-Free Vulnerability", "product_as_filed": "Google / Chrome WebAudio", "known_ransomware_use": false }, { "cve": "CVE-2022-1364", "date_added": "2022-04-15", "due_date": "2022-05-06", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2022-1096", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2022-0609", "date_added": "2022-02-15", "due_date": "2022-03-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium Animation Use-After-Free Vulnerability", "product_as_filed": "Google / Chromium Animation", "known_ransomware_use": false }, { "cve": "CVE-2020-6572", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chrome Media Use-After-Free Vulnerability", "product_as_filed": "Google / Chrome Media", "known_ransomware_use": false }, { "cve": "CVE-2021-4102", "date_added": "2021-12-15", "due_date": "2021-12-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Use-After-Free Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2020-16010", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chrome for Android UI Heap Buffer Overflow Vulnerability", "product_as_filed": "Google / Chrome for Android UI", "known_ransomware_use": false }, { "cve": "CVE-2020-15999", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chrome FreeType Heap Buffer Overflow Vulnerability", "product_as_filed": "Google / Chrome FreeType", "known_ransomware_use": false }, { "cve": "CVE-2020-16017", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chrome Use-After-Free Vulnerability", "product_as_filed": "Google / Chrome", "known_ransomware_use": false }, { "cve": "CVE-2021-21166", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium Race Condition Vulnerability", "product_as_filed": "Google / Chromium", "known_ransomware_use": false }, { "cve": "CVE-2021-37976", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium Information Disclosure Vulnerability", "product_as_filed": "Google / Chromium", "known_ransomware_use": false }, { "cve": "CVE-2020-16009", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2021-30632", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Out-of-Bounds Write Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2020-16013", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Incorrect Implementation Vulnerabililty", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2021-30633", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium Indexed DB API Use-After-Free Vulnerability", "product_as_filed": "Google / Chromium Indexed DB API", "known_ransomware_use": false }, { "cve": "CVE-2021-21148", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Heap Buffer Overflow Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2021-37973", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium Portals Use-After-Free Vulnerability", "product_as_filed": "Google / Chromium Portals", "known_ransomware_use": false }, { "cve": "CVE-2021-30551", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2021-37975", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Use-After-Free Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2020-6418", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2021-30554", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium WebGL Use-After-Free Vulnerability", "product_as_filed": "Google / Chromium WebGL", "known_ransomware_use": false }, { "cve": "CVE-2021-21206", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium Blink Use-After-Free Vulnerability", "product_as_filed": "Google / Chromium Blink", "known_ransomware_use": false }, { "cve": "CVE-2021-38000", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium Intents Improper Input Validation Vulnerability", "product_as_filed": "Google / Chromium Intents", "known_ransomware_use": false }, { "cve": "CVE-2021-38003", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Memory Corruption Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2021-21224", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2021-21193", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium Blink Use-After-Free Vulnerability", "product_as_filed": "Google / Chromium Blink", "known_ransomware_use": false }, { "cve": "CVE-2021-21220", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Improper Input Validation Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false }, { "cve": "CVE-2021-30563", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Chromium V8 Type Confusion Vulnerability", "product_as_filed": "Google / Chromium V8", "known_ransomware_use": false } ] }, "cisco-ios-xe": { "product_url": "https://endoflife.ai/cisco-ios-xe", "cve_count": 28, "latest_added": "2025-09-29", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-20352", "date_added": "2025-09-29", "due_date": "2025-10-20", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE", "known_ransomware_use": false }, { "cve": "CVE-2023-20273", "date_added": "2023-10-23", "due_date": "2023-10-27", "required_action": "Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.", "vulnerability_name": "Cisco IOS XE Web UI Command Injection Vulnerability", "product_as_filed": "Cisco / Cisco IOS XE Web UI", "known_ransomware_use": false }, { "cve": "CVE-2023-20198", "date_added": "2023-10-16", "due_date": "2023-10-20", "required_action": "Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.", "vulnerability_name": "Cisco IOS XE Web UI Privilege Escalation Vulnerability", "product_as_filed": "Cisco / IOS XE Web UI", "known_ransomware_use": false }, { "cve": "CVE-2023-20109", "date_added": "2023-10-10", "due_date": "2023-10-31", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE", "known_ransomware_use": false }, { "cve": "CVE-2016-6415", "date_added": "2023-05-19", "due_date": "2023-06-09", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability", "product_as_filed": "Cisco / IOS, IOS XR, and IOS XE", "known_ransomware_use": false }, { "cve": "CVE-2017-6742", "date_added": "2023-04-19", "due_date": "2023-05-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-3881", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE", "known_ransomware_use": false }, { "cve": "CVE-2018-0175", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability", "product_as_filed": "Cisco / IOS, XR, and XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0174", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability", "product_as_filed": "Cisco / IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0173", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software Improper Input Validation Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0172", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software Improper Input Validation Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0167", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability", "product_as_filed": "Cisco / IOS, XR, and XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0159", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS Software and Cisco IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0158", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability", "product_as_filed": "Cisco / IOS Software and Cisco IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0156", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS Software and Cisco IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0151", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6743", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6740", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6739", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6738", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6737", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6736", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6663", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6627", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-12319", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-12240", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-12237", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0171", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE", "known_ransomware_use": false } ] }, "commvault": { "product_url": "https://endoflife.ai/commvault", "cve_count": 2, "latest_added": "2025-05-02", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-34028", "date_added": "2025-05-02", "due_date": "2025-05-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Commvault Command Center Path Traversal Vulnerability", "product_as_filed": "Commvault / Command Center", "known_ransomware_use": false }, { "cve": "CVE-2025-3928", "date_added": "2025-04-28", "due_date": "2025-05-19", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Commvault Web Server Unspecified Vulnerability", "product_as_filed": "Commvault / Web Server", "known_ransomware_use": false } ] }, "confluence": { "product_url": "https://endoflife.ai/confluence", "cve_count": 10, "latest_added": "2026-10-15", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-21589", "date_added": "2026-10-15", "due_date": "2026-10-18", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability", "product_as_filed": "Atlassian / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-22527", "date_added": "2024-01-24", "due_date": "2024-02-14", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Atlassian Confluence Data Center and Server Template Injection Vulnerability", "product_as_filed": "Atlassian / Confluence Data Center and Server", "known_ransomware_use": true }, { "cve": "CVE-2023-22518", "date_added": "2023-11-07", "due_date": "2023-11-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Atlassian Confluence Data Center and Server Improper Authorization Vulnerability", "product_as_filed": "Atlassian / Confluence Data Center and Server", "known_ransomware_use": true }, { "cve": "CVE-2023-22515", "date_added": "2023-10-05", "due_date": "2023-10-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Check all affected Confluence instances for evidence of compromise per vendor instructions and report any positive findings to CISA.", "vulnerability_name": "Atlassian Confluence Data Center and Server Broken Access Control Vulnerability", "product_as_filed": "Atlassian / Confluence Data Center and Server", "known_ransomware_use": true }, { "cve": "CVE-2022-26138", "date_added": "2022-07-29", "due_date": "2022-08-19", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability", "product_as_filed": "Atlassian / Confluence", "known_ransomware_use": false }, { "cve": "CVE-2022-26134", "date_added": "2022-06-02", "due_date": "2022-06-06", "required_action": "Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.", "vulnerability_name": "Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability", "product_as_filed": "Atlassian / Confluence Server/Data Center", "known_ransomware_use": true }, { "cve": "CVE-2021-26085", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability", "product_as_filed": "Atlassian / Confluence Server", "known_ransomware_use": true }, { "cve": "CVE-2019-3398", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Atlassian Confluence Server and Data Center Path Traversal Vulnerability", "product_as_filed": "Atlassian / Confluence Server and Data Center", "known_ransomware_use": false }, { "cve": "CVE-2021-26084", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability", "product_as_filed": "Atlassian / Confluence Server and Data Center", "known_ransomware_use": true }, { "cve": "CVE-2019-3396", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability", "product_as_filed": "Atlassian / Confluence Server and Data Server", "known_ransomware_use": true } ] }, "coldfusion": { "product_url": "https://endoflife.ai/coldfusion", "cve_count": 16, "latest_added": "2026-07-07", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-48282", "date_added": "2026-07-07", "due_date": "2026-07-10", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Adobe ColdFusion Path Traversal Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2017-3066", "date_added": "2025-02-24", "due_date": "2025-03-17", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe ColdFusion Deserialization Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2024-20767", "date_added": "2024-12-16", "due_date": "2025-01-06", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe ColdFusion Improper Access Control Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2023-29300", "date_added": "2024-01-08", "due_date": "2024-01-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": true }, { "cve": "CVE-2023-38203", "date_added": "2024-01-08", "due_date": "2024-01-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": true }, { "cve": "CVE-2023-26359", "date_added": "2023-08-21", "due_date": "2023-09-11", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2023-29298", "date_added": "2023-07-20", "due_date": "2023-08-10", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe ColdFusion Improper Access Control Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2023-38205", "date_added": "2023-07-20", "due_date": "2023-08-10", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe ColdFusion Improper Access Control Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2023-26360", "date_added": "2023-03-15", "due_date": "2023-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2010-2861", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe ColdFusion Directory Traversal Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": true }, { "cve": "CVE-2013-0631", "date_added": "2022-03-07", "due_date": "2022-09-07", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe ColdFusion Information Disclosure Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2013-0629", "date_added": "2022-03-07", "due_date": "2022-09-07", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe ColdFusion Directory Traversal Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2013-0625", "date_added": "2022-03-07", "due_date": "2022-09-07", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe ColdFusion Authentication Bypass Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2013-0632", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe ColdFusion Authentication Bypass Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2018-4939", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false }, { "cve": "CVE-2018-15961", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe ColdFusion Unrestricted File Upload Vulnerability", "product_as_filed": "Adobe / ColdFusion", "known_ransomware_use": false } ] }, "debian": { "product_url": "https://endoflife.ai/debian", "cve_count": 1, "latest_added": "2022-03-28", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2022-0543", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Debian-specific Redis Server Lua Sandbox Escape Vulnerability", "product_as_filed": "Redis / Debian-specific Redis Servers", "known_ransomware_use": false } ] }, "craft-cms": { "product_url": "https://endoflife.ai/craft-cms", "cve_count": 4, "latest_added": "2026-03-20", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-32432", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Craft CMS Code Injection Vulnerability", "product_as_filed": "Craft CMS / Craft CMS", "known_ransomware_use": false }, { "cve": "CVE-2025-35939", "date_added": "2025-06-02", "due_date": "2025-06-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability", "product_as_filed": "Craft CMS / Craft CMS", "known_ransomware_use": false }, { "cve": "CVE-2024-56145", "date_added": "2025-06-02", "due_date": "2025-06-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Craft CMS Code Injection Vulnerability", "product_as_filed": "Craft CMS / Craft CMS", "known_ransomware_use": false }, { "cve": "CVE-2025-23209", "date_added": "2025-02-20", "due_date": "2025-03-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Craft CMS Code Injection Vulnerability", "product_as_filed": "Craft CMS / Craft CMS", "known_ransomware_use": false } ] }, "dotnet": { "product_url": "https://endoflife.ai/dotnet", "cve_count": 1, "latest_added": "2023-08-09", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2023-38180", "date_added": "2023-08-09", "due_date": "2023-08-30", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability", "product_as_filed": "Microsoft / .NET Core and Visual Studio", "known_ransomware_use": false } ] }, "dotnetfx": { "product_url": "https://endoflife.ai/dotnetfx", "cve_count": 4, "latest_added": "2025-02-04", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2024-29059", "date_added": "2025-02-04", "due_date": "2025-02-25", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft .NET Framework Information Disclosure Vulnerability", "product_as_filed": "Microsoft / .NET Framework", "known_ransomware_use": false }, { "cve": "CVE-2017-8759", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft .NET Framework Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / .NET Framework", "known_ransomware_use": false }, { "cve": "CVE-2020-0646", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft .NET Framework Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / .NET Framework", "known_ransomware_use": false }, { "cve": "CVE-2020-1147", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / .NET Framework, SharePoint, Visual Studio", "known_ransomware_use": false } ] }, "drupal": { "product_url": "https://endoflife.ai/drupal", "cve_count": 5, "latest_added": "2026-05-22", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-9082", "date_added": "2026-05-22", "due_date": "2026-05-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Drupal Core SQL Injection Vulnerability", "product_as_filed": "Drupal / Core", "known_ransomware_use": false }, { "cve": "CVE-2018-7602", "date_added": "2022-04-13", "due_date": "2022-05-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Drupal Core Remote Code Execution Vulnerability", "product_as_filed": "Drupal / Core", "known_ransomware_use": true }, { "cve": "CVE-2019-6340", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Drupal Core Remote Code Execution Vulnerability", "product_as_filed": "Drupal / Core", "known_ransomware_use": false }, { "cve": "CVE-2020-13671", "date_added": "2022-01-18", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Drupal core Un-restricted Upload of File", "product_as_filed": "Drupal / Drupal core", "known_ransomware_use": false }, { "cve": "CVE-2018-7600", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Drupal Core Remote Code Execution Vulnerability", "product_as_filed": "Drupal / Drupal Core", "known_ransomware_use": true } ] }, "erlang": { "product_url": "https://endoflife.ai/erlang", "cve_count": 1, "latest_added": "2025-06-09", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-32433", "date_added": "2025-06-09", "due_date": "2025-06-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability", "product_as_filed": "Erlang / Erlang/OTP", "known_ransomware_use": false } ] }, "elasticsearch": { "product_url": "https://endoflife.ai/elasticsearch", "cve_count": 2, "latest_added": "2022-03-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2015-1427", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability", "product_as_filed": "Elastic / Elasticsearch", "known_ransomware_use": false }, { "cve": "CVE-2014-3120", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Elasticsearch Remote Code Execution Vulnerability", "product_as_filed": "Elastic / Elasticsearch", "known_ransomware_use": false } ] }, "exim": { "product_url": "https://endoflife.ai/exim", "cve_count": 5, "latest_added": "2022-03-25", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2010-4345", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Exim Privilege Escalation Vulnerability", "product_as_filed": "Exim / Exim", "known_ransomware_use": false }, { "cve": "CVE-2010-4344", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Exim Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Exim / Exim", "known_ransomware_use": false }, { "cve": "CVE-2019-16928", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Exim Out-of-bounds Write Vulnerability", "product_as_filed": "Exim / Exim Internet Mailer", "known_ransomware_use": false }, { "cve": "CVE-2019-10149", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Exim Mail Transfer Agent (MTA) Improper Input Validation", "product_as_filed": "Exim / Mail Transfer Agent (MTA)", "known_ransomware_use": false }, { "cve": "CVE-2018-6789", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Exim Buffer Overflow Vulnerability", "product_as_filed": "Exim / Exim", "known_ransomware_use": true } ] }, "esxi": { "product_url": "https://endoflife.ai/esxi", "cve_count": 6, "latest_added": "2025-03-04", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-22226", "date_added": "2025-03-04", "due_date": "2025-03-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability", "product_as_filed": "VMware / ESXi, Workstation, and Fusion", "known_ransomware_use": false }, { "cve": "CVE-2025-22225", "date_added": "2025-03-04", "due_date": "2025-03-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "VMware ESXi Arbitrary Write Vulnerability", "product_as_filed": "VMware / ESXi", "known_ransomware_use": true }, { "cve": "CVE-2025-22224", "date_added": "2025-03-04", "due_date": "2025-03-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "VMware ESXi and Workstation TOCTOU Race Condition Vulnerability", "product_as_filed": "VMware / ESXi and Workstation", "known_ransomware_use": false }, { "cve": "CVE-2024-37085", "date_added": "2024-07-30", "due_date": "2024-08-20", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "VMware ESXi Authentication Bypass Vulnerability", "product_as_filed": "VMware / ESXi", "known_ransomware_use": true }, { "cve": "CVE-2019-5544", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "VMware / VMware ESXi and Horizon DaaS", "known_ransomware_use": true }, { "cve": "CVE-2020-3992", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware ESXi OpenSLP Use-After-Free Vulnerability", "product_as_filed": "VMware / ESXi", "known_ransomware_use": true } ] }, "firefox": { "product_url": "https://endoflife.ai/firefox", "cve_count": 13, "latest_added": "2025-10-06", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2010-3765", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Mozilla Multiple Products Remote Code Execution Vulnerability", "product_as_filed": "Mozilla / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-9680", "date_added": "2024-10-15", "due_date": "2024-11-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Mozilla Firefox Use-After-Free Vulnerability", "product_as_filed": "Mozilla / Firefox", "known_ransomware_use": true }, { "cve": "CVE-2016-9079", "date_added": "2023-06-22", "due_date": "2023-07-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability", "product_as_filed": "Mozilla / Firefox, Firefox ESR, and Thunderbird", "known_ransomware_use": false }, { "cve": "CVE-2015-4495", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Mozilla Firefox Security Feature Bypass Vulnerability", "product_as_filed": "Mozilla / Firefox", "known_ransomware_use": false }, { "cve": "CVE-2019-11707", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Mozilla Firefox and Thunderbird Type Confusion Vulnerability", "product_as_filed": "Mozilla / Firefox and Thunderbird", "known_ransomware_use": false }, { "cve": "CVE-2019-11708", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability", "product_as_filed": "Mozilla / Firefox and Thunderbird", "known_ransomware_use": false }, { "cve": "CVE-2013-1690", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability", "product_as_filed": "Mozilla / Firefox and Thunderbird", "known_ransomware_use": false }, { "cve": "CVE-2022-26486", "date_added": "2022-03-07", "due_date": "2022-03-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Mozilla Firefox Use-After-Free Vulnerability", "product_as_filed": "Mozilla / Firefox", "known_ransomware_use": false }, { "cve": "CVE-2022-26485", "date_added": "2022-03-07", "due_date": "2022-03-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Mozilla Firefox Use-After-Free Vulnerability", "product_as_filed": "Mozilla / Firefox", "known_ransomware_use": false }, { "cve": "CVE-2013-1675", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Mozilla Firefox Information Disclosure Vulnerability", "product_as_filed": "Mozilla / Firefox", "known_ransomware_use": false }, { "cve": "CVE-2020-6819", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Mozilla Firefox And Thunderbird Use-After-Free Vulnerability", "product_as_filed": "Mozilla / Firefox and Thunderbird", "known_ransomware_use": false }, { "cve": "CVE-2020-6820", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Mozilla Firefox And Thunderbird Use-After-Free Vulnerability", "product_as_filed": "Mozilla / Firefox and Thunderbird", "known_ransomware_use": false }, { "cve": "CVE-2019-17026", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Mozilla Firefox And Thunderbird Type Confusion Vulnerability", "product_as_filed": "Mozilla / Firefox and Thunderbird", "known_ransomware_use": false } ] }, "fortios": { "product_url": "https://endoflife.ai/fortios", "cve_count": 21, "latest_added": "2026-10-16", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2025-61624", "date_added": "2026-10-16", "due_date": "2026-10-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Fortinet Multiple Products Path Traversal Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-25249", "date_added": "2026-09-09", "due_date": "2026-09-12", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-68686", "date_added": "2026-07-27", "due_date": "2026-08-10", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability", "product_as_filed": "Fortinet / FortiOS", "known_ransomware_use": false }, { "cve": "CVE-2026-24858", "date_added": "2026-01-27", "due_date": "2026-01-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-59718", "date_added": "2025-12-16", "due_date": "2025-12-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2019-6693", "date_added": "2025-06-25", "due_date": "2025-07-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability", "product_as_filed": "Fortinet / FortiOS", "known_ransomware_use": true }, { "cve": "CVE-2025-24472", "date_added": "2025-03-18", "due_date": "2025-04-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "product_as_filed": "Fortinet / FortiOS and FortiProxy", "known_ransomware_use": true }, { "cve": "CVE-2024-55591", "date_added": "2025-01-14", "due_date": "2025-01-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "product_as_filed": "Fortinet / FortiOS and FortiProxy", "known_ransomware_use": true }, { "cve": "CVE-2024-23113", "date_added": "2024-10-09", "due_date": "2024-10-30", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Format String Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-21762", "date_added": "2024-02-09", "due_date": "2024-02-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiOS Out-of-Bound Write Vulnerability", "product_as_filed": "Fortinet / FortiOS", "known_ransomware_use": true }, { "cve": "CVE-2023-27997", "date_added": "2023-06-13", "due_date": "2023-07-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Fortinet / FortiOS and FortiProxy SSL-VPN", "known_ransomware_use": true }, { "cve": "CVE-2022-41328", "date_added": "2023-03-14", "due_date": "2023-04-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS Path Traversal Vulnerability", "product_as_filed": "Fortinet / FortiOS", "known_ransomware_use": false }, { "cve": "CVE-2022-42475", "date_added": "2022-12-13", "due_date": "2023-01-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Fortinet / FortiOS", "known_ransomware_use": true }, { "cve": "CVE-2022-40684", "date_added": "2022-10-11", "due_date": "2022-11-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet Multiple Products Authentication Bypass Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": true }, { "cve": "CVE-2018-13374", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS and FortiADC Improper Access Control Vulnerability", "product_as_filed": "Fortinet / FortiOS and FortiADC", "known_ransomware_use": true }, { "cve": "CVE-2018-13382", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS and FortiProxy Improper Authorization", "product_as_filed": "Fortinet / FortiOS and FortiProxy", "known_ransomware_use": true }, { "cve": "CVE-2018-13383", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS and FortiProxy Out-of-bounds Write", "product_as_filed": "Fortinet / FortiOS and FortiProxy", "known_ransomware_use": true }, { "cve": "CVE-2021-44168", "date_added": "2021-12-10", "due_date": "2021-12-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS Arbitrary File Download", "product_as_filed": "Fortinet / FortiOS", "known_ransomware_use": false }, { "cve": "CVE-2019-5591", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS Default Configuration Vulnerability", "product_as_filed": "Fortinet / FortiOS", "known_ransomware_use": true }, { "cve": "CVE-2020-12812", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS SSL VPN Improper Authentication Vulnerability", "product_as_filed": "Fortinet / FortiOS", "known_ransomware_use": true }, { "cve": "CVE-2018-13379", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS SSL VPN Path Traversal Vulnerability", "product_as_filed": "Fortinet / FortiOS", "known_ransomware_use": true } ] }, "gitlab": { "product_url": "https://endoflife.ai/gitlab", "cve_count": 5, "latest_added": "2026-09-11", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-85706", "date_added": "2026-09-11", "due_date": "2026-09-14", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability", "product_as_filed": "GitLab / Community Edition and Enterprise Edition", "known_ransomware_use": false }, { "cve": "CVE-2021-22175", "date_added": "2026-02-18", "due_date": "2026-03-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "GitLab Server-Side Request Forgery (SSRF) Vulnerability", "product_as_filed": "GitLab / GitLab", "known_ransomware_use": false }, { "cve": "CVE-2021-39935", "date_added": "2026-02-03", "due_date": "2026-02-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability", "product_as_filed": "GitLab / Community and Enterprise Editions", "known_ransomware_use": false }, { "cve": "CVE-2023-7028", "date_added": "2024-05-01", "due_date": "2024-05-22", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "GitLab Community and Enterprise Editions Improper Access Control Vulnerability", "product_as_filed": "GitLab / GitLab CE/EE", "known_ransomware_use": false }, { "cve": "CVE-2021-22205", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "GitLab Community and Enterprise Editions Remote Code Execution Vulnerability", "product_as_filed": "GitLab / Community and Enterprise Editions", "known_ransomware_use": true } ] }, "grafana": { "product_url": "https://endoflife.ai/grafana", "cve_count": 2, "latest_added": "2025-10-09", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2021-43798", "date_added": "2025-10-09", "due_date": "2025-10-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Grafana Path Traversal Vulnerability", "product_as_filed": "Grafana Labs / Grafana", "known_ransomware_use": false }, { "cve": "CVE-2021-39226", "date_added": "2022-08-25", "due_date": "2022-09-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Grafana Authentication Bypass Vulnerability", "product_as_filed": "Grafana Labs / Grafana", "known_ransomware_use": false } ] }, "horizon": { "product_url": "https://endoflife.ai/horizon", "cve_count": 1, "latest_added": "2021-11-03", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2019-5544", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "VMware / VMware ESXi and Horizon DaaS", "known_ransomware_use": true } ] }, "ios": { "product_url": "https://endoflife.ai/ios", "cve_count": 84, "latest_added": "2026-09-29", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-86950", "date_added": "2026-09-29", "due_date": "2026-10-13", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Apple Multiple Products Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43510", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Improper Locking Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43520", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Classic Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31277", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41974", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS and iPadOS Use-After-Free Vulnerability", "product_as_filed": "Apple / iOS and iPadOS", "known_ransomware_use": false }, { "cve": "CVE-2023-43000", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple products Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2026-20700", "date_added": "2026-02-12", "due_date": "2026-03-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43529", "date_added": "2025-12-15", "due_date": "2026-01-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Use-After-Free WebKit Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-48503", "date_added": "2025-10-20", "due_date": "2025-11-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43300", "date_added": "2025-08-21", "due_date": "2025-09-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2025-43200", "date_added": "2025-06-16", "due_date": "2025-07-07", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31201", "date_added": "2025-04-17", "due_date": "2025-05-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Arbitrary Read and Write Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31200", "date_added": "2025-04-17", "due_date": "2025-05-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-24201", "date_added": "2025-03-13", "due_date": "2025-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-24200", "date_added": "2025-02-12", "due_date": "2025-03-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS and iPadOS Incorrect Authorization Vulnerability", "product_as_filed": "Apple / iOS and iPadOS", "known_ransomware_use": false }, { "cve": "CVE-2025-24085", "date_added": "2025-01-29", "due_date": "2025-02-19", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-44309", "date_added": "2024-11-21", "due_date": "2024-12-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-44308", "date_added": "2024-11-21", "due_date": "2024-12-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23225", "date_added": "2024-03-06", "due_date": "2024-03-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23296", "date_added": "2024-03-06", "due_date": "2024-03-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-48618", "date_added": "2024-01-31", "due_date": "2024-02-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23222", "date_added": "2024-01-23", "due_date": "2024-02-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41990", "date_added": "2024-01-08", "due_date": "2024-01-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-42917", "date_added": "2023-12-04", "due_date": "2023-12-25", "required_action": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-42916", "date_added": "2023-12-04", "due_date": "2023-12-25", "required_action": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-42824", "date_added": "2023-10-05", "due_date": "2023-10-26", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability", "product_as_filed": "Apple / iOS and iPadOS", "known_ransomware_use": false }, { "cve": "CVE-2023-41991", "date_added": "2023-09-25", "due_date": "2023-10-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Improper Certificate Validation Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41992", "date_added": "2023-09-25", "due_date": "2023-10-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Kernel Privilege Escalation Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41993", "date_added": "2023-09-25", "due_date": "2023-10-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41064", "date_added": "2023-09-11", "due_date": "2023-10-02", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2023-41061", "date_added": "2023-09-11", "due_date": "2023-10-02", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2023-38606", "date_added": "2023-07-26", "due_date": "2023-08-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Kernel Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-37450", "date_added": "2023-07-13", "due_date": "2023-08-03", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32434", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32435", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32439", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32409", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Sandbox Escape Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-28204", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32373", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-28206", "date_added": "2023-04-10", "due_date": "2023-05-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2023-28205", "date_added": "2023-04-10", "due_date": "2023-05-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30900", "date_added": "2023-03-30", "due_date": "2023-04-20", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2023-23529", "date_added": "2023-02-14", "due_date": "2023-03-07", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-42856", "date_added": "2022-12-14", "due_date": "2023-01-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS Type Confusion Vulnerability", "product_as_filed": "Apple / iOS", "known_ransomware_use": false }, { "cve": "CVE-2022-42827", "date_added": "2022-10-25", "due_date": "2022-11-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS and iPadOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS and iPadOS", "known_ransomware_use": false }, { "cve": "CVE-2022-32917", "date_added": "2022-09-14", "due_date": "2022-10-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2020-9934", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Input Validation Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-31010", "date_added": "2022-08-25", "due_date": "2022-09-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability", "product_as_filed": "Apple / iOS, macOS, watchOS", "known_ransomware_use": false }, { "cve": "CVE-2022-32894", "date_added": "2022-08-18", "due_date": "2022-09-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS and macOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS and macOS", "known_ransomware_use": false }, { "cve": "CVE-2022-32893", "date_added": "2022-08-18", "due_date": "2022-09-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS and macOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30983", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS and iPadOS Buffer Overflow Vulnerability", "product_as_filed": "Apple / iOS and iPadOS", "known_ransomware_use": false }, { "cve": "CVE-2020-3837", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-9907", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2019-8605", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2018-4344", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2016-4655", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS Information Disclosure Vulnerability", "product_as_filed": "Apple / iOS", "known_ransomware_use": false }, { "cve": "CVE-2016-4656", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS Memory Corruption Vulnerability", "product_as_filed": "Apple / iOS", "known_ransomware_use": false }, { "cve": "CVE-2016-4657", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS Webkit Memory Corruption Vulnerability", "product_as_filed": "Apple / iOS", "known_ransomware_use": false }, { "cve": "CVE-2019-7287", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS Memory Corruption Vulnerability", "product_as_filed": "Apple / iOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30883", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2019-7286", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-22620", "date_added": "2022-02-11", "due_date": "2022-02-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2022-22587", "date_added": "2022-01-28", "due_date": "2022-02-11", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Memory Corruption Vulnerability", "product_as_filed": "Apple / iOS and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30858", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, macOS Use-After-Free Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2019-6223", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS and macOS Group Facetime Vulnerability", "product_as_filed": "Apple / iOS and macOS", "known_ransomware_use": false }, { "cve": "CVE-2020-9818", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2020-9819", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30762", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS WebKit Use-After-Free Vulnerability", "product_as_filed": "Apple / iOS", "known_ransomware_use": false }, { "cve": "CVE-2021-1870", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-1871", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-1879", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30666", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS WebKit Buffer Overflow Vulnerability", "product_as_filed": "Apple / iOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30761", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / iOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30869", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Type Confusion Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30860", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27930", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30807", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27950", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Initialization Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27932", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-1782", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Race Condition Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30661", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Storage Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30665", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30663", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-9859", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false } ] }, "internet-explorer": { "product_url": "https://endoflife.ai/internet-explorer", "cve_count": 40, "latest_added": "2026-05-20", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2010-0249", "date_added": "2026-05-20", "due_date": "2026-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2010-0806", "date_added": "2026-05-20", "due_date": "2026-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2010-3962", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2013-3893", "date_added": "2025-08-12", "due_date": "2025-09-02", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Internet Explorer Resource Management Errors Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2012-4792", "date_added": "2024-07-23", "due_date": "2024-08-13", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2013-3163", "date_added": "2023-03-30", "due_date": "2023-04-20", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2012-4969", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2015-0071", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer ASLR Bypass Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2015-2425", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2014-4123", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2014-2817", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2013-7331", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2017-0149", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2017-0210", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2016-0162", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2016-3351", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer and Edge Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Internet Explorer and Edge", "known_ransomware_use": true }, { "cve": "CVE-2016-3298", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2019-0676", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2014-0322", "date_added": "2022-05-04", "due_date": "2022-05-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2015-2502", "date_added": "2022-04-13", "due_date": "2022-05-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2017-0059", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2017-0037", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Edge and Internet Explorer Type Confusion Vulnerability", "product_as_filed": "Microsoft / Edge and Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2016-0189", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": true }, { "cve": "CVE-2015-2419", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2013-2551", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": true }, { "cve": "CVE-2018-8373", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Scripting Engine Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer Scripting Engine", "known_ransomware_use": false }, { "cve": "CVE-2013-3897", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2013-1347", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2017-0222", "date_added": "2022-02-25", "due_date": "2022-08-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2019-0752", "date_added": "2022-02-15", "due_date": "2022-08-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Type Confusion Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": true }, { "cve": "CVE-2014-1776", "date_added": "2022-01-28", "due_date": "2022-07-28", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2020-0878", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Edge and Internet Explorer Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Edge and Internet Explorer", "known_ransomware_use": true }, { "cve": "CVE-2021-26411", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": true }, { "cve": "CVE-2018-8653", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2021-27085", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2020-0674", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2019-1367", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": true }, { "cve": "CVE-2020-1380", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2019-1429", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": false }, { "cve": "CVE-2020-0968", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Internet Explorer", "known_ransomware_use": true } ] }, "ipados": { "product_url": "https://endoflife.ai/ipados", "cve_count": 62, "latest_added": "2026-09-29", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-86950", "date_added": "2026-09-29", "due_date": "2026-10-13", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Apple Multiple Products Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43510", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Improper Locking Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43520", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Classic Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31277", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41974", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS and iPadOS Use-After-Free Vulnerability", "product_as_filed": "Apple / iOS and iPadOS", "known_ransomware_use": false }, { "cve": "CVE-2023-43000", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple products Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30952", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Integer Overflow or Wraparound Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43529", "date_added": "2025-12-15", "due_date": "2026-01-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Use-After-Free WebKit Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43300", "date_added": "2025-08-21", "due_date": "2025-09-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2025-43200", "date_added": "2025-06-16", "due_date": "2025-07-07", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31201", "date_added": "2025-04-17", "due_date": "2025-05-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Arbitrary Read and Write Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31200", "date_added": "2025-04-17", "due_date": "2025-05-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-24201", "date_added": "2025-03-13", "due_date": "2025-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-24200", "date_added": "2025-02-12", "due_date": "2025-03-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS and iPadOS Incorrect Authorization Vulnerability", "product_as_filed": "Apple / iOS and iPadOS", "known_ransomware_use": false }, { "cve": "CVE-2024-23225", "date_added": "2024-03-06", "due_date": "2024-03-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23296", "date_added": "2024-03-06", "due_date": "2024-03-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-48618", "date_added": "2024-01-31", "due_date": "2024-02-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23222", "date_added": "2024-01-23", "due_date": "2024-02-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41990", "date_added": "2024-01-08", "due_date": "2024-01-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-42917", "date_added": "2023-12-04", "due_date": "2023-12-25", "required_action": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-42916", "date_added": "2023-12-04", "due_date": "2023-12-25", "required_action": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-42824", "date_added": "2023-10-05", "due_date": "2023-10-26", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability", "product_as_filed": "Apple / iOS and iPadOS", "known_ransomware_use": false }, { "cve": "CVE-2023-41991", "date_added": "2023-09-25", "due_date": "2023-10-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Improper Certificate Validation Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41992", "date_added": "2023-09-25", "due_date": "2023-10-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Kernel Privilege Escalation Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41993", "date_added": "2023-09-25", "due_date": "2023-10-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41064", "date_added": "2023-09-11", "due_date": "2023-10-02", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2023-41061", "date_added": "2023-09-11", "due_date": "2023-10-02", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2023-38606", "date_added": "2023-07-26", "due_date": "2023-08-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Kernel Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-37450", "date_added": "2023-07-13", "due_date": "2023-08-03", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32434", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32435", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32439", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32409", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Sandbox Escape Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-28204", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32373", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-28206", "date_added": "2023-04-10", "due_date": "2023-05-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2023-28205", "date_added": "2023-04-10", "due_date": "2023-05-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30900", "date_added": "2023-03-30", "due_date": "2023-04-20", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2023-23529", "date_added": "2023-02-14", "due_date": "2023-03-07", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-42827", "date_added": "2022-10-25", "due_date": "2022-11-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS and iPadOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS and iPadOS", "known_ransomware_use": false }, { "cve": "CVE-2022-32917", "date_added": "2022-09-14", "due_date": "2022-10-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2020-9934", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Input Validation Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30983", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS and iPadOS Buffer Overflow Vulnerability", "product_as_filed": "Apple / iOS and iPadOS", "known_ransomware_use": false }, { "cve": "CVE-2020-3837", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-9907", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-22620", "date_added": "2022-02-11", "due_date": "2022-02-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30858", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, macOS Use-After-Free Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2020-9818", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2020-9819", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2021-1870", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-1871", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-1879", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30869", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Type Confusion Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30860", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27930", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30807", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27950", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Initialization Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27932", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30661", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Storage Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30665", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30663", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-9859", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false } ] }, "jquery": { "product_url": "https://endoflife.ai/jquery", "cve_count": 1, "latest_added": "2025-01-23", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2020-11023", "date_added": "2025-01-23", "due_date": "2025-02-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "JQuery Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "JQuery / JQuery", "known_ransomware_use": false } ] }, "joomla": { "product_url": "https://endoflife.ai/joomla", "cve_count": 2, "latest_added": "2026-06-16", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-48907", "date_added": "2026-06-16", "due_date": "2026-06-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Widget Factory Joomla Content Editor Improper Access Control Vulnerability", "product_as_filed": "Widget Factory / Joomla Content Editor ", "known_ransomware_use": false }, { "cve": "CVE-2023-23752", "date_added": "2024-01-08", "due_date": "2024-01-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Joomla! Improper Access Control Vulnerability", "product_as_filed": "Joomla! / Joomla!", "known_ransomware_use": false } ] }, "jenkins": { "product_url": "https://endoflife.ai/jenkins", "cve_count": 6, "latest_added": "2025-10-02", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2017-1000353", "date_added": "2025-10-02", "due_date": "2025-10-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Jenkins Remote Code Execution Vulnerability", "product_as_filed": "Jenkins / Jenkins", "known_ransomware_use": false }, { "cve": "CVE-2024-23897", "date_added": "2024-08-19", "due_date": "2024-09-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Jenkins Command Line Interface (CLI) Path Traversal Vulnerability", "product_as_filed": "Jenkins / Jenkins Command Line Interface (CLI)", "known_ransomware_use": true }, { "cve": "CVE-2015-5317", "date_added": "2023-05-12", "due_date": "2023-06-02", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Jenkins User Interface (UI) Information Disclosure Vulnerability", "product_as_filed": "Jenkins / Jenkins User Interface (UI)", "known_ransomware_use": false }, { "cve": "CVE-2019-1003029", "date_added": "2022-04-25", "due_date": "2022-05-16", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Jenkins Script Security Plugin Sandbox Bypass Vulnerability", "product_as_filed": "Jenkins / Script Security Plugin", "known_ransomware_use": false }, { "cve": "CVE-2019-1003030", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Jenkins Matrix Project Plugin Remote Code Execution Vulnerability", "product_as_filed": "Jenkins / Matrix Project Plugin", "known_ransomware_use": false }, { "cve": "CVE-2018-1000861", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Jenkins / Jenkins Stapler Web Framework", "known_ransomware_use": false } ] }, "kibana": { "product_url": "https://endoflife.ai/kibana", "cve_count": 1, "latest_added": "2022-01-10", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2019-7609", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Kibana Arbitrary Code Execution", "product_as_filed": "Elastic / Kibana", "known_ransomware_use": false } ] }, "laravel": { "product_url": "https://endoflife.ai/laravel", "cve_count": 3, "latest_added": "2026-03-20", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-54068", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Laravel Livewire Code Injection Vulnerability", "product_as_filed": "Laravel / Livewire", "known_ransomware_use": false }, { "cve": "CVE-2018-15133", "date_added": "2024-01-16", "due_date": "2024-02-06", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Laravel Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Laravel / Laravel Framework", "known_ransomware_use": false }, { "cve": "CVE-2021-3129", "date_added": "2023-09-18", "due_date": "2023-10-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Laravel Ignition File Upload Vulnerability", "product_as_filed": "Laravel / Ignition", "known_ransomware_use": true } ] }, "linux": { "product_url": "https://endoflife.ai/linux", "cve_count": 31, "latest_added": "2026-09-18", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-39964", "date_added": "2026-09-18", "due_date": "2026-09-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Linux Kernel Race Condition Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2026-53266", "date_added": "2026-09-18", "due_date": "2026-09-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Linux Kernel Out-of-Bounds Write Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2025-39682", "date_added": "2026-09-18", "due_date": "2026-09-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2026-53362", "date_added": "2026-08-27", "due_date": "2026-08-30", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Linux Kernel Unspecified Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2022-0995", "date_added": "2026-08-26", "due_date": "2026-08-29", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Linux Kernel Out-of-Bounds Write Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2022-0492", "date_added": "2026-06-02", "due_date": "2026-06-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel Improper Authentication Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2026-31431", "date_added": "2026-05-01", "due_date": "2026-05-15", "required_action": "\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2018-14634", "date_added": "2026-01-26", "due_date": "2026-02-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel Integer Overflow Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2021-22555", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel Heap Out-of-Bounds Write Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2025-38352", "date_added": "2025-09-04", "due_date": "2025-09-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2023-0386", "date_added": "2025-06-17", "due_date": "2025-07-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel Improper Ownership Management Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2024-53150", "date_added": "2025-04-09", "due_date": "2025-04-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel Out-of-Bounds Read Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2024-53197", "date_added": "2025-04-09", "due_date": "2025-04-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel Out-of-Bounds Access Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2024-50302", "date_added": "2025-03-04", "due_date": "2025-03-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel Use of Uninitialized Resource Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2024-53104", "date_added": "2025-02-05", "due_date": "2025-02-26", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel Out-of-Bounds Write Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2017-1000253", "date_added": "2024-09-09", "due_date": "2024-09-30", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel PIE Stack Buffer Corruption Vulnerability ", "product_as_filed": "Linux / Kernel", "known_ransomware_use": true }, { "cve": "CVE-2022-0185", "date_added": "2024-08-21", "due_date": "2024-09-11", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "Linux Kernel Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2022-2586", "date_added": "2024-06-26", "due_date": "2024-07-17", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "Linux Kernel Use-After-Free Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2024-1086", "date_added": "2024-05-30", "due_date": "2024-06-20", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Linux Kernel Use-After-Free Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": true }, { "cve": "CVE-2014-0196", "date_added": "2023-05-12", "due_date": "2023-06-02", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "vulnerability_name": "Linux Kernel Race Condition Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2010-3904", "date_added": "2023-05-12", "due_date": "2023-06-02", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "vulnerability_name": "Linux Kernel Improper Input Validation Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2023-0266", "date_added": "2023-03-30", "due_date": "2023-04-20", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Linux Kernel Use-After-Free Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2021-3493", "date_added": "2022-10-20", "due_date": "2022-11-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Linux Kernel Privilege Escalation Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2013-6282", "date_added": "2022-09-15", "due_date": "2022-10-06", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Linux Kernel Improper Input Validation Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2013-2596", "date_added": "2022-09-15", "due_date": "2022-10-06", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Linux Kernel Integer Overflow Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2013-2094", "date_added": "2022-09-15", "due_date": "2022-10-06", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Linux Kernel Privilege Escalation Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2014-3153", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Linux Kernel Privilege Escalation Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2022-0847", "date_added": "2022-04-25", "due_date": "2022-05-16", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Linux Kernel Privilege Escalation Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2021-22600", "date_added": "2022-04-11", "due_date": "2022-05-02", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Linux Kernel Privilege Escalation Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2016-5195", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Linux Kernel Race Condition Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false }, { "cve": "CVE-2019-13272", "date_added": "2021-12-10", "due_date": "2022-06-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Linux Kernel Improper Privilege Management Vulnerability", "product_as_filed": "Linux / Kernel", "known_ransomware_use": false } ] }, "macos": { "product_url": "https://endoflife.ai/macos", "cve_count": 74, "latest_added": "2026-09-29", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-86950", "date_added": "2026-09-29", "due_date": "2026-10-13", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Apple Multiple Products Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2026-65400", "date_added": "2026-08-18", "due_date": "2026-08-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Apple macOS Improper Authentication Vulnerability", "product_as_filed": "Apple / macOS", "known_ransomware_use": false }, { "cve": "CVE-2025-43510", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Improper Locking Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43520", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Classic Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31277", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-43000", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple products Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30952", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Integer Overflow or Wraparound Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2026-20700", "date_added": "2026-02-12", "due_date": "2026-03-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43529", "date_added": "2025-12-15", "due_date": "2026-01-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Use-After-Free WebKit Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-48503", "date_added": "2025-10-20", "due_date": "2025-11-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43300", "date_added": "2025-08-21", "due_date": "2025-09-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2025-43200", "date_added": "2025-06-16", "due_date": "2025-07-07", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31201", "date_added": "2025-04-17", "due_date": "2025-05-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Arbitrary Read and Write Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31200", "date_added": "2025-04-17", "due_date": "2025-05-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-24201", "date_added": "2025-03-13", "due_date": "2025-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-24085", "date_added": "2025-01-29", "due_date": "2025-02-19", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-44309", "date_added": "2024-11-21", "due_date": "2024-12-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-44308", "date_added": "2024-11-21", "due_date": "2024-12-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23225", "date_added": "2024-03-06", "due_date": "2024-03-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23296", "date_added": "2024-03-06", "due_date": "2024-03-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-48618", "date_added": "2024-01-31", "due_date": "2024-02-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23222", "date_added": "2024-01-23", "due_date": "2024-02-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41990", "date_added": "2024-01-08", "due_date": "2024-01-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-42917", "date_added": "2023-12-04", "due_date": "2023-12-25", "required_action": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-42916", "date_added": "2023-12-04", "due_date": "2023-12-25", "required_action": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41991", "date_added": "2023-09-25", "due_date": "2023-10-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Improper Certificate Validation Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41992", "date_added": "2023-09-25", "due_date": "2023-10-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Kernel Privilege Escalation Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41993", "date_added": "2023-09-25", "due_date": "2023-10-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41064", "date_added": "2023-09-11", "due_date": "2023-10-02", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2023-38606", "date_added": "2023-07-26", "due_date": "2023-08-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Kernel Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-37450", "date_added": "2023-07-13", "due_date": "2023-08-03", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32434", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32435", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32439", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32409", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Sandbox Escape Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-28204", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32373", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2019-8526", "date_added": "2023-04-17", "due_date": "2023-05-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple macOS Use-After-Free Vulnerability", "product_as_filed": "Apple / macOS", "known_ransomware_use": false }, { "cve": "CVE-2023-28206", "date_added": "2023-04-10", "due_date": "2023-05-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2023-28205", "date_added": "2023-04-10", "due_date": "2023-05-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30900", "date_added": "2023-03-30", "due_date": "2023-04-20", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2022-32917", "date_added": "2022-09-14", "due_date": "2022-10-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2020-9934", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Input Validation Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-31010", "date_added": "2022-08-25", "due_date": "2022-09-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability", "product_as_filed": "Apple / iOS, macOS, watchOS", "known_ransomware_use": false }, { "cve": "CVE-2022-32894", "date_added": "2022-08-18", "due_date": "2022-09-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS and macOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS and macOS", "known_ransomware_use": false }, { "cve": "CVE-2022-32893", "date_added": "2022-08-18", "due_date": "2022-09-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS and macOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS and macOS", "known_ransomware_use": false }, { "cve": "CVE-2020-3837", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2019-8605", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2018-4344", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30883", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2019-7286", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-22675", "date_added": "2022-04-04", "due_date": "2022-04-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple macOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / macOS", "known_ransomware_use": false }, { "cve": "CVE-2022-22674", "date_added": "2022-04-04", "due_date": "2022-04-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple macOS Out-of-Bounds Read Vulnerability", "product_as_filed": "Apple / macOS", "known_ransomware_use": false }, { "cve": "CVE-2022-22620", "date_added": "2022-02-11", "due_date": "2022-02-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2015-1130", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple OS X Authentication Bypass Vulnerability", "product_as_filed": "Apple / OS X", "known_ransomware_use": false }, { "cve": "CVE-2014-4404", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple OS X Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Apple / OS X", "known_ransomware_use": false }, { "cve": "CVE-2022-22587", "date_added": "2022-01-28", "due_date": "2022-02-11", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Memory Corruption Vulnerability", "product_as_filed": "Apple / iOS and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30858", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, macOS Use-After-Free Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2019-6223", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS and macOS Group Facetime Vulnerability", "product_as_filed": "Apple / iOS and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-1870", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-1871", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30713", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple macOS Unspecified Vulnerability", "product_as_filed": "Apple / macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30657", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple macOS Unspecified Vulnerability", "product_as_filed": "Apple / macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30869", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and macOS Type Confusion Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and macOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30860", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27930", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30807", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27950", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Initialization Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27932", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-1782", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Race Condition Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30661", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Storage Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30665", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30663", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-9859", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false } ] }, "magento": { "product_url": "https://endoflife.ai/magento", "cve_count": 5, "latest_added": "2026-09-24", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-71362", "date_added": "2026-09-24", "due_date": "2026-09-27", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Adobe Commerce and Magento Incorrect Authorization Vulnerability ", "product_as_filed": "Adobe / Commerce and Magento ", "known_ransomware_use": false }, { "cve": "CVE-2026-75650", "date_added": "2026-09-08", "due_date": "2026-09-11", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability", "product_as_filed": "Adobe / Commerce and Magento", "known_ransomware_use": false }, { "cve": "CVE-2025-54236", "date_added": "2025-10-24", "due_date": "2025-11-14", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe Commerce and Magento Improper Input Validation Vulnerability", "product_as_filed": "Adobe / Commerce and Magento", "known_ransomware_use": false }, { "cve": "CVE-2024-34102", "date_added": "2024-07-17", "due_date": "2024-08-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability", "product_as_filed": "Adobe / Commerce and Magento Open Source", "known_ransomware_use": false }, { "cve": "CVE-2022-24086", "date_added": "2022-02-15", "due_date": "2022-03-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability", "product_as_filed": "Adobe / Commerce and Magento Open Source", "known_ransomware_use": false } ] }, "metabase": { "product_url": "https://endoflife.ai/metabase", "cve_count": 2, "latest_added": "2026-08-11", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-72898", "date_added": "2026-08-11", "due_date": "2026-08-14", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Metabase SQL Injection Vulnerability", "product_as_filed": "Metabase / Metabase", "known_ransomware_use": false }, { "cve": "CVE-2021-41277", "date_added": "2024-11-12", "due_date": "2024-12-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Metabase GeoJSON API Local File Inclusion Vulnerability", "product_as_filed": "Metabase / Metabase", "known_ransomware_use": false } ] }, "mongodb": { "product_url": "https://endoflife.ai/mongodb", "cve_count": 2, "latest_added": "2025-12-29", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-14847", "date_added": "2025-12-29", "due_date": "2026-01-19", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability", "product_as_filed": "MongoDB / MongoDB and MongoDB Server", "known_ransomware_use": false }, { "cve": "CVE-2019-10758", "date_added": "2021-12-10", "due_date": "2022-06-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "MongoDB mongo-express Remote Code Execution Vulnerability", "product_as_filed": "MongoDB / mongo-express", "known_ransomware_use": false } ] }, "mssqlserver": { "product_url": "https://endoflife.ai/mssqlserver", "cve_count": 2, "latest_added": "2026-08-26", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2019-1068", "date_added": "2026-08-26", "due_date": "2026-08-29", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft SQL Server Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / SQL Server", "known_ransomware_use": false }, { "cve": "CVE-2020-0618", "date_added": "2024-09-18", "due_date": "2024-10-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / SQL Server", "known_ransomware_use": true } ] }, "msexchange": { "product_url": "https://endoflife.ai/msexchange", "cve_count": 19, "latest_added": "2026-05-15", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-42897", "date_added": "2026-05-15", "due_date": "2026-05-29", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Exchange Server Cross-Site Scripting Vulnerability", "product_as_filed": "Microsoft / Microsoft", "known_ransomware_use": false }, { "cve": "CVE-2023-21529", "date_added": "2026-04-13", "due_date": "2026-04-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2021-31196", "date_added": "2024-08-21", "due_date": "2024-09-11", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Exchange Server Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": false }, { "cve": "CVE-2024-21410", "date_added": "2024-02-15", "due_date": "2024-03-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": false }, { "cve": "CVE-2022-41080", "date_added": "2023-01-10", "due_date": "2023-01-31", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2022-41082", "date_added": "2022-09-30", "due_date": "2022-10-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2022-41040", "date_added": "2022-09-30", "due_date": "2022-10-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Server-Side Request Forgery Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2018-8581", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2021-33766", "date_added": "2022-01-18", "due_date": "2022-02-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Information Disclosure", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": false }, { "cve": "CVE-2021-42321", "date_added": "2021-11-17", "due_date": "2021-12-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Exchange", "known_ransomware_use": true }, { "cve": "CVE-2020-17144", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": false }, { "cve": "CVE-2021-34523", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2020-0688", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2021-34473", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2021-31207", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2021-26855", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2021-26858", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2021-27065", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true }, { "cve": "CVE-2021-26857", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Exchange Server Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Exchange Server", "known_ransomware_use": true } ] }, "nexus": { "product_url": "https://endoflife.ai/nexus", "cve_count": 2, "latest_added": "2021-12-10", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2019-7238", "date_added": "2021-12-10", "due_date": "2022-06-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability", "product_as_filed": "Sonatype / Nexus Repository Manager", "known_ransomware_use": false }, { "cve": "CVE-2020-10199", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Sonatype Nexus Repository Remote Code Execution Vulnerability", "product_as_filed": "Sonatype / Nexus Repository", "known_ransomware_use": false } ] }, "notepad-plus-plus": { "product_url": "https://endoflife.ai/notepad-plus-plus", "cve_count": 1, "latest_added": "2026-02-12", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-15556", "date_added": "2026-02-12", "due_date": "2026-03-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Notepad++ Download of Code Without Integrity Check Vulnerability", "product_as_filed": "Notepad++ / Notepad++", "known_ransomware_use": false } ] }, "office": { "product_url": "https://endoflife.ai/office", "cve_count": 45, "latest_added": "2026-04-14", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2009-0238", "date_added": "2026-04-14", "due_date": "2026-04-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Office Remote Code Execution", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2012-1854", "date_added": "2026-04-13", "due_date": "2026-04-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability", "product_as_filed": "Microsoft / Visual Basic for Applications (VBA)", "known_ransomware_use": false }, { "cve": "CVE-2026-21514", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2026-21509", "date_added": "2026-01-26", "due_date": "2026-02-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Office Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2009-0556", "date_added": "2026-01-07", "due_date": "2026-01-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Office PowerPoint Code Injection Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2007-0671", "date_added": "2025-08-12", "due_date": "2025-09-02", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Office Excel Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2024-21413", "date_added": "2025-02-06", "due_date": "2025-02-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Outlook Improper Input Validation Vulnerability", "product_as_filed": "Microsoft / Office Outlook", "known_ransomware_use": false }, { "cve": "CVE-2024-38226", "date_added": "2024-09-10", "due_date": "2024-10-01", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Publisher Protection Mechanism Failure Vulnerability", "product_as_filed": "Microsoft / Publisher", "known_ransomware_use": false }, { "cve": "CVE-2024-38189", "date_added": "2024-08-13", "due_date": "2024-09-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Project Remote Code Execution Vulnerability ", "product_as_filed": "Microsoft / Project", "known_ransomware_use": false }, { "cve": "CVE-2023-36761", "date_added": "2023-09-12", "due_date": "2023-10-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Word Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Word", "known_ransomware_use": false }, { "cve": "CVE-2023-35311", "date_added": "2023-07-11", "due_date": "2023-08-01", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "Microsoft Outlook Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Outlook", "known_ransomware_use": false }, { "cve": "CVE-2023-23397", "date_added": "2023-03-14", "due_date": "2023-04-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Outlook Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2023-21715", "date_added": "2023-02-14", "due_date": "2023-03-07", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Publisher Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2013-1331", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2009-0563", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2009-0557", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Object Record Corruption Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2006-2492", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Word Malformed Object Pointer Vulnerability", "product_as_filed": "Microsoft / Word", "known_ransomware_use": false }, { "cve": "CVE-2010-2572", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft PowerPoint Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / PowerPoint", "known_ransomware_use": false }, { "cve": "CVE-2021-38646", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": true }, { "cve": "CVE-2015-1770", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Uninitialized Memory Use Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2012-2539", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Word Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Word", "known_ransomware_use": false }, { "cve": "CVE-2017-11826", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2017-0261", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2016-7193", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2015-2545", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Malformed EPS File Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2015-1642", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2012-1856", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2010-3333", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Stack-based Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2019-1297", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Excel Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Excel", "known_ransomware_use": false }, { "cve": "CVE-2016-7262", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Excel", "known_ransomware_use": false }, { "cve": "CVE-2009-3129", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Excel Featheader Record Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Excel", "known_ransomware_use": false }, { "cve": "CVE-2015-2424", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft PowerPoint Memory Corruption Vulnerability", "product_as_filed": "Microsoft / PowerPoint", "known_ransomware_use": false }, { "cve": "CVE-2017-8570", "date_added": "2022-02-25", "due_date": "2022-08-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2014-1761", "date_added": "2022-02-15", "due_date": "2022-08-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Word Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Word", "known_ransomware_use": false }, { "cve": "CVE-2017-0262", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2021-42292", "date_added": "2021-11-17", "due_date": "2021-12-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Excel Security Feature Bypass", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2018-0798", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2018-0802", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": true }, { "cve": "CVE-2015-1641", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2017-11882", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": true }, { "cve": "CVE-2021-27059", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2017-0199", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office and WordPad Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Office and WordPad", "known_ransomware_use": true }, { "cve": "CVE-2017-11774", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Outlook Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2016-3235", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office OLE DLL Side Loading Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2012-0158", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / MSCOMCTL.OCX", "known_ransomware_use": true } ] }, "openbsd": { "product_url": "https://endoflife.ai/openbsd", "cve_count": 1, "latest_added": "2022-03-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2020-7247", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "OpenSMTPD Remote Code Execution Vulnerability", "product_as_filed": "OpenBSD / OpenSMTPD", "known_ransomware_use": false } ] }, "openssl": { "product_url": "https://endoflife.ai/openssl", "cve_count": 1, "latest_added": "2022-05-04", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2014-0160", "date_added": "2022-05-04", "due_date": "2022-05-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "OpenSSL Information Disclosure Vulnerability", "product_as_filed": "OpenSSL / OpenSSL", "known_ransomware_use": false } ] }, "oracle-jdk": { "product_url": "https://endoflife.ai/oracle-jdk", "cve_count": 13, "latest_added": "2023-05-12", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2016-3427", "date_added": "2023-05-12", "due_date": "2023-06-02", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Java SE and JRockit Unspecified Vulnerability", "product_as_filed": "Oracle / Java SE and JRockit", "known_ransomware_use": false }, { "cve": "CVE-2013-2423", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle JRE Unspecified Vulnerability", "product_as_filed": "Oracle / Java Runtime Environment (JRE)", "known_ransomware_use": false }, { "cve": "CVE-2013-0431", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle JRE Sandbox Bypass Vulnerability", "product_as_filed": "Oracle / Java Runtime Environment (JRE)", "known_ransomware_use": true }, { "cve": "CVE-2013-0422", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle JRE Remote Code Execution Vulnerability", "product_as_filed": "Oracle / Java Runtime Environment (JRE)", "known_ransomware_use": true }, { "cve": "CVE-2010-0840", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle JRE Unspecified Vulnerability", "product_as_filed": "Oracle / Java Runtime Environment (JRE)", "known_ransomware_use": false }, { "cve": "CVE-2013-2465", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Java SE Unspecified Vulnerability", "product_as_filed": "Oracle / Java SE", "known_ransomware_use": true }, { "cve": "CVE-2012-5076", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Java SE Sandbox Bypass Vulnerability", "product_as_filed": "Oracle / Java SE", "known_ransomware_use": false }, { "cve": "CVE-2011-3544", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "product_as_filed": "Oracle / Java SE JDK and JRE", "known_ransomware_use": false }, { "cve": "CVE-2015-4902", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Java SE Integrity Check Vulnerability", "product_as_filed": "Oracle / Java SE", "known_ransomware_use": false }, { "cve": "CVE-2015-2590", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability", "product_as_filed": "Oracle / Java SE", "known_ransomware_use": false }, { "cve": "CVE-2012-4681", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "product_as_filed": "Oracle / Java SE", "known_ransomware_use": true }, { "cve": "CVE-2012-1723", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "product_as_filed": "Oracle / Java SE", "known_ransomware_use": true }, { "cve": "CVE-2012-0507", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability", "product_as_filed": "Oracle / Java SE", "known_ransomware_use": true } ] }, "oracle-solaris": { "product_url": "https://endoflife.ai/oracle-solaris", "cve_count": 2, "latest_added": "2022-05-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2019-3010", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Solaris Privilege Escalation Vulnerability", "product_as_filed": "Oracle / Solaris", "known_ransomware_use": false }, { "cve": "CVE-2020-14871", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability", "product_as_filed": "Oracle / Solaris and Zettabyte File System (ZFS)", "known_ransomware_use": false } ] }, "panos": { "product_url": "https://endoflife.ai/panos", "cve_count": 13, "latest_added": "2026-10-14", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-0322", "date_added": "2026-10-14", "due_date": "2026-10-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Palo Alto Networks PAN-OS Code Injection Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": false }, { "cve": "CVE-2026-0257", "date_added": "2026-05-29", "due_date": "2026-06-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": true }, { "cve": "CVE-2026-0300", "date_added": "2026-05-06", "due_date": "2026-05-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Until the vendor releases an official fix, the following workaround should be implemented: - Restrict User-ID Authentication Portal access to only trusted zones. - Disable User-ID Authentication Portal if not required. 5/13/2026: Palo Alto has released a variety of patches. If these are relevant to your environment, please apply the designated patch.", "vulnerability_name": "Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": false }, { "cve": "CVE-2025-0111", "date_added": "2025-02-20", "due_date": "2025-03-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Palo Alto Networks PAN-OS File Read Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": false }, { "cve": "CVE-2025-0108", "date_added": "2025-02-18", "due_date": "2025-03-11", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": false }, { "cve": "CVE-2024-3393", "date_added": "2024-12-30", "due_date": "2025-01-20", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": false }, { "cve": "CVE-2024-9474", "date_added": "2024-11-18", "due_date": "2024-12-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.", "vulnerability_name": "Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": true }, { "cve": "CVE-2024-0012", "date_added": "2024-11-18", "due_date": "2024-12-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.", "vulnerability_name": "Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": true }, { "cve": "CVE-2024-3400", "date_added": "2024-04-12", "due_date": "2024-04-19", "required_action": "Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.", "vulnerability_name": "Palo Alto Networks PAN-OS Command Injection Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": true }, { "cve": "CVE-2022-0028", "date_added": "2022-08-22", "due_date": "2022-09-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": false }, { "cve": "CVE-2017-15944", "date_added": "2022-08-18", "due_date": "2022-09-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Palo Alto Networks PAN-OS Remote Code Execution Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": false }, { "cve": "CVE-2020-2021", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Palo Alto Networks PAN-OS Authentication Bypass Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": true }, { "cve": "CVE-2019-1579", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Palo Alto Networks PAN-OS Remote Code Execution Vulnerability", "product_as_filed": "Palo Alto Networks / PAN-OS", "known_ransomware_use": true } ] }, "php": { "product_url": "https://endoflife.ai/php", "cve_count": 3, "latest_added": "2024-06-12", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2024-4577", "date_added": "2024-06-12", "due_date": "2024-07-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "PHP-CGI OS Command Injection Vulnerability", "product_as_filed": "PHP Group / PHP", "known_ransomware_use": true }, { "cve": "CVE-2019-11043", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability", "product_as_filed": "PHP / FastCGI Process Manager (FPM)", "known_ransomware_use": true }, { "cve": "CVE-2012-1823", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "PHP-CGI Query String Parameter Vulnerability", "product_as_filed": "PHP / PHP", "known_ransomware_use": false } ] }, "pixel": { "product_url": "https://endoflife.ai/pixel", "cve_count": 2, "latest_added": "2026-09-16", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-58704", "date_added": "2026-09-16", "due_date": "2026-09-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Google Pixel Improper Authorization Vulnerability", "product_as_filed": "Google / Pixel", "known_ransomware_use": false }, { "cve": "CVE-2021-39793", "date_added": "2022-04-11", "due_date": "2022-05-02", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Google Pixel Out-of-Bounds Write Vulnerability", "product_as_filed": "Google / Pixel", "known_ransomware_use": false } ] }, "phpmyadmin": { "product_url": "https://endoflife.ai/phpmyadmin", "cve_count": 1, "latest_added": "2022-03-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2009-1151", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "phpMyAdmin Remote Code Execution Vulnerability", "product_as_filed": "phpMyAdmin / phpMyAdmin", "known_ransomware_use": false } ] }, "proftpd": { "product_url": "https://endoflife.ai/proftpd", "cve_count": 1, "latest_added": "2026-10-08", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2015-3306", "date_added": "2026-10-08", "due_date": "2026-10-11", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "ProFTPD Improper Access Control Vulnerability", "product_as_filed": "ProFTPD / ProFTPD", "known_ransomware_use": false } ] }, "rails": { "product_url": "https://endoflife.ai/rails", "cve_count": 3, "latest_added": "2025-07-07", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2019-5418", "date_added": "2025-07-07", "due_date": "2025-07-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Rails Ruby on Rails Path Traversal Vulnerability", "product_as_filed": "Rails / Ruby on Rails", "known_ransomware_use": false }, { "cve": "CVE-2016-0752", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ruby on Rails Directory Traversal Vulnerability", "product_as_filed": "Rails / Ruby on Rails", "known_ransomware_use": false }, { "cve": "CVE-2014-0130", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ruby on Rails Directory Traversal Vulnerability", "product_as_filed": "Rails / Ruby on Rails", "known_ransomware_use": false } ] }, "react": { "product_url": "https://endoflife.ai/react", "cve_count": 1, "latest_added": "2025-12-05", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-55182", "date_added": "2025-12-05", "due_date": "2025-12-12", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Meta React Server Components Remote Code Execution Vulnerability", "product_as_filed": "Meta / React Server Components", "known_ransomware_use": true } ] }, "redis": { "product_url": "https://endoflife.ai/redis", "cve_count": 1, "latest_added": "2022-03-28", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2022-0543", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Debian-specific Redis Server Lua Sandbox Escape Vulnerability", "product_as_filed": "Redis / Debian-specific Redis Servers", "known_ransomware_use": false } ] }, "react-native": { "product_url": "https://endoflife.ai/react-native", "cve_count": 1, "latest_added": "2026-02-05", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-11953", "date_added": "2026-02-05", "due_date": "2026-02-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "React Native Community CLI OS Command Injection Vulnerability", "product_as_filed": "React Native Community / CLI", "known_ransomware_use": false } ] }, "roundcube": { "product_url": "https://endoflife.ai/roundcube", "cve_count": 11, "latest_added": "2026-02-20", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-49113", "date_added": "2026-02-20", "due_date": "2026-03-13", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "RoundCube Webmail Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Roundcube / Webmail", "known_ransomware_use": false }, { "cve": "CVE-2025-68461", "date_added": "2026-02-20", "due_date": "2026-03-13", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "RoundCube Webmail Cross-site Scripting Vulnerability", "product_as_filed": "Roundcube / Webmail", "known_ransomware_use": false }, { "cve": "CVE-2024-42009", "date_added": "2025-06-09", "due_date": "2025-06-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "RoundCube Webmail Cross-Site Scripting Vulnerability", "product_as_filed": "Roundcube / Webmail", "known_ransomware_use": false }, { "cve": "CVE-2024-37383", "date_added": "2024-10-24", "due_date": "2024-11-14", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Roundcube / Webmail", "known_ransomware_use": false }, { "cve": "CVE-2020-13965", "date_added": "2024-06-26", "due_date": "2024-07-17", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Roundcube / Webmail", "known_ransomware_use": false }, { "cve": "CVE-2023-43770", "date_added": "2024-02-12", "due_date": "2024-03-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Roundcube / Webmail", "known_ransomware_use": false }, { "cve": "CVE-2023-5631", "date_added": "2023-10-26", "due_date": "2023-11-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Roundcube / Webmail", "known_ransomware_use": false }, { "cve": "CVE-2020-35730", "date_added": "2023-06-22", "due_date": "2023-07-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Roundcube / Roundcube Webmail", "known_ransomware_use": false }, { "cve": "CVE-2020-12641", "date_added": "2023-06-22", "due_date": "2023-07-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Roundcube Webmail Remote Code Execution Vulnerability", "product_as_filed": "Roundcube / Roundcube Webmail", "known_ransomware_use": false }, { "cve": "CVE-2021-44026", "date_added": "2023-06-22", "due_date": "2023-07-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Roundcube Webmail SQL Injection Vulnerability", "product_as_filed": "Roundcube / Roundcube Webmail", "known_ransomware_use": false }, { "cve": "CVE-2017-16651", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Roundcube Webmail File Disclosure Vulnerability", "product_as_filed": "Roundcube / Roundcube Webmail", "known_ransomware_use": false } ] }, "routeros": { "product_url": "https://endoflife.ai/routeros", "cve_count": 5, "latest_added": "2026-09-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-67279", "date_added": "2026-09-25", "due_date": "2026-09-28", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability", "product_as_filed": "MikroTik / RouterOS", "known_ransomware_use": false }, { "cve": "CVE-2026-86060", "date_added": "2026-09-10", "due_date": "2026-09-13", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability", "product_as_filed": "MikroTik / RouterOS", "known_ransomware_use": false }, { "cve": "CVE-2026-67277", "date_added": "2026-09-10", "due_date": "2026-09-13", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "MikroTik RouterOS Missing Authentication for Critical Function Vulnerability", "product_as_filed": "MikroTik / RouterOS", "known_ransomware_use": false }, { "cve": "CVE-2018-7445", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability", "product_as_filed": "MikroTik / RouterOS", "known_ransomware_use": false }, { "cve": "CVE-2018-14847", "date_added": "2021-12-01", "due_date": "2022-06-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "MikroTik Router OS Directory Traversal Vulnerability", "product_as_filed": "MikroTik / RouterOS", "known_ransomware_use": false } ] }, "salt": { "product_url": "https://endoflife.ai/salt", "cve_count": 3, "latest_added": "2021-11-03", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2020-11652", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SaltStack Salt Path Traversal Vulnerability", "product_as_filed": "SaltStack / Salt", "known_ransomware_use": false }, { "cve": "CVE-2020-11651", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SaltStack Salt Authentication Bypass Vulnerability", "product_as_filed": "SaltStack / Salt", "known_ransomware_use": false }, { "cve": "CVE-2020-16846", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SaltStack Salt Shell Injection Vulnerability", "product_as_filed": "SaltStack / Salt", "known_ransomware_use": false } ] }, "samba": { "product_url": "https://endoflife.ai/samba", "cve_count": 1, "latest_added": "2023-03-30", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2017-7494", "date_added": "2023-03-30", "due_date": "2023-04-20", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Samba Remote Code Execution Vulnerability", "product_as_filed": "Samba / Samba", "known_ransomware_use": true } ] }, "samsung-mobile": { "product_url": "https://endoflife.ai/samsung-mobile", "cve_count": 13, "latest_added": "2025-11-10", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-21042", "date_added": "2025-11-10", "due_date": "2025-12-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Samsung Mobile Devices Out-of-Bounds Write Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2025-21043", "date_added": "2025-10-02", "due_date": "2025-10-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Samsung Mobile Devices Out-of-Bounds Write Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2022-22265", "date_added": "2023-09-18", "due_date": "2023-10-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Samsung Mobile Devices Use-After-Free Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2021-25487", "date_added": "2023-06-29", "due_date": "2023-07-20", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable", "vulnerability_name": "Samsung Mobile Devices Out-of-Bounds Read Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2021-25489", "date_added": "2023-06-29", "due_date": "2023-07-20", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable", "vulnerability_name": "Samsung Mobile Devices Improper Input Validation Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2021-25394", "date_added": "2023-06-29", "due_date": "2023-07-20", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable", "vulnerability_name": "Samsung Mobile Devices Race Condition Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2021-25395", "date_added": "2023-06-29", "due_date": "2023-07-20", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable", "vulnerability_name": "Samsung Mobile Devices Race Condition Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2021-25371", "date_added": "2023-06-29", "due_date": "2023-07-20", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable", "vulnerability_name": "Samsung Mobile Devices Unspecified Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2021-25372", "date_added": "2023-06-29", "due_date": "2023-07-20", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable", "vulnerability_name": "Samsung Mobile Devices Improper Boundary Check Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2023-21492", "date_added": "2023-05-19", "due_date": "2023-06-09", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2021-25337", "date_added": "2022-11-08", "due_date": "2022-11-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Samsung Mobile Devices Improper Access Control Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2021-25369", "date_added": "2022-11-08", "due_date": "2022-11-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Samsung Mobile Devices Improper Access Control Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false }, { "cve": "CVE-2021-25370", "date_added": "2022-11-08", "due_date": "2022-11-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Samsung Mobile Devices Memory Corruption Vulnerability", "product_as_filed": "Samsung / Mobile Devices", "known_ransomware_use": false } ] }, "sharepoint": { "product_url": "https://endoflife.ai/sharepoint", "cve_count": 16, "latest_added": "2026-09-25", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-65660", "date_added": "2026-09-25", "due_date": "2026-09-28", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft SharePoint Code Injection Vulnerability", "product_as_filed": "Microsoft / SharePoint", "known_ransomware_use": false }, { "cve": "CVE-2026-55040", "date_added": "2026-08-18", "due_date": "2026-08-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft SharePoint Weak Authentication Vulnerability", "product_as_filed": "Microsoft / SharePoint", "known_ransomware_use": false }, { "cve": "CVE-2026-50522", "date_added": "2026-07-22", "due_date": "2026-07-25", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ", "product_as_filed": "Microsoft / SharePoint", "known_ransomware_use": false }, { "cve": "CVE-2026-58644", "date_added": "2026-07-16", "due_date": "2026-07-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Microsoft / SharePoint", "known_ransomware_use": false }, { "cve": "CVE-2026-56164", "date_added": "2026-07-14", "due_date": "2026-07-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability", "product_as_filed": "Microsoft / SharePoint Server", "known_ransomware_use": false }, { "cve": "CVE-2026-45659", "date_added": "2026-07-01", "due_date": "2026-07-04", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Microsoft / SharePoint Server", "known_ransomware_use": true }, { "cve": "CVE-2026-32201", "date_added": "2026-04-14", "due_date": "2026-04-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft SharePoint Server Improper Input Validation Vulnerability", "product_as_filed": "Microsoft / SharePoint Server", "known_ransomware_use": false }, { "cve": "CVE-2026-20963", "date_added": "2026-03-18", "due_date": "2026-03-21", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Microsoft / SharePoint", "known_ransomware_use": false }, { "cve": "CVE-2025-49704", "date_added": "2025-07-22", "due_date": "2025-07-23", "required_action": "Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Microsoft SharePoint Code Injection Vulnerability", "product_as_filed": "Microsoft / SharePoint", "known_ransomware_use": true }, { "cve": "CVE-2025-49706", "date_added": "2025-07-22", "due_date": "2025-07-23", "required_action": "Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Microsoft SharePoint Improper Authentication Vulnerability", "product_as_filed": "Microsoft / SharePoint", "known_ransomware_use": true }, { "cve": "CVE-2025-53770", "date_added": "2025-07-20", "due_date": "2025-07-21", "required_action": "Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Microsoft SharePoint Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Microsoft / SharePoint", "known_ransomware_use": true }, { "cve": "CVE-2024-38094", "date_added": "2024-10-22", "due_date": "2024-11-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft SharePoint Deserialization Vulnerability", "product_as_filed": "Microsoft / SharePoint", "known_ransomware_use": true }, { "cve": "CVE-2023-24955", "date_added": "2024-03-26", "due_date": "2024-04-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft SharePoint Server Code Injection Vulnerability", "product_as_filed": "Microsoft / SharePoint Server", "known_ransomware_use": true }, { "cve": "CVE-2023-29357", "date_added": "2024-01-10", "due_date": "2024-01-31", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft SharePoint Server Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / SharePoint Server", "known_ransomware_use": true }, { "cve": "CVE-2019-0604", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft SharePoint Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / SharePoint", "known_ransomware_use": true }, { "cve": "CVE-2020-1147", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / .NET Framework, SharePoint, Visual Studio", "known_ransomware_use": false } ] }, "solr": { "product_url": "https://endoflife.ai/solr", "cve_count": 2, "latest_added": "2021-12-10", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2019-0193", "date_added": "2021-12-10", "due_date": "2022-06-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Solr DataImportHandler Code Injection Vulnerability", "product_as_filed": "Apache / Solr", "known_ransomware_use": false }, { "cve": "CVE-2019-17558", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability", "product_as_filed": "Apache / Solr", "known_ransomware_use": false } ] }, "spring-cloud": { "product_url": "https://endoflife.ai/spring-cloud", "cve_count": 3, "latest_added": "2022-08-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2022-22963", "date_added": "2022-08-25", "due_date": "2022-09-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability", "product_as_filed": "VMware Tanzu / Spring Cloud", "known_ransomware_use": false }, { "cve": "CVE-2022-22947", "date_added": "2022-05-16", "due_date": "2022-06-06", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware Spring Cloud Gateway Code Injection Vulnerability", "product_as_filed": "VMware / Spring Cloud Gateway", "known_ransomware_use": false }, { "cve": "CVE-2020-5410", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability", "product_as_filed": "VMware Tanzu / Spring Cloud Configuration (Config) Server", "known_ransomware_use": false } ] }, "splunk": { "product_url": "https://endoflife.ai/splunk", "cve_count": 1, "latest_added": "2026-06-18", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-20253", "date_added": "2026-06-18", "due_date": "2026-06-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Splunk Enterprise Missing Authentication for Critical Function Vulnerability", "product_as_filed": "Splunk / Enterprise", "known_ransomware_use": false } ] }, "spring-framework": { "product_url": "https://endoflife.ai/spring-framework", "cve_count": 1, "latest_added": "2022-04-04", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2022-22965", "date_added": "2022-04-04", "due_date": "2022-04-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Spring Framework JDK 9+ Remote Code Execution Vulnerability", "product_as_filed": "VMware / Spring Framework", "known_ransomware_use": false } ] }, "strapi": { "product_url": "https://endoflife.ai/strapi", "cve_count": 1, "latest_added": "2026-10-08", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2023-22894", "date_added": "2026-10-08", "due_date": "2026-10-11", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Strapi Cleartext Storage of Sensitive Information Vulnerability", "product_as_filed": "Strapi / Strapi", "known_ransomware_use": false } ] }, "tomcat": { "product_url": "https://endoflife.ai/tomcat", "cve_count": 6, "latest_added": "2026-08-04", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-34486", "date_added": "2026-08-04", "due_date": "2026-08-07", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Apache Tomcat Missing Encryption of Sensitive Data Vulnerability", "product_as_filed": "Apache / Tomcat", "known_ransomware_use": false }, { "cve": "CVE-2025-24813", "date_added": "2025-04-01", "due_date": "2025-04-22", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apache Tomcat Path Equivalence Vulnerability", "product_as_filed": "Apache / Tomcat", "known_ransomware_use": false }, { "cve": "CVE-2016-8735", "date_added": "2023-05-12", "due_date": "2023-06-02", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Tomcat Remote Code Execution Vulnerability", "product_as_filed": "Apache / Tomcat", "known_ransomware_use": false }, { "cve": "CVE-2017-12617", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Tomcat Remote Code Execution Vulnerability", "product_as_filed": "Apache / Tomcat", "known_ransomware_use": false }, { "cve": "CVE-2017-12615", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Tomcat on Windows Remote Code Execution Vulnerability", "product_as_filed": "Apache / Tomcat", "known_ransomware_use": true }, { "cve": "CVE-2020-1938", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Tomcat Improper Privilege Management Vulnerability", "product_as_filed": "Apache / Tomcat", "known_ransomware_use": false } ] }, "vcenter": { "product_url": "https://endoflife.ai/vcenter", "cve_count": 12, "latest_added": "2026-08-18", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-59310", "date_added": "2026-08-18", "due_date": "2026-08-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Broadcom VMware vCenter Path Traversal Vulnerability", "product_as_filed": "Broadcom / VMware vCenter", "known_ransomware_use": true }, { "cve": "CVE-2024-37079", "date_added": "2026-01-23", "due_date": "2026-02-13", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability", "product_as_filed": "Broadcom / VMware vCenter Server", "known_ransomware_use": false }, { "cve": "CVE-2024-38813", "date_added": "2024-11-20", "due_date": "2024-12-11", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "VMware vCenter Server Privilege Escalation Vulnerability", "product_as_filed": "VMware / vCenter Server", "known_ransomware_use": false }, { "cve": "CVE-2024-38812", "date_added": "2024-11-20", "due_date": "2024-12-11", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "VMware vCenter Server Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "VMware / vCenter Server", "known_ransomware_use": false }, { "cve": "CVE-2022-22948", "date_added": "2024-07-17", "due_date": "2024-08-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "VMware vCenter Server Incorrect Default File Permissions Vulnerability ", "product_as_filed": "VMware / vCenter Server", "known_ransomware_use": false }, { "cve": "CVE-2023-34048", "date_added": "2024-01-22", "due_date": "2024-02-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "VMware vCenter Server Out-of-Bounds Write Vulnerability", "product_as_filed": "VMware / vCenter Server", "known_ransomware_use": false }, { "cve": "CVE-2021-21973", "date_added": "2022-03-07", "due_date": "2022-03-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability", "product_as_filed": "VMware / vCenter Server and Cloud Foundation", "known_ransomware_use": false }, { "cve": "CVE-2021-22017", "date_added": "2022-01-10", "due_date": "2022-01-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware vCenter Server Improper Access Control", "product_as_filed": "VMware / vCenter Server", "known_ransomware_use": false }, { "cve": "CVE-2021-22005", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware vCenter Server File Upload Vulnerability", "product_as_filed": "VMware / vCenter Server", "known_ransomware_use": true }, { "cve": "CVE-2020-3952", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware vCenter Server Information Disclosure Vulnerability", "product_as_filed": "VMware / vCenter Server", "known_ransomware_use": false }, { "cve": "CVE-2021-21972", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware vCenter Server Remote Code Execution Vulnerability", "product_as_filed": "VMware / vCenter Server", "known_ransomware_use": true }, { "cve": "CVE-2021-21985", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware vCenter Server Improper Input Validation Vulnerability", "product_as_filed": "VMware / vCenter Server", "known_ransomware_use": true } ] }, "visual-studio": { "product_url": "https://endoflife.ai/visual-studio", "cve_count": 2, "latest_added": "2023-08-09", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2023-38180", "date_added": "2023-08-09", "due_date": "2023-08-30", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability", "product_as_filed": "Microsoft / .NET Core and Visual Studio", "known_ransomware_use": false }, { "cve": "CVE-2020-1147", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / .NET Framework, SharePoint, Visual Studio", "known_ransomware_use": false } ] }, "virtualbox": { "product_url": "https://endoflife.ai/virtualbox", "cve_count": 1, "latest_added": "2022-03-03", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2008-3431", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle VirtualBox Insufficient Input Validation Vulnerability", "product_as_filed": "Oracle / VirtualBox", "known_ransomware_use": false } ] }, "veeam-backup-and-replication": { "product_url": "https://endoflife.ai/veeam-backup-and-replication", "cve_count": 4, "latest_added": "2024-10-17", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2024-40711", "date_added": "2024-10-17", "due_date": "2024-11-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Veeam Backup and Replication Deserialization Vulnerability", "product_as_filed": "Veeam / Backup & Replication", "known_ransomware_use": true }, { "cve": "CVE-2023-27532", "date_added": "2023-08-22", "due_date": "2023-09-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability", "product_as_filed": "Veeam / Backup & Replication", "known_ransomware_use": true }, { "cve": "CVE-2022-26500", "date_added": "2022-12-13", "due_date": "2023-01-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Veeam Backup & Replication Remote Code Execution Vulnerability", "product_as_filed": "Veeam / Backup & Replication", "known_ransomware_use": true }, { "cve": "CVE-2022-26501", "date_added": "2022-12-13", "due_date": "2023-01-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Veeam Backup & Replication Remote Code Execution Vulnerability", "product_as_filed": "Veeam / Backup & Replication", "known_ransomware_use": true } ] }, "vmware-cloud-foundation": { "product_url": "https://endoflife.ai/vmware-cloud-foundation", "cve_count": 1, "latest_added": "2022-03-07", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2021-21973", "date_added": "2022-03-07", "due_date": "2022-03-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability", "product_as_filed": "VMware / vCenter Server and Cloud Foundation", "known_ransomware_use": false } ] }, "watchos": { "product_url": "https://endoflife.ai/watchos", "cve_count": 37, "latest_added": "2026-03-20", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2025-43510", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Improper Locking Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43520", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Classic Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31277", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30952", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Integer Overflow or Wraparound Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2026-20700", "date_added": "2026-02-12", "due_date": "2026-03-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-48503", "date_added": "2025-10-20", "due_date": "2025-11-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43200", "date_added": "2025-06-16", "due_date": "2025-07-07", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23225", "date_added": "2024-03-06", "due_date": "2024-03-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23296", "date_added": "2024-03-06", "due_date": "2024-03-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-48618", "date_added": "2024-01-31", "due_date": "2024-02-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41990", "date_added": "2024-01-08", "due_date": "2024-01-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41991", "date_added": "2023-09-25", "due_date": "2023-10-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Improper Certificate Validation Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41992", "date_added": "2023-09-25", "due_date": "2023-10-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Kernel Privilege Escalation Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41061", "date_added": "2023-09-11", "due_date": "2023-10-02", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2023-38606", "date_added": "2023-07-26", "due_date": "2023-08-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Kernel Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32434", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32409", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Sandbox Escape Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-28204", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32373", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-31010", "date_added": "2022-08-25", "due_date": "2022-09-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability", "product_as_filed": "Apple / iOS, macOS, watchOS", "known_ransomware_use": false }, { "cve": "CVE-2020-3837", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2019-8605", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2018-4344", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30883", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2019-7286", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-9818", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2020-9819", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2021-1879", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Apple / iOS, iPadOS, and watchOS", "known_ransomware_use": false }, { "cve": "CVE-2021-30860", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27930", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30807", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27950", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Initialization Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-27932", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-1782", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Race Condition Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30661", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Storage Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30665", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-9859", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false } ] }, "windows": { "product_url": "https://endoflife.ai/windows", "cve_count": 243, "latest_added": "2026-10-13", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-96951", "date_added": "2026-10-13", "due_date": "2026-10-16", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft Windows Command Injection Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2026-81963", "date_added": "2026-09-08", "due_date": "2026-09-22", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft Windows Link Following Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2026-85880", "date_added": "2026-09-08", "due_date": "2026-09-22", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft Windows Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2026-33824", "date_added": "2026-08-18", "due_date": "2026-08-21", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability", "product_as_filed": "Microsoft / Internet Key Exchange (IKE) Service Extensions", "known_ransomware_use": false }, { "cve": "CVE-2026-68820", "date_added": "2026-08-11", "due_date": "2026-08-25", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Windows Ancillary Function Driver for WinSock ", "known_ransomware_use": false }, { "cve": "CVE-2008-4250", "date_added": "2026-05-20", "due_date": "2026-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2009-1537", "date_added": "2026-05-20", "due_date": "2026-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft DirectX NULL Byte Overwrite Vulnerability", "product_as_filed": "Microsoft / DirectX", "known_ransomware_use": false }, { "cve": "CVE-2026-41091", "date_added": "2026-05-20", "due_date": "2026-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Defender Link Following Vulnerability", "product_as_filed": "Microsoft / Defender", "known_ransomware_use": false }, { "cve": "CVE-2026-45498", "date_added": "2026-05-20", "due_date": "2026-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Defender Denial of Service Vulnerability", "product_as_filed": "Microsoft / Defender", "known_ransomware_use": false }, { "cve": "CVE-2026-32202", "date_added": "2026-04-28", "due_date": "2026-05-12", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Protection Mechanism Failure Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2026-33825", "date_added": "2026-04-22", "due_date": "2026-05-06", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Defender Insufficient Granularity of Access Control Vulnerability", "product_as_filed": "Microsoft / Defender", "known_ransomware_use": true }, { "cve": "CVE-2025-60710", "date_added": "2026-04-13", "due_date": "2026-04-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Link Following Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2023-36424", "date_added": "2026-04-13", "due_date": "2026-04-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Out-of-Bounds Read Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2008-0015", "date_added": "2026-02-17", "due_date": "2026-03-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": " Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2026-21513", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2026-21525", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows NULL Pointer Dereference Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2026-21510", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Shell Protection Mechanism Failure Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2026-21533", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Improper Privilege Management Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2026-21519", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Type Confusion Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2026-20805", "date_added": "2026-01-13", "due_date": "2026-02-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-62221", "date_added": "2025-12-09", "due_date": "2025-12-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Use After Free Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-62215", "date_added": "2025-11-12", "due_date": "2025-12-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Race Condition Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-59287", "date_added": "2025-10-24", "due_date": "2025-11-14", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-33073", "date_added": "2025-10-20", "due_date": "2025-11-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows SMB Client Improper Access Control Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-24990", "date_added": "2025-10-14", "due_date": "2025-11-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Untrusted Pointer Dereference Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-59230", "date_added": "2025-10-14", "due_date": "2025-11-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Improper Access Control Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-43226", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2013-3918", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Out-of-Bounds Write Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2011-3402", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-33053", "date_added": "2025-06-10", "due_date": "2025-07-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": " Microsoft Windows External Control of File Name or Path Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-32709", "date_added": "2025-05-13", "due_date": "2025-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-30397", "date_added": "2025-05-13", "due_date": "2025-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Scripting Engine Type Confusion Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-32706", "date_added": "2025-05-13", "due_date": "2025-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-32701", "date_added": "2025-05-13", "due_date": "2025-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-30400", "date_added": "2025-05-13", "due_date": "2025-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows DWM Core Library Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-24054", "date_added": "2025-04-17", "due_date": "2025-05-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-29824", "date_added": "2025-04-08", "due_date": "2025-04-29", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2025-24993", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-24991", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-24985", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-24984", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows NTFS Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-24983", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Win32k Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-26633", "date_added": "2025-03-11", "due_date": "2025-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2018-8639", "date_added": "2025-03-03", "due_date": "2025-03-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2025-21418", "date_added": "2025-02-11", "due_date": "2025-03-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-21391", "date_added": "2025-02-11", "due_date": "2025-03-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Storage Link Following Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-21335", "date_added": "2025-01-14", "due_date": "2025-02-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-21334", "date_added": "2025-01-14", "due_date": "2025-02-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2025-21333", "date_added": "2025-01-14", "due_date": "2025-02-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-35250", "date_added": "2024-12-16", "due_date": "2025-01-06", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-49138", "date_added": "2024-12-10", "due_date": "2024-12-31", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-43451", "date_added": "2024-11-12", "due_date": "2024-12-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-49039", "date_added": "2024-11-12", "due_date": "2024-12-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Task Scheduler Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2024-30088", "date_added": "2024-10-15", "due_date": "2024-11-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Kernel TOCTOU Race Condition Vulnerability", "product_as_filed": "Microsoft / Windows ", "known_ransomware_use": true }, { "cve": "CVE-2024-43573", "date_added": "2024-10-08", "due_date": "2024-10-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows MSHTML Platform Spoofing Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-43572", "date_added": "2024-10-08", "due_date": "2024-10-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Management Console Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-43461", "date_added": "2024-09-16", "due_date": "2024-10-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows MSHTML Platform Spoofing Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-38217", "date_added": "2024-09-10", "due_date": "2024-10-01", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-38014", "date_added": "2024-09-10", "due_date": "2024-10-01", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Installer Improper Privilege Management Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-38107", "date_added": "2024-08-13", "due_date": "2024-09-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-38106", "date_added": "2024-08-13", "due_date": "2024-09-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-38193", "date_added": "2024-08-13", "due_date": "2024-09-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-38213", "date_added": "2024-08-13", "due_date": "2024-09-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-38178", "date_added": "2024-08-13", "due_date": "2024-09-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Scripting Engine Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2018-0824", "date_added": "2024-08-05", "due_date": "2024-08-26", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-38080", "date_added": "2024-07-09", "due_date": "2024-07-30", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Hyper-V Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows ", "known_ransomware_use": false }, { "cve": "CVE-2024-38112", "date_added": "2024-07-09", "due_date": "2024-07-30", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows MSHTML Platform Spoofing Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-26169", "date_added": "2024-06-13", "due_date": "2024-07-04", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2024-30040", "date_added": "2024-05-14", "due_date": "2024-06-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-30051", "date_added": "2024-05-14", "due_date": "2024-06-04", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": " Microsoft DWM Core Library Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / DWM Core Library", "known_ransomware_use": true }, { "cve": "CVE-2024-29988", "date_added": "2024-04-30", "due_date": "2024-05-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / SmartScreen Prompt", "known_ransomware_use": false }, { "cve": "CVE-2022-38028", "date_added": "2024-04-23", "due_date": "2024-05-14", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. ", "vulnerability_name": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability ", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2024-21338", "date_added": "2024-03-04", "due_date": "2024-03-25", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2023-29360", "date_added": "2024-02-29", "due_date": "2024-03-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability", "product_as_filed": "Microsoft / Streaming Service", "known_ransomware_use": false }, { "cve": "CVE-2024-21412", "date_added": "2024-02-13", "due_date": "2024-03-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2024-21351", "date_added": "2024-02-13", "due_date": "2024-03-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2023-36584", "date_added": "2023-11-16", "due_date": "2023-12-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2023-36033", "date_added": "2023-11-14", "due_date": "2023-12-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2023-36025", "date_added": "2023-11-14", "due_date": "2023-12-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2023-36036", "date_added": "2023-11-14", "due_date": "2023-12-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2023-36563", "date_added": "2023-10-10", "due_date": "2023-10-31", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft WordPad Information Disclosure Vulnerability", "product_as_filed": "Microsoft / WordPad", "known_ransomware_use": false }, { "cve": "CVE-2023-28229", "date_added": "2023-10-04", "due_date": "2023-10-25", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows CNG Key Isolation Service", "known_ransomware_use": false }, { "cve": "CVE-2023-36802", "date_added": "2023-09-12", "due_date": "2023-10-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Streaming Service Proxy Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Streaming Service Proxy", "known_ransomware_use": false }, { "cve": "CVE-2023-36884", "date_added": "2023-07-17", "due_date": "2023-08-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Windows Search Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2023-32046", "date_added": "2023-07-11", "due_date": "2023-08-01", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2023-32049", "date_added": "2023-07-11", "due_date": "2023-08-01", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2023-36874", "date_added": "2023-07-11", "due_date": "2023-08-01", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2016-0165", "date_added": "2023-06-22", "due_date": "2023-07-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2023-29336", "date_added": "2023-05-09", "due_date": "2023-05-30", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32K Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2023-28252", "date_added": "2023-04-11", "due_date": "2023-05-02", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2019-1388", "date_added": "2023-04-07", "due_date": "2023-04-28", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2023-24880", "date_added": "2023-03-14", "due_date": "2023-04-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows SmartScreen Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2023-23376", "date_added": "2023-02-14", "due_date": "2023-03-07", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2023-21823", "date_added": "2023-02-14", "due_date": "2023-03-07", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Graphic Component Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2023-21674", "date_added": "2023-01-10", "due_date": "2023-01-31", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2022-44698", "date_added": "2022-12-13", "due_date": "2023-01-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Defender SmartScreen Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Defender", "known_ransomware_use": true }, { "cve": "CVE-2022-41049", "date_added": "2022-11-14", "due_date": "2022-12-09", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2022-41091", "date_added": "2022-11-08", "due_date": "2022-12-09", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2022-41073", "date_added": "2022-11-08", "due_date": "2022-12-09", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2022-41125", "date_added": "2022-11-08", "due_date": "2022-12-09", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2022-41128", "date_added": "2022-11-08", "due_date": "2022-12-09", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Scripting Languages Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2022-41033", "date_added": "2022-10-11", "due_date": "2022-11-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows COM+ Event System Service", "known_ransomware_use": false }, { "cve": "CVE-2010-2568", "date_added": "2022-09-15", "due_date": "2022-10-06", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2022-37969", "date_added": "2022-09-14", "due_date": "2022-10-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2022-21971", "date_added": "2022-08-18", "due_date": "2022-09-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Runtime Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2022-34713", "date_added": "2022-08-09", "due_date": "2022-08-30", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2022-22047", "date_added": "2022-07-12", "due_date": "2022-08-02", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2022-26925", "date_added": "2022-07-01", "due_date": "2022-07-22", "required_action": "Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].", "vulnerability_name": "Microsoft Windows LSA Spoofing Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2022-30190", "date_added": "2022-06-14", "due_date": "2022-07-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2012-0151", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2012-1889", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft XML Core Services Memory Corruption Vulnerability", "product_as_filed": "Microsoft / XML Core Services", "known_ransomware_use": false }, { "cve": "CVE-2016-3393", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2016-7256", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Open Type Font Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2015-0016", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows TS WebProxy Directory Traversal Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2015-1769", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Mount Manager Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2015-6175", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2015-1671", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2014-4148", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2015-2360", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2014-4077", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft IME Japanese Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Input Method Editor (IME) Japanese", "known_ransomware_use": false }, { "cve": "CVE-2018-8611", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2017-0005", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2017-8543", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Search Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2017-0147", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows SMBv1 Information Disclosure Vulnerability", "product_as_filed": "Microsoft / SMBv1 server", "known_ransomware_use": true }, { "cve": "CVE-2017-0022", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft XML Core Services Information Disclosure Vulnerability", "product_as_filed": "Microsoft / XML Core Services", "known_ransomware_use": false }, { "cve": "CVE-2020-1027", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2019-0703", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows SMB Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2019-0880", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2019-1385", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2019-1130", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2018-8589", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2020-0638", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Update Notification Manager Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Update Notification Manager", "known_ransomware_use": true }, { "cve": "CVE-2014-4113", "date_added": "2022-05-04", "due_date": "2022-05-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2022-26904", "date_added": "2022-04-25", "due_date": "2022-05-16", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows User Profile Service Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2022-21919", "date_added": "2022-04-25", "due_date": "2022-05-16", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows User Profile Service Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-41357", "date_added": "2022-04-25", "due_date": "2022-05-16", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2021-40450", "date_added": "2022-04-25", "due_date": "2022-05-16", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2022-22718", "date_added": "2022-04-19", "due_date": "2022-05-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2022-24521", "date_added": "2022-04-13", "due_date": "2022-05-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows CLFS Driver Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2017-0148", "date_added": "2022-04-06", "due_date": "2022-04-27", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft SMBv1 Server Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / SMBv1 server", "known_ransomware_use": true }, { "cve": "CVE-2021-31166", "date_added": "2022-04-06", "due_date": "2022-04-27", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / HTTP Protocol Stack", "known_ransomware_use": false }, { "cve": "CVE-2021-34484", "date_added": "2022-03-31", "due_date": "2022-04-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows User Profile Service Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-34486", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Event Tracing Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2018-8440", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2017-0213", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2016-0040", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2015-2426", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2010-4398", "date_added": "2022-03-28", "due_date": "2022-04-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2013-3660", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2018-8406", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / DirectX Graphics Kernel (DXGKRNL)", "known_ransomware_use": true }, { "cve": "CVE-2018-8405", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / DirectX Graphics Kernel (DXGKRNL)", "known_ransomware_use": true }, { "cve": "CVE-2016-0151", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows CSRSS Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Client-Server Run-time Subsystem (CSRSS)", "known_ransomware_use": true }, { "cve": "CVE-2011-2005", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability", "product_as_filed": "Microsoft / Ancillary Function Driver (afd.sys)", "known_ransomware_use": false }, { "cve": "CVE-2022-21999", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Print Spooler Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2018-8414", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Shell Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2017-0146", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows SMB Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2014-6332", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2019-0903", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft GDI Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Graphics Device Interface (GDI)", "known_ransomware_use": false }, { "cve": "CVE-2014-6324", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Kerberos Key Distribution Center (KDC)", "known_ransomware_use": false }, { "cve": "CVE-2019-1405", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2019-1322", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2019-1315", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2019-1253", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2019-1129", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2019-1064", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2019-0841", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2019-0543", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2017-0101", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Transaction Manager Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2016-3309", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2019-1132", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2018-8120", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": true }, { "cve": "CVE-2015-2546", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": true }, { "cve": "CVE-2019-1069", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Task Scheduler Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Task Scheduler", "known_ransomware_use": true }, { "cve": "CVE-2021-41379", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Installer Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2016-0099", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2014-4114", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2013-5065", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2010-0232", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Exception Handler Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2009-1123", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Improper Input Validation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2004-0210", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2002-0367", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2015-1701", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": true }, { "cve": "CVE-2017-0001", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Graphics Device Interface (GDI)", "known_ransomware_use": false }, { "cve": "CVE-2015-2387", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft ATM Font Driver Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / ATM Font Driver", "known_ransomware_use": false }, { "cve": "CVE-2017-8540", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability", "product_as_filed": "Microsoft / Malware Protection Engine", "known_ransomware_use": false }, { "cve": "CVE-2014-6352", "date_added": "2022-02-25", "due_date": "2022-08-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Code Injection Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2018-8174", "date_added": "2022-02-15", "due_date": "2022-08-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2013-3906", "date_added": "2022-02-15", "due_date": "2022-08-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Graphics Component Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Graphics Component", "known_ransomware_use": false }, { "cve": "CVE-2021-36934", "date_added": "2022-02-10", "due_date": "2022-02-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows SAM Local Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2017-8464", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2017-0263", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2017-0145", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft SMBv1 Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / SMBv1", "known_ransomware_use": true }, { "cve": "CVE-2017-0144", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft SMBv1 Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / SMBv1", "known_ransomware_use": true }, { "cve": "CVE-2020-0796", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft SMBv3 Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / SMBv3", "known_ransomware_use": true }, { "cve": "CVE-2015-1635", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft HTTP.sys Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / HTTP.sys", "known_ransomware_use": false }, { "cve": "CVE-2022-21882", "date_added": "2022-02-04", "due_date": "2022-02-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": true }, { "cve": "CVE-2020-0787", "date_added": "2022-01-28", "due_date": "2022-07-28", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2018-8453", "date_added": "2022-01-21", "due_date": "2022-07-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": true }, { "cve": "CVE-2019-1458", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": true }, { "cve": "CVE-2013-3900", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft WinVerifyTrust function Remote Code Execution", "product_as_filed": "Microsoft / WinVerifyTrust function", "known_ransomware_use": false }, { "cve": "CVE-2021-43890", "date_added": "2021-12-15", "due_date": "2021-12-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows AppX Installer Spoofing Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2021-40449", "date_added": "2021-11-17", "due_date": "2021-12-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2014-1812", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2021-31955", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-33739", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2016-0185", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Media Center Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2020-0683", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Installer Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2020-17087", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-33742", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-33771", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-31956", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows NTFS Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-31979", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2020-0938", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2020-0986", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Kernel Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2020-1020", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-36948", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Update Medic Service Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2017-0143", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2020-1464", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Spoofing Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-34527", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Print Spooler Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2020-1350", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows DNS Server Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-36942", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2019-1215", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2021-1675", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Print Spooler Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2021-34448", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Scripting Engine Memory Corruption Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2020-0601", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows CryptoAPI Spoofing Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2019-1214", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2019-0863", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": false }, { "cve": "CVE-2021-36955", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true }, { "cve": "CVE-2016-0167", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": true }, { "cve": "CVE-2016-7255", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": true }, { "cve": "CVE-2021-1732", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": true }, { "cve": "CVE-2019-0803", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": true }, { "cve": "CVE-2021-28310", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2019-0859", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": true }, { "cve": "CVE-2019-0797", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2020-1054", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2019-0808", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Win32k Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Win32k", "known_ransomware_use": false }, { "cve": "CVE-2021-31199", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Enhanced Cryptographic Provider", "known_ransomware_use": false }, { "cve": "CVE-2021-31201", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Enhanced Cryptographic Provider", "known_ransomware_use": false }, { "cve": "CVE-2021-40444", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft MSHTML Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / MSHTML", "known_ransomware_use": true }, { "cve": "CVE-2019-0541", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft MSHTML Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / MSHTML", "known_ransomware_use": false }, { "cve": "CVE-2019-0708", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Remote Desktop Services Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Remote Desktop Services", "known_ransomware_use": true }, { "cve": "CVE-2021-1647", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Defender Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Defender", "known_ransomware_use": false } ] }, "wordpress": { "product_url": "https://endoflife.ai/wordpress", "cve_count": 3, "latest_added": "2026-09-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-87902", "date_added": "2026-09-25", "due_date": "2026-09-28", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "WordPress Core Remote File Inclusion Vulnerability", "product_as_filed": "WordPress / Core", "known_ransomware_use": false }, { "cve": "CVE-2026-60137", "date_added": "2026-07-21", "due_date": "2026-08-04", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "WordPress Core SQL Injection Vulnerability", "product_as_filed": "WordPress / Core", "known_ransomware_use": false }, { "cve": "CVE-2026-63030", "date_added": "2026-07-21", "due_date": "2026-07-24", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "WordPress Core Interpretation Conflict Vulnerability", "product_as_filed": "WordPress / Core", "known_ransomware_use": false } ] }, "adobe-acrobat": { "product_url": "https://endoflife.ai/adobe-acrobat", "cve_count": 24, "latest_added": "2026-05-20", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2009-3459", "date_added": "2026-05-20", "due_date": "2026-06-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false }, { "cve": "CVE-2020-9715", "date_added": "2026-04-13", "due_date": "2026-04-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe Acrobat Use-After-Free Vulnerability", "product_as_filed": "Adobe / Acrobat", "known_ransomware_use": false }, { "cve": "CVE-2026-34621", "date_added": "2026-04-13", "due_date": "2026-04-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe Acrobat and Reader Prototype Pollution Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false }, { "cve": "CVE-2023-21608", "date_added": "2023-10-10", "due_date": "2023-10-31", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false }, { "cve": "CVE-2023-26369", "date_added": "2023-09-14", "due_date": "2023-10-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false }, { "cve": "CVE-2018-4990", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Acrobat and Reader Double Free Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false }, { "cve": "CVE-2011-2462", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability", "product_as_filed": "Adobe / Reader and Acrobat", "known_ransomware_use": false }, { "cve": "CVE-2010-2883", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false }, { "cve": "CVE-2009-4324", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false }, { "cve": "CVE-2009-3953", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false }, { "cve": "CVE-2009-1862", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.", "vulnerability_name": "Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader, Flash Player", "known_ransomware_use": false }, { "cve": "CVE-2008-0655", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Acrobat and Reader Unspecified Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false }, { "cve": "CVE-2007-5659", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Acrobat and Reader Buffer Overflow Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false }, { "cve": "CVE-2014-0546", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Reader and Acrobat Sandbox Bypass Vulnerability", "product_as_filed": "Adobe / Reader and Acrobat", "known_ransomware_use": false }, { "cve": "CVE-2013-2729", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability", "product_as_filed": "Adobe / Reader and Acrobat", "known_ransomware_use": false }, { "cve": "CVE-2009-0927", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability", "product_as_filed": "Adobe / Reader and Acrobat", "known_ransomware_use": false }, { "cve": "CVE-2014-0496", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Reader and Acrobat Use-After-Free Vulnerability", "product_as_filed": "Adobe / Reader and Acrobat", "known_ransomware_use": false }, { "cve": "CVE-2013-3346", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Reader and Acrobat Memory Corruption Vulnerability", "product_as_filed": "Adobe / Reader and Acrobat", "known_ransomware_use": false }, { "cve": "CVE-2013-0640", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Reader and Acrobat Memory Corruption Vulnerability", "product_as_filed": "Adobe / Reader and Acrobat", "known_ransomware_use": false }, { "cve": "CVE-2010-0188", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability", "product_as_filed": "Adobe / Reader and Acrobat", "known_ransomware_use": true }, { "cve": "CVE-2008-2992", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Reader and Acrobat Input Validation Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": true }, { "cve": "CVE-2013-0641", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Reader Buffer Overflow Vulnerability", "product_as_filed": "Adobe / Reader", "known_ransomware_use": false }, { "cve": "CVE-2021-21017", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false }, { "cve": "CVE-2021-28550", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Adobe Acrobat and Reader Use-After-Free Vulnerability", "product_as_filed": "Adobe / Acrobat and Reader", "known_ransomware_use": false } ] }, "adobe-experience-manager": { "product_url": "https://endoflife.ai/adobe-experience-manager", "cve_count": 1, "latest_added": "2025-10-15", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-54253", "date_added": "2025-10-15", "due_date": "2025-11-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Adobe Experience Manager Forms Code Execution Vulnerability", "product_as_filed": "Adobe / Experience Manager (AEM) Forms", "known_ransomware_use": false } ] }, "zabbix": { "product_url": "https://endoflife.ai/zabbix", "cve_count": 2, "latest_added": "2022-02-22", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2022-23131", "date_added": "2022-02-22", "due_date": "2022-03-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Zabbix Frontend Authentication Bypass Vulnerability", "product_as_filed": "Zabbix / Frontend", "known_ransomware_use": false }, { "cve": "CVE-2022-23134", "date_added": "2022-02-22", "due_date": "2022-03-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Zabbix Frontend Improper Access Control Vulnerability", "product_as_filed": "Zabbix / Frontend", "known_ransomware_use": false } ] }, "atlassian-data-center": { "product_url": "https://endoflife.ai/atlassian-data-center", "cve_count": 10, "latest_added": "2024-11-12", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2021-26086", "date_added": "2024-11-12", "due_date": "2024-12-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Atlassian Jira Server and Data Center Path Traversal Vulnerability", "product_as_filed": "Atlassian / Jira Server and Data Center", "known_ransomware_use": false }, { "cve": "CVE-2023-22527", "date_added": "2024-01-24", "due_date": "2024-02-14", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Atlassian Confluence Data Center and Server Template Injection Vulnerability", "product_as_filed": "Atlassian / Confluence Data Center and Server", "known_ransomware_use": true }, { "cve": "CVE-2023-22518", "date_added": "2023-11-07", "due_date": "2023-11-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Atlassian Confluence Data Center and Server Improper Authorization Vulnerability", "product_as_filed": "Atlassian / Confluence Data Center and Server", "known_ransomware_use": true }, { "cve": "CVE-2023-22515", "date_added": "2023-10-05", "due_date": "2023-10-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Check all affected Confluence instances for evidence of compromise per vendor instructions and report any positive findings to CISA.", "vulnerability_name": "Atlassian Confluence Data Center and Server Broken Access Control Vulnerability", "product_as_filed": "Atlassian / Confluence Data Center and Server", "known_ransomware_use": true }, { "cve": "CVE-2022-36804", "date_added": "2022-09-30", "due_date": "2022-10-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Atlassian Bitbucket Server and Data Center Command Injection Vulnerability", "product_as_filed": "Atlassian / Bitbucket Server and Data Center", "known_ransomware_use": false }, { "cve": "CVE-2022-26134", "date_added": "2022-06-02", "due_date": "2022-06-06", "required_action": "Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.", "vulnerability_name": "Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability", "product_as_filed": "Atlassian / Confluence Server/Data Center", "known_ransomware_use": true }, { "cve": "CVE-2019-11581", "date_added": "2022-03-07", "due_date": "2022-09-07", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability", "product_as_filed": "Atlassian / Jira Server and Data Center", "known_ransomware_use": false }, { "cve": "CVE-2019-3398", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Atlassian Confluence Server and Data Center Path Traversal Vulnerability", "product_as_filed": "Atlassian / Confluence Server and Data Center", "known_ransomware_use": false }, { "cve": "CVE-2021-26084", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability", "product_as_filed": "Atlassian / Confluence Server and Data Center", "known_ransomware_use": true }, { "cve": "CVE-2019-11580", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability", "product_as_filed": "Atlassian / Crowd and Crowd Data Center", "known_ransomware_use": true } ] }, "cisco-anyconnect": { "product_url": "https://endoflife.ai/cisco-anyconnect", "cve_count": 2, "latest_added": "2022-10-24", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2020-3433", "date_added": "2022-10-24", "due_date": "2022-11-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability", "product_as_filed": "Cisco / AnyConnect Secure", "known_ransomware_use": true }, { "cve": "CVE-2020-3153", "date_added": "2022-10-24", "due_date": "2022-11-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability", "product_as_filed": "Cisco / AnyConnect Secure", "known_ransomware_use": true } ] }, "cisco-asa": { "product_url": "https://endoflife.ai/cisco-asa", "cve_count": 14, "latest_added": "2026-08-11", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-20349", "date_added": "2026-08-11", "due_date": "2026-08-14", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability", "product_as_filed": "Cisco / Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ", "known_ransomware_use": false }, { "cve": "CVE-2025-20362", "date_added": "2025-09-25", "due_date": "2025-09-26", "required_action": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability", "product_as_filed": "Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "known_ransomware_use": false }, { "cve": "CVE-2025-20333", "date_added": "2025-09-25", "due_date": "2025-09-26", "required_action": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability", "product_as_filed": "Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "known_ransomware_use": false }, { "cve": "CVE-2014-2120", "date_added": "2024-11-12", "due_date": "2024-12-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA)", "known_ransomware_use": false }, { "cve": "CVE-2024-20481", "date_added": "2024-10-24", "due_date": "2024-11-14", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco ASA and FTD Denial-of-Service Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": false }, { "cve": "CVE-2024-20359", "date_added": "2024-04-24", "due_date": "2024-05-01", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco ASA and FTD Privilege Escalation Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": false }, { "cve": "CVE-2024-20353", "date_added": "2024-04-24", "due_date": "2024-05-01", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco ASA and FTD Denial of Service Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": false }, { "cve": "CVE-2020-3259", "date_added": "2024-02-15", "due_date": "2024-03-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco ASA and FTD Information Disclosure Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": true }, { "cve": "CVE-2023-20269", "date_added": "2023-09-13", "due_date": "2023-10-04", "required_action": "Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.", "vulnerability_name": "Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance and Firepower Threat Defense", "known_ransomware_use": true }, { "cve": "CVE-2016-6366", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA)", "known_ransomware_use": false }, { "cve": "CVE-2016-6367", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA)", "known_ransomware_use": false }, { "cve": "CVE-2020-3452", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco ASA and FTD Read-Only Path Traversal Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": false }, { "cve": "CVE-2020-3580", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": true }, { "cve": "CVE-2018-0296", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA)", "known_ransomware_use": false } ] }, "cisco-fmc": { "product_url": "https://endoflife.ai/cisco-fmc", "cve_count": 3, "latest_added": "2026-09-09", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-20079", "date_added": "2026-09-09", "due_date": "2026-09-12", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability", "product_as_filed": "Cisco / Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management", "known_ransomware_use": false }, { "cve": "CVE-2026-20316", "date_added": "2026-07-29", "due_date": "2026-08-01", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability", "product_as_filed": "Cisco / Secure Firewall Management Center (FMC)", "known_ransomware_use": true }, { "cve": "CVE-2026-20131", "date_added": "2026-03-19", "due_date": "2026-03-22", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Cisco / Secure Firewall Management Center (FMC)", "known_ransomware_use": true } ] }, "cisco-ftd": { "product_url": "https://endoflife.ai/cisco-ftd", "cve_count": 10, "latest_added": "2026-08-11", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-20349", "date_added": "2026-08-11", "due_date": "2026-08-14", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability", "product_as_filed": "Cisco / Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ", "known_ransomware_use": false }, { "cve": "CVE-2025-20362", "date_added": "2025-09-25", "due_date": "2025-09-26", "required_action": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability", "product_as_filed": "Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "known_ransomware_use": false }, { "cve": "CVE-2025-20333", "date_added": "2025-09-25", "due_date": "2025-09-26", "required_action": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability", "product_as_filed": "Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "known_ransomware_use": false }, { "cve": "CVE-2024-20481", "date_added": "2024-10-24", "due_date": "2024-11-14", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco ASA and FTD Denial-of-Service Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": false }, { "cve": "CVE-2024-20359", "date_added": "2024-04-24", "due_date": "2024-05-01", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco ASA and FTD Privilege Escalation Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": false }, { "cve": "CVE-2024-20353", "date_added": "2024-04-24", "due_date": "2024-05-01", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco ASA and FTD Denial of Service Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": false }, { "cve": "CVE-2020-3259", "date_added": "2024-02-15", "due_date": "2024-03-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco ASA and FTD Information Disclosure Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": true }, { "cve": "CVE-2023-20269", "date_added": "2023-09-13", "due_date": "2023-10-04", "required_action": "Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.", "vulnerability_name": "Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance and Firepower Threat Defense", "known_ransomware_use": true }, { "cve": "CVE-2020-3452", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco ASA and FTD Read-Only Path Traversal Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": false }, { "cve": "CVE-2020-3580", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Cisco / Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", "known_ransomware_use": true } ] }, "cisco-ios-xr": { "product_url": "https://endoflife.ai/cisco-ios-xr", "cve_count": 9, "latest_added": "2023-05-19", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2016-6415", "date_added": "2023-05-19", "due_date": "2023-06-09", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability", "product_as_filed": "Cisco / IOS, IOS XR, and IOS XE", "known_ransomware_use": false }, { "cve": "CVE-2022-20821", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS XR Open Port Vulnerability", "product_as_filed": "Cisco / IOS XR", "known_ransomware_use": false }, { "cve": "CVE-2010-3035", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS XR", "known_ransomware_use": false }, { "cve": "CVE-2009-2055", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS XR", "known_ransomware_use": false }, { "cve": "CVE-2018-0175", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability", "product_as_filed": "Cisco / IOS, XR, and XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0167", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability", "product_as_filed": "Cisco / IOS, XR, and XE Software", "known_ransomware_use": false }, { "cve": "CVE-2020-3118", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS XR Software Discovery Protocol Format String Vulnerability", "product_as_filed": "Cisco / IOS XR", "known_ransomware_use": false }, { "cve": "CVE-2020-3566", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability", "product_as_filed": "Cisco / IOS XR", "known_ransomware_use": false }, { "cve": "CVE-2020-3569", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability", "product_as_filed": "Cisco / IOS XR", "known_ransomware_use": false } ] }, "cisco-ios": { "product_url": "https://endoflife.ai/cisco-ios", "cve_count": 36, "latest_added": "2026-07-13", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2008-4128", "date_added": "2026-07-13", "due_date": "2026-07-16", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Cisco IOS Cross-Site Request Forgery Vulnerability", "product_as_filed": "Cisco / IOS", "known_ransomware_use": false }, { "cve": "CVE-2025-20352", "date_added": "2025-09-29", "due_date": "2025-10-20", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE", "known_ransomware_use": false }, { "cve": "CVE-2023-20109", "date_added": "2023-10-10", "due_date": "2023-10-31", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE", "known_ransomware_use": false }, { "cve": "CVE-2004-1464", "date_added": "2023-05-19", "due_date": "2023-06-09", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS", "known_ransomware_use": false }, { "cve": "CVE-2016-6415", "date_added": "2023-05-19", "due_date": "2023-06-09", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability", "product_as_filed": "Cisco / IOS, IOS XR, and IOS XE", "known_ransomware_use": false }, { "cve": "CVE-2017-6742", "date_added": "2023-04-19", "due_date": "2023-05-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-3881", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE", "known_ransomware_use": false }, { "cve": "CVE-2018-0180", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0179", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0161", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software Resource Management Errors Vulnerability", "product_as_filed": "Cisco / IOS Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0154", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6744", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS software", "known_ransomware_use": false }, { "cve": "CVE-2017-12235", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS software", "known_ransomware_use": false }, { "cve": "CVE-2017-12234", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS software", "known_ransomware_use": false }, { "cve": "CVE-2017-12233", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS software", "known_ransomware_use": false }, { "cve": "CVE-2017-12232", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS software", "known_ransomware_use": false }, { "cve": "CVE-2017-12231", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS software", "known_ransomware_use": false }, { "cve": "CVE-2018-0173", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software Improper Input Validation Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0172", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software Improper Input Validation Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0159", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS Software and Cisco IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0158", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability", "product_as_filed": "Cisco / IOS Software and Cisco IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0156", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS Software and Cisco IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0151", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6743", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6740", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6739", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6738", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6737", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6736", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6663", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-6627", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-12240", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2017-12237", "date_added": "2022-03-03", "due_date": "2022-03-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0175", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability", "product_as_filed": "Cisco / IOS, XR, and XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0167", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability", "product_as_filed": "Cisco / IOS, XR, and XE Software", "known_ransomware_use": false }, { "cve": "CVE-2018-0171", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability", "product_as_filed": "Cisco / IOS and IOS XE", "known_ransomware_use": false } ] }, "cisco-ise": { "product_url": "https://endoflife.ai/cisco-ise", "cve_count": 3, "latest_added": "2026-09-16", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-76460", "date_added": "2026-09-16", "due_date": "2026-09-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability", "product_as_filed": "Cisco / Identity Services Engine", "known_ransomware_use": false }, { "cve": "CVE-2025-20337", "date_added": "2025-07-28", "due_date": "2025-08-18", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco Identity Services Engine Injection Vulnerability", "product_as_filed": "Cisco / Identity Services Engine", "known_ransomware_use": false }, { "cve": "CVE-2025-20281", "date_added": "2025-07-28", "due_date": "2025-08-18", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco Identity Services Engine Injection Vulnerability", "product_as_filed": "Cisco / Identity Services Engine", "known_ransomware_use": false } ] }, "cisco-nxos": { "product_url": "https://endoflife.ai/cisco-nxos", "cve_count": 1, "latest_added": "2024-07-02", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2024-20399", "date_added": "2024-07-02", "due_date": "2024-07-23", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco NX-OS Command Injection Vulnerability", "product_as_filed": "Cisco / NX-OS", "known_ransomware_use": false } ] }, "cisco-sdwan": { "product_url": "https://endoflife.ai/cisco-sdwan", "cve_count": 9, "latest_added": "2026-09-30", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-76504", "date_added": "2026-09-30", "due_date": "2026-10-03", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability", "product_as_filed": "Cisco / Catalyst SD-WAN Manager", "known_ransomware_use": false }, { "cve": "CVE-2026-20262", "date_added": "2026-06-15", "due_date": "2026-06-29", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability", "product_as_filed": "Cisco / Catalyst SD-WAN Manager", "known_ransomware_use": false }, { "cve": "CVE-2026-20245", "date_added": "2026-06-09", "due_date": "2026-06-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability", "product_as_filed": "Cisco / Catalyst SD-WAN Manager", "known_ransomware_use": false }, { "cve": "CVE-2026-20182", "date_added": "2026-05-14", "due_date": "2026-05-17", "required_action": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlined in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability", "product_as_filed": "Cisco / Catalyst SD-WAN", "known_ransomware_use": false }, { "cve": "CVE-2026-20122", "date_added": "2026-04-20", "due_date": "2026-04-23", "required_action": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability", "product_as_filed": "Cisco / Catalyst SD-WAN Manger", "known_ransomware_use": false }, { "cve": "CVE-2026-20133", "date_added": "2026-04-20", "due_date": "2026-04-23", "required_action": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability", "product_as_filed": "Cisco / Catalyst SD-WAN Manager", "known_ransomware_use": false }, { "cve": "CVE-2026-20128", "date_added": "2026-04-20", "due_date": "2026-04-23", "required_action": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability", "product_as_filed": "Cisco / Catalyst SD-WAN Manager", "known_ransomware_use": false }, { "cve": "CVE-2026-20127", "date_added": "2026-02-25", "due_date": "2026-02-27", "required_action": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability", "product_as_filed": "Cisco / Catalyst SD-WAN Controller and Manager", "known_ransomware_use": false }, { "cve": "CVE-2022-20775", "date_added": "2026-02-25", "due_date": "2026-02-27", "required_action": "Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "vulnerability_name": "Cisco SD-WAN Path Traversal Vulnerability", "product_as_filed": "Cisco / SD-WAN", "known_ransomware_use": false } ] }, "cisco-secure-email-gateway": { "product_url": "https://endoflife.ai/cisco-secure-email-gateway", "cve_count": 3, "latest_added": "2026-10-14", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-76519", "date_added": "2026-10-14", "due_date": "2026-10-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Cisco Secure Email Gateway Relative Path Traversal Vulnerability", "product_as_filed": "Cisco / Secure Email Gateway", "known_ransomware_use": false }, { "cve": "CVE-2026-76461", "date_added": "2026-09-14", "due_date": "2026-09-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Cisco Secure Email Gateway SQL Injection Vulnerability", "product_as_filed": "Cisco / Secure Email Gateway", "known_ransomware_use": false }, { "cve": "CVE-2025-20393", "date_added": "2025-12-17", "due_date": "2025-12-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco Multiple Products Improper Input Validation Vulnerability", "product_as_filed": "Cisco / Multiple Products", "known_ransomware_use": false } ] }, "cisco-ucm": { "product_url": "https://endoflife.ai/cisco-ucm", "cve_count": 2, "latest_added": "2026-06-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-20230", "date_added": "2026-06-25", "due_date": "2026-06-28", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability", "product_as_filed": "Cisco / Unified Communications Manager", "known_ransomware_use": false }, { "cve": "CVE-2026-20045", "date_added": "2026-01-21", "due_date": "2026-02-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco Unified Communications Products Code Injection Vulnerability", "product_as_filed": "Cisco / Unified Communications Manager", "known_ransomware_use": false } ] }, "crushftp": { "product_url": "https://endoflife.ai/crushftp", "cve_count": 3, "latest_added": "2025-07-22", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-54309", "date_added": "2025-07-22", "due_date": "2025-08-12", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": " CrushFTP Unprotected Alternate Channel Vulnerability", "product_as_filed": "CrushFTP / CrushFTP", "known_ransomware_use": false }, { "cve": "CVE-2025-31161", "date_added": "2025-04-07", "due_date": "2025-04-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "CrushFTP Authentication Bypass Vulnerability", "product_as_filed": "CrushFTP / CrushFTP", "known_ransomware_use": true }, { "cve": "CVE-2024-4040", "date_added": "2024-04-24", "due_date": "2024-05-01", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "CrushFTP VFS Sandbox Escape Vulnerability", "product_as_filed": "CrushFTP / CrushFTP", "known_ransomware_use": false } ] }, "draytek-vigor": { "product_url": "https://endoflife.ai/draytek-vigor", "cve_count": 3, "latest_added": "2025-05-15", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2024-12987", "date_added": "2025-05-15", "due_date": "2025-06-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "DrayTek Vigor Routers OS Command Injection Vulnerability", "product_as_filed": "DrayTek / Vigor Routers", "known_ransomware_use": false }, { "cve": "CVE-2020-15415", "date_added": "2024-09-30", "due_date": "2024-10-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "DrayTek Multiple Vigor Routers OS Command Injection Vulnerability", "product_as_filed": "DrayTek / Multiple Vigor Routers", "known_ransomware_use": false }, { "cve": "CVE-2020-8515", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Multiple DrayTek Vigor Routers Web Management Page Vulnerability", "product_as_filed": "DrayTek / Multiple Vigor Routers", "known_ransomware_use": false } ] }, "fortiadc": { "product_url": "https://endoflife.ai/fortiadc", "cve_count": 1, "latest_added": "2022-09-08", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2018-13374", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS and FortiADC Improper Access Control Vulnerability", "product_as_filed": "Fortinet / FortiOS and FortiADC", "known_ransomware_use": true } ] }, "forticlient-ems": { "product_url": "https://endoflife.ai/forticlient-ems", "cve_count": 3, "latest_added": "2026-04-13", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-21643", "date_added": "2026-04-13", "due_date": "2026-04-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiClient EMS SQL Injection Vulnerability", "product_as_filed": "Fortinet / FortiClient EMS", "known_ransomware_use": false }, { "cve": "CVE-2026-35616", "date_added": "2026-04-06", "due_date": "2026-04-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiClient EMS Improper Access Control Vulnerability", "product_as_filed": "Fortinet / FortiClient EMS", "known_ransomware_use": false }, { "cve": "CVE-2023-48788", "date_added": "2024-03-25", "due_date": "2024-04-15", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiClient EMS SQL Injection Vulnerability", "product_as_filed": "Fortinet / FortiClient EMS", "known_ransomware_use": true } ] }, "fortimail": { "product_url": "https://endoflife.ai/fortimail", "cve_count": 2, "latest_added": "2026-10-01", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-104286", "date_added": "2026-10-01", "due_date": "2026-10-04", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Fortinet FortiMail Path Traversal Vulnerability", "product_as_filed": "Fortinet / FortiMail", "known_ransomware_use": false }, { "cve": "CVE-2025-32756", "date_added": "2025-05-14", "due_date": "2025-06-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false } ] }, "fortimanager": { "product_url": "https://endoflife.ai/fortimanager", "cve_count": 2, "latest_added": "2026-01-27", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-24858", "date_added": "2026-01-27", "due_date": "2026-01-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-47575", "date_added": "2024-10-23", "due_date": "2024-11-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiManager Missing Authentication Vulnerability", "product_as_filed": "Fortinet / FortiManager", "known_ransomware_use": false } ] }, "fortiproxy": { "product_url": "https://endoflife.ai/fortiproxy", "cve_count": 10, "latest_added": "2026-10-16", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2025-61624", "date_added": "2026-10-16", "due_date": "2026-10-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Fortinet Multiple Products Path Traversal Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2026-24858", "date_added": "2026-01-27", "due_date": "2026-01-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-59718", "date_added": "2025-12-16", "due_date": "2025-12-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-24472", "date_added": "2025-03-18", "due_date": "2025-04-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "product_as_filed": "Fortinet / FortiOS and FortiProxy", "known_ransomware_use": true }, { "cve": "CVE-2024-55591", "date_added": "2025-01-14", "due_date": "2025-01-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability", "product_as_filed": "Fortinet / FortiOS and FortiProxy", "known_ransomware_use": true }, { "cve": "CVE-2024-23113", "date_added": "2024-10-09", "due_date": "2024-10-30", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Format String Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-27997", "date_added": "2023-06-13", "due_date": "2023-07-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability", "product_as_filed": "Fortinet / FortiOS and FortiProxy SSL-VPN", "known_ransomware_use": true }, { "cve": "CVE-2022-40684", "date_added": "2022-10-11", "due_date": "2022-11-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet Multiple Products Authentication Bypass Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": true }, { "cve": "CVE-2018-13382", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS and FortiProxy Improper Authorization", "product_as_filed": "Fortinet / FortiOS and FortiProxy", "known_ransomware_use": true }, { "cve": "CVE-2018-13383", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortinet FortiOS and FortiProxy Out-of-bounds Write", "product_as_filed": "Fortinet / FortiOS and FortiProxy", "known_ransomware_use": true } ] }, "fortisandbox": { "product_url": "https://endoflife.ai/fortisandbox", "cve_count": 2, "latest_added": "2026-07-16", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-25089", "date_added": "2026-07-16", "due_date": "2026-07-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Fortinet FortiSandbox OS Command Injection Vulnerability", "product_as_filed": "Fortinet / FortiSandbox", "known_ransomware_use": false }, { "cve": "CVE-2026-39808", "date_added": "2026-07-16", "due_date": "2026-07-19", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Fortinet FortiSandbox OS Command Injection Vulnerability", "product_as_filed": "Fortinet / FortiSandbox", "known_ransomware_use": false } ] }, "fortiweb": { "product_url": "https://endoflife.ai/fortiweb", "cve_count": 5, "latest_added": "2026-01-27", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-24858", "date_added": "2026-01-27", "due_date": "2026-01-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-59718", "date_added": "2025-12-16", "due_date": "2025-12-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-58034", "date_added": "2025-11-18", "due_date": "2025-11-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiWeb OS Command Injection Vulnerability", "product_as_filed": "Fortinet / FortiWeb", "known_ransomware_use": false }, { "cve": "CVE-2025-64446", "date_added": "2025-11-14", "due_date": "2025-11-21", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiWeb Path Traversal Vulnerability", "product_as_filed": "Fortinet / FortiWeb", "known_ransomware_use": false }, { "cve": "CVE-2025-25257", "date_added": "2025-07-18", "due_date": "2025-08-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet FortiWeb SQL Injection Vulnerability", "product_as_filed": "Fortinet / FortiWeb", "known_ransomware_use": false } ] }, "gitea": { "product_url": "https://endoflife.ai/gitea", "cve_count": 1, "latest_added": "2026-08-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-60004", "date_added": "2026-08-25", "due_date": "2026-08-28", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Gitea Code Injection Vulnerability", "product_as_filed": "Gitea / Gitea", "known_ransomware_use": false } ] }, "goanywhere-mft": { "product_url": "https://endoflife.ai/goanywhere-mft", "cve_count": 2, "latest_added": "2025-09-29", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-10035", "date_added": "2025-09-29", "due_date": "2025-10-20", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Fortra / GoAnywhere MFT", "known_ransomware_use": true }, { "cve": "CVE-2023-0669", "date_added": "2023-02-10", "due_date": "2023-03-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Fortra GoAnywhere MFT Remote Code Execution Vulnerability", "product_as_filed": "Fortra / GoAnywhere MFT", "known_ransomware_use": true } ] }, "ibm-websphere": { "product_url": "https://endoflife.ai/ibm-websphere", "cve_count": 1, "latest_added": "2022-01-10", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2015-7450", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.", "product_as_filed": "IBM / WebSphere Application Server and Server Hypervisor Edition", "known_ransomware_use": false } ] }, "ivanti-connect-secure": { "product_url": "https://endoflife.ai/ivanti-connect-secure", "cve_count": 15, "latest_added": "2026-10-13", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-104935", "date_added": "2026-10-13", "due_date": "2026-10-16", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability", "product_as_filed": "Ivanti / Connect Secure", "known_ransomware_use": false }, { "cve": "CVE-2025-22457", "date_added": "2025-04-04", "due_date": "2025-04-11", "required_action": "Apply mitigations as set forth in the CISA instructions linked below.", "vulnerability_name": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "product_as_filed": "Ivanti / Connect Secure, Policy Secure, and ZTA Gateways", "known_ransomware_use": true }, { "cve": "CVE-2025-0282", "date_added": "2025-01-08", "due_date": "2025-01-15", "required_action": "Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.", "vulnerability_name": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "product_as_filed": "Ivanti / Connect Secure, Policy Secure, and ZTA Gateways", "known_ransomware_use": true }, { "cve": "CVE-2024-21893", "date_added": "2024-01-31", "due_date": "2024-02-02", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability", "product_as_filed": "Ivanti / Connect Secure, Policy Secure, and Neurons", "known_ransomware_use": true }, { "cve": "CVE-2023-46805", "date_added": "2024-01-10", "due_date": "2024-01-22", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability", "product_as_filed": "Ivanti / Connect Secure and Policy Secure", "known_ransomware_use": true }, { "cve": "CVE-2024-21887", "date_added": "2024-01-10", "due_date": "2024-01-22", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Connect Secure and Policy Secure Command Injection Vulnerability", "product_as_filed": "Ivanti / Connect Secure and Policy Secure", "known_ransomware_use": true }, { "cve": "CVE-2020-8218", "date_added": "2022-03-07", "due_date": "2022-09-07", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Pulse Connect Secure Code Injection Vulnerability", "product_as_filed": "Pulse Secure / Pulse Connect Secure", "known_ransomware_use": false }, { "cve": "CVE-2021-22893", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ivanti Pulse Connect Secure Use-After-Free Vulnerability", "product_as_filed": "Ivanti / Pulse Connect Secure", "known_ransomware_use": true }, { "cve": "CVE-2020-8243", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ivanti Pulse Connect Secure Code Execution Vulnerability", "product_as_filed": "Ivanti / Pulse Connect Secure", "known_ransomware_use": false }, { "cve": "CVE-2021-22900", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability", "product_as_filed": "Ivanti / Pulse Connect Secure", "known_ransomware_use": false }, { "cve": "CVE-2021-22894", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability", "product_as_filed": "Ivanti / Pulse Connect Secure", "known_ransomware_use": false }, { "cve": "CVE-2020-8260", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ivanti Pulse Connect Secure Code Execution Vulnerability", "product_as_filed": "Ivanti / Pulse Connect Secure", "known_ransomware_use": false }, { "cve": "CVE-2021-22899", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ivanti Pulse Connect Secure Command Injection Vulnerability", "product_as_filed": "Ivanti / Pulse Connect Secure", "known_ransomware_use": false }, { "cve": "CVE-2019-11510", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability", "product_as_filed": "Ivanti / Pulse Connect Secure", "known_ransomware_use": true }, { "cve": "CVE-2019-11539", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability", "product_as_filed": "Ivanti / Pulse Connect Secure and Pulse Policy Secure", "known_ransomware_use": true } ] }, "ivanti-csa": { "product_url": "https://endoflife.ai/ivanti-csa", "cve_count": 5, "latest_added": "2024-10-09", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2024-9380", "date_added": "2024-10-09", "due_date": "2024-10-30", "required_action": "As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.", "vulnerability_name": "Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability", "product_as_filed": "Ivanti / Cloud Services Appliance (CSA)", "known_ransomware_use": false }, { "cve": "CVE-2024-9379", "date_added": "2024-10-09", "due_date": "2024-10-30", "required_action": "As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.", "vulnerability_name": "Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability", "product_as_filed": "Ivanti / Cloud Services Appliance (CSA)", "known_ransomware_use": false }, { "cve": "CVE-2024-8963", "date_added": "2024-09-19", "due_date": "2024-10-10", "required_action": "As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive security updates.", "vulnerability_name": "Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability", "product_as_filed": "Ivanti / Cloud Services Appliance (CSA)", "known_ransomware_use": false }, { "cve": "CVE-2024-8190", "date_added": "2024-09-13", "due_date": "2024-10-04", "required_action": "As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive future security updates.", "vulnerability_name": "Ivanti Cloud Services Appliance OS Command Injection Vulnerability", "product_as_filed": "Ivanti / Cloud Services Appliance", "known_ransomware_use": false }, { "cve": "CVE-2021-44529", "date_added": "2024-03-25", "due_date": "2024-04-15", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ", "product_as_filed": "Ivanti / Endpoint Manager Cloud Service Appliance (EPM CSA)", "known_ransomware_use": true } ] }, "ivanti-epm": { "product_url": "https://endoflife.ai/ivanti-epm", "cve_count": 6, "latest_added": "2026-03-09", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-1603", "date_added": "2026-03-09", "due_date": "2026-03-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager (EPM)", "known_ransomware_use": false }, { "cve": "CVE-2024-13161", "date_added": "2025-03-10", "due_date": "2025-03-31", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager (EPM)", "known_ransomware_use": false }, { "cve": "CVE-2024-13160", "date_added": "2025-03-10", "due_date": "2025-03-31", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager (EPM)", "known_ransomware_use": false }, { "cve": "CVE-2024-13159", "date_added": "2025-03-10", "due_date": "2025-03-31", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager (EPM)", "known_ransomware_use": false }, { "cve": "CVE-2024-29824", "date_added": "2024-10-02", "due_date": "2024-10-23", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager (EPM)", "known_ransomware_use": false }, { "cve": "CVE-2021-44529", "date_added": "2024-03-25", "due_date": "2024-04-15", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ", "product_as_filed": "Ivanti / Endpoint Manager Cloud Service Appliance (EPM CSA)", "known_ransomware_use": true } ] }, "ivanti-epmm": { "product_url": "https://endoflife.ai/ivanti-epmm", "cve_count": 9, "latest_added": "2026-05-07", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-6973", "date_added": "2026-05-07", "due_date": "2026-05-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager Mobile (EPMM)", "known_ransomware_use": false }, { "cve": "CVE-2026-1340", "date_added": "2026-04-08", "due_date": "2026-04-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager Mobile (EPMM)", "known_ransomware_use": false }, { "cve": "CVE-2026-1281", "date_added": "2026-01-29", "due_date": "2026-02-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager Mobile (EPMM)", "known_ransomware_use": false }, { "cve": "CVE-2025-4428", "date_added": "2025-05-19", "due_date": "2025-06-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager Mobile (EPMM)", "known_ransomware_use": false }, { "cve": "CVE-2025-4427", "date_added": "2025-05-19", "due_date": "2025-06-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager Mobile (EPMM)", "known_ransomware_use": false }, { "cve": "CVE-2023-35082", "date_added": "2024-01-18", "due_date": "2024-02-08", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager Mobile (EPMM) and MobileIron Core", "known_ransomware_use": true }, { "cve": "CVE-2023-35081", "date_added": "2023-07-31", "due_date": "2023-08-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager Mobile (EPMM)", "known_ransomware_use": false }, { "cve": "CVE-2023-35078", "date_added": "2023-07-25", "due_date": "2023-08-15", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability", "product_as_filed": "Ivanti / Endpoint Manager Mobile (EPMM)", "known_ransomware_use": true }, { "cve": "CVE-2020-15505", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability", "product_as_filed": "Ivanti / MobileIron Multiple Products", "known_ransomware_use": false } ] }, "ivanti-policy-secure": { "product_url": "https://endoflife.ai/ivanti-policy-secure", "cve_count": 6, "latest_added": "2025-04-04", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2025-22457", "date_added": "2025-04-04", "due_date": "2025-04-11", "required_action": "Apply mitigations as set forth in the CISA instructions linked below.", "vulnerability_name": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "product_as_filed": "Ivanti / Connect Secure, Policy Secure, and ZTA Gateways", "known_ransomware_use": true }, { "cve": "CVE-2025-0282", "date_added": "2025-01-08", "due_date": "2025-01-15", "required_action": "Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.", "vulnerability_name": "Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability", "product_as_filed": "Ivanti / Connect Secure, Policy Secure, and ZTA Gateways", "known_ransomware_use": true }, { "cve": "CVE-2024-21893", "date_added": "2024-01-31", "due_date": "2024-02-02", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability", "product_as_filed": "Ivanti / Connect Secure, Policy Secure, and Neurons", "known_ransomware_use": true }, { "cve": "CVE-2023-46805", "date_added": "2024-01-10", "due_date": "2024-01-22", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability", "product_as_filed": "Ivanti / Connect Secure and Policy Secure", "known_ransomware_use": true }, { "cve": "CVE-2024-21887", "date_added": "2024-01-10", "due_date": "2024-01-22", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Connect Secure and Policy Secure Command Injection Vulnerability", "product_as_filed": "Ivanti / Connect Secure and Policy Secure", "known_ransomware_use": true }, { "cve": "CVE-2019-11539", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability", "product_as_filed": "Ivanti / Pulse Connect Secure and Pulse Policy Secure", "known_ransomware_use": true } ] }, "ivanti-sentry": { "product_url": "https://endoflife.ai/ivanti-sentry", "cve_count": 3, "latest_added": "2026-06-11", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-10520", "date_added": "2026-06-11", "due_date": "2026-06-14", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Ivanti Sentry OS Command Injection Vulnerability", "product_as_filed": "Ivanti / Sentry", "known_ransomware_use": false }, { "cve": "CVE-2023-38035", "date_added": "2023-08-22", "due_date": "2023-09-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Ivanti Sentry Authentication Bypass Vulnerability", "product_as_filed": "Ivanti / Sentry", "known_ransomware_use": true }, { "cve": "CVE-2020-15505", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability", "product_as_filed": "Ivanti / MobileIron Multiple Products", "known_ransomware_use": false } ] }, "junos": { "product_url": "https://endoflife.ai/junos", "cve_count": 7, "latest_added": "2025-03-13", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2025-21590", "date_added": "2025-03-13", "due_date": "2025-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability", "product_as_filed": "Juniper / Junos OS", "known_ransomware_use": false }, { "cve": "CVE-2023-36844", "date_added": "2023-11-13", "due_date": "2023-11-17", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Juniper Junos OS EX Series PHP External Variable Modification Vulnerability", "product_as_filed": "Juniper / Junos OS", "known_ransomware_use": false }, { "cve": "CVE-2023-36845", "date_added": "2023-11-13", "due_date": "2023-11-17", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability", "product_as_filed": "Juniper / Junos OS", "known_ransomware_use": false }, { "cve": "CVE-2023-36846", "date_added": "2023-11-13", "due_date": "2023-11-17", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability", "product_as_filed": "Juniper / Junos OS", "known_ransomware_use": false }, { "cve": "CVE-2023-36847", "date_added": "2023-11-13", "due_date": "2023-11-17", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability", "product_as_filed": "Juniper / Junos OS", "known_ransomware_use": false }, { "cve": "CVE-2023-36851", "date_added": "2023-11-13", "due_date": "2023-11-17", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability", "product_as_filed": "Juniper / Junos OS", "known_ransomware_use": false }, { "cve": "CVE-2020-1631", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Juniper Junos OS Path Traversal Vulnerability", "product_as_filed": "Juniper / Junos OS", "known_ransomware_use": false } ] }, "kaseya-vsa": { "product_url": "https://endoflife.ai/kaseya-vsa", "cve_count": 3, "latest_added": "2022-05-24", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2017-18362", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "vulnerability_name": "Kaseya VSA SQL Injection Vulnerability", "product_as_filed": "Kaseya / Virtual System/Server Administrator (VSA)", "known_ransomware_use": true }, { "cve": "CVE-2018-20753", "date_added": "2022-04-13", "due_date": "2022-05-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Kaseya VSA Remote Code Execution Vulnerability", "product_as_filed": "Kaseya / Virtual System/Server Administrator (VSA)", "known_ransomware_use": true }, { "cve": "CVE-2021-30116", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability", "product_as_filed": "Kaseya / Virtual System/Server Administrator (VSA)", "known_ransomware_use": true } ] }, "kentico": { "product_url": "https://endoflife.ai/kentico", "cve_count": 4, "latest_added": "2026-04-20", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-2749", "date_added": "2026-04-20", "due_date": "2026-05-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Kentico Xperience Path Traversal Vulnerability", "product_as_filed": "Kentico / Kentico Xperience", "known_ransomware_use": false }, { "cve": "CVE-2025-2746", "date_added": "2025-10-20", "due_date": "2025-11-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability", "product_as_filed": "Kentico / Xperience CMS", "known_ransomware_use": false }, { "cve": "CVE-2025-2747", "date_added": "2025-10-20", "due_date": "2025-11-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability", "product_as_filed": "Kentico / Xperience CMS", "known_ransomware_use": false }, { "cve": "CVE-2019-10068", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Kentico Xperience Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Kentico / Xperience", "known_ransomware_use": false } ] }, "microsoft-configmgr": { "product_url": "https://endoflife.ai/microsoft-configmgr", "cve_count": 1, "latest_added": "2026-02-12", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2024-43468", "date_added": "2026-02-12", "due_date": "2026-03-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Configuration Manager SQL Injection Vulnerability", "product_as_filed": "Microsoft / Configuration Manager", "known_ransomware_use": false } ] }, "microsoft-project": { "product_url": "https://endoflife.ai/microsoft-project", "cve_count": 1, "latest_added": "2024-08-13", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2024-38189", "date_added": "2024-08-13", "due_date": "2024-09-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Project Remote Code Execution Vulnerability ", "product_as_filed": "Microsoft / Project", "known_ransomware_use": false } ] }, "mlflow": { "product_url": "https://endoflife.ai/mlflow", "cve_count": 1, "latest_added": "2026-08-19", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-64849", "date_added": "2026-08-19", "due_date": "2026-09-02", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "MLflow Server-Side Request Forgery Vulnerability", "product_as_filed": "MLflow / MLflow", "known_ransomware_use": false } ] }, "netscaler-adc": { "product_url": "https://endoflife.ai/netscaler-adc", "cve_count": 18, "latest_added": "2026-10-04", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-88779", "date_added": "2026-10-04", "due_date": "2026-10-07", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "product_as_filed": "Citrix / NetScaler", "known_ransomware_use": false }, { "cve": "CVE-2026-88772", "date_added": "2026-09-27", "due_date": "2026-09-30", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "product_as_filed": "Citrix / NetScaler", "known_ransomware_use": false }, { "cve": "CVE-2026-88771", "date_added": "2026-09-27", "due_date": "2026-09-30", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Citrix NetScaler Improper Input Validation Vulnerability", "product_as_filed": "Citrix / NetScaler", "known_ransomware_use": false }, { "cve": "CVE-2026-19490", "date_added": "2026-09-09", "due_date": "2026-09-12", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability", "product_as_filed": "Citrix / NetScaler", "known_ransomware_use": false }, { "cve": "CVE-2026-8452", "date_added": "2026-08-26", "due_date": "2026-08-29", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability", "product_as_filed": "Citrix / NetScaler ADC and NetScaler Gateway", "known_ransomware_use": false }, { "cve": "CVE-2026-3055", "date_added": "2026-03-30", "due_date": "2026-04-02", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Citrix NetScaler Out-of-Bounds Read Vulnerability", "product_as_filed": "Citrix / NetScaler", "known_ransomware_use": false }, { "cve": "CVE-2025-7775", "date_added": "2025-08-26", "due_date": "2025-08-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Citrix NetScaler Memory Overflow Vulnerability", "product_as_filed": "Citrix / NetScaler", "known_ransomware_use": false }, { "cve": "CVE-2025-5777", "date_added": "2025-07-10", "due_date": "2025-07-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability", "product_as_filed": "Citrix / NetScaler ADC and Gateway", "known_ransomware_use": true }, { "cve": "CVE-2025-6543", "date_added": "2025-06-30", "due_date": "2025-07-21", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability", "product_as_filed": "Citrix / NetScaler ADC and Gateway", "known_ransomware_use": false }, { "cve": "CVE-2023-6549", "date_added": "2024-01-17", "due_date": "2024-02-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability", "product_as_filed": "Citrix / NetScaler ADC and NetScaler Gateway", "known_ransomware_use": false }, { "cve": "CVE-2023-6548", "date_added": "2024-01-17", "due_date": "2024-01-24", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability", "product_as_filed": "Citrix / NetScaler ADC and NetScaler Gateway", "known_ransomware_use": false }, { "cve": "CVE-2023-4966", "date_added": "2023-10-18", "due_date": "2023-11-08", "required_action": "Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability", "product_as_filed": "Citrix / NetScaler ADC and NetScaler Gateway", "known_ransomware_use": true }, { "cve": "CVE-2023-3519", "date_added": "2023-07-19", "due_date": "2023-08-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability", "product_as_filed": "Citrix / NetScaler ADC and NetScaler Gateway", "known_ransomware_use": true }, { "cve": "CVE-2022-27518", "date_added": "2022-12-13", "due_date": "2023-01-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability", "product_as_filed": "Citrix / Application Delivery Controller (ADC) and Gateway", "known_ransomware_use": false }, { "cve": "CVE-2020-8193", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability", "product_as_filed": "Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "known_ransomware_use": false }, { "cve": "CVE-2020-8195", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability", "product_as_filed": "Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "known_ransomware_use": false }, { "cve": "CVE-2020-8196", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability", "product_as_filed": "Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "known_ransomware_use": false }, { "cve": "CVE-2019-19781", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability", "product_as_filed": "Citrix / Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", "known_ransomware_use": true } ] }, "oracle-adf": { "product_url": "https://endoflife.ai/oracle-adf", "cve_count": 1, "latest_added": "2024-09-18", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2022-21445", "date_added": "2024-09-18", "due_date": "2024-10-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Oracle ADF Faces Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Oracle / ADF Faces", "known_ransomware_use": false } ] }, "oracle-ebs": { "product_url": "https://endoflife.ai/oracle-ebs", "cve_count": 4, "latest_added": "2026-07-15", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-46817", "date_added": "2026-07-15", "due_date": "2026-07-18", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Oracle E-Business Suite Improper Privilege Management Vulnerability", "product_as_filed": "Oracle / E-Business Suite", "known_ransomware_use": false }, { "cve": "CVE-2025-61884", "date_added": "2025-10-20", "due_date": "2025-11-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability", "product_as_filed": "Oracle / E-Business Suite", "known_ransomware_use": true }, { "cve": "CVE-2025-61882", "date_added": "2025-10-06", "due_date": "2025-10-27", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Oracle E-Business Suite Unspecified Vulnerability", "product_as_filed": "Oracle / E-Business Suite", "known_ransomware_use": true }, { "cve": "CVE-2022-21587", "date_added": "2023-02-02", "due_date": "2023-02-23", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle E-Business Suite Unspecified Vulnerability", "product_as_filed": "Oracle / E-Business Suite", "known_ransomware_use": true } ] }, "oracle-http-server": { "product_url": "https://endoflife.ai/oracle-http-server", "cve_count": 1, "latest_added": "2026-08-24", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-21962", "date_added": "2026-08-24", "due_date": "2026-08-27", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability", "product_as_filed": "Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-in", "known_ransomware_use": false } ] }, "oracle-peoplesoft": { "product_url": "https://endoflife.ai/oracle-peoplesoft", "cve_count": 1, "latest_added": "2026-06-12", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-35273", "date_added": "2026-06-12", "due_date": "2026-06-15", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability", "product_as_filed": "Oracle / PeopleSoft Enterprise PeopleTools", "known_ransomware_use": true } ] }, "oracle-weblogic": { "product_url": "https://endoflife.ai/oracle-weblogic", "cve_count": 14, "latest_added": "2026-08-24", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-21962", "date_added": "2026-08-24", "due_date": "2026-08-27", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability", "product_as_filed": "Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-in", "known_ransomware_use": false }, { "cve": "CVE-2024-21182", "date_added": "2026-06-01", "due_date": "2026-06-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Oracle WebLogic Server Unspecified Vulnerability", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": false }, { "cve": "CVE-2020-2883", "date_added": "2025-01-07", "due_date": "2025-01-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Oracle WebLogic Server Unspecified Vulnerability", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": false }, { "cve": "CVE-2020-14644", "date_added": "2024-09-18", "due_date": "2024-10-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Oracle WebLogic Server Remote Code Execution Vulnerability", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": false }, { "cve": "CVE-2017-3506", "date_added": "2024-06-03", "due_date": "2024-06-24", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Oracle WebLogic Server OS Command Injection Vulnerability", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": false }, { "cve": "CVE-2020-2551", "date_added": "2023-11-16", "due_date": "2023-12-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Oracle Fusion Middleware Unspecified Vulnerability", "product_as_filed": "Oracle / Fusion Middleware", "known_ransomware_use": false }, { "cve": "CVE-2023-21839", "date_added": "2023-05-01", "due_date": "2023-05-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle WebLogic Server Unspecified Vulnerability", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": false }, { "cve": "CVE-2018-2628", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle WebLogic Server Unspecified Vulnerability", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": false }, { "cve": "CVE-2017-10271", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Corporation WebLogic Server Remote Code Execution Vulnerability", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": true }, { "cve": "CVE-2019-2725", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle WebLogic Server, Injection", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": true }, { "cve": "CVE-2015-4852", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": false }, { "cve": "CVE-2020-14750", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle WebLogic Server Remote Code Execution Vulnerability", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": false }, { "cve": "CVE-2020-14882", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle WebLogic Server Remote Code Execution Vulnerability", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": false }, { "cve": "CVE-2020-14883", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle WebLogic Server Unspecified Vulnerability", "product_as_filed": "Oracle / WebLogic Server", "known_ransomware_use": false } ] }, "palo-alto-expedition": { "product_url": "https://endoflife.ai/palo-alto-expedition", "cve_count": 3, "latest_added": "2024-11-14", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2024-9465", "date_added": "2024-11-14", "due_date": "2024-12-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Palo Alto Networks Expedition SQL Injection Vulnerability", "product_as_filed": "Palo Alto Networks / Expedition", "known_ransomware_use": false }, { "cve": "CVE-2024-9463", "date_added": "2024-11-14", "due_date": "2024-12-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Palo Alto Networks Expedition OS Command Injection Vulnerability", "product_as_filed": "Palo Alto Networks / Expedition", "known_ransomware_use": false }, { "cve": "CVE-2024-5910", "date_added": "2024-11-07", "due_date": "2024-11-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Palo Alto Networks Expedition Missing Authentication Vulnerability", "product_as_filed": "Palo Alto Networks / Expedition", "known_ransomware_use": false } ] }, "papercut-ng-mf": { "product_url": "https://endoflife.ai/papercut-ng-mf", "cve_count": 5, "latest_added": "2026-08-31", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-82078", "date_added": "2026-08-31", "due_date": "2026-09-14", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "PaperCut NG/MF Unsafe Reflection Vulnerability", "product_as_filed": "PaperCut / NG/MF", "known_ransomware_use": false }, { "cve": "CVE-2026-81578", "date_added": "2026-08-31", "due_date": "2026-09-14", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "PaperCut NG/MF Missing Authentication for Critical Function Vulnerability", "product_as_filed": "PaperCut / NG/MF", "known_ransomware_use": false }, { "cve": "CVE-2023-27351", "date_added": "2026-04-20", "due_date": "2026-05-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "PaperCut NG/MF Improper Authentication Vulnerability", "product_as_filed": "PaperCut / NG/MF", "known_ransomware_use": true }, { "cve": "CVE-2023-2533", "date_added": "2025-07-28", "due_date": "2025-08-18", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability", "product_as_filed": "PaperCut / NG/MF", "known_ransomware_use": false }, { "cve": "CVE-2023-27350", "date_added": "2023-04-21", "due_date": "2023-05-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "PaperCut MF/NG Improper Access Control Vulnerability", "product_as_filed": "PaperCut / MF/NG", "known_ransomware_use": true } ] }, "progress-kemp-loadmaster": { "product_url": "https://endoflife.ai/progress-kemp-loadmaster", "cve_count": 2, "latest_added": "2026-08-07", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-8037", "date_added": "2026-08-07", "due_date": "2026-08-10", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Progress LoadMaster Command Injection Vulnerability", "product_as_filed": "Progress / LoadMaster", "known_ransomware_use": false }, { "cve": "CVE-2024-1212", "date_added": "2024-11-18", "due_date": "2024-12-09", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Progress Kemp LoadMaster OS Command Injection Vulnerability", "product_as_filed": "Progress / Kemp LoadMaster", "known_ransomware_use": false } ] }, "progress-moveit-transfer": { "product_url": "https://endoflife.ai/progress-moveit-transfer", "cve_count": 1, "latest_added": "2023-06-02", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2023-34362", "date_added": "2023-06-02", "due_date": "2023-06-23", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Progress MOVEit Transfer SQL Injection Vulnerability", "product_as_filed": "Progress / MOVEit Transfer", "known_ransomware_use": true } ] }, "progress-whatsup-gold": { "product_url": "https://endoflife.ai/progress-whatsup-gold", "cve_count": 2, "latest_added": "2025-03-03", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2024-4885", "date_added": "2025-03-03", "due_date": "2025-03-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Progress WhatsUp Gold Path Traversal Vulnerability", "product_as_filed": "Progress / WhatsUp Gold", "known_ransomware_use": false }, { "cve": "CVE-2024-6670", "date_added": "2024-09-16", "due_date": "2024-10-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Progress WhatsUp Gold SQL Injection Vulnerability", "product_as_filed": "Progress / WhatsUp Gold", "known_ransomware_use": true } ] }, "progress-ws-ftp-server": { "product_url": "https://endoflife.ai/progress-ws-ftp-server", "cve_count": 1, "latest_added": "2023-10-05", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2023-40044", "date_added": "2023-10-05", "due_date": "2023-10-26", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Progress / WS_FTP Server", "known_ransomware_use": true } ] }, "qnap-nas": { "product_url": "https://endoflife.ai/qnap-nas", "cve_count": 10, "latest_added": "2022-09-08", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2022-27593", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "QNAP Photo Station Externally Controlled Reference Vulnerability", "product_as_filed": "QNAP / Photo Station", "known_ransomware_use": true }, { "cve": "CVE-2019-7193", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "QNAP QTS Improper Input Validation Vulnerability", "product_as_filed": "QNAP / QTS", "known_ransomware_use": true }, { "cve": "CVE-2019-7192", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "QNAP Photo Station Improper Access Control Vulnerability", "product_as_filed": "QNAP / Photo Station", "known_ransomware_use": true }, { "cve": "CVE-2019-7194", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "QNAP Photo Station Path Traversal Vulnerability", "product_as_filed": "QNAP / Photo Station", "known_ransomware_use": true }, { "cve": "CVE-2019-7195", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "QNAP Photo Station Path Traversal Vulnerability", "product_as_filed": "QNAP / Photo Station", "known_ransomware_use": true }, { "cve": "CVE-2018-19953", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "QNAP NAS File Station Cross-Site Scripting Vulnerability", "product_as_filed": "QNAP / Network Attached Storage (NAS)", "known_ransomware_use": true }, { "cve": "CVE-2018-19949", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "QNAP NAS File Station Command Injection Vulnerability", "product_as_filed": "QNAP / Network Attached Storage (NAS)", "known_ransomware_use": true }, { "cve": "CVE-2018-19943", "date_added": "2022-05-24", "due_date": "2022-06-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "QNAP NAS File Station Cross-Site Scripting Vulnerability", "product_as_filed": "QNAP / Network Attached Storage (NAS)", "known_ransomware_use": true }, { "cve": "CVE-2020-2509", "date_added": "2022-04-11", "due_date": "2022-05-02", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "QNAP Network-Attached Storage (NAS) Command Injection Vulnerability", "product_as_filed": "QNAP / QNAP Network-Attached Storage (NAS)", "known_ransomware_use": false }, { "cve": "CVE-2021-28799", "date_added": "2022-03-31", "due_date": "2022-04-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "QNAP NAS Improper Authorization Vulnerability", "product_as_filed": "QNAP / Network Attached Storage (NAS)", "known_ransomware_use": true } ] }, "quest-kace-sma": { "product_url": "https://endoflife.ai/quest-kace-sma", "cve_count": 1, "latest_added": "2026-04-20", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-32975", "date_added": "2026-04-20", "due_date": "2026-05-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability", "product_as_filed": "Quest / KACE Systems Management Appliance (SMA)", "known_ransomware_use": false } ] }, "ray": { "product_url": "https://endoflife.ai/ray", "cve_count": 1, "latest_added": "2026-08-17", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-62593", "date_added": "2026-08-17", "due_date": "2026-08-20", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Ray-Project Ray Code Injection Vulnerability", "product_as_filed": "Ray-Project / Ray", "known_ransomware_use": false } ] }, "sap-netweaver": { "product_url": "https://endoflife.ai/sap-netweaver", "cve_count": 11, "latest_added": "2025-05-15", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2025-42999", "date_added": "2025-05-15", "due_date": "2025-06-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SAP NetWeaver Deserialization Vulnerability", "product_as_filed": "SAP / NetWeaver", "known_ransomware_use": true }, { "cve": "CVE-2025-31324", "date_added": "2025-04-29", "due_date": "2025-05-20", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SAP NetWeaver Unrestricted File Upload Vulnerability", "product_as_filed": "SAP / NetWeaver", "known_ransomware_use": true }, { "cve": "CVE-2017-12637", "date_added": "2025-03-19", "due_date": "2025-04-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SAP NetWeaver Directory Traversal Vulnerability", "product_as_filed": "SAP / NetWeaver", "known_ransomware_use": false }, { "cve": "CVE-2022-22536", "date_added": "2022-08-18", "due_date": "2022-09-08", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SAP Multiple Products HTTP Request Smuggling Vulnerability", "product_as_filed": "SAP / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-38163", "date_added": "2022-06-09", "due_date": "2022-06-30", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SAP NetWeaver Unrestricted File Upload Vulnerability", "product_as_filed": "SAP / NetWeaver", "known_ransomware_use": false }, { "cve": "CVE-2016-2386", "date_added": "2022-06-09", "due_date": "2022-06-30", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SAP NetWeaver SQL Injection Vulnerability", "product_as_filed": "SAP / NetWeaver", "known_ransomware_use": false }, { "cve": "CVE-2016-2388", "date_added": "2022-06-09", "due_date": "2022-06-30", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SAP NetWeaver Information Disclosure Vulnerability", "product_as_filed": "SAP / NetWeaver", "known_ransomware_use": false }, { "cve": "CVE-2010-5326", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SAP NetWeaver Remote Code Execution Vulnerability", "product_as_filed": "SAP / NetWeaver", "known_ransomware_use": false }, { "cve": "CVE-2016-9563", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SAP NetWeaver XML External Entity (XXE) Vulnerability", "product_as_filed": "SAP / NetWeaver", "known_ransomware_use": false }, { "cve": "CVE-2020-6287", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SAP NetWeaver Missing Authentication for Critical Function Vulnerability", "product_as_filed": "SAP / NetWeaver", "known_ransomware_use": false }, { "cve": "CVE-2016-3976", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SAP NetWeaver Directory Traversal Vulnerability", "product_as_filed": "SAP / NetWeaver", "known_ransomware_use": false } ] }, "sitecore": { "product_url": "https://endoflife.ai/sitecore", "cve_count": 4, "latest_added": "2025-09-04", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-53690", "date_added": "2025-09-04", "due_date": "2025-09-25", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Sitecore / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2019-9875", "date_added": "2025-03-26", "due_date": "2025-04-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability", "product_as_filed": "Sitecore / CMS and Experience Platform (XP)", "known_ransomware_use": false }, { "cve": "CVE-2019-9874", "date_added": "2025-03-26", "due_date": "2025-04-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability", "product_as_filed": "Sitecore / CMS and Experience Platform (XP)", "known_ransomware_use": false }, { "cve": "CVE-2021-42237", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Sitecore XP Remote Command Execution Vulnerability", "product_as_filed": "Sitecore / XP", "known_ransomware_use": true } ] }, "solarwinds-serv-u": { "product_url": "https://endoflife.ai/solarwinds-serv-u", "cve_count": 4, "latest_added": "2026-06-05", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-28318", "date_added": "2026-06-05", "due_date": "2026-06-19", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability", "product_as_filed": "SolarWinds / Serv-U", "known_ransomware_use": false }, { "cve": "CVE-2024-28995", "date_added": "2024-07-17", "due_date": "2024-08-07", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SolarWinds Serv-U Path Traversal Vulnerability ", "product_as_filed": "SolarWinds / Serv-U", "known_ransomware_use": false }, { "cve": "CVE-2021-35247", "date_added": "2022-01-21", "due_date": "2022-02-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SolarWinds Serv-U Improper Input Validation Vulnerability", "product_as_filed": "SolarWinds / Serv-U", "known_ransomware_use": false }, { "cve": "CVE-2021-35211", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SolarWinds Serv-U Remote Code Execution Vulnerability", "product_as_filed": "SolarWinds / Serv-U", "known_ransomware_use": true } ] }, "solarwinds-web-help-desk": { "product_url": "https://endoflife.ai/solarwinds-web-help-desk", "cve_count": 5, "latest_added": "2026-03-09", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-26399", "date_added": "2026-03-09", "due_date": "2026-03-12", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability", "product_as_filed": "SolarWinds / Web Help Desk", "known_ransomware_use": true }, { "cve": "CVE-2025-40536", "date_added": "2026-02-12", "due_date": "2026-02-15", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SolarWinds Web Help Desk Security Control Bypass Vulnerability", "product_as_filed": "SolarWinds / Web Help Desk", "known_ransomware_use": false }, { "cve": "CVE-2025-40551", "date_added": "2026-02-03", "due_date": "2026-02-06", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability", "product_as_filed": "SolarWinds / Web Help Desk", "known_ransomware_use": false }, { "cve": "CVE-2024-28987", "date_added": "2024-10-15", "due_date": "2024-11-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SolarWinds Web Help Desk Hardcoded Credential Vulnerability", "product_as_filed": "SolarWinds / Web Help Desk", "known_ransomware_use": false }, { "cve": "CVE-2024-28986", "date_added": "2024-08-15", "due_date": "2024-09-05", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability", "product_as_filed": "SolarWinds / Web Help Desk", "known_ransomware_use": false } ] }, "sonicos": { "product_url": "https://endoflife.ai/sonicos", "cve_count": 3, "latest_added": "2025-02-18", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2024-53704", "date_added": "2025-02-18", "due_date": "2025-03-11", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SonicWall SonicOS SSLVPN Improper Authentication Vulnerability", "product_as_filed": "SonicWall / SonicOS", "known_ransomware_use": true }, { "cve": "CVE-2024-40766", "date_added": "2024-09-09", "due_date": "2024-09-30", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SonicWall SonicOS Improper Access Control Vulnerability", "product_as_filed": "SonicWall / SonicOS", "known_ransomware_use": true }, { "cve": "CVE-2020-5135", "date_added": "2022-03-15", "due_date": "2022-04-05", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SonicWall SonicOS Buffer Overflow Vulnerability", "product_as_filed": "SonicWall / SonicOS", "known_ransomware_use": true } ] }, "sonicwall-email-security": { "product_url": "https://endoflife.ai/sonicwall-email-security", "cve_count": 3, "latest_added": "2021-11-03", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2021-20021", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SonicWall Email Security Improper Privilege Management Vulnerability", "product_as_filed": "SonicWall / SonicWall Email Security", "known_ransomware_use": true }, { "cve": "CVE-2021-20022", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SonicWall Email Security Unrestricted Upload of File Vulnerability", "product_as_filed": "SonicWall / SonicWall Email Security", "known_ransomware_use": true }, { "cve": "CVE-2021-20023", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SonicWall Email Security Path Traversal Vulnerability", "product_as_filed": "SonicWall / SonicWall Email Security", "known_ransomware_use": true } ] }, "sonicwall-sma100": { "product_url": "https://endoflife.ai/sonicwall-sma100", "cve_count": 6, "latest_added": "2025-05-01", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2023-44221", "date_added": "2025-05-01", "due_date": "2025-05-22", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SonicWall SMA100 Appliances OS Command Injection Vulnerability", "product_as_filed": "SonicWall / SMA100 Appliances", "known_ransomware_use": false }, { "cve": "CVE-2021-20035", "date_added": "2025-04-16", "due_date": "2025-05-07", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SonicWall SMA100 Appliances OS Command Injection Vulnerability", "product_as_filed": "SonicWall / SMA100 Appliances", "known_ransomware_use": false }, { "cve": "CVE-2019-7483", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SonicWall SMA100 Directory Traversal Vulnerability", "product_as_filed": "SonicWall / SMA100", "known_ransomware_use": false }, { "cve": "CVE-2021-20038", "date_added": "2022-01-28", "due_date": "2022-02-11", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability", "product_as_filed": "SonicWall / SMA 100 Appliances", "known_ransomware_use": true }, { "cve": "CVE-2019-7481", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SonicWall SMA100 SQL Injection Vulnerability", "product_as_filed": "SonicWall / SMA100", "known_ransomware_use": true }, { "cve": "CVE-2021-20016", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SonicWall SSLVPN SMA100 SQL Injection Vulnerability", "product_as_filed": "SonicWall / SSLVPN SMA100", "known_ransomware_use": true } ] }, "sophos-firewall": { "product_url": "https://endoflife.ai/sophos-firewall", "cve_count": 4, "latest_added": "2025-02-06", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2020-15069", "date_added": "2025-02-06", "due_date": "2025-02-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Sophos XG Firewall Buffer Overflow Vulnerability", "product_as_filed": "Sophos / XG Firewall", "known_ransomware_use": false }, { "cve": "CVE-2022-3236", "date_added": "2022-09-23", "due_date": "2022-10-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Sophos Firewall Code Injection Vulnerability", "product_as_filed": "Sophos / Firewall", "known_ransomware_use": false }, { "cve": "CVE-2022-1040", "date_added": "2022-03-31", "due_date": "2022-04-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Sophos Firewall Authentication Bypass Vulnerability", "product_as_filed": "Sophos / Firewall", "known_ransomware_use": false }, { "cve": "CVE-2020-12271", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Sophos SFOS SQL Injection Vulnerability", "product_as_filed": "Sophos / SFOS", "known_ransomware_use": true } ] }, "sophos-utm": { "product_url": "https://endoflife.ai/sophos-utm", "cve_count": 1, "latest_added": "2022-03-25", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2020-25223", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Sophos SG UTM Remote Code Execution Vulnerability", "product_as_filed": "Sophos / SG UTM", "known_ransomware_use": false } ] }, "teamcity": { "product_url": "https://endoflife.ai/teamcity", "cve_count": 4, "latest_added": "2026-08-05", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-63077", "date_added": "2026-08-05", "due_date": "2026-08-08", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "JetBrains TeamCity Deserialization of Untrusted Data Vulnerability", "product_as_filed": "JetBrains / TeamCity", "known_ransomware_use": true }, { "cve": "CVE-2024-27199", "date_added": "2026-04-20", "due_date": "2026-05-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "JetBrains TeamCity Relative Path Traversal Vulnerability", "product_as_filed": "JetBrains / TeamCity", "known_ransomware_use": true }, { "cve": "CVE-2024-27198", "date_added": "2024-03-07", "due_date": "2024-03-28", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "JetBrains TeamCity Authentication Bypass Vulnerability", "product_as_filed": "JetBrains / TeamCity", "known_ransomware_use": true }, { "cve": "CVE-2023-42793", "date_added": "2023-10-04", "due_date": "2023-10-25", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "JetBrains TeamCity Authentication Bypass Vulnerability", "product_as_filed": "JetBrains / TeamCity", "known_ransomware_use": true } ] }, "trend-micro-apex-central": { "product_url": "https://endoflife.ai/trend-micro-apex-central", "cve_count": 1, "latest_added": "2022-03-31", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2022-26871", "date_added": "2022-03-31", "due_date": "2022-04-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Trend Micro Apex Central Arbitrary File Upload Vulnerability", "product_as_filed": "Trend Micro / Apex Central", "known_ransomware_use": false } ] }, "trend-micro-apex-one": { "product_url": "https://endoflife.ai/trend-micro-apex-one", "cve_count": 11, "latest_added": "2026-05-21", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-34926", "date_added": "2026-05-21", "due_date": "2026-06-04", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability", "product_as_filed": "Trend Micro / Apex One", "known_ransomware_use": false }, { "cve": "CVE-2025-54948", "date_added": "2025-08-18", "due_date": "2025-09-08", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Trend Micro Apex One OS Command Injection Vulnerability", "product_as_filed": "Trend Micro / Apex One", "known_ransomware_use": false }, { "cve": "CVE-2023-41179", "date_added": "2023-09-21", "due_date": "2023-10-12", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability", "product_as_filed": "Trend Micro / Apex One and Worry-Free Business Security", "known_ransomware_use": false }, { "cve": "CVE-2022-40139", "date_added": "2022-09-15", "due_date": "2022-10-06", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability", "product_as_filed": "Trend Micro / Apex One and Apex One as a Service", "known_ransomware_use": false }, { "cve": "CVE-2020-8467", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability", "product_as_filed": "Trend Micro / Apex One and OfficeScan", "known_ransomware_use": false }, { "cve": "CVE-2020-8468", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Trend Micro Multiple Products Content Validation Escape Vulnerability", "product_as_filed": "Trend Micro / Apex One, OfficeScan and Worry-Free Business Security Agents", "known_ransomware_use": false }, { "cve": "CVE-2020-24557", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Trend Micro Multiple Products Improper Access Control Vulnerability", "product_as_filed": "Trend Micro / Apex One, OfficeScan, and Worry-Free Business Security", "known_ransomware_use": false }, { "cve": "CVE-2020-8599", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability", "product_as_filed": "Trend Micro / Apex One and OfficeScan", "known_ransomware_use": false }, { "cve": "CVE-2021-36742", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Trend Micro Multiple Products Improper Input Validation Vulnerability", "product_as_filed": "Trend Micro / Apex One, Apex One as a Service, and Worry-Free Business Security", "known_ransomware_use": false }, { "cve": "CVE-2021-36741", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Trend Micro Multiple Products Improper Input Validation Vulnerability", "product_as_filed": "Trend Micro / Apex One, Apex One as a Service, and Worry-Free Business Security", "known_ransomware_use": false }, { "cve": "CVE-2019-18187", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Trend Micro OfficeScan Directory Traversal Vulnerability", "product_as_filed": "Trend Micro / OfficeScan", "known_ransomware_use": false } ] }, "vmware-tools": { "product_url": "https://endoflife.ai/vmware-tools", "cve_count": 2, "latest_added": "2025-10-30", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2025-41244", "date_added": "2025-10-30", "due_date": "2025-11-20", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability", "product_as_filed": "Broadcom / VMware Aria Operations and VMware Tools", "known_ransomware_use": false }, { "cve": "CVE-2023-20867", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware Tools Authentication Bypass Vulnerability", "product_as_filed": "VMware / Tools", "known_ransomware_use": false } ] }, "watchguard-firebox": { "product_url": "https://endoflife.ai/watchguard-firebox", "cve_count": 4, "latest_added": "2025-12-19", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2025-14733", "date_added": "2025-12-19", "due_date": "2025-12-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "WatchGuard Firebox Out of Bounds Write Vulnerability", "product_as_filed": "WatchGuard / Firebox", "known_ransomware_use": true }, { "cve": "CVE-2025-9242", "date_added": "2025-11-12", "due_date": "2025-12-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "WatchGuard Firebox Out-of-Bounds Write Vulnerability", "product_as_filed": "WatchGuard / Firebox", "known_ransomware_use": false }, { "cve": "CVE-2022-23176", "date_added": "2022-04-11", "due_date": "2022-05-02", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "WatchGuard Firebox and XTM Privilege Escalation Vulnerability", "product_as_filed": "WatchGuard / Firebox and XTM", "known_ransomware_use": false }, { "cve": "CVE-2022-26318", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "WatchGuard Firebox and XTM Appliances Arbitrary Code Execution", "product_as_filed": "WatchGuard / Firebox and XTM Appliances", "known_ransomware_use": false } ] }, "zimbra": { "product_url": "https://endoflife.ai/zimbra", "cve_count": 19, "latest_added": "2026-08-21", "known_ransomware_use": true, "forced_attribution": false, "entries": [ { "cve": "CVE-2026-73570", "date_added": "2026-08-21", "due_date": "2026-08-24", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false }, { "cve": "CVE-2025-48700", "date_added": "2026-04-20", "due_date": "2026-04-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false }, { "cve": "CVE-2025-66376", "date_added": "2026-03-18", "due_date": "2026-04-01", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false }, { "cve": "CVE-2020-7796", "date_added": "2026-02-17", "due_date": "2026-03-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite", "known_ransomware_use": false }, { "cve": "CVE-2025-68645", "date_added": "2026-01-22", "due_date": "2026-02-12", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false }, { "cve": "CVE-2025-27915", "date_added": "2025-10-07", "due_date": "2025-10-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false }, { "cve": "CVE-2019-9621", "date_added": "2025-07-07", "due_date": "2025-07-28", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false }, { "cve": "CVE-2024-27443", "date_added": "2025-05-19", "due_date": "2025-06-09", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false }, { "cve": "CVE-2023-34192", "date_added": "2025-02-25", "due_date": "2025-03-18", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false }, { "cve": "CVE-2024-45519", "date_added": "2024-10-03", "due_date": "2024-10-24", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false }, { "cve": "CVE-2023-37580", "date_added": "2023-07-27", "due_date": "2023-08-17", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false }, { "cve": "CVE-2022-27926", "date_added": "2023-04-03", "due_date": "2023-04-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false }, { "cve": "CVE-2022-41352", "date_added": "2022-10-20", "due_date": "2022-11-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": true }, { "cve": "CVE-2022-27925", "date_added": "2022-08-11", "due_date": "2022-09-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": true }, { "cve": "CVE-2022-37042", "date_added": "2022-08-11", "due_date": "2022-09-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": true }, { "cve": "CVE-2022-27924", "date_added": "2022-08-04", "due_date": "2022-08-25", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": true }, { "cve": "CVE-2018-6882", "date_added": "2022-04-19", "due_date": "2022-05-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": true }, { "cve": "CVE-2022-24682", "date_added": "2022-02-25", "due_date": "2022-03-11", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability", "product_as_filed": "Synacor / Zimbra Collaborate Suite (ZCS)", "known_ransomware_use": true }, { "cve": "CVE-2019-9670", "date_added": "2022-01-10", "due_date": "2022-07-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference", "product_as_filed": "Synacor / Zimbra Collaboration Suite (ZCS)", "known_ransomware_use": false } ] }, "zyxel-nas": { "product_url": "https://endoflife.ai/zyxel-nas", "cve_count": 2, "latest_added": "2023-06-23", "known_ransomware_use": false, "forced_attribution": false, "entries": [ { "cve": "CVE-2023-27992", "date_added": "2023-06-23", "due_date": "2023-07-14", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Zyxel Multiple NAS Devices Command Injection Vulnerability", "product_as_filed": "Zyxel / Multiple Network-Attached Storage (NAS) Devices", "known_ransomware_use": false }, { "cve": "CVE-2020-9054", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Zyxel Multiple NAS Devices OS Command Injection Vulnerability", "product_as_filed": "Zyxel / Multiple Network-Attached Storage (NAS) Devices", "known_ransomware_use": false } ] }, "windows-server": { "product_url": "https://endoflife.ai/windows-server", "cve_count": 1, "latest_added": "2021-11-03", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2021-34527", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Windows Print Spooler Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Windows", "known_ransomware_use": true } ] }, "checkpoint-gaia": { "product_url": "https://endoflife.ai/checkpoint-gaia", "cve_count": 4, "latest_added": "2026-09-22", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-93616", "date_added": "2026-09-22", "due_date": "2026-09-25", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Check Point Multiple Products Path Traversal Vulnerability", "product_as_filed": "Check Point / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2026-85102", "date_added": "2026-09-22", "due_date": "2026-09-25", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Check Point Multiple Products Improper Certificate Validation Vulnerability", "product_as_filed": "Check Point / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2026-50751", "date_added": "2026-06-08", "due_date": "2026-06-11", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Check Point Security Gateway Improper Authentication Vulnerability", "product_as_filed": "Check Point / Security Gateway", "known_ransomware_use": true }, { "cve": "CVE-2024-24919", "date_added": "2024-05-30", "due_date": "2024-06-20", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Check Point Quantum Security Gateways Information Disclosure Vulnerability", "product_as_filed": "Check Point / Quantum Security Gateways", "known_ransomware_use": true } ] }, "sonicwall-sma1000": { "product_url": "https://endoflife.ai/sonicwall-sma1000", "cve_count": 6, "latest_added": "2026-09-02", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-83548", "date_added": "2026-09-02", "due_date": "2026-09-05", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability", "product_as_filed": "SonicWall / SMA1000 Appliances", "known_ransomware_use": false }, { "cve": "CVE-2026-83549", "date_added": "2026-09-02", "due_date": "2026-09-05", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "SonicWall SMA1000 Appliances OS Command Injection Vulnerability", "product_as_filed": "SonicWall / SMA1000 Appliances", "known_ransomware_use": false }, { "cve": "CVE-2026-15409", "date_added": "2026-07-14", "due_date": "2026-07-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability", "product_as_filed": "SonicWall / SMA1000 Appliances", "known_ransomware_use": true }, { "cve": "CVE-2026-15410", "date_added": "2026-07-14", "due_date": "2026-07-17", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "SonicWall SMA1000 Appliances Code Injection Vulnerability", "product_as_filed": "SonicWall / SMA1000 Appliances", "known_ransomware_use": true }, { "cve": "CVE-2025-40602", "date_added": "2025-12-17", "due_date": "2025-12-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable", "vulnerability_name": "SonicWall SMA1000 Missing Authorization Vulnerability", "product_as_filed": "SonicWall / SMA1000 appliance", "known_ransomware_use": false }, { "cve": "CVE-2025-23006", "date_added": "2025-01-24", "due_date": "2025-02-14", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "SonicWall SMA1000 Appliances Deserialization Vulnerability", "product_as_filed": "SonicWall / SMA1000 Appliances", "known_ransomware_use": true } ] }, "fortianalyzer": { "product_url": "https://endoflife.ai/fortianalyzer", "cve_count": 1, "latest_added": "2026-01-27", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-24858", "date_added": "2026-01-27", "due_date": "2026-01-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false } ] }, "fortinac-f": { "product_url": "https://endoflife.ai/fortinac-f", "cve_count": 1, "latest_added": "2026-01-27", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-24858", "date_added": "2026-01-27", "due_date": "2026-01-30", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability", "product_as_filed": "Fortinet / Multiple Products", "known_ransomware_use": false } ] }, "zyxel-usg": { "product_url": "https://endoflife.ai/zyxel-usg", "cve_count": 5, "latest_added": "2024-12-03", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2024-11667", "date_added": "2024-12-03", "due_date": "2024-12-24", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Zyxel Multiple Firewalls Path Traversal Vulnerability", "product_as_filed": "Zyxel / Multiple Firewalls", "known_ransomware_use": true }, { "cve": "CVE-2023-33009", "date_added": "2023-06-05", "due_date": "2023-06-26", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Zyxel Multiple Firewalls Buffer Overflow Vulnerability", "product_as_filed": "Zyxel / Multiple Firewalls", "known_ransomware_use": false }, { "cve": "CVE-2023-33010", "date_added": "2023-06-05", "due_date": "2023-06-26", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Zyxel Multiple Firewalls Buffer Overflow Vulnerability", "product_as_filed": "Zyxel / Multiple Firewalls", "known_ransomware_use": false }, { "cve": "CVE-2023-28771", "date_added": "2023-05-31", "due_date": "2023-06-21", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Zyxel Multiple Firewalls OS Command Injection Vulnerability", "product_as_filed": "Zyxel / Multiple Firewalls", "known_ransomware_use": false }, { "cve": "CVE-2022-30525", "date_added": "2022-05-16", "due_date": "2022-06-06", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Zyxel Multiple Firewalls OS Command Injection Vulnerability", "product_as_filed": "Zyxel / Multiple Firewalls", "known_ransomware_use": false } ] }, "cisco-rv": { "product_url": "https://endoflife.ai/cisco-rv", "cve_count": 9, "latest_added": "2025-03-03", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2023-20118", "date_added": "2025-03-03", "due_date": "2025-03-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Cisco Small Business RV Series Routers Command Injection Vulnerability", "product_as_filed": "Cisco / Small Business RV Series Routers", "known_ransomware_use": false }, { "cve": "CVE-2019-15271", "date_added": "2022-06-08", "due_date": "2022-06-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Cisco / RV Series Routers", "known_ransomware_use": false }, { "cve": "CVE-2022-20708", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "product_as_filed": "Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers", "known_ransomware_use": false }, { "cve": "CVE-2022-20703", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "product_as_filed": "Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers", "known_ransomware_use": false }, { "cve": "CVE-2022-20701", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "product_as_filed": "Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers", "known_ransomware_use": false }, { "cve": "CVE-2022-20700", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "product_as_filed": "Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers", "known_ransomware_use": false }, { "cve": "CVE-2022-20699", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability", "product_as_filed": "Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers", "known_ransomware_use": false }, { "cve": "CVE-2019-1652", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco Small Business Routers Improper Input Validation Vulnerability", "product_as_filed": "Cisco / Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers", "known_ransomware_use": false }, { "cve": "CVE-2019-1653", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability", "product_as_filed": "Cisco / Small Business RV320 and RV325 Routers", "known_ransomware_use": false } ] }, "dlink-routers": { "product_url": "https://endoflife.ai/dlink-routers", "cve_count": 15, "latest_added": "2025-08-05", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2022-40799", "date_added": "2025-08-05", "due_date": "2025-08-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "D-Link DNR-322L Download of Code Without Integrity Check Vulnerability", "product_as_filed": "D-Link / DNR-322L", "known_ransomware_use": false }, { "cve": "CVE-2020-25078", "date_added": "2025-08-05", "due_date": "2025-08-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability", "product_as_filed": "D-Link / DCS-2530L and DCS-2670L Devices", "known_ransomware_use": false }, { "cve": "CVE-2020-25079", "date_added": "2025-08-05", "due_date": "2025-08-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability", "product_as_filed": "D-Link / DCS-2530L and DCS-2670L Devices", "known_ransomware_use": false }, { "cve": "CVE-2024-0769", "date_added": "2025-06-25", "due_date": "2025-07-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": " D-Link DIR-859 Router Path Traversal Vulnerability", "product_as_filed": "D-Link / DIR-859 Router", "known_ransomware_use": false }, { "cve": "CVE-2021-40655", "date_added": "2024-05-16", "due_date": "2024-06-06", "required_action": "This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "vulnerability_name": "D-Link DIR-605 Router Information Disclosure Vulnerability", "product_as_filed": "D-Link / DIR-605 Router", "known_ransomware_use": false }, { "cve": "CVE-2014-100005", "date_added": "2024-05-16", "due_date": "2024-06-06", "required_action": "This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "vulnerability_name": "D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability", "product_as_filed": "D-Link / DIR-600 Router", "known_ransomware_use": false }, { "cve": "CVE-2024-3273", "date_added": "2024-04-11", "due_date": "2024-05-02", "required_action": "This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "vulnerability_name": "D-Link Multiple NAS Devices Command Injection Vulnerability", "product_as_filed": "D-Link / Multiple NAS Devices", "known_ransomware_use": false }, { "cve": "CVE-2024-3272", "date_added": "2024-04-11", "due_date": "2024-05-02", "required_action": "This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.", "vulnerability_name": "D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability", "product_as_filed": "D-Link / Multiple NAS Devices", "known_ransomware_use": false }, { "cve": "CVE-2019-17621", "date_added": "2023-06-29", "due_date": "2023-07-20", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "D-Link DIR-859 Router Command Execution Vulnerability", "product_as_filed": "D-Link / DIR-859 Router", "known_ransomware_use": false }, { "cve": "CVE-2022-26258", "date_added": "2022-09-08", "due_date": "2022-09-29", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "vulnerability_name": "D-Link DIR-820L Remote Code Execution Vulnerability", "product_as_filed": "D-Link / DIR-820L", "known_ransomware_use": false }, { "cve": "CVE-2019-16057", "date_added": "2022-04-15", "due_date": "2022-05-06", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "vulnerability_name": "D-Link DNS-320 Remote Code Execution Vulnerability", "product_as_filed": "D-Link / DNS-320 Storage Device", "known_ransomware_use": true }, { "cve": "CVE-2016-11021", "date_added": "2022-03-25", "due_date": "2022-04-15", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "vulnerability_name": "D-Link DCS-930L Devices OS Command Injection Vulnerability", "product_as_filed": "D-Link / DCS-930L Devices", "known_ransomware_use": false }, { "cve": "CVE-2015-2051", "date_added": "2022-02-10", "due_date": "2022-08-10", "required_action": "The impacted product is end-of-life and should be disconnected if still in use.", "vulnerability_name": "D-Link DIR-645 Router Remote Code Execution Vulnerability", "product_as_filed": "D-Link / DIR-645 Router", "known_ransomware_use": false }, { "cve": "CVE-2020-25506", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "D-Link DNS-320 Device Command Injection Vulnerability", "product_as_filed": "D-Link / DNS-320 Device", "known_ransomware_use": false }, { "cve": "CVE-2020-29557", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability", "product_as_filed": "D-Link / DIR-825 R1 Devices", "known_ransomware_use": false } ] }, "rhel": { "product_url": "https://endoflife.ai/rhel", "cve_count": 4, "latest_added": "2026-08-26", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2015-3246", "date_added": "2026-08-26", "due_date": "2026-09-09", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Red Hat Libuser Race Condition Vulnerability", "product_as_filed": "Red Hat / Libuser", "known_ransomware_use": false }, { "cve": "CVE-2015-5287", "date_added": "2026-08-26", "due_date": "2026-09-09", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability", "product_as_filed": "Red Hat / Automatic Bug Reporting Tool", "known_ransomware_use": false }, { "cve": "CVE-2021-3560", "date_added": "2023-05-12", "due_date": "2023-06-02", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Red Hat Polkit Incorrect Authorization Vulnerability", "product_as_filed": "Red Hat / Polkit", "known_ransomware_use": false }, { "cve": "CVE-2021-4034", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Red Hat Polkit Out-of-Bounds Read and Write Vulnerability", "product_as_filed": "Red Hat / Polkit", "known_ransomware_use": true } ] }, "arista-eos": { "product_url": "https://endoflife.ai/arista-eos", "cve_count": 1, "latest_added": "2026-06-09", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-7473", "date_added": "2026-06-09", "due_date": "2026-06-23", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability", "product_as_filed": "Arista / Extensible Operating System", "known_ransomware_use": false } ] }, "solarwinds-orion": { "product_url": "https://endoflife.ai/solarwinds-orion", "cve_count": 1, "latest_added": "2021-11-03", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2020-10148", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "SolarWinds Orion Authentication Bypass Vulnerability", "product_as_filed": "SolarWinds / Orion", "known_ransomware_use": false } ] }, "oracle-forms": { "product_url": "https://endoflife.ai/oracle-forms", "cve_count": 1, "latest_added": "2021-11-03", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2012-3152", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Fusion Middleware Unspecified Vulnerability", "product_as_filed": "Oracle / Fusion Middleware", "known_ransomware_use": false } ] }, "microsoft-skype-for-business-server": { "product_url": "https://endoflife.ai/microsoft-skype-for-business-server", "cve_count": 1, "latest_added": "2023-10-10", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2023-41763", "date_added": "2023-10-10", "due_date": "2023-10-31", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Skype for Business Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Skype for Business", "known_ransomware_use": false } ] }, "vmware-aria-operations": { "product_url": "https://endoflife.ai/vmware-aria-operations", "cve_count": 3, "latest_added": "2026-03-03", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-22719", "date_added": "2026-03-03", "due_date": "2026-03-24", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Broadcom VMware Aria Operations Command Injection Vulnerability", "product_as_filed": "Broadcom / VMware Aria Operations", "known_ransomware_use": false }, { "cve": "CVE-2025-41244", "date_added": "2025-10-30", "due_date": "2025-11-20", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability", "product_as_filed": "Broadcom / VMware Aria Operations and VMware Tools", "known_ransomware_use": false }, { "cve": "CVE-2021-21975", "date_added": "2022-01-18", "due_date": "2022-02-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "VMware Server Side Request Forgery in vRealize Operations Manager API", "product_as_filed": "VMware / vRealize Operations Manager API", "known_ransomware_use": true } ] }, "manageengine-endpoint-central": { "product_url": "https://endoflife.ai/manageengine-endpoint-central", "cve_count": 2, "latest_added": "2021-12-10", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2021-44515", "date_added": "2021-12-10", "due_date": "2021-12-24", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Zoho Desktop Central Authentication Bypass Vulnerability", "product_as_filed": "Zoho / Desktop Central", "known_ransomware_use": false }, { "cve": "CVE-2020-10189", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Zoho ManageEngine Desktop Central File Upload Vulnerability", "product_as_filed": "Zoho / ManageEngine", "known_ransomware_use": false } ] }, "citrix-workspace-app": { "product_url": "https://endoflife.ai/citrix-workspace-app", "cve_count": 1, "latest_added": "2021-11-03", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2019-11634", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability", "product_as_filed": "Citrix / Workspace Application and Receiver for Windows", "known_ransomware_use": true } ] }, "log4j": { "product_url": "https://endoflife.ai/log4j", "cve_count": 2, "latest_added": "2023-05-01", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2021-45046", "date_added": "2023-05-01", "due_date": "2023-05-22", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apache Log4j2 Deserialization of Untrusted Data Vulnerability", "product_as_filed": "Apache / Log4j2", "known_ransomware_use": true }, { "cve": "CVE-2021-44228", "date_added": "2021-12-10", "due_date": "2021-12-24", "required_action": "For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.", "vulnerability_name": "Apache Log4j2 Remote Code Execution Vulnerability", "product_as_filed": "Apache / Log4j2", "known_ransomware_use": true } ] }, "redhat-jboss-eap": { "product_url": "https://endoflife.ai/redhat-jboss-eap", "cve_count": 5, "latest_added": "2023-09-28", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2018-14667", "date_added": "2023-09-28", "due_date": "2023-10-19", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability", "product_as_filed": "Red Hat / JBoss RichFaces Framework", "known_ransomware_use": false }, { "cve": "CVE-2010-1428", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Red Hat JBoss Information Disclosure Vulnerability", "product_as_filed": "Red Hat / JBoss", "known_ransomware_use": true }, { "cve": "CVE-2010-0738", "date_added": "2022-05-25", "due_date": "2022-06-15", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Red Hat JBoss Authentication Bypass Vulnerability", "product_as_filed": "Red Hat / JBoss", "known_ransomware_use": true }, { "cve": "CVE-2017-12149", "date_added": "2021-12-10", "due_date": "2022-06-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Red Hat JBoss Application Server Remote Code Execution Vulnerability", "product_as_filed": "Red Hat / JBoss Application Server", "known_ransomware_use": true }, { "cve": "CVE-2010-1871", "date_added": "2021-12-10", "due_date": "2022-06-10", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability", "product_as_filed": "Red Hat / JBoss Seam 2", "known_ransomware_use": false } ] }, "bind-9": { "product_url": "https://endoflife.ai/bind-9", "cve_count": 1, "latest_added": "2026-10-08", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2015-5477", "date_added": "2026-10-08", "due_date": "2026-10-11", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": " ISC BIND Data Processing Errors Vulnerability", "product_as_filed": "ISC / BIND", "known_ransomware_use": false } ] }, "microsoft-365-apps": { "product_url": "https://endoflife.ai/microsoft-365-apps", "cve_count": 11, "latest_added": "2026-02-10", "known_ransomware_use": true, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-21514", "date_added": "2026-02-10", "due_date": "2026-03-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2026-21509", "date_added": "2026-01-26", "due_date": "2026-02-16", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Office Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2024-21413", "date_added": "2025-02-06", "due_date": "2025-02-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Outlook Improper Input Validation Vulnerability", "product_as_filed": "Microsoft / Office Outlook", "known_ransomware_use": false }, { "cve": "CVE-2024-38189", "date_added": "2024-08-13", "due_date": "2024-09-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Project Remote Code Execution Vulnerability ", "product_as_filed": "Microsoft / Project", "known_ransomware_use": false }, { "cve": "CVE-2023-36761", "date_added": "2023-09-12", "due_date": "2023-10-03", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Microsoft Word Information Disclosure Vulnerability", "product_as_filed": "Microsoft / Word", "known_ransomware_use": false }, { "cve": "CVE-2023-35311", "date_added": "2023-07-11", "due_date": "2023-08-01", "required_action": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "vulnerability_name": "Microsoft Outlook Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Outlook", "known_ransomware_use": false }, { "cve": "CVE-2023-23397", "date_added": "2023-03-14", "due_date": "2023-04-04", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Outlook Privilege Escalation Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2023-21715", "date_added": "2023-02-14", "due_date": "2023-03-07", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Publisher Security Feature Bypass Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false }, { "cve": "CVE-2021-38646", "date_added": "2022-03-28", "due_date": "2022-04-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Office", "known_ransomware_use": true }, { "cve": "CVE-2019-1297", "date_added": "2022-03-03", "due_date": "2022-03-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Excel Remote Code Execution Vulnerability", "product_as_filed": "Microsoft / Excel", "known_ransomware_use": false }, { "cve": "CVE-2021-42292", "date_added": "2021-11-17", "due_date": "2021-12-01", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Microsoft Excel Security Feature Bypass", "product_as_filed": "Microsoft / Office", "known_ransomware_use": false } ] }, "tvos": { "product_url": "https://endoflife.ai/tvos", "cve_count": 26, "latest_added": "2026-03-20", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2025-43510", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Improper Locking Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43520", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Classic Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31277", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30952", "date_added": "2026-03-05", "due_date": "2026-03-26", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Integer Overflow or Wraparound Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2026-20700", "date_added": "2026-02-12", "due_date": "2026-03-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-48503", "date_added": "2025-10-20", "due_date": "2025-11-10", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23225", "date_added": "2024-03-06", "due_date": "2024-03-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23296", "date_added": "2024-03-06", "due_date": "2024-03-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2022-48618", "date_added": "2024-01-31", "due_date": "2024-02-21", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23222", "date_added": "2024-01-23", "due_date": "2024-02-13", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products WebKit Type Confusion Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-41990", "date_added": "2024-01-08", "due_date": "2024-01-29", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-38606", "date_added": "2023-07-26", "due_date": "2023-08-16", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Kernel Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32409", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Sandbox Escape Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-28204", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2023-32373", "date_added": "2023-05-22", "due_date": "2023-06-12", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-3837", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-9907", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2019-8605", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2018-4344", "date_added": "2022-06-27", "due_date": "2022-07-18", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30883", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2019-7286", "date_added": "2022-05-23", "due_date": "2022-06-13", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-1782", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Race Condition Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30661", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Storage Use-After-Free Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30665", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2021-30663", "date_added": "2021-11-03", "due_date": "2021-11-17", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products WebKit Integer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2020-9859", "date_added": "2021-11-03", "due_date": "2022-05-03", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Apple Multiple Products Code Execution Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false } ] }, "visionos": { "product_url": "https://endoflife.ai/visionos", "cve_count": 6, "latest_added": "2026-03-20", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2025-43510", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Improper Locking Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43520", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Classic Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-31277", "date_added": "2026-03-20", "due_date": "2026-04-03", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2026-20700", "date_added": "2026-02-12", "due_date": "2026-03-05", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Buffer Overflow Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2025-43200", "date_added": "2025-06-16", "due_date": "2025-07-07", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Unspecified Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false }, { "cve": "CVE-2024-23225", "date_added": "2024-03-06", "due_date": "2024-03-27", "required_action": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Apple Multiple Products Memory Corruption Vulnerability", "product_as_filed": "Apple / Multiple Products", "known_ransomware_use": false } ] }, "oracle-identity-management": { "product_url": "https://endoflife.ai/oracle-identity-management", "cve_count": 2, "latest_added": "2025-11-21", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2025-61757", "date_added": "2025-11-21", "due_date": "2025-12-12", "required_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "vulnerability_name": "Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability", "product_as_filed": "Oracle / Fusion Middleware", "known_ransomware_use": false }, { "cve": "CVE-2021-35587", "date_added": "2022-11-28", "due_date": "2022-12-19", "required_action": "Apply updates per vendor instructions.", "vulnerability_name": "Oracle Fusion Middleware Unspecified Vulnerability", "product_as_filed": "Oracle / Fusion Middleware", "known_ransomware_use": false } ] }, "jira-software": { "product_url": "https://endoflife.ai/jira-software", "cve_count": 1, "latest_added": "2026-10-15", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-21589", "date_added": "2026-10-15", "due_date": "2026-10-18", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability", "product_as_filed": "Atlassian / Multiple Products", "known_ransomware_use": false } ] }, "jira-service-management": { "product_url": "https://endoflife.ai/jira-service-management", "cve_count": 1, "latest_added": "2026-10-15", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-21589", "date_added": "2026-10-15", "due_date": "2026-10-18", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability", "product_as_filed": "Atlassian / Multiple Products", "known_ransomware_use": false } ] }, "bamboo": { "product_url": "https://endoflife.ai/bamboo", "cve_count": 1, "latest_added": "2026-10-15", "known_ransomware_use": false, "forced_attribution": true, "entries": [ { "cve": "CVE-2026-21589", "date_added": "2026-10-15", "due_date": "2026-10-18", "required_action": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.", "vulnerability_name": "Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability", "product_as_filed": "Atlassian / Multiple Products", "known_ransomware_use": false } ] } } }