Used in ransomware, page 4
As of , 361 vulnerabilities on CISA's list are known to be used in ransomware campaigns.
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 301 | CVE-2023-20269Unauthorized Access | Cisco Adaptive Security Appliance and Firepower Threat Defense | Patch this weekRansomware use | 0.25 | ||
| 302 | CVE-2016-3351Information Disclosure | Microsoft Internet Explorer and Edge | Patch this weekRansomware use | 0.26 | ||
| 303 | CVE-2018-19943NAS File Station Cross-Site Scripting | QNAP Network Attached Storage (NAS) | Patch this weekRansomware use | 0.21 | ||
| 304 | CVE-2016-3309Kernel Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.20 | ||
| 305 | CVE-2020-5135Buffer Overflow | SonicWall SonicOS | Patch this weekRansomware use | 0.27 | ||
| 306 | CVE-2016-1019Arbitrary Code Execution | Adobe Flash Player | Patch this weekRansomware use | 0.22 | ||
| 307 | CVE-2021-41379Installer Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.19 | ||
| 308 | CVE-2019-1215Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.19 | ||
| 309 | CVE-2019-5591Default Configuration | Fortinet FortiOS | Patch this weekRansomware use | 0.18 | ||
| 310 | CVE-2025-42999Deserialization | SAP NetWeaver | Patch this weekRansomware use | 0.14 | ||
| 311 | CVE-2025-29824Common Log File System (CLFS) Driver Use-After-Free | Microsoft Windows | Patch this weekRansomware use | 0.14 | ||
| 312 | CVE-2024-49039Task Scheduler Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.14 | ||
| 313 | CVE-2019-7193Improper Input Validation | QNAP QTS | Patch this weekRansomware use | 0.14 | ||
| 314 | CVE-2021-20022Unrestricted Upload of File | SonicWall SonicWall Email Security | Patch this weekRansomware use | 0.17 | ||
| 315 | CVE-2017-1000253PIE Stack Buffer Corruption | Linux Kernel | Patch this weekRansomware use | 0.11 | ||
| 316 | CVE-2022-40765Command Injection | Mitel MiVoice Connect | Patch this weekRansomware use | 0.11 | ||
| 317 | CVE-2022-41223Code Injection | Mitel MiVoice Connect | Patch this weekRansomware use | 0.11 | ||
| 318 | CVE-2023-23376Common Log File System (CLFS) Driver Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.11 | ||
| 319 | CVE-2015-2291Denial-of-Service | Intel Ethernet Diagnostics Driver for Windows | Patch this weekRansomware use | 0.09 | ||
| 320 | CVE-2015-2546Memory Corruption | Microsoft Win32k | Patch this weekRansomware use | 0.10 | ||
| 321 | CVE-2019-1253AppX Deployment Server Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.12 | ||
| 322 | CVE-2021-43890AppX Installer Spoofing | Microsoft Windows | Patch this weekRansomware use | 0.10 | ||
| 323 | CVE-2021-27103Server-Side Request Forgery (SSRF) | Accellion FTA | Patch this weekRansomware use | 0.11 | ||
| 324 | CVE-2025-24472Authentication Bypass | Fortinet FortiOS and FortiProxy | Patch this weekRansomware use | 0.07 | ||
| 325 | CVE-2019-1388Certificate Dialog Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.09 | ||
| 326 | CVE-2018-19323Privilege Escalation | GIGABYTE Multiple Products | Patch this weekRansomware use | 0.08 | ||
| 327 | CVE-2012-1710Unspecified | Oracle Fusion Middleware | Patch this weekRansomware use | 0.08 | ||
| 328 | CVE-2022-24521CLFS Driver Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.07 | ||
| 329 | CVE-2021-38646Access Connectivity Engine Remote Code Execution | Microsoft Office | Patch this weekRansomware use | 0.08 | ||
| 330 | CVE-2019-11634Remote Code Execution | Citrix Workspace Application and Receiver for Windows | Patch this weekRansomware use | 0.08 | ||
| 331 | CVE-2019-1064AppX Deployment Service (AppXSVC) Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.07 | ||
| 332 | CVE-2019-1069Privilege Escalation | Microsoft Task Scheduler | Patch this weekRansomware use | 0.06 | ||
| 333 | CVE-2021-27101SQL Injection | Accellion FTA | Patch this weekRansomware use | 0.06 | ||
| 334 | CVE-2019-6693Use of Hard-Coded Credentials | Fortinet FortiOS | Patch this weekRansomware use | 0.06 | ||
| 335 | CVE-2024-30051Privilege Escalation | Microsoft DWM Core Library | Patch this weekRansomware use | 0.06 | ||
| 336 | CVE-2022-26500Remote Code Execution | Veeam Backup & Replication | Patch this weekRansomware use | 0.06 | ||
| 337 | CVE-2016-0167Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use | 0.06 | ||
| 338 | CVE-2020-29574(CROS) SQL Injection | Sophos CyberoamOS | Patch this weekRansomware use | 0.05 | ||
| 339 | CVE-2013-3993Invalid Input | IBM InfoSphere BigInsights | Patch this weekRansomware use | 0.05 | ||
| 340 | CVE-2024-26169Error Reporting Service Improper Privilege Management | Microsoft Windows | Patch this weekRansomware use | 0.04 | ||
| 341 | CVE-2022-26501Remote Code Execution | Veeam Backup & Replication | Patch this weekRansomware use | 0.04 | ||
| 342 | CVE-2020-2021Authentication Bypass | Palo Alto Networks PAN-OS | Patch this weekRansomware use | 0.04 | ||
| 343 | CVE-2019-0859Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use | 0.04 | ||
| 344 | CVE-2021-36955Common Log File System (CLFS) Driver Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.04 | ||
| 345 | CVE-2018-19320Unspecified | GIGABYTE Multiple Products | Patch this weekRansomware use | 0.04 | ||
| 346 | CVE-2018-19321Privilege Escalation | GIGABYTE Multiple Products | Patch this weekRansomware use | 0.04 | ||
| 347 | CVE-2019-1385AppX Deployment Extensions Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.04 | ||
| 348 | CVE-2021-27102OS Command Injection | Accellion FTA | Patch this weekRansomware use | 0.04 | ||
| 349 | CVE-2018-8405DirectX Graphics Kernel Privilege Escalation | Microsoft DirectX Graphics Kernel (DXGKRNL) | Patch this weekRansomware use | 0.03 | ||
| 350 | CVE-2018-8406DirectX Graphics Kernel Privilege Escalation | Microsoft DirectX Graphics Kernel (DXGKRNL) | Patch this weekRansomware use | 0.03 | ||
| 351 | CVE-2019-1315Error Reporting Manager Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.03 | ||
| 352 | CVE-2021-43226Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.03 | ||
| 353 | CVE-2024-11667Path Traversal | Zyxel Multiple Firewalls | Patch this weekRansomware use | 0.03 | ||
| 354 | CVE-2020-0878Memory Corruption | Microsoft Edge and Internet Explorer | Patch this weekRansomware use | 0.03 | ||
| 355 | CVE-2020-0638Privilege Escalation | Microsoft Update Notification Manager | Patch this weekRansomware use | 0.02 | ||
| 356 | CVE-2022-41073Print Spooler Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.02 | ||
| 357 | CVE-2022-41091Mark of the Web (MOTW) Security Feature Bypass | Microsoft Windows | Patch this weekRansomware use | 0.02 | ||
| 358 | CVE-2018-19322Code Execution | GIGABYTE Multiple Products | Patch this weekRansomware use | 0.02 | ||
| 359 | CVE-2019-1129AppX Deployment Service (AppXSVC) Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.02 | ||
| 360 | CVE-2019-1130AppX Deployment Service Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.02 | ||
| 361 | CVE-2025-22225Arbitrary Write | VMware ESXi | Patch this weekRansomware use | 0.01 |