| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2017-7494 Ransomware
Samba Remote Code Execution Vulnerability |
Samba · Samba | Mar 30, 2023 | Apr 20, 2023 | 99.4% | — |
| CVE-2023-36884 Ransomware
Microsoft Windows Search Remote Code Execution Vulnerability |
Microsoft · Windows | Jul 17, 2023 | Aug 29, 2023 | 99.4% | — |
| CVE-2024-38856
Apache OFBiz Incorrect Authorization Vulnerability |
Apache · OFBiz | Aug 27, 2024 | Sep 17, 2024 | 99.4% | — |
| CVE-2024-21412 Ransomware
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability |
Microsoft · Windows | Feb 13, 2024 | Mar 5, 2024 | 99.4% | — |
| CVE-2011-0611
Adobe Flash Player Remote Code Execution Vulnerability |
Adobe · Flash Player | Mar 3, 2022 | Mar 24, 2022 | 99.4% | — |
| CVE-2017-9805
Apache Struts Deserialization of Untrusted Data Vulnerability |
Apache · Struts | Nov 3, 2021 | May 3, 2022 | 99.4% | — |
| CVE-2021-32030
ASUS Routers Improper Authentication Vulnerability |
ASUS · Routers | Jun 2, 2025 | Jun 23, 2025 | 99.4% | — |
| CVE-2020-1472 Ransomware
Microsoft Netlogon Privilege Escalation Vulnerability |
Microsoft · Netlogon | Nov 3, 2021 | May 3, 2022 | 99.4% | — |
| CVE-2026-75650
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in … |
Adobe · Commerce and Magento | Sep 8, 2026 | Sep 11, 2026 | 99.4% | — |
| CVE-2017-0148 Ransomware
Microsoft SMBv1 Server Remote Code Execution Vulnerability |
Microsoft · SMBv1 server | Apr 6, 2022 | Apr 27, 2022 | 99.4% | — |
| CVE-2022-0543
Debian-specific Redis Server Lua Sandbox Escape Vulnerability |
Redis · Debian-specific Redis Servers | Mar 28, 2022 | Apr 18, 2022 | 99.4% | — |
| CVE-2014-6287
Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability |
Rejetto · HTTP File Server (HFS) | Mar 25, 2022 | Apr 15, 2022 | 99.3% | — |
| CVE-2024-4885
Progress WhatsUp Gold Path Traversal Vulnerability |
Progress · WhatsUp Gold | Mar 3, 2025 | Mar 24, 2025 | 99.3% | — |
| CVE-2023-28771
Zyxel Multiple Firewalls OS Command Injection Vulnerability |
Zyxel · Multiple Firewalls | May 31, 2023 | Jun 21, 2023 | 99.3% | — |
| CVE-2020-1938
Apache Tomcat Improper Privilege Management Vulnerability |
Apache · Tomcat | Mar 3, 2022 | Mar 17, 2022 | 99.3% | — |
| CVE-2020-14750
Oracle WebLogic Server Remote Code Execution Vulnerability |
Oracle · WebLogic Server | Nov 3, 2021 | May 3, 2022 | 99.2% | — |
| CVE-2023-34048
VMware vCenter Server Out-of-Bounds Write Vulnerability |
VMware · vCenter Server | Jan 22, 2024 | Feb 12, 2024 | 99.2% | — |
| CVE-2022-30333 Ransomware
RARLAB UnRAR Directory Traversal Vulnerability |
RARLAB · UnRAR | Aug 9, 2022 | Aug 30, 2022 | 99.2% | — |
| CVE-2023-22515 Ransomware
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability |
Atlassian · Confluence Data Center and Server | Oct 5, 2023 | Oct 13, 2023 | 99.2% | — |
| CVE-2017-0144 Ransomware
Microsoft SMBv1 Remote Code Execution Vulnerability |
Microsoft · SMBv1 | Feb 10, 2022 | Aug 10, 2022 | 99.2% | — |
| CVE-2020-0646
Microsoft .NET Framework Remote Code Execution Vulnerability |
Microsoft · .NET Framework | Nov 3, 2021 | May 3, 2022 | 99.2% | — |
| CVE-2024-27348
Apache HugeGraph-Server Improper Access Control Vulnerability |
Apache · HugeGraph-Server | Sep 18, 2024 | Oct 9, 2024 | 99.2% | — |
| CVE-2022-24086
Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability |
Adobe · Commerce and Magento Open Source | Feb 15, 2022 | Mar 1, 2022 | 99.2% | — |
| CVE-2020-11978
Apache Airflow Command Injection |
Apache · Airflow | Jan 18, 2022 | Jul 18, 2022 | 99.2% | — |
| CVE-2018-7602 Ransomware
Drupal Core Remote Code Execution Vulnerability |
Drupal · Core | Apr 13, 2022 | May 4, 2022 | 99.2% | — |
| CVE-2021-44529 Ransomware
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulner… |
Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA) | Mar 25, 2024 | Apr 15, 2024 | 99.1% | — |
| CVE-2020-10199
Sonatype Nexus Repository Remote Code Execution Vulnerability |
Sonatype · Nexus Repository | Nov 3, 2021 | May 3, 2022 | 99.1% | — |
| CVE-2020-0618 Ransomware
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability |
Microsoft · SQL Server | Sep 18, 2024 | Oct 9, 2024 | 99.0% | — |
| CVE-2019-16278
Nostromo nhttpd Directory Traversal Vulnerability |
Nostromo · nhttpd | Nov 7, 2024 | Nov 28, 2024 | 99.0% | — |
| CVE-2025-68613
n8n Improper Control of Dynamically-Managed Code Resources Vulnerability |
n8n · n8n | Mar 11, 2026 | Mar 25, 2026 | 99.0% | — |
| CVE-2026-24061
GNU InetUtils Argument Injection Vulnerability |
GNU · InetUtils | Jan 26, 2026 | Feb 16, 2026 | 99.0% | — |
| CVE-2017-3881
Cisco IOS and IOS XE Remote Code Execution Vulnerability |
Cisco · IOS and IOS XE | Mar 25, 2022 | Apr 15, 2022 | 99.0% | — |
| CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability |
OpenBSD · OpenSMTPD | Mar 25, 2022 | Apr 15, 2022 | 99.0% | — |
| CVE-2021-40539 Ransomware
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability |
Zoho · ManageEngine | Nov 3, 2021 | Nov 17, 2021 | 99.0% | — |
| CVE-2022-36804
Atlassian Bitbucket Server and Data Center Command Injection Vulnerability |
Atlassian · Bitbucket Server and Data Center | Sep 30, 2022 | Oct 21, 2022 | 99.0% | — |
| CVE-2019-3929
Crestron Multiple Products Command Injection Vulnerability |
Crestron · Multiple Products | Apr 15, 2022 | May 6, 2022 | 99.0% | — |
| CVE-2025-32433
Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulne… |
Erlang · Erlang/OTP | Jun 9, 2025 | Jun 30, 2025 | 98.9% | — |
| CVE-2017-9791
Apache Struts 1 Improper Input Validation Vulnerability |
Apache · Struts 1 | Feb 10, 2022 | Aug 10, 2022 | 98.9% | — |
| CVE-2022-3236
Sophos Firewall Code Injection Vulnerability |
Sophos · Firewall | Sep 23, 2022 | Oct 14, 2022 | 98.9% | — |
| CVE-2023-47246 Ransomware
SysAid Server Path Traversal Vulnerability |
SysAid · SysAid Server | Nov 13, 2023 | Dec 4, 2023 | 98.9% | — |
| CVE-2012-3152
Oracle Fusion Middleware Unspecified Vulnerability |
Oracle · Fusion Middleware | Nov 3, 2021 | May 3, 2022 | 98.8% | — |
| CVE-2013-2465 Ransomware
Oracle Java SE Unspecified Vulnerability |
Oracle · Java SE | Mar 28, 2022 | Apr 18, 2022 | 98.8% | — |
| CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability |
Microsoft · Windows | May 20, 2026 | Jun 3, 2026 | 98.8% | — |
| CVE-2026-1281
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
Ivanti · Endpoint Manager Mobile (EPMM) | Jan 29, 2026 | Feb 1, 2026 | 98.7% | — |
| CVE-2022-27925 Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Aug 11, 2022 | Sep 1, 2022 | 98.7% | — |
| CVE-2026-1340
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
Ivanti · Endpoint Manager Mobile (EPMM) | Apr 8, 2026 | Apr 11, 2026 | 98.6% | — |
| CVE-2024-29059
Microsoft .NET Framework Information Disclosure Vulnerability |
Microsoft · .NET Framework | Feb 4, 2025 | Feb 25, 2025 | 98.6% | — |
| CVE-2015-5119
Adobe Flash Player Use-After-Free Vulnerability |
Adobe · Flash Player | Mar 3, 2022 | Mar 24, 2022 | 98.6% | — |
| CVE-2024-50623 Ransomware
Cleo Multiple Products Unrestricted File Upload Vulnerability |
Cleo · Multiple Products | Dec 13, 2024 | Jan 3, 2025 | 98.6% | — |
| CVE-2024-8963
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability |
Ivanti · Cloud Services Appliance (CSA) | Sep 19, 2024 | Oct 10, 2024 | 98.6% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.