KEV index

Every SMB-relevant CVE, one page

This page lists every SMB-relevant CVE from CISA's Known Exploited Vulnerabilities catalog as of the last daily refresh, 828 entries in total. Grouped by year the CVE was added to KEV, newest year first. Each row links directly to the Obsidian Ridge detail page with plain-English impact and what to do about it.

Catalog refreshed September 2, 2026 · 828 entries · Return to KEV landing

2026 (85 entries)

CVE-2019-1068 — Microsoft SQL Server
CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions
CVE-2026-55040 — Microsoft SharePoint
CVE-2026-65400 — Apple macOS
CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock
CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)
CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC)
CVE-2025-68686 — Fortinet FortiOS
CVE-2026-50522 — Microsoft SharePoint
CVE-2026-25089 — Fortinet FortiSandbox
CVE-2026-58644 — Microsoft SharePoint
CVE-2026-39808 — Fortinet FortiSandbox
CVE-2026-56164 — Microsoft SharePoint Server
CVE-2026-56155 — Microsoft Active Directory Federation Services
CVE-2026-15409 — SonicWall SMA1000 Appliances
CVE-2026-15410 — SonicWall SMA1000 Appliances
CVE-2008-4128 — Cisco iOS
CVE-2026-48282 — Adobe ColdFusion
CVE-2026-45659 — Microsoft SharePoint Server
CVE-2026-20230 — Cisco Unified Communications Manager
CVE-2026-34910 — Ubiquiti UniFi OS
CVE-2026-34909 — Ubiquiti UniFi OS
CVE-2026-34908 — Ubiquiti UniFi OS
CVE-2026-20262 — Cisco Catalyst SD-WAN Manager
CVE-2026-10520 — Ivanti Sentry
CVE-2026-11645 — Google Chromium V8
CVE-2026-20245 — Cisco Catalyst SD-WAN Manager
CVE-2026-0257 — Palo Alto Networks PAN-OS
CVE-2009-3459 — Adobe Acrobat and Reader
CVE-2010-0806 — Microsoft Internet Explorer
CVE-2026-41091 — Microsoft Defender
CVE-2026-45498 — Microsoft Defender
CVE-2008-4250 — Microsoft Windows
CVE-2009-1537 — Microsoft DirectX
CVE-2010-0249 — Microsoft Internet Explorer
CVE-2026-42897 — Microsoft Exchange Server
CVE-2026-20182 — Cisco Catalyst SD-WAN
CVE-2026-6973 — Ivanti Endpoint Manager Mobile (EPMM)
CVE-2026-0300 — Palo Alto Networks PAN-OS
CVE-2026-32202 — Microsoft Windows
CVE-2026-33825 — Microsoft Defender
CVE-2026-20128 — Cisco Catalyst SD-WAN Manager
CVE-2026-20122 — Cisco Catalyst SD-WAN Manager
CVE-2026-20133 — Cisco Catalyst SD-WAN Manager
CVE-2009-0238 — Microsoft Office
CVE-2026-32201 — Microsoft SharePoint Server
CVE-2012-1854 — Microsoft Visual Basic for Applications (VBA)
CVE-2025-60710 — Microsoft Windows
CVE-2023-21529 — Microsoft Exchange Server
CVE-2023-36424 — Microsoft Windows
CVE-2026-21643 — Fortinet FortiClient EMS
CVE-2026-34621 — Adobe Acrobat and Reader
CVE-2020-9715 — Adobe Acrobat
CVE-2026-1340 — Ivanti Endpoint Manager Mobile (EPMM)
CVE-2026-35616 — Fortinet FortiClient EMS
CVE-2026-5281 — Google Dawn
CVE-2025-43520 — Apple Multiple Products
CVE-2025-31277 — Apple Multiple Products
CVE-2025-43510 — Apple Multiple Products
CVE-2026-20131 — Cisco Secure Firewall Management Center (FMC)
CVE-2026-20963 — Microsoft SharePoint
CVE-2026-3909 — Google Skia
CVE-2026-3910 — Google Chromium V8
CVE-2026-1603 — Ivanti Endpoint Manager (EPM)
CVE-2023-41974 — Apple iOS and iPadOS
CVE-2021-30952 — Apple Multiple Products
CVE-2023-43000 — Apple Multiple Products
CVE-2022-20775 — Cisco SD-WAN
CVE-2026-20127 — Cisco Catalyst SD-WAN Controller and Manager
CVE-2026-2441 — Google Chromium
CVE-2008-0015 — Microsoft Windows
CVE-2026-20700 — Apple Multiple Products
CVE-2024-43468 — Microsoft Configuration Manager
CVE-2026-21519 — Microsoft Windows
CVE-2026-21513 — Microsoft Windows
CVE-2026-21533 — Microsoft Windows
CVE-2026-21514 — Microsoft Office
CVE-2026-21525 — Microsoft Windows
CVE-2026-21510 — Microsoft Windows
CVE-2026-1281 — Ivanti Endpoint Manager Mobile (EPMM)
CVE-2026-24858 — Fortinet Multiple Products
CVE-2026-21509 — Microsoft Office
CVE-2026-20045 — Cisco Unified Communications Manager
CVE-2026-20805 — Microsoft Windows
CVE-2009-0556 — Microsoft Office

2025 (88 entries)

CVE-2025-20393 — Cisco Multiple Products
CVE-2025-40602 — SonicWall SMA1000 appliance
CVE-2025-59718 — Fortinet Multiple Products
CVE-2025-43529 — Apple Multiple Products
CVE-2025-14174 — Google Chromium
CVE-2025-62221 — Microsoft Windows
CVE-2025-13223 — Google Chromium V8
CVE-2025-58034 — Fortinet FortiWeb
CVE-2025-64446 — Fortinet FortiWeb
CVE-2025-62215 — Microsoft Windows
CVE-2025-59287 — Microsoft Windows
CVE-2025-54236 — Adobe Commerce and Magento
CVE-2022-48503 — Apple Multiple Products
CVE-2025-33073 — Microsoft Windows
CVE-2025-54253 — Adobe Experience Manager (AEM) Forms

2024 (89 entries)

CVE-2024-3393 — Palo Alto Networks PAN-OS
CVE-2024-35250 — Microsoft Windows
CVE-2024-20767 — Adobe ColdFusion
CVE-2024-49138 — Microsoft Windows
CVE-2024-44309 — Apple Multiple Products
CVE-2024-44308 — Apple Multiple Products
CVE-2024-0012 — Palo Alto Networks PAN-OS
CVE-2024-9474 — Palo Alto Networks PAN-OS
CVE-2024-9465 — Palo Alto Networks Expedition
CVE-2024-9463 — Palo Alto Networks Expedition
CVE-2024-49039 — Microsoft Windows
CVE-2014-2120 — Cisco Adaptive Security Appliance (ASA)
CVE-2024-43451 — Microsoft Windows
CVE-2024-5910 — Palo Alto Networks Expedition
CVE-2024-20481 — Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

2023 (73 entries)

CVE-2023-42917 — Apple Multiple Products
CVE-2023-42916 — Apple Multiple Products
CVE-2023-6345 — Google Chromium Skia
CVE-2023-36584 — Microsoft Windows
CVE-2023-36033 — Microsoft Windows
CVE-2023-36025 — Microsoft Windows
CVE-2023-36036 — Microsoft Windows
CVE-2023-20273 — Cisco IOS XE Web UI
CVE-2023-20198 — Cisco IOS XE Web UI
CVE-2023-36563 — Microsoft WordPad
CVE-2023-20109 — Cisco IOS and IOS XE
CVE-2023-41763 — Microsoft Skype for Business
CVE-2023-21608 — Adobe Acrobat and Reader
CVE-2023-42824 — Apple iOS and iPadOS
CVE-2023-28229 — Microsoft Windows CNG Key Isolation Service

2022 (330 entries)

CVE-2022-42856 — Apple iOS
CVE-2022-44698 — Microsoft Defender
CVE-2022-42475 — Fortinet FortiOS
CVE-2022-4262 — Google Chromium V8
CVE-2022-4135 — Google Chromium GPU
CVE-2022-41049 — Microsoft Windows
CVE-2022-41128 — Microsoft Windows
CVE-2022-41073 — Microsoft Windows
CVE-2022-41125 — Microsoft Windows
CVE-2022-41091 — Microsoft Windows
CVE-2022-3723 — Google Chromium V8
CVE-2022-42827 — Apple iOS and iPadOS
CVE-2020-3153 — Cisco AnyConnect Secure
CVE-2020-3433 — Cisco AnyConnect Secure
CVE-2022-40684 — Fortinet Multiple Products

2021 (163 entries)

CVE-2021-4102 — Google Chromium V8
CVE-2021-43890 — Microsoft Windows
CVE-2021-44168 — Fortinet FortiOS
CVE-2021-42292 — Microsoft Office
CVE-2021-42321 — Microsoft Exchange
CVE-2021-40449 — Microsoft Windows
CVE-2021-22893 — Ivanti Pulse Connect Secure
CVE-2021-30858 — Apple iOS, iPadOS, and macOS
CVE-2021-31199 — Microsoft Enhanced Cryptographic Provider
CVE-2021-20023 — SonicWall Email Security
CVE-2021-21224 — Google Chromium V8
CVE-2021-21193 — Google Chromium Blink
CVE-2017-0199 — Microsoft Office and WordPad
CVE-2021-21220 — Google Chromium V8
CVE-2020-0601 — Microsoft Windows