Monthly zero-day reports

What attackers exploited each month, by technology and vendor. Built from CISA's catalog and updated automatically.

Exploited flaws added, last 12 months

• Nov 202511
• Dec 202520
• Jan 202617
• Feb 202628
• Mar 202626
• Apr 202631
• May 202621
• Jun 202623
• Jul 202626
• Aug 202631
• Sep 202643
• Oct 2026 (so far)32

All reports

• October 2026 (so far)32 exploited flaws · 15 zero-days · 0 ransomware
• September 202643 exploited flaws · 25 zero-days · 0 ransomware
• August 202631 exploited flaws · 11 zero-days · 2 ransomware
• July 202626 exploited flaws · 13 zero-days · 4 ransomware
• June 202623 exploited flaws · 11 zero-days · 3 ransomware
• May 202621 exploited flaws · 11 zero-days · 3 ransomware
• April 202631 exploited flaws · 6 zero-days · 9 ransomware
• March 202626 exploited flaws · 7 zero-days · 2 ransomware
• February 202628 exploited flaws · 12 zero-days · 2 ransomware
• January 202617 exploited flaws · 7 zero-days · 2 ransomware
• December 202520 exploited flaws · 13 zero-days · 2 ransomware
• November 202511 exploited flaws · 5 zero-days · 0 ransomware
• October 202531 exploited flaws · 4 zero-days · 3 ransomware
• September 202516 exploited flaws · 8 zero-days · 1 ransomware
• August 202515 exploited flaws · 6 zero-days · 1 ransomware
• July 202520 exploited flaws · 6 zero-days · 4 ransomware
• June 202520 exploited flaws · 7 zero-days · 1 ransomware
• May 202524 exploited flaws · 10 zero-days · 2 ransomware
• April 202515 exploited flaws · 9 zero-days · 4 ransomware
• March 202532 exploited flaws · 14 zero-days · 4 ransomware
• February 202527 exploited flaws · 8 zero-days · 3 ransomware
• January 202514 exploited flaws · 7 zero-days · 6 ransomware
• December 202416 exploited flaws · 6 zero-days · 4 ransomware
• November 202422 exploited flaws · 8 zero-days · 5 ransomware
• October 202417 exploited flaws · 10 zero-days · 4 ransomware
• September 202425 exploited flaws · 6 zero-days · 4 ransomware
• August 202419 exploited flaws · 10 zero-days · 1 ransomware
• July 202414 exploited flaws · 4 zero-days · 2 ransomware
• June 20249 exploited flaws · 3 zero-days · 2 ransomware
• May 202414 exploited flaws · 8 zero-days · 4 ransomware
• April 202410 exploited flaws · 8 zero-days · 1 ransomware
• March 202410 exploited flaws · 3 zero-days · 5 ransomware
• February 20249 exploited flaws · 5 zero-days · 4 ransomware
• January 202421 exploited flaws · 7 zero-days · 8 ransomware
• December 202311 exploited flaws · 6 zero-days · 2 ransomware
• November 202318 exploited flaws · 7 zero-days · 3 ransomware
• October 202318 exploited flaws · 11 zero-days · 5 ransomware
• September 202319 exploited flaws · 12 zero-days · 3 ransomware
• August 20238 exploited flaws · 3 zero-days · 3 ransomware
• July 202316 exploited flaws · 12 zero-days · 4 ransomware
• June 202324 exploited flaws · 7 zero-days · 2 ransomware
• May 202319 exploited flaws · 5 zero-days · 1 ransomware
• April 202317 exploited flaws · 8 zero-days · 6 ransomware
• March 202318 exploited flaws · 5 zero-days · 2 ransomware
• February 202314 exploited flaws · 7 zero-days · 9 ransomware
• January 20235 exploited flaws · 2 zero-days · 3 ransomware
• December 20229 exploited flaws · 5 zero-days · 4 ransomware
• November 202210 exploited flaws · 6 zero-days · 2 ransomware
• October 202212 exploited flaws · 4 zero-days · 8 ransomware
• September 202224 exploited flaws · 8 zero-days · 6 ransomware
• August 202223 exploited flaws · 5 zero-days · 6 ransomware
• July 20223 exploited flaws · 1 zero-days · 0 ransomware
• June 202248 exploited flaws · 1 zero-days · 8 ransomware
• May 202283 exploited flaws · 4 zero-days · 18 ransomware
• April 202245 exploited flaws · 8 zero-days · 10 ransomware
• March 2022226 exploited flaws · 5 zero-days · 51 ransomware
• February 202232 exploited flaws · 3 zero-days · 10 ransomware
• January 202240 exploited flaws · 1 zero-days · 9 ransomware
• December 202120 exploited flaws · 6 zero-days · 4 ransomware
• November 2021291 exploited flaws · 4 zero-days · 80 ransomware