Records
7
Disclosed CVEs
0
Exploited (sev 3–4)
7
CISA KEV flagged
0
Newest record 2026-05-31 · 0 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Patch now: confirmed exploitation or KEV · 7
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
- 2026-05-31Meta AI Support Bot Manipulated to Enable Instagram Account Takeovers3 Exploitedaccount_takeover · chatbot_abuse · instagram
- 2025-10-01Deepfake Ads Impersonating Gisele Bündchen Used in Brazilian Fraud Scheme4 Real lossdeepfake · fraud · arrest
- 2025-07-14Deepfake Videos Impersonate Brunei Police in Investment Scam3 Exploiteddeepfake · police-impersonation · fraud
- 2025-04-23Deepfake of Steven Bartlett Used to Promote Fake WhatsApp Investment Group3 Exploiteddeepfake · social-engineering · fraud
- 2025-04-15Deepfake Investment Scam Impersonates Economist David Rosenberg4 Real lossdeepfake · investment-scam · impersonation
- 2025-03-09Journalist Martin Wolf Impersonated in AI Investment Scams3 Exploiteddeepfake · social-engineering · investment-scam · meta
- 2024-12-26Luis Suárez Deepfake Used in Investment and Phishing Scam3 Exploiteddeepfake · phishing · social-engineering
Disclosures by month · last 24 months
Nov ’240 disclosedOct ’26
Disclosed CVEs, no confirmed exploitation · 0
No disclosed CVEs without confirmed exploitation.
This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.