ChatGPT
Newest record 2026-11-05 · 0 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 16
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
- closedChatGPT Yoba malware spreads via fake desktop versions of ChatGPT and Claude
Exploited · since 29 Oct 2026
- closedOpenAI Operator AI Agent Hacked into Crypto Wallet and Stole Funds
Exploited · since 16 Oct 2026
AI - closedChatGPT Fake Claude and ChatGPT campaigns use ClickFix tactics against developers
Exploited · since 16 Oct 2026
AI - closedChatGPT Suspect Used ChatGPT to Assess Drug Lethality Before Fatal Poisonings
Real loss · since 28 Jan 2026
AI - closedAI Overviews AI Chatbots Reportedly Cited Fraudulent Cruise Hotline Enabling Scams
Exploited · since 15 Aug 2025
AI - closedChatGPT Multiple LLM Platforms Expose Thousands of Conversations via Share Links
Exploited · since 31 Jul 2025
AI - closedChatGPT CISA Acting Director Uploaded Sensitive Documents to Public ChatGPT
Exploited · since 15 Jul 2025
AI - closedChatGPT ChatGPT Used in Planning School Stabbing in Finland
Exploited · since 20 May 2025
AI - closedChatGPT Scammers Use ChatGPT to Impersonate Students in Financial Aid Fraud
Real loss · since 22 Apr 2025
AI - closedChatGPT IS Supporter Used ChatGPT for Explosives Advice in Vienna Attack Plot
Exploited · since 9 Apr 2025
AI - closedChatGPT FraudGPT-Enabled Phishing Campaign Spoofs ChatGPT Subscription
Exploited · since 23 Feb 2025
AI - closedChatGPT ChatGPT Reportedly Used to Plan Zürich Knife Attack
Real loss · since 1 Oct 2024
AI - closedChatGPT ChatGPT Account Compromise Leads to Exposure of Private Chat Logs
Exploited · since 30 Jan 2024
AI - closedChatGPT ChatGPT Bug Exposes User Chat Histories and Payment Data
Real loss · since 20 Mar 2023
AI - closedChatGPT Samsung Source Code and Meeting Records Disclosed via ChatGPT Ingestion
Real loss · since 11 Mar 2023
AI - closedChatGPT ChatGPT Abused by Threat Actors to Develop Malicious Software
Exploited · since 21 Dec 2022
AI
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 0
No disclosed CVEs without confirmed exploitation.
Other incidents: research and unexploited reports · 10
- liveChatGPT Researchers bypass OpenAI ChatGPT Lockdown Mode protections
Disclosed · Patched · since 5 Nov 2026
AI - liveChatGPT ChatGPT Share Link Vulnerability Allowed Code Execution and Data Access
Disclosed · Patched · since 18 Oct 2026
AI - closedChatGPT ZombieAgent Indirect Prompt Injection on ChatGPT
Research · since 25 Sep 2025
AI - closedClaude Computer-Use Agent AI ClickFix Hijacking Computer-Use Agents Using ClickFix
Research · since 24 May 2025
AI - closedChatGPT Hacking ChatGPT's Memories with Prompt Injection
Research · since Feb 2024 (approx.)
AI - closedChatGPT OpenAI ChatGPT Models Jailbroken to Provide Hazardous Weapons Instructions
Research · since 10 Oct 2025
AI - closedChatGPT OpenAI Model Bypassed to Generate Fraudulent Receipts and Prescriptions
Research · since 31 Mar 2025
AI - closedChatGPT ChatGPT Package Hallucination Supply Chain Risk
Research · since Jun 2024 (approx.)
AI - closedChatGPT ChatGPT Conversation Exfiltration via Indirect Prompt Injection
Research · since May 2023 (approx.)
AI - closedChatGPT LLM Application Frameworks Allow Remote Code Execution via Prompting
Research · since 26 Mar 2023 · updated 31 Mar 2023
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.