Claude

Exploited or KEV-listed · 11

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

1. live
   Claude Vulnerability in Claude Document-Processing Tool Allows Code Execution

   Exploited · since 9 Nov 2026

   AI
2. closed
   ChatGPT Yoba malware spreads via fake desktop versions of ChatGPT and Claude

   Exploited · since 29 Oct 2026
3. closed
   Claude Fake Web3 Accelerator Uses Malicious npm Packages to Distribute Malware

   Exploited · since 19 Oct 2026

   AI
4. closed
   ChatGPT Fake Claude and ChatGPT campaigns use ClickFix tactics against developers

   Exploited · since 16 Oct 2026

   AI
5. closed
   Claude Model Distillation Campaigns Target Anthropic Claude

   Exploited · since 23 Feb 2026

   AI
6. closed
   Cline Actor Exploited Cline AI Workflow and Published Unauthorized CLI Package

   Exploited · since 17 Feb 2026

   AI
7. closed
   Claude Anthropic Claude Jailbroken and Used in Mexican Government Data Theft

   Real loss · since 1 Dec 2025

   AI
8. closed
   Claude Anthropic Identifies AI Misuse in Extortion and Ransomware Campaigns

   Exploited · since 27 Aug 2025

   AI
9. closed
   ChatGPT Multiple LLM Platforms Expose Thousands of Conversations via Share Links

   Exploited · since 31 Jul 2025

   AI
10. closed
    Claude Anthropic Report Reveals Claude Misuse in Cyberattacks and Fraud

    Exploited · since 23 Apr 2025

    AI
11. closed9.8
    Claude LLMjacking Attackers Abuse Cloud AI Services Using Stolen Credentials

    Real loss · since 6 May 2024 · CVE-2021-3129

    AI

Disclosed CVEs, no confirmed exploitation · 0

No disclosed CVEs without confirmed exploitation.

Other incidents: research and unexploited reports · 5

1. live
   Claude Code + SDKs Stolen Claude API keys turn Claude Code into a remote implant

   Research · since 12 Nov 2026

   AI
2. closed
   Claude Anthropic demonstrates AI-assisted vulnerability discovery using Claude

   Research · since 27 Oct 2026 · updated 29 Oct 2026

   AI
3. closed
   Claude Coordinated Distillation Attack Targets Claude Capabilities

   Research · since 20 Oct 2026

   AI
4. closed
   Claude Claude Demonstrates Multistage Cyber Attacks on Realistic Ranges

   Research · since 20 Oct 2026

   AI
5. closed
   Claude Anthropic Research Model Scans Targets and Compromises Application

   Research · since 30 Jul 2026

   AI