Browse all
Known Exploited Vulnerabilities (CISA KEV) — all
The full CISA KEV catalog of vulnerabilities confirmed exploited in the wild — filter and search by year, ransomware use, and date added.
1,660 results
| Urgency | CVE | Name / product | Vendor | KEV added |
|---|---|---|---|---|
| High | CVE-2021-28310 ↗ | Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Nov 3, 2021 |
| High | CVE-2020-1040 ↗ | Microsoft Hyper-V RemoteFX — Microsoft Hyper-V RemoteFX vGPU Remote Code Execu... | Microsoft | Nov 3, 2021 |
| High | CVE-2019-0803 ↗ | Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Nov 3, 2021 |
| Critical | CVE-2021-31207 ↗ | Microsoft Exchange Server — Microsoft Exchange Server Security Feature Bypass... | Microsoft | Nov 3, 2021 |
| Critical | CVE-2021-34527 ↗ | Microsoft Windows — Microsoft Windows Print Spooler Remote Code Execution Vuln... | Microsoft | Nov 3, 2021 |
| Critical | CVE-2021-1732 ↗ | Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Nov 3, 2021 |
| High | CVE-2020-1464 ↗ | Microsoft Windows — Microsoft Windows Spoofing Vulnerability | Microsoft | Nov 3, 2021 |
| Critical | CVE-2021-34473 ↗ | Microsoft Exchange Server — Microsoft Exchange Server Remote Code Execution Vu... | Microsoft | Nov 3, 2021 |
| Critical | CVE-2019-0708 ↗ | Microsoft Remote Desktop Services — Microsoft Remote Desktop Services Remote C... | Microsoft | Nov 3, 2021 |
| High | CVE-2016-7255 ↗ | Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Nov 3, 2021 |
| Critical | CVE-2017-0143 ↗ | Microsoft Windows — Microsoft Windows Server Message Block (SMBv1) Remote Code... | Microsoft | Nov 3, 2021 |
| Critical | CVE-2020-0688 ↗ | Microsoft Exchange Server — Microsoft Exchange Server Validation Key Remote Co... | Microsoft | Nov 3, 2021 |
| High | CVE-2021-38649 ↗ | Microsoft Open Management Infrastructure (OMI) — Microsoft Open Management Inf... | Microsoft | Nov 3, 2021 |
| High | CVE-2021-36948 ↗ | Microsoft Windows — Microsoft Windows Update Medic Service Privilege Escalatio... | Microsoft | Nov 3, 2021 |
| High | CVE-2017-7269 ↗ | Microsoft Internet Information Services (IIS) — Microsoft Windows Server Buffe... | Microsoft | Nov 3, 2021 |
| Critical | CVE-2021-34523 ↗ | Microsoft Exchange Server — Microsoft Exchange Server Privilege Escalation Vul... | Microsoft | Nov 3, 2021 |
| High | CVE-2021-38645 ↗ | Microsoft Open Management Infrastructure (OMI) — Microsoft Open Management Inf... | Microsoft | Nov 3, 2021 |
| High | CVE-2020-1020 ↗ | Microsoft Windows — Microsoft Windows Adobe Font Manager Library Remote Code E... | Microsoft | Nov 3, 2021 |
| High | CVE-2020-0986 ↗ | Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerabilit... | Microsoft | Nov 3, 2021 |
| High | CVE-2020-17144 ↗ | Microsoft Exchange Server — Microsoft Exchange Server Remote Code Execution Vu... | Microsoft | Nov 3, 2021 |
| High | CVE-2020-0938 ↗ | Microsoft Windows — Microsoft Windows Adobe Font Manager Library Remote Code E... | Microsoft | Nov 3, 2021 |
| High | CVE-2021-31979 ↗ | Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerabilit... | Microsoft | Nov 3, 2021 |
| High | CVE-2021-31201 ↗ | Microsoft Enhanced Cryptographic Provider — Microsoft Enhanced Cryptographic P... | Microsoft | Nov 3, 2021 |
| High | CVE-2021-31956 ↗ | Microsoft Windows — Microsoft Windows NTFS Privilege Escalation Vulnerability | Microsoft | Nov 3, 2021 |
| High | CVE-2021-33771 ↗ | Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerabilit... | Microsoft | Nov 3, 2021 |
| High | CVE-2021-31199 ↗ | Microsoft Enhanced Cryptographic Provider — Microsoft Enhanced Cryptographic P... | Microsoft | Nov 3, 2021 |
| High | CVE-2021-33742 ↗ | Microsoft Windows — Microsoft Windows MSHTML Platform Remote Code Execution Vu... | Microsoft | Nov 3, 2021 |
| High | CVE-2020-17087 ↗ | Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerabilit... | Microsoft | Nov 3, 2021 |
| High | CVE-2020-0683 ↗ | Microsoft Windows — Microsoft Windows Installer Privilege Escalation Vulnerabi... | Microsoft | Nov 3, 2021 |
| High | CVE-2016-0185 ↗ | Microsoft Windows — Microsoft Windows Media Center Remote Code Execution Vulne... | Microsoft | Nov 3, 2021 |
| High | CVE-2021-33739 ↗ | Microsoft Windows — Microsoft Desktop Window Manager (DWM) Core Library Privil... | Microsoft | Nov 3, 2021 |
| High | CVE-2021-1647 ↗ | Microsoft Defender — Microsoft Defender Remote Code Execution Vulnerability | Microsoft | Nov 3, 2021 |
| High | CVE-2021-31955 ↗ | Microsoft Windows — Microsoft Windows Kernel Information Disclosure Vulnerabil... | Microsoft | Nov 3, 2021 |
| Critical | CVE-2020-0878 ↗ | Microsoft Edge and Internet Explorer — Microsoft Edge and Internet Explorer Me... | Microsoft | Nov 3, 2021 |
| Critical | CVE-2016-0167 ↗ | Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability | Microsoft | Nov 3, 2021 |
| Critical | CVE-2021-38647 ↗ | Microsoft Open Management Infrastructure (OMI) — Microsoft Open Management Inf... | Microsoft | Nov 3, 2021 |
| Critical | CVE-2014-1812 ↗ | Microsoft Windows — Microsoft Windows Group Policy Preferences Password Privil... | Microsoft | Nov 3, 2021 |
| High | CVE-2021-22502 ↗ | Micro Focus Operation Bridge Reporter (OBR) — Micro Focus Operation Bridge Rep... | Micro Focus | Nov 3, 2021 |
| High | CVE-2021-22506 ↗ | Micro Focus Micro Focus Access Manager — Micro Focus Access Manager Informatio... | Micro Focus | Nov 3, 2021 |
| High | CVE-2021-23874 ↗ | McAfee McAfee Total Protection (MTP) — McAfee Total Protection (MTP) Improper... | McAfee | Nov 3, 2021 |
| High | CVE-2020-7961 ↗ | Liferay Liferay Portal — Liferay Portal Deserialization of Untrusted Data Vuln... | Liferay | Nov 3, 2021 |
| Critical | CVE-2021-30116 ↗ | Kaseya Virtual System/Server Administrator (VSA) — Kaseya Virtual System/Serve... | Kaseya | Nov 3, 2021 |
| High | CVE-2020-15505 ↗ | Ivanti MobileIron Multiple Products — Ivanti MobileIron Multiple Products Remo... | Ivanti | Nov 3, 2021 |
| High | CVE-2016-3718 ↗ | ImageMagick ImageMagick — ImageMagick Server-Side Request Forgery (SSRF) Vulne... | ImageMagick | Nov 3, 2021 |
| High | CVE-2016-3715 ↗ | ImageMagick ImageMagick — ImageMagick Arbitrary File Deletion Vulnerability | ImageMagick | Nov 3, 2021 |
| High | CVE-2019-4716 ↗ | IBM Planning Analytics — IBM Planning Analytics Remote Code Execution Vulnerab... | IBM | Nov 3, 2021 |
| High | CVE-2020-4428 ↗ | IBM Data Risk Manager — IBM Data Risk Manager Remote Code Execution Vulnerabil... | IBM | Nov 3, 2021 |
| High | CVE-2020-4427 ↗ | IBM Data Risk Manager — IBM Data Risk Manager Security Bypass Vulnerability | IBM | Nov 3, 2021 |
| High | CVE-2020-4430 ↗ | IBM Data Risk Manager — IBM Data Risk Manager Directory Traversal Vulnerabilit... | IBM | Nov 3, 2021 |
| High | CVE-2021-30563 ↗ | Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability | Nov 3, 2021 |
Source: official U.S. government open data. This is an organized index, not an official U.S. government site. "Explained" links to our summary page; otherwise links go to the official primary source.