Browse all
Known Exploited Vulnerabilities (CISA KEV) — all
The full CISA KEV catalog of vulnerabilities confirmed exploited in the wild — filter and search by year, ransomware use, and date added.
1,660 results
| Urgency | CVE | Name / product | Vendor | KEV added |
|---|---|---|---|---|
| High | CVE-2020-3118 ↗ | Cisco IOS XR — Cisco IOS XR Software Discovery Protocol Format String Vulnerab... | Cisco | Nov 3, 2021 |
| High | CVE-2018-0171 ↗ | Cisco IOS and IOS XE — Cisco IOS and IOS XE Software Smart Install Remote Code... | Cisco | Nov 3, 2021 |
| High | CVE-2021-1498 ↗ | Cisco HyperFlex HX — Cisco HyperFlex HX Data Platform Command Injection Vulner... | Cisco | Nov 3, 2021 |
| High | CVE-2021-1497 ↗ | Cisco HyperFlex HX — Cisco HyperFlex HX Installer Virtual Machine Command Inje... | Cisco | Nov 3, 2021 |
| Critical | CVE-2020-3580 ↗ | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) — C... | Cisco | Nov 3, 2021 |
| High | CVE-2020-3452 ↗ | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) — C... | Cisco | Nov 3, 2021 |
| Critical | CVE-2021-42258 ↗ | BQE BillQuick Web Suite — BQE BillQuick Web Suite SQL Injection Vulnerability | BQE | Nov 3, 2021 |
| Critical | CVE-2019-3396 ↗ | Atlassian Confluence Server and Data Server — Atlassian Confluence Server and... | Atlassian | Nov 3, 2021 |
| Critical | CVE-2019-11580 ↗ | Atlassian Crowd and Crowd Data Center — Atlassian Crowd and Crowd Data Center... | Atlassian | Nov 3, 2021 |
| Critical | CVE-2021-26084 ↗ | Atlassian Confluence Server and Data Center — Atlassian Confluence Server and... | Atlassian | Nov 3, 2021 |
| High | CVE-2019-3398 ↗ | Atlassian Confluence Server and Data Center — Atlassian Confluence Server and... | Atlassian | Nov 3, 2021 |
| High | CVE-2021-28663 ↗ | Arm Mali Graphics Processing Unit (GPU) — Arm Mali Graphics Processing Unit (G... | Arm | Nov 3, 2021 |
| High | CVE-2021-28664 ↗ | Arm Mali Graphics Processing Unit (GPU) — Arm Mali Graphics Processing Unit (G... | Arm | Nov 3, 2021 |
| High | CVE-2021-27562 ↗ | Arm Trusted Firmware — Arm Trusted Firmware Out-of-Bounds Write Vulnerability | Arm | Nov 3, 2021 |
| High | CVE-2021-20090 ↗ | Arcadyan Buffalo Firmware — Arcadyan Buffalo Firmware Path Traversal Vulnerabi... | Arcadyan | Nov 3, 2021 |
| High | CVE-2020-9859 ↗ | Apple Multiple Products — Apple Multiple Products Code Execution Vulnerability | Apple | Nov 3, 2021 |
| High | CVE-2021-30869 ↗ | Apple iOS, iPadOS, and macOS — Apple iOS, iPadOS, and macOS Type Confusion Vul... | Apple | Nov 3, 2021 |
| High | CVE-2021-30761 ↗ | Apple iOS — Apple iOS WebKit Memory Corruption Vulnerability | Apple | Nov 3, 2021 |
| High | CVE-2021-30663 ↗ | Apple Multiple Products — Apple Multiple Products WebKit Integer Overflow Vuln... | Apple | Nov 3, 2021 |
| High | CVE-2021-30665 ↗ | Apple Multiple Products — Apple Multiple Products WebKit Memory Corruption Vul... | Apple | Nov 3, 2021 |
| High | CVE-2021-30657 ↗ | Apple macOS — Apple macOS Unspecified Vulnerability | Apple | Nov 3, 2021 |
| High | CVE-2021-30713 ↗ | Apple macOS — Apple macOS Unspecified Vulnerability | Apple | Nov 3, 2021 |
| High | CVE-2021-30666 ↗ | Apple iOS — Apple iOS WebKit Buffer Overflow Vulnerability | Apple | Nov 3, 2021 |
| High | CVE-2021-30661 ↗ | Apple Multiple Products — Apple Multiple Products WebKit Storage Use-After-Fre... | Apple | Nov 3, 2021 |
| High | CVE-2021-1879 ↗ | Apple iOS, iPadOS, and watchOS — Apple iOS, iPadOS, and watchOS WebKit Cross-S... | Apple | Nov 3, 2021 |
| High | CVE-2021-1871 ↗ | Apple iOS, iPadOS, and macOS — Apple iOS, iPadOS, and macOS WebKit Remote Code... | Apple | Nov 3, 2021 |
| High | CVE-2021-1870 ↗ | Apple iOS, iPadOS, and macOS — Apple iOS, iPadOS, and macOS WebKit Remote Code... | Apple | Nov 3, 2021 |
| High | CVE-2021-1782 ↗ | Apple Multiple Products — Apple Multiple Products Race Condition Vulnerability | Apple | Nov 3, 2021 |
| High | CVE-2021-30762 ↗ | Apple iOS — Apple iOS WebKit Use-After-Free Vulnerability | Apple | Nov 3, 2021 |
| High | CVE-2020-9819 ↗ | Apple iOS, iPadOS, and watchOS — Apple iOS, iPadOS, and watchOS Memory Corrupt... | Apple | Nov 3, 2021 |
| High | CVE-2020-9818 ↗ | Apple iOS, iPadOS, and watchOS — Apple iOS, iPadOS, and watchOS Out-of-Bounds... | Apple | Nov 3, 2021 |
| High | CVE-2020-27932 ↗ | Apple Multiple Products — Apple Multiple Products Type Confusion Vulnerability | Apple | Nov 3, 2021 |
| High | CVE-2020-27950 ↗ | Apple Multiple Products — Apple Multiple Products Memory Initialization Vulner... | Apple | Nov 3, 2021 |
| High | CVE-2021-30807 ↗ | Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerabil... | Apple | Nov 3, 2021 |
| High | CVE-2020-27930 ↗ | Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerabil... | Apple | Nov 3, 2021 |
| High | CVE-2021-30860 ↗ | Apple Multiple Products — Apple Multiple Products Integer Overflow Vulnerabili... | Apple | Nov 3, 2021 |
| High | CVE-2019-6223 ↗ | Apple iOS and macOS — Apple iOS and macOS Group Facetime Vulnerability | Apple | Nov 3, 2021 |
| High | CVE-2021-30858 ↗ | Apple iOS, iPadOS, and macOS — Apple iOS, iPadOS, macOS Use-After-Free Vulnera... | Apple | Nov 3, 2021 |
| High | CVE-2018-11776 ↗ | Apache Struts — Apache Struts Remote Code Execution Vulnerability | Apache | Nov 3, 2021 |
| Critical | CVE-2017-5638 ↗ | Apache Struts — Apache Struts Remote Code Execution Vulnerability | Apache | Nov 3, 2021 |
| High | CVE-2020-17530 ↗ | Apache Struts — Apache Struts Remote Code Execution Vulnerability | Apache | Nov 3, 2021 |
| High | CVE-2019-17558 ↗ | Apache Solr — Apache Solr VelocityResponseWriter Plug-In Remote Code Execution... | Apache | Nov 3, 2021 |
| High | CVE-2016-4437 ↗ | Apache Shiro — Apache Shiro Code Execution Vulnerability | Apache | Nov 3, 2021 |
| High | CVE-2019-0211 ↗ | Apache HTTP Server — Apache HTTP Server Privilege Escalation Vulnerability | Apache | Nov 3, 2021 |
| Critical | CVE-2021-41773 ↗ | Apache HTTP Server — Apache HTTP Server Path Traversal Vulnerability | Apache | Nov 3, 2021 |
| Critical | CVE-2021-42013 ↗ | Apache HTTP Server — Apache HTTP Server Path Traversal Vulnerability | Apache | Nov 3, 2021 |
| High | CVE-2017-9805 ↗ | Apache Struts — Apache Struts Deserialization of Untrusted Data Vulnerability | Apache | Nov 3, 2021 |
| High | CVE-2020-0069 ↗ | MediaTek Multiple Chipsets — Mediatek Multiple Chipsets Insufficient Input Val... | MediaTek | Nov 3, 2021 |
| High | CVE-2020-0041 ↗ | Android Android Kernel — Android Kernel Out-of-Bounds Write Vulnerability | Android | Nov 3, 2021 |
| High | CVE-2019-2215 ↗ | Android Android Kernel — Android Kernel Use-After-Free Vulnerability | Android | Nov 3, 2021 |
Source: official U.S. government open data. This is an organized index, not an official U.S. government site. "Explained" links to our summary page; otherwise links go to the official primary source.