全件ブラウズ
悪用確認済み脆弱性(CISA KEV)全件
CISAが「実際に悪用が確認された」とするKEVカタログの全件を、深刻度・ランサム悪用・追加日で絞り込み・検索できます。
該当 1,721 件
| 緊急度 | CVE | 名称・製品 | ベンダー | KEV追加日 |
|---|---|---|---|---|
| 高 | CVE-2024-43461 ↗ | Microsoft Windows — Microsoft Windows MSHTML Platform Spoofing Vulnerability | Microsoft | 2024/09/16 |
| 緊急 | CVE-2024-6670 解説あり | Progress WhatsUp Gold — Progress WhatsUp Gold SQL Injection Vulnerability | Progress | 2024/09/16 |
| 高 | CVE-2024-8190 ↗ | Ivanti Cloud Services Appliance — Ivanti Cloud Services Appliance OS Command I... | Ivanti | 2024/09/13 |
| 高 | CVE-2024-38226 ↗ | Microsoft Publisher — Microsoft Publisher Protection Mechanism Failure Vulnera... | Microsoft | 2024/09/10 |
| 高 | CVE-2024-38014 ↗ | Microsoft Windows — Microsoft Windows Installer Improper Privilege Management... | Microsoft | 2024/09/10 |
| 高 | CVE-2024-38217 ↗ | Microsoft Windows — Microsoft Windows Mark of the Web (MOTW) Protection Mechan... | Microsoft | 2024/09/10 |
| 高 | CVE-2016-3714 ↗ | ImageMagick ImageMagick — ImageMagick Improper Input Validation Vulnerability | ImageMagick | 2024/09/09 |
| 緊急 | CVE-2017-1000253 ↗ | Linux Kernel — Linux Kernel PIE Stack Buffer Corruption Vulnerability | Linux | 2024/09/09 |
| 緊急 | CVE-2024-40766 ↗ | SonicWall SonicOS — SonicWall SonicOS Improper Access Control Vulnerability | SonicWall | 2024/09/09 |
| 高 | CVE-2021-20123 ↗ | DrayTek VigorConnect — Draytek VigorConnect Path Traversal Vulnerability | DrayTek | 2024/09/03 |
| 高 | CVE-2021-20124 ↗ | DrayTek VigorConnect — Draytek VigorConnect Path Traversal Vulnerability | DrayTek | 2024/09/03 |
| 高 | CVE-2024-7262 ↗ | Kingsoft WPS Office — Kingsoft WPS Office Path Traversal Vulnerability | Kingsoft | 2024/09/03 |
| 高 | CVE-2024-7965 ↗ | Google Chromium V8 — Google Chromium V8 Inappropriate Implementation Vulnerabi... | 2024/08/28 | |
| 高 | CVE-2024-38856 ↗ | Apache OFBiz — Apache OFBiz Incorrect Authorization Vulnerability | Apache | 2024/08/27 |
| 高 | CVE-2024-7971 ↗ | Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability | 2024/08/26 | |
| 高 | CVE-2024-39717 ↗ | Versa Director — Versa Director Dangerous File Type Upload Vulnerability | Versa | 2024/08/23 |
| 高 | CVE-2021-33044 ↗ | Dahua IP Camera Firmware — Dahua IP Camera Authentication Bypass Vulnerability | Dahua | 2024/08/21 |
| 高 | CVE-2021-33045 ↗ | Dahua IP Camera Firmware — Dahua IP Camera Authentication Bypass Vulnerability | Dahua | 2024/08/21 |
| 高 | CVE-2022-0185 ↗ | Linux Kernel — Linux Kernel Heap-Based Buffer Overflow Vulnerability | Linux | 2024/08/21 |
| 高 | CVE-2021-31196 ↗ | Microsoft Exchange Server — Microsoft Exchange Server Information Disclosure V... | Microsoft | 2024/08/21 |
| 緊急 | CVE-2024-23897 解説あり | Jenkins Jenkins Command Line Interface (CLI) — Jenkins Command Line Interface... | Jenkins | 2024/08/19 |
| 高 | CVE-2024-28986 ↗ | SolarWinds Web Help Desk — SolarWinds Web Help Desk Deserialization of Untrust... | SolarWinds | 2024/08/15 |
| 高 | CVE-2024-38189 ↗ | Microsoft Project — Microsoft Project Remote Code Execution Vulnerability | Microsoft | 2024/08/13 |
| 高 | CVE-2024-38178 ↗ | Microsoft Windows — Microsoft Windows Scripting Engine Memory Corruption Vulne... | Microsoft | 2024/08/13 |
| 高 | CVE-2024-38213 ↗ | Microsoft Windows — Microsoft Windows SmartScreen Security Feature Bypass Vuln... | Microsoft | 2024/08/13 |
| 高 | CVE-2024-38193 ↗ | Microsoft Windows — Microsoft Windows Ancillary Function Driver for WinSock Pr... | Microsoft | 2024/08/13 |
| 高 | CVE-2024-38106 ↗ | Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerabilit... | Microsoft | 2024/08/13 |
| 高 | CVE-2024-38107 ↗ | Microsoft Windows — Microsoft Windows Power Dependency Coordinator Privilege E... | Microsoft | 2024/08/13 |
| 高 | CVE-2024-36971 ↗ | Android Kernel — Android Kernel Remote Code Execution Vulnerability | Android | 2024/08/07 |
| 高 | CVE-2024-32113 ↗ | Apache OFBiz — Apache OFBiz Path Traversal Vulnerability | Apache | 2024/08/07 |
| 高 | CVE-2018-0824 ↗ | Microsoft Windows — Microsoft COM for Windows Deserialization of Untrusted Dat... | Microsoft | 2024/08/05 |
| 緊急 | CVE-2024-37085 解説あり | VMware ESXi — VMware ESXi Authentication Bypass Vulnerability | VMware | 2024/07/30 |
| 高 | CVE-2024-4879 ↗ | ServiceNow Utah, Vancouver, and Washington DC Now Platform — ServiceNow Improp... | ServiceNow | 2024/07/29 |
| 高 | CVE-2024-5217 ↗ | ServiceNow Utah, Vancouver, and Washington DC Now Platform — ServiceNow Incomp... | ServiceNow | 2024/07/29 |
| 高 | CVE-2023-45249 ↗ | Acronis Cyber Infrastructure (ACI) — Acronis Cyber Infrastructure (ACI) Insecu... | Acronis | 2024/07/29 |
| 高 | CVE-2012-4792 ↗ | Microsoft Internet Explorer — Microsoft Internet Explorer Use-After-Free Vulne... | Microsoft | 2024/07/23 |
| 高 | CVE-2024-39891 ↗ | Twilio Authy — Twilio Authy Information Disclosure Vulnerability | Twilio | 2024/07/23 |
| 高 | CVE-2024-34102 ↗ | Adobe Commerce and Magento Open Source — Adobe Commerce and Magento Open Sourc... | Adobe | 2024/07/17 |
| 高 | CVE-2024-28995 ↗ | SolarWinds Serv-U — SolarWinds Serv-U Path Traversal Vulnerability | SolarWinds | 2024/07/17 |
| 高 | CVE-2022-22948 ↗ | VMware vCenter Server — VMware vCenter Server Incorrect Default File Permissio... | VMware | 2024/07/17 |
| 高 | CVE-2024-36401 ↗ | OSGeo GeoServer — OSGeo GeoServer GeoTools Eval Injection Vulnerability | OSGeo | 2024/07/15 |
| 高 | CVE-2024-38112 ↗ | Microsoft Windows — Microsoft Windows MSHTML Platform Spoofing Vulnerability | Microsoft | 2024/07/09 |
| 高 | CVE-2024-38080 ↗ | Microsoft Windows — Microsoft Windows Hyper-V Privilege Escalation Vulnerabili... | Microsoft | 2024/07/09 |
| 緊急 | CVE-2024-23692 ↗ | Rejetto HTTP File Server — Rejetto HTTP File Server Improper Neutralization of... | Rejetto | 2024/07/09 |
| 高 | CVE-2024-20399 ↗ | Cisco NX-OS — Cisco NX-OS Command Injection Vulnerability | Cisco | 2024/07/02 |
| 高 | CVE-2022-24816 ↗ | OSGeo JAI-EXT — OSGeo GeoServer JAI-EXT Code Injection Vulnerability | OSGeo | 2024/06/26 |
| 高 | CVE-2022-2586 ↗ | Linux Kernel — Linux Kernel Use-After-Free Vulnerability | Linux | 2024/06/26 |
| 高 | CVE-2020-13965 ↗ | Roundcube Webmail — Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | Roundcube | 2024/06/26 |
| 高 | CVE-2024-32896 ↗ | Android Pixel — Android Pixel Privilege Escalation Vulnerability | Android | 2024/06/13 |
| 緊急 | CVE-2024-26169 ↗ | Microsoft Windows — Microsoft Windows Error Reporting Service Improper Privile... | Microsoft | 2024/06/13 |
出典:米国政府公式の公開データ。本サイトは収集・整理した索引で、米国政府公式ではありません。「解説あり」は当サイトの日本語解説ページ、それ以外は公式の一次情報へリンクします。