CISA Known Exploited Vulnerabilities

564 results · Clear filters · Feed

• High 7.8
  CVE-2021-1647 Exploited Public exploit EPSS 40%

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows
  Jan 12, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-38003 Exploited Public exploit EPSS 39%

  Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially expl…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Nov 23, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-38648 Exploited Public exploit EPSS 11%

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Automation Update Management
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-36955 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.5
  CVE-2021-36942 Exploited · Ransomware Public exploit EPSS 66%

  Windows LSA Spoofing Vulnerability

  Windows LSA Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows
  Aug 12, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-31956 Exploited Public exploit EPSS 22%

  Windows NTFS Elevation of Privilege Vulnerability

  Windows NTFS Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-27065 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-30860 Exploited Public exploit EPSS 76%

  An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catal…

  Apple macOS watchOS iOS macOS iOS
  Aug 24, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-30807 Exploited Public exploit EPSS 29%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS…

  Apple macOS macOS
  Oct 19, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30563 Exploited Public exploit

  Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Aug 3, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30551 Exploited Public exploit EPSS 65%

  Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Jun 15, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30858 Exploited Public exploit EPSS 13%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, …

  Apple macOS iOS qtwebkit-source macOS iOS Debian Ubuntu Alpine
  Aug 24, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30632 Exploited Public exploit EPSS 63%

  Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Oct 8, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-40444 Exploited · Ransomware Public exploit EPSS 98%

  Microsoft MSHTML Remote Code Execution Vulnerability

  Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An a…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 15, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-21148 Exploited Public exploit EPSS 20%

  Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit hea…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Feb 9, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-21220 Exploited Public exploit EPSS 70%

  Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to p…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Apr 26, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-21017 Exploited Public exploit EPSS 86%

  Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution

  Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achiev…

  Adobe Acrobat Reader
  Feb 11, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-21193 Exploited Public exploit

  Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap co…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Mar 16, 2021

  KEV Nov 3, 2021
• High 7.5
  CVE-2021-41773 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

  A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Alpine
  Oct 5, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-37975 Exploited Public exploit EPSS 35%

  Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corru…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Oct 8, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-26411 Exploited · Ransomware Public exploit EPSS 82%

  Internet Explorer Memory Corruption Vulnerability

  Internet Explorer Memory Corruption Vulnerability

  Microsoft Internet Explorer 11 Internet Explorer 9 Microsoft Edge (EdgeHTML-based) Browsers
  Mar 11, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-26857 Exploited · Ransomware Public exploit EPSS 96%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0211 Exploited Public exploit EPSS 65%

  In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 8, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0863 Exploited Public exploit

  An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Err…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  May 16, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0859 Exploited · Ransomware Public exploit

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0808 Exploited Public exploit EPSS 53%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-0541 Exploited Public exploit EPSS 53%

  A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML …

  Microsoft Microsoft Office Internet Explorer 11 Internet Explorer 10
  Jan 8, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-0803 Exploited · Ransomware Public exploit EPSS 45%

  An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

  Microsoft Windows Windows Server Windows
  Apr 9, 2019

  KEV Nov 3, 2021
• High 7.0
  CVE-2019-18988 Exploited Public exploit

  TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for di…

  Feb 7, 2020

  KEV Nov 3, 2021
• High 8.0
  CVE-2019-11539 Exploited · Ransomware Public exploit EPSS 99%

  In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1…

  Apr 26, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-1429 Exploited Public exploit EPSS 77%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows
  Nov 12, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-1215 Exploited · Ransomware Public exploit EPSS 19%

  An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Wi…

  Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
  Sep 11, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-1653 Exploited Public exploit Scanner template EPSS 100%

  Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

  A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls …

  Cisco Cisco Small Business RV Series Router Firmware Network devices
  Jan 24, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-1367 Exploited · Ransomware Public exploit EPSS 52%

  A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…

  Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows
  Sep 23, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-17026 Exploited Public exploit EPSS 46%

  Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Mar 2, 2020

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-17558 Exploited Public exploit Scanner template EPSS 99%

  Improper Input Validation in Apache Solr

  Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configse…

  org.apache.solr:solr-core lucene-solr Debian Maven
  Dec 30, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-3398 Exploited Public exploit Scanner template EPSS 97%

  Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote a…

  Atlassian Confluence Web / CMS
  Apr 18, 2019

  KEV Nov 3, 2021
• High 7.8
  CVE-2019-2215 Exploited Public exploit EPSS 72%

  A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interact…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Oct 11, 2019

  KEV Nov 3, 2021
• High 7.5
  CVE-2019-8394 Exploited Public exploit EPSS 63%

  Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via …

  Feb 17, 2019

  KEV Nov 3, 2021
• High 8.8
  CVE-2019-15949 Exploited Public exploit EPSS 77%

  Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios…

  Sep 5, 2019

  KEV Nov 3, 2021