CISA Known Exploited Vulnerabilities

928 results · Clear filters · Feed

• High 7.5
  CVE-2021-33742 Exploited EPSS 59%

  Windows MSHTML Platform Remote Code Execution Vulnerability

  Windows MSHTML Platform Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 8.4
  CVE-2021-33739 Exploited Public exploit

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

  Microsoft Windows 10 Version 20H2 Windows 10 Version 1909 Windows Server version 20H2 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-33771 Exploited EPSS 10%

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-28310 Exploited Public exploit

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 13, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-28664 Exploited Public exploit

  The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unpriv…

  May 10, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-28663 Exploited Public exploit EPSS 12%

  The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are …

  May 10, 2021

  KEV Nov 3, 2021
• High 7.0
  CVE-2021-1782 Exploited Public exploit

  A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-0…

  Apple macOS iOS and iPadOS macOS iOS
  Apr 2, 2021

  KEV Nov 3, 2021
• High 8.4
  CVE-2021-1905 Exploited

  Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon …

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  May 7, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1675 Exploited · Ransomware Public exploit EPSS 85%

  Windows Print Spooler Remote Code Execution Vulnerability

  Windows Print Spooler Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1732 Exploited · Ransomware Public exploit EPSS 78%

  Windows Win32k Elevation of Privilege Vulnerability

  Windows Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 25, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1647 Exploited Public exploit EPSS 40%

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows
  Jan 12, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-38645 Exploited

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Security Center
  Sep 15, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-38003 Exploited Public exploit EPSS 39%

  Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially expl…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Nov 23, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-38648 Exploited Public exploit EPSS 11%

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Sentinel
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.0
  CVE-2021-38649 Exploited

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Sentinel
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-36948 Exploited EPSS 23%

  Windows Update Medic Service Elevation of Privilege Vulnerability

  Windows Update Medic Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 12, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-36741 Exploited

  An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Fre…

  Trend Micro Trend Micro Apex One Trend Micro OfficeScan Trend Micro Worry-Free Business Security
  Jul 29, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-36955 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-36742 Exploited

  A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free …

  Trend Micro Trend Micro Apex One Trend Micro OfficeScan Trend Micro Worry-Free Business Security
  Jul 29, 2021

  KEV Nov 3, 2021
• High 7.5
  CVE-2021-36942 Exploited · Ransomware Public exploit EPSS 66%

  Windows LSA Spoofing Vulnerability

  Windows LSA Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows
  Aug 12, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-31979 Exploited

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-31956 Exploited Public exploit EPSS 22%

  Windows NTFS Elevation of Privilege Vulnerability

  Windows NTFS Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 7.6
  CVE-2021-27059 Exploited

  Microsoft Office Remote Code Execution Vulnerability

  Microsoft Office Remote Code Execution Vulnerability

  Microsoft Microsoft Office 2016 Microsoft Office 2013 Service Pack 1 Microsoft Office 2010 Service Pack 2
  Mar 11, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-27085 Exploited

  Internet Explorer Remote Code Execution Vulnerability

  Internet Explorer Remote Code Execution Vulnerability

  Microsoft Internet Explorer 11
  Mar 11, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-27065 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-27102 Exploited · Ransomware

  Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version …

  Feb 16, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30665 Exploited

  A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.…

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Alpine
  Sep 8, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30661 Exploited

  A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, i…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Alpine
  Sep 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-30860 Exploited Public exploit EPSS 76%

  An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catal…

  Apple macOS watchOS iOS macOS iOS
  Aug 24, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30666 Exploited

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing mali…

  Apple iOS qtwebkit-source qtwebkit-opensource-src iOS Debian Ubuntu Alpine
  Sep 8, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30761 Exploited EPSS 11%

  A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing m…

  Apple iOS qtwebkit-source qtwebkit-opensource-src iOS Debian Ubuntu Alpine
  Sep 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-30807 Exploited Public exploit EPSS 29%

  A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS…

  Apple macOS macOS
  Oct 19, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-30663 Exploited

  An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, …

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Alpine
  Sep 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-30713 Exploited

  A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious appl…

  Apple macOS macOS
  Sep 8, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30762 Exploited EPSS 11%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing mal…

  Apple iOS qtwebkit-source qtwebkit-opensource-src iOS Debian Ubuntu Alpine
  Sep 8, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30563 Exploited Public exploit

  Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Aug 3, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30551 Exploited Public exploit EPSS 65%

  Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corr…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Jun 15, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30858 Exploited Public exploit EPSS 13%

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, …

  Apple macOS iOS qtwebkit-source macOS iOS Debian Ubuntu Alpine
  Aug 24, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-30632 Exploited Public exploit EPSS 63%

  Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Oct 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-30869 Exploited

  A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPad…

  Apple macOS iOS and iPadOS macOS iOS
  Aug 24, 2021

  KEV Nov 3, 2021