CISA Known Exploited Vulnerabilities

214 results · Clear filters · Feed

• Medium 6.8
  CVE-2021-34448 Exploited EPSS 40%

  Scripting Engine Memory Corruption Vulnerability

  Scripting Engine Memory Corruption Vulnerability

  Microsoft Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 Windows
  Jul 16, 2021

  KEV Nov 3, 2021
• Medium 6.2
  CVE-2021-1906 Exploited

  Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Au…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  May 7, 2021

  KEV Nov 3, 2021
• Medium 6.1
  CVE-2021-1879 Exploited

  This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and …

  Apple iOS and iPadOS watchOS iOS iOS
  Apr 2, 2021

  KEV Nov 3, 2021
• Medium 6.1
  CVE-2021-38000 Exploited

  Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remot…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 23, 2021

  KEV Nov 3, 2021
• Medium 6.6
  CVE-2021-31207 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Security Feature Bypass Vulnerability

  Microsoft Exchange Server Security Feature Bypass Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  May 11, 2021

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2021-31955 Exploited Public exploit EPSS 81%

  Windows Kernel Information Disclosure Vulnerability

  Windows Kernel Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.2
  CVE-2021-31199 Exploited

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.2
  CVE-2021-31201 Exploited

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2021-27562 Exploited

  In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the prin…

  May 25, 2021

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2021-30657 Exploited Public exploit EPSS 69%

  A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update …

  Apple macOS macOS
  Sep 8, 2021

  KEV Nov 3, 2021
• Medium 6.5
  CVE-2021-37976 Exploited EPSS 20%

  Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain poten…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Oct 8, 2021

  KEV Nov 3, 2021
• Medium 4.9
  CVE-2021-20023 Exploited · Ransomware EPSS 52%

  SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an…

  SonicWall Email Security Network devices
  Apr 20, 2021

  KEV Nov 3, 2021
• Medium 6.1
  CVE-2019-9978 Exploited Public exploit Scanner template EPSS 73%

  The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_opti…

  Mar 24, 2019

  KEV Nov 3, 2021
• Medium 6.5
  CVE-2019-5591 Exploited · Ransomware Public exploit Scanner template EPSS 19%

  A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept …

  Fortinet Fortinet FortiOS Network devices
  Aug 14, 2020

  KEV Nov 3, 2021