CISA Known Exploited Vulnerabilities

1,779 results · Feed

• High 7.8
  CVE-2021-28310 Exploited Public exploit

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 13, 2021

  KEV Nov 3, 2021
• Critical 9.6
  CVE-2021-28550 Exploited Public exploit EPSS 52%

  Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution

  Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary …

  Adobe Acrobat Reader tor Alpine
  Sep 2, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-28664 Exploited Public exploit

  The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unpriv…

  May 10, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-28663 Exploited Public exploit EPSS 12%

  The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are …

  May 10, 2021

  KEV Nov 3, 2021
• Medium 6.2
  CVE-2021-1906 Exploited

  Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Au…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  May 7, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-1497 Exploited Public exploit Scanner template EPSS 100%

  Cisco HyperFlex HX Command Injection Vulnerabilities

  Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Det…

  Cisco Cisco HyperFlex HX Data Platform Network devices
  May 6, 2021

  KEV Nov 3, 2021
• High 7.0
  CVE-2021-1782 Exploited Public exploit

  A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-0…

  Apple macOS iOS and iPadOS macOS iOS
  Apr 2, 2021

  KEV Nov 3, 2021
• High 8.4
  CVE-2021-1905 Exploited

  Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon …

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  May 7, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1675 Exploited · Ransomware Public exploit EPSS 85%

  Windows Print Spooler Remote Code Execution Vulnerability

  Windows Print Spooler Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-1871 Exploited

  A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021…

  Apple macOS iOS and iPadOS qtwebkit-source macOS iOS Debian Ubuntu Alpine
  Apr 2, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-1498 Exploited Public exploit Scanner template EPSS 100%

  Cisco HyperFlex HX Command Injection Vulnerabilities

  Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Det…

  Cisco Cisco HyperFlex HX Data Platform Network devices
  May 6, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1732 Exploited · Ransomware Public exploit EPSS 78%

  Windows Win32k Elevation of Privilege Vulnerability

  Windows Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 25, 2021

  KEV Nov 3, 2021
• Medium 6.1
  CVE-2021-1879 Exploited

  This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and …

  Apple iOS and iPadOS watchOS iOS iOS
  Apr 2, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-1870 Exploited

  A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021…

  Apple macOS iOS and iPadOS qtwebkit-source macOS iOS Debian Ubuntu Alpine
  Apr 2, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-1647 Exploited Public exploit EPSS 40%

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Defender Remote Code Execution Vulnerability

  Microsoft Microsoft Security Essentials Windows Defender Microsoft System Center Endpoint Protection Windows
  Jan 12, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-38645 Exploited

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Sentinel
  Sep 15, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-38003 Exploited Public exploit EPSS 39%

  Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially expl…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Nov 23, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-38648 Exploited Public exploit EPSS 11%

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Automation Update Management
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.0
  CVE-2021-38649 Exploited

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Open Management Infrastructure Elevation of Privilege Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Security Center
  Sep 15, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-38647 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

  Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

  Microsoft Azure Stack Hub Open Management Infrastructure Azure Sentinel
  Sep 15, 2021

  KEV Nov 3, 2021
• Medium 6.1
  CVE-2021-38000 Exploited

  Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remot…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 23, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-36948 Exploited EPSS 23%

  Windows Update Medic Service Elevation of Privilege Vulnerability

  Windows Update Medic Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 12, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-36741 Exploited

  An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Fre…

  Trend Micro Trend Micro Apex One Trend Micro OfficeScan Trend Micro Worry-Free Business Security
  Jul 29, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-36955 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 15, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-36742 Exploited

  A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free …

  Trend Micro Trend Micro Apex One Trend Micro OfficeScan Trend Micro Worry-Free Business Security
  Jul 29, 2021

  KEV Nov 3, 2021
• High 7.5
  CVE-2021-36942 Exploited · Ransomware Public exploit EPSS 66%

  Windows LSA Spoofing Vulnerability

  Windows LSA Spoofing Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2016 Windows
  Aug 12, 2021

  KEV Nov 3, 2021
• Medium 6.6
  CVE-2021-31207 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Security Feature Bypass Vulnerability

  Microsoft Exchange Server Security Feature Bypass Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 8 Microsoft Exchange Server 2016 Cumulative Update 19
  May 11, 2021

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2021-31955 Exploited Public exploit EPSS 81%

  Windows Kernel Information Disclosure Vulnerability

  Windows Kernel Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-31979 Exploited

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 14, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-31956 Exploited Public exploit EPSS 22%

  Windows NTFS Elevation of Privilege Vulnerability

  Windows NTFS Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-31755 Exploited Scanner template EPSS 87%

  An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerabil…

  May 7, 2021

  KEV Nov 3, 2021
• Medium 5.2
  CVE-2021-31199 Exploited

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Medium 5.2
  CVE-2021-31201 Exploited

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 8, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-27101 Exploited · Ransomware Public exploit

  Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root…

  Feb 16, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-27103 Exploited · Ransomware

  Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed ver…

  Feb 16, 2021

  KEV Nov 3, 2021
• High 7.6
  CVE-2021-27059 Exploited

  Microsoft Office Remote Code Execution Vulnerability

  Microsoft Office Remote Code Execution Vulnerability

  Microsoft Microsoft Office 2016 Microsoft Office 2013 Service Pack 1 Microsoft Office 2010 Service Pack 2
  Mar 11, 2021

  KEV Nov 3, 2021
• High 8.8
  CVE-2021-27085 Exploited

  Internet Explorer Remote Code Execution Vulnerability

  Internet Explorer Remote Code Execution Vulnerability

  Microsoft Internet Explorer 11
  Mar 11, 2021

  KEV Nov 3, 2021
• High 7.8
  CVE-2021-27065 Exploited · Ransomware Public exploit EPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016 Cumulative Update 19 Microsoft Exchange Server 2019 Cumulative Update 8
  Mar 2, 2021

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2021-27561 Exploited Scanner template EPSS 84%

  Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI,…

  Oct 15, 2021

  KEV Nov 3, 2021
• Medium 5.5
  CVE-2021-27562 Exploited

  In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the prin…

  May 25, 2021

  KEV Nov 3, 2021