Menu

Star on GitHub · 3.2k

CISA KEV Catalog

1,687 vulnerabilities confirmed exploited in the wild, as tracked in the CISA Known Exploited Vulnerabilities catalog.

KEV vulnerabilities

887 of 1,687· Page 18/18
8.8
CVE-2021-30665KEV

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1

8.8
CVE-2021-30666KEV

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing malic

8.8
CVE-2021-40444KEV

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Mi

8.8
CVE-2021-30632KEV

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c

8.8
CVE-2021-37975KEV

Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corrup

8.8
CVE-2021-38003KEV

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially explo

8.4
CVE-2021-1905KEV

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon A

8.4
CVE-2021-33739KEV

Microsoft DWM Core Library Elevation of Privilege Vulnerability

8.2
CVE-2021-23874KEV

Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain

7.8
CVE-2021-1647KEV

Microsoft Defender Remote Code Execution Vulnerability

7.8
CVE-2021-27102KEV

Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version i

7.8
CVE-2021-1732KEV

Windows Win32k Elevation of Privilege Vulnerability

7.8
CVE-2021-26857KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

7.8
CVE-2021-26858KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

7.8
CVE-2021-27065KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

7.8
CVE-2021-28310KEV

Win32k Elevation of Privilege Vulnerability

7.8
CVE-2021-1675KEV

Windows Print Spooler Remote Code Execution Vulnerability

7.8
CVE-2021-31956KEV

Windows NTFS Elevation of Privilege Vulnerability

7.8
CVE-2021-31979KEV

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2021-33771KEV

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2021-36742KEV

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free B

7.8
CVE-2021-36948KEV

Windows Update Medic Service Elevation of Privilege Vulnerability

7.8
CVE-2021-30860KEV

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catali

7.8
CVE-2021-30869KEV

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadO

7.8
CVE-2021-30713KEV

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious appli

7.8
CVE-2021-36955KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8
CVE-2021-38645KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

7.8
CVE-2021-38648KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

7.8
CVE-2021-30807KEV

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS

7.6
CVE-2021-27059KEV

Microsoft Office Remote Code Execution Vulnerability

7.5
CVE-2021-22506KEV

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all vers

7.5
CVE-2021-33742KEV

Windows MSHTML Platform Remote Code Execution Vulnerability

7.5
CVE-2021-36942KEV

Windows LSA Spoofing Vulnerability

7.2
CVE-2021-20022KEV

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload a

7.2
CVE-2021-22900KEV

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an auth

7.0
CVE-2021-1782KEV

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-00

7.0
CVE-2021-38649KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

Are any of these live in your stack?

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.