CISA KEV Catalog
1,687 vulnerabilities confirmed exploited in the wild, as tracked in the CISA Known Exploited Vulnerabilities catalog.
KEV vulnerabilities
887 of 1,687· Page 18/18A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing malic
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Mi
Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c
Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corrup
Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially explo
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon A
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain
Microsoft Defender Remote Code Execution Vulnerability
Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version i
Windows Win32k Elevation of Privilege Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Win32k Elevation of Privilege Vulnerability
Windows Print Spooler Remote Code Execution Vulnerability
Windows NTFS Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free B
Windows Update Medic Service Elevation of Privilege Vulnerability
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catali
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadO
A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious appli
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Open Management Infrastructure Elevation of Privilege Vulnerability
Open Management Infrastructure Elevation of Privilege Vulnerability
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS
Microsoft Office Remote Code Execution Vulnerability
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all vers
Windows MSHTML Platform Remote Code Execution Vulnerability
Windows LSA Spoofing Vulnerability
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload a
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an auth
A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-00
Open Management Infrastructure Elevation of Privilege Vulnerability
Are any of these live in your stack?
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.