CISA KEV Catalog
1,687 vulnerabilities confirmed exploited in the wild, as tracked in the CISA Known Exploited Vulnerabilities catalog.
KEV vulnerabilities
1,687· Page 34/34Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Win32k Elevation of Privilege Vulnerability
Windows Print Spooler Remote Code Execution Vulnerability
Windows NTFS Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free B
Windows Update Medic Service Elevation of Privilege Vulnerability
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catali
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadO
A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious appli
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Open Management Infrastructure Elevation of Privilege Vulnerability
Open Management Infrastructure Elevation of Privilege Vulnerability
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS
Microsoft Office Remote Code Execution Vulnerability
Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all vers
Windows MSHTML Platform Remote Code Execution Vulnerability
Windows LSA Spoofing Vulnerability
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload a
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an auth
A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-00
Open Management Infrastructure Elevation of Privilege Vulnerability
Scripting Engine Memory Corruption Vulnerability
Microsoft Exchange Server Security Feature Bypass Vulnerability
Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potent
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Aut
This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and i
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote
In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the print
Windows Kernel Information Disclosure Vulnerability
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an
Are any of these live in your stack?
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.