Menu

Star on GitHub · 3.2k

CISA KEV Catalog

1,687 vulnerabilities confirmed exploited in the wild, as tracked in the CISA Known Exploited Vulnerabilities catalog.

KEV vulnerabilities

1,687· Page 34/34
7.8
CVE-2021-26857KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

7.8
CVE-2021-26858KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

7.8
CVE-2021-27065KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

7.8
CVE-2021-28310KEV

Win32k Elevation of Privilege Vulnerability

7.8
CVE-2021-1675KEV

Windows Print Spooler Remote Code Execution Vulnerability

7.8
CVE-2021-31956KEV

Windows NTFS Elevation of Privilege Vulnerability

7.8
CVE-2021-31979KEV

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2021-33771KEV

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2021-36742KEV

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free B

7.8
CVE-2021-36948KEV

Windows Update Medic Service Elevation of Privilege Vulnerability

7.8
CVE-2021-30860KEV

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catali

7.8
CVE-2021-30869KEV

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadO

7.8
CVE-2021-30713KEV

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious appli

7.8
CVE-2021-36955KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8
CVE-2021-38645KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

7.8
CVE-2021-38648KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

7.8
CVE-2021-30807KEV

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS

7.6
CVE-2021-27059KEV

Microsoft Office Remote Code Execution Vulnerability

7.5
CVE-2021-22506KEV

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all vers

7.5
CVE-2021-33742KEV

Windows MSHTML Platform Remote Code Execution Vulnerability

7.5
CVE-2021-36942KEV

Windows LSA Spoofing Vulnerability

7.2
CVE-2021-20022KEV

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload a

7.2
CVE-2021-22900KEV

A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an auth

7.0
CVE-2021-1782KEV

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-00

7.0
CVE-2021-38649KEV

Open Management Infrastructure Elevation of Privilege Vulnerability

6.8
CVE-2021-34448KEV

Scripting Engine Memory Corruption Vulnerability

6.6
CVE-2021-31207KEV

Microsoft Exchange Server Security Feature Bypass Vulnerability

6.5
CVE-2021-37976KEV

Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potent

6.2
CVE-2021-1906KEV

Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Aut

6.1
CVE-2021-1879KEV

This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and i

6.1
CVE-2021-38000KEV

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote

5.5
CVE-2021-27562KEV

In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the print

5.5
CVE-2021-31955KEV

Windows Kernel Information Disclosure Vulnerability

5.5
CVE-2021-30657KEV

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2

5.2
CVE-2021-31199KEV

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

5.2
CVE-2021-31201KEV

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

4.9
CVE-2021-20023KEV

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an

Are any of these live in your stack?

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.