CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2016-4656 KEV |
[KEV] Vulnerability in Apple iOS (CVE-2016-4656)
Vulnerability in Apple iOS (CVE-2016-4656). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-4655 KEV |
[KEV] Information Disclosure in Apple iOS (CVE-2016-4655)
Vulnerability in Apple iOS (CVE-2016-4655). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-3351 KEV |
[KEV] Information Disclosure in Microsoft Internet Explorer and Edge (CVE-2016-3351)
Vulnerability in Microsoft Internet Explorer and Edge (CVE-2016-3351). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-0162 KEV |
[KEV] Information Disclosure in Microsoft Internet Explorer (CVE-2016-0162)
Vulnerability in Microsoft Internet Explorer (CVE-2016-0162). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-18362 KEV |
[KEV] SQL Injection in Kaseya Virtual System/Server Administrator (VSA) (CVE-2017-18362)
SQL injection in Kaseya Virtual System/Server Administrator (VSA) (CVE-2017-18362). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-8543 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2017-8543)
Vulnerability in Microsoft Windows (CVE-2017-8543). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-8291 KEV |
[KEV] Vulnerability in Artifex Ghostscript (CVE-2017-8291)
Vulnerability in Artifex Ghostscript (CVE-2017-8291). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0210 KEV |
[KEV] Vulnerability in Microsoft Internet Explorer (CVE-2017-0210)
Vulnerability in Microsoft Internet Explorer (CVE-2017-0210). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0149 KEV |
[KEV] Buffer Overflow in Microsoft Internet Explorer (CVE-2017-0149)
Vulnerability in Microsoft Internet Explorer (CVE-2017-0149). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0005 KEV |
[KEV] Buffer Overflow in Microsoft Windows (CVE-2017-0005)
Vulnerability in Microsoft Windows (CVE-2017-0005). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0022 KEV |
[KEV] Information Disclosure in Microsoft XML Core Services (CVE-2017-0022)
Vulnerability in Microsoft XML Core Services (CVE-2017-0022). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0147 KEV |
[KEV] Information Disclosure in Microsoft SMBv1 server (CVE-2017-0147)
Vulnerability in Microsoft SMBv1 server (CVE-2017-0147). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-19943 KEV |
[KEV] Cross-Site Scripting (XSS) in QNAP Network Attached Storage (NAS) (CVE-2018-19943)
Cross-site scripting in QNAP Network Attached Storage (NAS) (CVE-2018-19943). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-19949 KEV |
[KEV] Vulnerability in QNAP Network Attached Storage (NAS) (CVE-2018-19949)
Vulnerability in QNAP Network Attached Storage (NAS) (CVE-2018-19949). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-19953 KEV |
[KEV] Cross-Site Scripting (XSS) in QNAP Network Attached Storage (NAS) (CVE-2018-19953)
Cross-site scripting in QNAP Network Attached Storage (NAS) (CVE-2018-19953). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-8611 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2018-8611)
Vulnerability in Microsoft Windows (CVE-2018-8611). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-8589 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2018-8589)
Vulnerability in Microsoft Win32k (CVE-2018-8589). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-5002 KEV |
[KEV] Out-of-Bounds Write in Adobe Flash Player (CVE-2018-5002)
Out-of-bounds write in Adobe Flash Player (CVE-2018-5002). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1130 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-1130)
Vulnerability in Microsoft Windows (CVE-2019-1130). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1385 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-1385)
Vulnerability in Microsoft Windows (CVE-2019-1385). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-18426 KEV |
[KEV] Cross-Site Scripting (XSS) in Meta Platforms WhatsApp (CVE-2019-18426)
Cross-site scripting in Meta Platforms WhatsApp (CVE-2019-18426). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-8720 KEV |
[KEV] Buffer Overflow in WebKitGTK (CVE-2019-8720)
Vulnerability in WebKitGTK (CVE-2019-8720). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-11708 KEV |
[KEV] Vulnerability in Mozilla Firefox and Thunderbird (CVE-2019-11708)
Vulnerability in Mozilla Firefox and Thunderbird (CVE-2019-11708). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-11707 KEV |
[KEV] Vulnerability in Mozilla Firefox and Thunderbird (CVE-2019-11707)
Vulnerability in Mozilla Firefox and Thunderbird (CVE-2019-11707). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-13720 KEV |
[KEV] Use-After-Free in Google Chrome WebAudio (CVE-2019-13720)
Vulnerability in Google Chrome WebAudio (CVE-2019-13720). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0880 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-0880)
Vulnerability in Microsoft Windows (CVE-2019-0880). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0703 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-0703)
Vulnerability in Microsoft Windows (CVE-2019-0703). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-5786 KEV |
[KEV] Use-After-Free in Google Chrome Blink (CVE-2019-5786)
Vulnerability in Google Chrome Blink (CVE-2019-5786). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0676 KEV |
[KEV] Vulnerability in Microsoft Internet Explorer (CVE-2019-0676)
Vulnerability in Microsoft Internet Explorer (CVE-2019-0676). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-7287 KEV |
[KEV] Out-of-Bounds Write in Apple iOS (CVE-2019-7287)
Out-of-bounds write in Apple iOS (CVE-2019-7287). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-7286 KEV |
[KEV] Out-of-Bounds Write in Apple Multiple Products (CVE-2019-7286)
Out-of-bounds write in Apple Multiple Products (CVE-2019-7286). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0638 KEV |
[KEV] Vulnerability in Microsoft Update Notification Manager (CVE-2020-0638)
Vulnerability in Microsoft Update Notification Manager (CVE-2020-0638). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-1027 KEV |
[KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2020-1027)
Out-of-bounds write in Microsoft Windows (CVE-2020-1027). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30883 KEV |
[KEV] Out-of-Bounds Write in Apple Multiple Products (CVE-2021-30883)
Out-of-bounds write in Apple Multiple Products (CVE-2021-30883). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-0920 KEV |
[KEV] Vulnerability in Android Kernel (CVE-2021-0920)
Vulnerability in Android Kernel (CVE-2021-0920). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to :2021-11-05 or later.
|
|
| CVE-2021-1048 KEV |
[KEV] Use-After-Free in Android Kernel (CVE-2021-1048)
Vulnerability in Android Kernel (CVE-2021-1048). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to :2021-11-06 or later.
|
|
| CVE-2022-20821 KEV |
[KEV] Vulnerability in Cisco IOS XR (CVE-2022-20821)
Vulnerability in Cisco IOS XR (CVE-2022-20821). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-22947 KEV |
[KEV] Code Injection in VMware Spring Cloud Gateway (CVE-2022-22947)
Code injection in VMware Spring Cloud Gateway (CVE-2022-22947). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-30525 KEV |
[KEV] OS Command Injection in Zyxel Multiple Firewalls (CVE-2022-30525)
OS command injection in Zyxel Multiple Firewalls (CVE-2022-30525). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-1388 KEV |
[KEV] Vulnerability in F5 BIG-IP (CVE-2022-1388)
Vulnerability in F5 BIG-IP (CVE-2022-1388). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-0160 KEV |
[KEV] Out-of-Bounds Read in OpenSSL (CVE-2014-0160)
Vulnerability in OpenSSL (CVE-2014-0160). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-0322 KEV |
[KEV] Use-After-Free in Microsoft Internet Explorer (CVE-2014-0322)
Vulnerability in Microsoft Internet Explorer (CVE-2014-0322). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-4113 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2014-4113)
Vulnerability in Microsoft Win32k (CVE-2014-4113). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-8506 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2019-8506)
Vulnerability in Apple Multiple Products (CVE-2019-8506). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-1789 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2021-1789)
Vulnerability in Apple Multiple Products (CVE-2021-1789). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1003029 KEV |
[KEV] Vulnerability in Jenkins Script Security Plugin (CVE-2019-1003029)
Vulnerability in Jenkins Script Security Plugin (CVE-2019-1003029). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-40450 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2021-40450)
Vulnerability in Microsoft Win32k (CVE-2021-40450). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-41357 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2021-41357)
Vulnerability in Microsoft Win32k (CVE-2021-41357). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-0847 KEV |
[KEV] Vulnerability in Linux Kernel (CVE-2022-0847)
Vulnerability in Linux Kernel (CVE-2022-0847). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to :2022-05-05 or later.
|
|
| CVE-2022-21919 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2022-21919)
Vulnerability in Microsoft Windows (CVE-2022-21919). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
