CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2015-2387 KEV |
[KEV] Vulnerability in Microsoft ATM Font Driver (CVE-2015-2387)
Vulnerability in Microsoft ATM Font Driver (CVE-2015-2387). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-2424 KEV |
[KEV] Buffer Overflow in Microsoft PowerPoint (CVE-2015-2424)
Vulnerability in Microsoft PowerPoint (CVE-2015-2424). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-2545 KEV |
[KEV] Vulnerability in Microsoft Office (CVE-2015-2545)
Vulnerability in Microsoft Office (CVE-2015-2545). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-2590 KEV |
[KEV] Vulnerability in Oracle Java SE (CVE-2015-2590)
Vulnerability in Oracle Java SE (CVE-2015-2590). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-3043 KEV |
[KEV] Out-of-Bounds Write in Adobe Flash Player (CVE-2015-3043)
Out-of-bounds write in Adobe Flash Player (CVE-2015-3043). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-4902 KEV |
[KEV] Vulnerability in Oracle Java SE (CVE-2015-4902)
Vulnerability in Oracle Java SE (CVE-2015-4902). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-5119 KEV |
[KEV] Buffer Overflow in Adobe Flash Player (CVE-2015-5119)
Vulnerability in Adobe Flash Player (CVE-2015-5119). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-7645 KEV |
[KEV] Vulnerability in Adobe Flash Player (CVE-2015-7645)
Vulnerability in Adobe Flash Player (CVE-2015-7645). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-0099 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2016-0099)
Vulnerability in Microsoft Windows (CVE-2016-0099). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-1019 KEV |
[KEV] Vulnerability in Adobe Flash Player (CVE-2016-1019)
Vulnerability in Adobe Flash Player (CVE-2016-1019). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-4117 KEV |
[KEV] Vulnerability in Adobe Flash Player (CVE-2016-4117)
Vulnerability in Adobe Flash Player (CVE-2016-4117). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-5195 KEV |
[KEV] Vulnerability in Linux Kernel (CVE-2016-5195)
Vulnerability in Linux Kernel (CVE-2016-5195). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-7193 KEV |
[KEV] Buffer Overflow in Microsoft Office (CVE-2016-7193)
Vulnerability in Microsoft Office (CVE-2016-7193). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-7262 KEV |
[KEV] Vulnerability in Microsoft Excel (CVE-2016-7262)
Vulnerability in Microsoft Excel (CVE-2016-7262). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-7855 KEV |
[KEV] Use-After-Free in Adobe Flash Player (CVE-2016-7855)
Vulnerability in Adobe Flash Player (CVE-2016-7855). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-8562 KEV |
[KEV] Vulnerability in Siemens SIMATIC CP (CVE-2016-8562)
Vulnerability in Siemens SIMATIC CP (CVE-2016-8562). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0001 KEV |
[KEV] Vulnerability in Microsoft Graphics Device Interface (GDI) (CVE-2017-0001)
Vulnerability in Microsoft Graphics Device Interface (GDI) (CVE-2017-0001). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0261 KEV |
[KEV] Use-After-Free in Microsoft Office (CVE-2017-0261)
Vulnerability in Microsoft Office (CVE-2017-0261). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-11292 KEV |
[KEV] Vulnerability in Adobe Flash Player (CVE-2017-11292)
Vulnerability in Adobe Flash Player (CVE-2017-11292). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-11826 KEV |
[KEV] Buffer Overflow in Microsoft Office (CVE-2017-11826)
Vulnerability in Microsoft Office (CVE-2017-11826). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-12231 KEV |
[KEV] Vulnerability in Cisco IOS software (CVE-2017-12231)
Vulnerability in Cisco IOS software (CVE-2017-12231). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-12232 KEV |
[KEV] Vulnerability in Cisco IOS software (CVE-2017-12232)
Vulnerability in Cisco IOS software (CVE-2017-12232). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-12233 KEV |
[KEV] Vulnerability in Cisco IOS software (CVE-2017-12233)
Vulnerability in Cisco IOS software (CVE-2017-12233). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-12234 KEV |
[KEV] Vulnerability in Cisco IOS software (CVE-2017-12234)
Vulnerability in Cisco IOS software (CVE-2017-12234). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-12235 KEV |
[KEV] Vulnerability in Cisco IOS software (CVE-2017-12235)
Vulnerability in Cisco IOS software (CVE-2017-12235). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-12237 KEV |
[KEV] Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-12237)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-12237). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-12238 KEV |
[KEV] Vulnerability in Cisco Catalyst 6800 Series Switches (CVE-2017-12238)
Vulnerability in Cisco Catalyst 6800 Series Switches (CVE-2017-12238). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-12240 KEV |
[KEV] Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-12240)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-12240). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-12319 KEV |
[KEV] Vulnerability in Cisco IOS XE Software (CVE-2017-12319)
Vulnerability in Cisco IOS XE Software (CVE-2017-12319). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-6627 KEV |
[KEV] Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-6627)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-6627). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-6663 KEV |
[KEV] Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-6663)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-6663). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-6736 KEV |
[KEV] Buffer Overflow in Cisco IOS and IOS XE Software (CVE-2017-6736)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-6736). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-6737 KEV |
[KEV] Buffer Overflow in Cisco IOS and IOS XE Software (CVE-2017-6737)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-6737). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-6738 KEV |
[KEV] Buffer Overflow in Cisco IOS and IOS XE Software (CVE-2017-6738)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-6738). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-6739 KEV |
[KEV] Buffer Overflow in Cisco IOS and IOS XE Software (CVE-2017-6739)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-6739). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-6740 KEV |
[KEV] Buffer Overflow in Cisco IOS and IOS XE Software (CVE-2017-6740)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-6740). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-6743 KEV |
[KEV] Buffer Overflow in Cisco IOS and IOS XE Software (CVE-2017-6743)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2017-6743). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-6744 KEV |
[KEV] Buffer Overflow in Cisco IOS software (CVE-2017-6744)
Vulnerability in Cisco IOS software (CVE-2017-6744). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-8540 KEV |
[KEV] Buffer Overflow in Microsoft Malware Protection Engine (CVE-2017-8540)
Vulnerability in Microsoft Malware Protection Engine (CVE-2017-8540). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0151 KEV |
[KEV] Buffer Overflow in Cisco IOS and IOS XE Software (CVE-2018-0151)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2018-0151). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0154 KEV |
[KEV] Vulnerability in Cisco IOS Software (CVE-2018-0154)
Vulnerability in Cisco IOS Software (CVE-2018-0154). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0155 KEV |
[KEV] Vulnerability in Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches (CVE-2018-0155)
Vulnerability in Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches (CVE-2018-0155). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0156 KEV |
[KEV] Vulnerability in IOS Software and Cisco IOS XE Software (CVE-2018-0156)
Vulnerability in IOS Software and Cisco IOS XE Software (CVE-2018-0156). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0158 KEV |
[KEV] Vulnerability in IOS Software and Cisco IOS XE Software (CVE-2018-0158)
Vulnerability in IOS Software and Cisco IOS XE Software (CVE-2018-0158). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0159 KEV |
[KEV] Vulnerability in IOS Software and Cisco IOS XE Software (CVE-2018-0159)
Vulnerability in IOS Software and Cisco IOS XE Software (CVE-2018-0159). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0161 KEV |
[KEV] Vulnerability in Cisco IOS Software (CVE-2018-0161)
Vulnerability in Cisco IOS Software (CVE-2018-0161). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0167 KEV |
[KEV] Buffer Overflow in Cisco IOS, XR, and XE Software (CVE-2018-0167)
Vulnerability in Cisco IOS, XR, and XE Software (CVE-2018-0167). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0172 KEV |
[KEV] Vulnerability in Cisco IOS and IOS XE Software (CVE-2018-0172)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2018-0172). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0173 KEV |
[KEV] Vulnerability in Cisco IOS and IOS XE Software (CVE-2018-0173)
Vulnerability in Cisco IOS and IOS XE Software (CVE-2018-0173). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0174 KEV |
[KEV] Vulnerability in Cisco IOS XE Software (CVE-2018-0174)
Vulnerability in Cisco IOS XE Software (CVE-2018-0174). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
