CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2016-3235 KEV |
[KEV] Vulnerability in Microsoft Office (CVE-2016-3235)
Vulnerability in Microsoft Office (CVE-2016-3235). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1214 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-1214)
Vulnerability in Microsoft Windows (CVE-2019-1214). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-1147 KEV |
[KEV] Vulnerability in Microsoft Net Framework (CVE-2020-1147)
Vulnerability in Microsoft Net Framework (CVE-2020-1147). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-26857 KEV |
[KEV] Unsafe Deserialization in Microsoft Exchange Server (CVE-2021-26857)
Vulnerability in Microsoft Exchange Server (CVE-2021-26857). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0808 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2019-0808)
Vulnerability in Microsoft Win32k (CVE-2019-0808). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0646 KEV |
[KEV] Vulnerability in Microsoft .NET Framework (CVE-2020-0646)
Vulnerability in Microsoft .NET Framework (CVE-2020-0646). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0604 KEV |
[KEV] Vulnerability in Microsoft SharePoint (CVE-2019-0604)
Vulnerability in Microsoft SharePoint (CVE-2019-0604). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0601 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2020-0601)
Vulnerability in Microsoft Windows (CVE-2020-0601). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-34448 KEV |
[KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2021-34448)
Out-of-bounds write in Microsoft Windows (CVE-2021-34448). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-1675 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2021-1675)
Vulnerability in Microsoft Windows (CVE-2021-1675). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-1054 KEV |
[KEV] Out-of-Bounds Write in Microsoft Win32k (CVE-2020-1054)
Out-of-bounds write in Microsoft Win32k (CVE-2020-1054). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-27065 KEV |
[KEV] Path Traversal in Microsoft Exchange Server (CVE-2021-27065)
Path traversal in Microsoft Exchange Server (CVE-2021-27065). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-26858 KEV |
[KEV] Vulnerability in Microsoft Exchange Server (CVE-2021-26858)
Vulnerability in Microsoft Exchange Server (CVE-2021-26858). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-26855 KEV |
[KEV] SSRF (Server-Side Request Forgery) in Microsoft Exchange Server (CVE-2021-26855)
SSRF in Microsoft Exchange Server (CVE-2021-26855). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-1472 KEV |
[KEV] Vulnerability in Microsoft Netlogon (CVE-2020-1472)
Vulnerability in Microsoft Netlogon (CVE-2020-1472). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0968 KEV |
[KEV] Out-of-Bounds Write in Microsoft Internet Explorer (CVE-2020-0968)
Out-of-bounds write in Microsoft Internet Explorer (CVE-2020-0968). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-11774 KEV |
[KEV] Buffer Overflow in Microsoft Office (CVE-2017-11774)
Vulnerability in Microsoft Office (CVE-2017-11774). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1429 KEV |
[KEV] Use-After-Free in Microsoft Internet Explorer (CVE-2019-1429)
Vulnerability in Microsoft Internet Explorer (CVE-2019-1429). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-1380 KEV |
[KEV] Out-of-Bounds Write in Microsoft Internet Explorer (CVE-2020-1380)
Out-of-bounds write in Microsoft Internet Explorer (CVE-2020-1380). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0199 KEV |
[KEV] Vulnerability in Microsoft Office and WordPad (CVE-2017-0199)
Vulnerability in Microsoft Office and WordPad (CVE-2017-0199). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1367 KEV |
[KEV] Out-of-Bounds Write in Microsoft Internet Explorer (CVE-2019-1367)
Out-of-bounds write in Microsoft Internet Explorer (CVE-2019-1367). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-27059 KEV |
[KEV] Vulnerability in Microsoft Office (CVE-2021-27059)
Vulnerability in Microsoft Office (CVE-2021-27059). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0674 KEV |
[KEV] Use-After-Free in Microsoft Internet Explorer (CVE-2020-0674)
Vulnerability in Microsoft Internet Explorer (CVE-2020-0674). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-11882 KEV |
[KEV] Buffer Overflow in Microsoft Office (CVE-2017-11882)
Vulnerability in Microsoft Office (CVE-2017-11882). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0541 KEV |
[KEV] Command Injection in Microsoft MSHTML (CVE-2019-0541)
Command injection in Microsoft MSHTML (CVE-2019-0541). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-27085 KEV |
[KEV] Vulnerability in Microsoft Internet Explorer (CVE-2021-27085)
Vulnerability in Microsoft Internet Explorer (CVE-2021-27085). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-1641 KEV |
[KEV] Vulnerability in Microsoft Office (CVE-2015-1641)
Vulnerability in Microsoft Office (CVE-2015-1641). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-0158 KEV |
[KEV] Code Injection in Microsoft MSCOMCTL.OCX (CVE-2012-0158)
Code injection in Microsoft MSCOMCTL.OCX (CVE-2012-0158). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0802 KEV |
[KEV] Out-of-Bounds Write in Microsoft Office (CVE-2018-0802)
Out-of-bounds write in Microsoft Office (CVE-2018-0802). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-0798 KEV |
[KEV] Out-of-Bounds Write in Microsoft Office (CVE-2018-0798)
Out-of-bounds write in Microsoft Office (CVE-2018-0798). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1215 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-1215)
Vulnerability in Microsoft Windows (CVE-2019-1215). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-36942 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2021-36942)
Vulnerability in Microsoft Windows (CVE-2021-36942). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0797 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2019-0797)
Vulnerability in Microsoft Win32k (CVE-2019-0797). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-8653 KEV |
[KEV] Out-of-Bounds Write in Microsoft Internet Explorer (CVE-2018-8653)
Out-of-bounds write in Microsoft Internet Explorer (CVE-2018-8653). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-8759 KEV |
[KEV] Vulnerability in Microsoft .NET Framework (CVE-2017-8759)
Vulnerability in Microsoft .NET Framework (CVE-2017-8759). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-40444 KEV |
[KEV] Path Traversal in Microsoft MSHTML (CVE-2021-40444)
Path traversal in Microsoft MSHTML (CVE-2021-40444). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0859 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2019-0859)
Vulnerability in Microsoft Win32k (CVE-2019-0859). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-26411 KEV |
[KEV] Use-After-Free in Microsoft Internet Explorer (CVE-2021-26411)
Vulnerability in Microsoft Internet Explorer (CVE-2021-26411). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-1350 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2020-1350)
Vulnerability in Microsoft Windows (CVE-2020-1350). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-28310 KEV |
[KEV] Out-of-Bounds Write in Microsoft Win32k (CVE-2021-28310)
Out-of-bounds write in Microsoft Win32k (CVE-2021-28310). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-1040 KEV |
[KEV] Vulnerability in Microsoft Hyper-V RemoteFX (CVE-2020-1040)
Vulnerability in Microsoft Hyper-V RemoteFX (CVE-2020-1040). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0803 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2019-0803)
Vulnerability in Microsoft Win32k (CVE-2019-0803). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-31207 KEV |
[KEV] Vulnerability in Microsoft Exchange Server (CVE-2021-31207)
Vulnerability in Microsoft Exchange Server (CVE-2021-31207). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-34527 KEV |
[KEV] Privilege Escalation in Microsoft Windows (CVE-2021-34527)
Vulnerability in Microsoft Windows (CVE-2021-34527). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-1732 KEV |
[KEV] Out-of-Bounds Write in Microsoft Win32k (CVE-2021-1732)
Out-of-bounds write in Microsoft Win32k (CVE-2021-1732). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-1464 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2020-1464)
Vulnerability in Microsoft Windows (CVE-2020-1464). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-34473 KEV |
[KEV] SSRF (Server-Side Request Forgery) in Microsoft Exchange Server (CVE-2021-34473)
SSRF in Microsoft Exchange Server (CVE-2021-34473). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0708 KEV |
[KEV] Use-After-Free in Microsoft Remote Desktop Services (CVE-2019-0708)
Vulnerability in Microsoft Remote Desktop Services (CVE-2019-0708). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-7255 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2016-7255)
Vulnerability in Microsoft Win32k (CVE-2016-7255). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-0143 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2017-0143)
Vulnerability in Microsoft Windows (CVE-2017-0143). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
