CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2021-28663 KEV |
[KEV] Use-After-Free in Arm Mali Graphics Processing Unit (GPU) (CVE-2021-28663)
Vulnerability in Arm Mali Graphics Processing Unit (GPU) (CVE-2021-28663). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to SoCVersion:2021-05-05 or later.
|
|
| CVE-2021-28664 KEV |
[KEV] Out-of-Bounds Write in Arm Mali Graphics Processing Unit (GPU) (CVE-2021-28664)
Out-of-bounds write in Arm Mali Graphics Processing Unit (GPU) (CVE-2021-28664). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to SoCVersion:2021-05-05 or later.
|
|
| CVE-2021-27562 KEV |
[KEV] Out-of-Bounds Write in Arm Trusted Firmware (CVE-2021-27562)
Out-of-bounds write in Arm Trusted Firmware (CVE-2021-27562). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-20090 KEV |
[KEV] Path Traversal in Arcadyan Buffalo Firmware (CVE-2021-20090)
Path traversal in Arcadyan Buffalo Firmware (CVE-2021-20090). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-9859 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2020-9859)
Vulnerability in Apple Multiple Products (CVE-2020-9859). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30869 KEV |
[KEV] Vulnerability in Apple iOS, iPadOS, and macOS (CVE-2021-30869)
Vulnerability in Apple iOS, iPadOS, and macOS (CVE-2021-30869). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30761 KEV |
[KEV] Out-of-Bounds Write in Apple iOS (CVE-2021-30761)
Out-of-bounds write in Apple iOS (CVE-2021-30761). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30663 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2021-30663)
Vulnerability in Apple Multiple Products (CVE-2021-30663). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30665 KEV |
[KEV] Out-of-Bounds Write in Apple Multiple Products (CVE-2021-30665)
Out-of-bounds write in Apple Multiple Products (CVE-2021-30665). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30657 KEV |
[KEV] Vulnerability in Apple macOS (CVE-2021-30657)
Vulnerability in Apple macOS (CVE-2021-30657). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30713 KEV |
[KEV] Vulnerability in Apple macOS (CVE-2021-30713)
Vulnerability in Apple macOS (CVE-2021-30713). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30666 KEV |
[KEV] Buffer Overflow in Apple iOS (CVE-2021-30666)
Vulnerability in Apple iOS (CVE-2021-30666). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30661 KEV |
[KEV] Use-After-Free in Apple Multiple Products (CVE-2021-30661)
Vulnerability in Apple Multiple Products (CVE-2021-30661). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-1879 KEV |
[KEV] Cross-Site Scripting (XSS) in Apple iOS, iPadOS, and watchOS (CVE-2021-1879)
Cross-site scripting in Apple iOS, iPadOS, and watchOS (CVE-2021-1879). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-1871 KEV |
[KEV] Vulnerability in Apple iOS, iPadOS, and macOS (CVE-2021-1871)
Vulnerability in Apple iOS, iPadOS, and macOS (CVE-2021-1871). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-1870 KEV |
[KEV] Vulnerability in Apple iOS, iPadOS, and macOS (CVE-2021-1870)
Vulnerability in Apple iOS, iPadOS, and macOS (CVE-2021-1870). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-1782 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2021-1782)
Vulnerability in Apple Multiple Products (CVE-2021-1782). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30762 KEV |
[KEV] Use-After-Free in Apple iOS (CVE-2021-30762)
Vulnerability in Apple iOS (CVE-2021-30762). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-9819 KEV |
[KEV] Out-of-Bounds Write in Apple iOS, iPadOS, and watchOS (CVE-2020-9819)
Out-of-bounds write in Apple iOS, iPadOS, and watchOS (CVE-2020-9819). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-9818 KEV |
[KEV] Out-of-Bounds Write in Apple iOS, iPadOS, and watchOS (CVE-2020-9818)
Out-of-bounds write in Apple iOS, iPadOS, and watchOS (CVE-2020-9818). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-27932 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2020-27932)
Vulnerability in Apple Multiple Products (CVE-2020-27932). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-27950 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2020-27950)
Vulnerability in Apple Multiple Products (CVE-2020-27950). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30807 KEV |
[KEV] Out-of-Bounds Write in Apple Multiple Products (CVE-2021-30807)
Out-of-bounds write in Apple Multiple Products (CVE-2021-30807). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-27930 KEV |
[KEV] Out-of-Bounds Write in Apple Multiple Products (CVE-2020-27930)
Out-of-bounds write in Apple Multiple Products (CVE-2020-27930). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30860 KEV |
[KEV] Vulnerability in Apple Multiple Products (CVE-2021-30860)
Vulnerability in Apple Multiple Products (CVE-2021-30860). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-6223 KEV |
[KEV] Vulnerability in Apple iOS and macOS (CVE-2019-6223)
Vulnerability in Apple iOS and macOS (CVE-2019-6223). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30858 KEV |
[KEV] Use-After-Free in Apple iOS, iPadOS, and macOS (CVE-2021-30858)
Vulnerability in Apple iOS, iPadOS, and macOS (CVE-2021-30858). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-11776 KEV |
[KEV] Vulnerability in Apache Struts (CVE-2018-11776)
Vulnerability in Apache Struts (CVE-2018-11776). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-5638 KEV |
[KEV] Vulnerability in Apache Struts (CVE-2017-5638)
Vulnerability in Apache Struts (CVE-2017-5638). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-17530 KEV |
[KEV] Vulnerability in Apache Struts (CVE-2020-17530)
Vulnerability in Apache Struts (CVE-2020-17530). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-17558 KEV |
[KEV] Vulnerability in Apache Solr (CVE-2019-17558)
Vulnerability in Apache Solr (CVE-2019-17558). Successful exploitation can lead to full system takeover. Exploitable via params.resource.loader.enabled. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-4437 KEV |
[KEV] Vulnerability in Apache Shiro (CVE-2016-4437)
Vulnerability in Apache Shiro (CVE-2016-4437). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-0211 KEV |
[KEV] Use-After-Free in Apache HTTP Server (CVE-2019-0211)
Vulnerability in Apache HTTP Server (CVE-2019-0211). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-41773 KEV |
[KEV] Path Traversal in Apache Http Server (CVE-2021-41773)
Path traversal in Apache Http Server (CVE-2021-41773). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-42013 KEV |
[KEV] Path Traversal in Apache Http Server (CVE-2021-42013)
Path traversal in Apache Http Server (CVE-2021-42013). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-9805 KEV |
[KEV] Unsafe Deserialization in Apache Struts (CVE-2017-9805)
Vulnerability in Apache Struts (CVE-2017-9805). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0069 KEV |
[KEV] Out-of-Bounds Write in MediaTek Multiple Chipsets (CVE-2020-0069)
Out-of-bounds write in MediaTek Multiple Chipsets (CVE-2020-0069). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0041 KEV |
[KEV] Vulnerability in Android Kernel (CVE-2020-0041)
Vulnerability in Android Kernel (CVE-2020-0041). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-2215 KEV |
[KEV] Use-After-Free in Android Kernel (CVE-2019-2215)
Vulnerability in Android Kernel (CVE-2019-2215). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-5735 KEV |
[KEV] Vulnerability in Amcrest Cameras and Network Video Recorder (NVR) (CVE-2020-5735)
Vulnerability in Amcrest Cameras and Network Video Recorder (NVR) (CVE-2020-5735). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-4878 KEV |
[KEV] Use-After-Free in Adobe Flash Player (CVE-2018-4878)
Vulnerability in Adobe Flash Player (CVE-2018-4878). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-15961 KEV |
[KEV] Unrestricted File Upload in Adobe ColdFusion (CVE-2018-15961)
Vulnerability in Adobe ColdFusion (CVE-2018-15961). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-4939 KEV |
[KEV] Unsafe Deserialization in Adobe ColdFusion (CVE-2018-4939)
Vulnerability in Adobe ColdFusion (CVE-2018-4939). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-28550 KEV |
[KEV] Use-After-Free in Adobe Acrobat and Reader (CVE-2021-28550)
Vulnerability in Adobe Acrobat and Reader (CVE-2021-28550). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-21017 KEV |
[KEV] Vulnerability in Adobe Acrobat and Reader (CVE-2021-21017)
Vulnerability in Adobe Acrobat and Reader (CVE-2021-21017). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-27103 KEV |
[KEV] SSRF (Server-Side Request Forgery) in Accellion FTA (CVE-2021-27103)
SSRF in Accellion FTA (CVE-2021-27103). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-27101 KEV |
[KEV] SQL Injection in Accellion FTA (CVE-2021-27101)
SQL injection in Accellion FTA (CVE-2021-27101). Risk of unauthorized operations or information disclosure. Exploitable via Host header. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-27102 KEV |
[KEV] Vulnerability in Accellion FTA (CVE-2021-27102)
Vulnerability in Accellion FTA (CVE-2021-27102). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-27104 KEV |
[KEV] Vulnerability in Accellion FTA (CVE-2021-27104)
Vulnerability in Accellion FTA (CVE-2021-27104). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
