CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2019-0841 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-0841)
Vulnerability in Microsoft Windows (CVE-2019-0841). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1064 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-1064)
Vulnerability in Microsoft Windows (CVE-2019-1064). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1069 KEV |
[KEV] Vulnerability in Microsoft Task Scheduler (CVE-2019-1069)
Vulnerability in Microsoft Task Scheduler (CVE-2019-1069). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1129 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-1129)
Vulnerability in Microsoft Windows (CVE-2019-1129). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1132 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2019-1132)
Vulnerability in Microsoft Win32k (CVE-2019-1132). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1253 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-1253)
Vulnerability in Microsoft Windows (CVE-2019-1253). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1315 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-1315)
Vulnerability in Microsoft Windows (CVE-2019-1315). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1322 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-1322)
Vulnerability in Microsoft Windows (CVE-2019-1322). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-1405 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2019-1405)
Vulnerability in Microsoft Windows (CVE-2019-1405). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-5135 KEV |
[KEV] Vulnerability in SonicWall SonicOS (CVE-2020-5135)
Vulnerability in SonicWall SonicOS (CVE-2020-5135). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-3960 KEV |
[KEV] Vulnerability in Adobe BlazeDS (CVE-2009-3960)
Vulnerability in Adobe BlazeDS (CVE-2009-3960). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-0625 KEV |
[KEV] Vulnerability in Adobe ColdFusion (CVE-2013-0625)
Vulnerability in Adobe ColdFusion (CVE-2013-0625). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-0629 KEV |
[KEV] Vulnerability in Adobe ColdFusion (CVE-2013-0629)
Vulnerability in Adobe ColdFusion (CVE-2013-0629). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-0631 KEV |
[KEV] Information Disclosure in Adobe ColdFusion (CVE-2013-0631)
Vulnerability in Adobe ColdFusion (CVE-2013-0631). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-6277 KEV |
[KEV] Cross-Site Request Forgery (CSRF) in NETGEAR Multiple Routers (CVE-2016-6277)
Vulnerability in NETGEAR Multiple Routers (CVE-2016-6277). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-6077 KEV |
[KEV] OS Command Injection in NETGEAR Wireless Router DGN2200 (CVE-2017-6077)
OS command injection in NETGEAR Wireless Router DGN2200 (CVE-2017-6077). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-11581 KEV |
[KEV] Vulnerability in Atlassian Jira Server and Data Center (CVE-2019-11581)
Vulnerability in Atlassian Jira Server and Data Center (CVE-2019-11581). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-8218 KEV |
[KEV] Code Injection in Pulse Secure Pulse Connect Secure (CVE-2020-8218)
Code injection in Pulse Secure Pulse Connect Secure (CVE-2020-8218). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-21973 KEV |
[KEV] Vulnerability in VMware vCenter Server and Cloud Foundation (CVE-2021-21973)
Vulnerability in VMware vCenter Server and Cloud Foundation (CVE-2021-21973). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-26485 KEV |
[KEV] Use-After-Free in Mozilla Firefox (CVE-2022-26485)
Vulnerability in Mozilla Firefox (CVE-2022-26485). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-26486 KEV |
[KEV] Use-After-Free in Mozilla Firefox (CVE-2022-26486)
Vulnerability in Mozilla Firefox (CVE-2022-26486). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2002-0367 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2002-0367)
Vulnerability in Microsoft Windows (CVE-2002-0367). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2004-0210 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2004-0210)
Vulnerability in Microsoft Windows (CVE-2004-0210). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2008-2992 KEV |
[KEV] Buffer Overflow in Adobe Acrobat and Reader (CVE-2008-2992)
Vulnerability in Adobe Acrobat and Reader (CVE-2008-2992). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2008-3431 KEV |
[KEV] Vulnerability in Oracle VirtualBox (CVE-2008-3431)
Vulnerability in Oracle VirtualBox (CVE-2008-3431). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-1123 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2009-1123)
Vulnerability in Microsoft Windows (CVE-2009-1123). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-3129 KEV |
[KEV] Code Injection in Microsoft Excel (CVE-2009-3129)
Code injection in Microsoft Excel (CVE-2009-3129). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-0188 KEV |
[KEV] Code Injection in Adobe Reader and Acrobat (CVE-2010-0188)
Code injection in Adobe Reader and Acrobat (CVE-2010-0188). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-0232 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2010-0232)
Vulnerability in Microsoft Windows (CVE-2010-0232). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-3333 KEV |
[KEV] Buffer Overflow in Microsoft Office (CVE-2010-3333)
Vulnerability in Microsoft Office (CVE-2010-3333). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2011-0611 KEV |
[KEV] Vulnerability in Adobe Flash Player (CVE-2011-0611)
Vulnerability in Adobe Flash Player (CVE-2011-0611). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2011-1889 KEV |
[KEV] Buffer Overflow in Microsoft Forefront Threat Management Gateway (TMG) (CVE-2011-1889)
Vulnerability in Microsoft Forefront Threat Management Gateway (TMG) (CVE-2011-1889). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2011-3544 KEV |
[KEV] Vulnerability in Oracle Java SE JDK and JRE (CVE-2011-3544)
Vulnerability in Oracle Java SE JDK and JRE (CVE-2011-3544). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-0507 KEV |
[KEV] Vulnerability in Oracle Java SE (CVE-2012-0507)
Vulnerability in Oracle Java SE (CVE-2012-0507). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-1535 KEV |
[KEV] Vulnerability in Adobe Flash Player (CVE-2012-1535)
Vulnerability in Adobe Flash Player (CVE-2012-1535). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-1723 KEV |
[KEV] Vulnerability in Oracle Java SE (CVE-2012-1723)
Vulnerability in Oracle Java SE (CVE-2012-1723). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-1856 KEV |
[KEV] Code Injection in Microsoft Office (CVE-2012-1856)
Code injection in Microsoft Office (CVE-2012-1856). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-4681 KEV |
[KEV] Vulnerability in Oracle Java SE (CVE-2012-4681)
Vulnerability in Oracle Java SE (CVE-2012-4681). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-0632 KEV |
[KEV] Information Disclosure in Adobe ColdFusion (CVE-2013-0632)
Vulnerability in Adobe ColdFusion (CVE-2013-0632). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-0640 KEV |
[KEV] Out-of-Bounds Write in Adobe Reader and Acrobat (CVE-2013-0640)
Out-of-bounds write in Adobe Reader and Acrobat (CVE-2013-0640). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-0641 KEV |
[KEV] Vulnerability in Adobe Reader (CVE-2013-0641)
Vulnerability in Adobe Reader (CVE-2013-0641). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-1347 KEV |
[KEV] Code Injection in Microsoft Internet Explorer (CVE-2013-1347)
Code injection in Microsoft Internet Explorer (CVE-2013-1347). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-1675 KEV |
[KEV] Buffer Overflow in Mozilla Firefox (CVE-2013-1675)
Vulnerability in Mozilla Firefox (CVE-2013-1675). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-3346 KEV |
[KEV] Buffer Overflow in Adobe Reader and Acrobat (CVE-2013-3346)
Vulnerability in Adobe Reader and Acrobat (CVE-2013-3346). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-3897 KEV |
[KEV] Vulnerability in Microsoft Internet Explorer (CVE-2013-3897)
Vulnerability in Microsoft Internet Explorer (CVE-2013-3897). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-5065 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2013-5065)
Vulnerability in Microsoft Windows (CVE-2013-5065). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-0496 KEV |
[KEV] Vulnerability in Adobe Reader and Acrobat (CVE-2014-0496)
Vulnerability in Adobe Reader and Acrobat (CVE-2014-0496). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-4114 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2014-4114)
Vulnerability in Microsoft Windows (CVE-2014-4114). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-1642 KEV |
[KEV] Buffer Overflow in Microsoft Office (CVE-2015-1642)
Vulnerability in Microsoft Office (CVE-2015-1642). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2015-1701 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2015-1701)
Vulnerability in Microsoft Win32k (CVE-2015-1701). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
