CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2020-0688 KEV |
[KEV] Authentication Bypass in Microsoft Exchange Server (CVE-2020-0688)
Authentication bypass in Microsoft Exchange Server (CVE-2020-0688). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-38649 KEV |
[KEV] Vulnerability in Microsoft Open Management Infrastructure (OMI) (CVE-2021-38649)
Vulnerability in Microsoft Open Management Infrastructure (OMI) (CVE-2021-38649). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-36948 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2021-36948)
Vulnerability in Microsoft Windows (CVE-2021-36948). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-7269 KEV |
[KEV] Buffer Overflow in Microsoft Internet Information Services (IIS) (CVE-2017-7269)
Vulnerability in Microsoft Internet Information Services (IIS) (CVE-2017-7269). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-34523 KEV |
[KEV] Authentication Bypass in Microsoft Exchange Server (CVE-2021-34523)
Authentication bypass in Microsoft Exchange Server (CVE-2021-34523). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-38645 KEV |
[KEV] Vulnerability in Microsoft Open Management Infrastructure (OMI) (CVE-2021-38645)
Vulnerability in Microsoft Open Management Infrastructure (OMI) (CVE-2021-38645). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-1020 KEV |
[KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2020-1020)
Out-of-bounds write in Microsoft Windows (CVE-2020-1020). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0986 KEV |
[KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2020-0986)
Out-of-bounds write in Microsoft Windows (CVE-2020-0986). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-17144 KEV |
[KEV] Unsafe Deserialization in Microsoft Exchange Server (CVE-2020-17144)
Vulnerability in Microsoft Exchange Server (CVE-2020-17144). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0938 KEV |
[KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2020-0938)
Out-of-bounds write in Microsoft Windows (CVE-2020-0938). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-31979 KEV |
[KEV] Buffer Overflow in Microsoft Windows (CVE-2021-31979)
Vulnerability in Microsoft Windows (CVE-2021-31979). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-31201 KEV |
[KEV] Vulnerability in Microsoft Enhanced Cryptographic Provider (CVE-2021-31201)
Vulnerability in Microsoft Enhanced Cryptographic Provider (CVE-2021-31201). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-31956 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2021-31956)
Vulnerability in Microsoft Windows (CVE-2021-31956). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-33771 KEV |
[KEV] Buffer Overflow in Microsoft Windows (CVE-2021-33771)
Vulnerability in Microsoft Windows (CVE-2021-33771). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-31199 KEV |
[KEV] Vulnerability in Microsoft Enhanced Cryptographic Provider (CVE-2021-31199)
Vulnerability in Microsoft Enhanced Cryptographic Provider (CVE-2021-31199). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-33742 KEV |
[KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2021-33742)
Out-of-bounds write in Microsoft Windows (CVE-2021-33742). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-17087 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2020-17087)
Vulnerability in Microsoft Windows (CVE-2020-17087). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0683 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2020-0683)
Vulnerability in Microsoft Windows (CVE-2020-0683). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-0185 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2016-0185)
Vulnerability in Microsoft Windows (CVE-2016-0185). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-33739 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2021-33739)
Vulnerability in Microsoft Windows (CVE-2021-33739). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-1647 KEV |
[KEV] Vulnerability in Microsoft Defender (CVE-2021-1647)
Vulnerability in Microsoft Defender (CVE-2021-1647). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-31955 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2021-31955)
Vulnerability in Microsoft Windows (CVE-2021-31955). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-0878 KEV |
[KEV] Out-of-Bounds Write in Microsoft Edge and Internet Explorer (CVE-2020-0878)
Out-of-bounds write in Microsoft Edge and Internet Explorer (CVE-2020-0878). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-0167 KEV |
[KEV] Vulnerability in Microsoft Win32k (CVE-2016-0167)
Vulnerability in Microsoft Win32k (CVE-2016-0167). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-38647 KEV |
[KEV] Vulnerability in Microsoft Open Management Infrastructure (OMI) (CVE-2021-38647)
Vulnerability in Microsoft Open Management Infrastructure (OMI) (CVE-2021-38647). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2014-1812 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2014-1812)
Vulnerability in Microsoft Windows (CVE-2014-1812). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-22502 KEV |
[KEV] Vulnerability in Micro Focus Operation Bridge Reporter (OBR) (CVE-2021-22502)
Vulnerability in Micro Focus Operation Bridge Reporter (OBR) (CVE-2021-22502). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-22506 KEV |
[KEV] Vulnerability in Micro Focus Access Manager (CVE-2021-22506)
Vulnerability in Micro Focus Access Manager (CVE-2021-22506). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-23874 KEV |
[KEV] Vulnerability in McAfee Total Protection (MTP) (CVE-2021-23874)
Vulnerability in McAfee Total Protection (MTP) (CVE-2021-23874). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-7961 KEV |
[KEV] Unsafe Deserialization in Liferay Portal (CVE-2020-7961)
Vulnerability in Liferay Portal (CVE-2020-7961). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30116 KEV |
[KEV] Vulnerability in Kaseya Virtual System/Server Administrator (VSA) (CVE-2021-30116)
Vulnerability in Kaseya Virtual System/Server Administrator (VSA) (CVE-2021-30116). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-15505 KEV |
[KEV] Vulnerability in Ivanti MobileIron Multiple Products (CVE-2020-15505)
Vulnerability in Ivanti MobileIron Multiple Products (CVE-2020-15505). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-3718 KEV |
[KEV] Vulnerability in Imagemagick (CVE-2016-3718)
Vulnerability in Imagemagick (CVE-2016-3718). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-3715 KEV |
[KEV] Vulnerability in Imagemagick (CVE-2016-3715)
Vulnerability in Imagemagick (CVE-2016-3715). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-4716 KEV |
[KEV] Code Injection in IBM Planning Analytics (CVE-2019-4716)
Code injection in IBM Planning Analytics (CVE-2019-4716). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-4428 KEV |
[KEV] OS Command Injection in IBM Data Risk Manager (CVE-2020-4428)
OS command injection in IBM Data Risk Manager (CVE-2020-4428). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-4427 KEV |
[KEV] Vulnerability in IBM Data Risk Manager (CVE-2020-4427)
Vulnerability in IBM Data Risk Manager (CVE-2020-4427). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-4430 KEV |
[KEV] Path Traversal in IBM Data Risk Manager (CVE-2020-4430)
Path traversal in IBM Data Risk Manager (CVE-2020-4430). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30563 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2021-30563)
Vulnerability in Google Chromium V8 (CVE-2021-30563). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-21220 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2021-21220)
Vulnerability in Google Chromium V8 (CVE-2021-21220). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-21193 KEV |
[KEV] Use-After-Free in Google Chromium Blink (CVE-2021-21193)
Vulnerability in Google Chromium Blink (CVE-2021-21193). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-21224 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2021-21224)
Vulnerability in Google Chromium V8 (CVE-2021-21224). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-38003 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2021-38003)
Vulnerability in Google Chromium V8 (CVE-2021-38003). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-38000 KEV |
[KEV] Vulnerability in Google Chromium Intents (CVE-2021-38000)
Vulnerability in Google Chromium Intents (CVE-2021-38000). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-21206 KEV |
[KEV] Use-After-Free in Google Chromium Blink (CVE-2021-21206)
Vulnerability in Google Chromium Blink (CVE-2021-21206). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30554 KEV |
[KEV] Use-After-Free in Google Chromium WebGL (CVE-2021-30554)
Vulnerability in Google Chromium WebGL (CVE-2021-30554). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-6418 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2020-6418)
Vulnerability in Google Chromium V8 (CVE-2020-6418). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-37975 KEV |
[KEV] Use-After-Free in Google Chromium V8 (CVE-2021-37975)
Vulnerability in Google Chromium V8 (CVE-2021-37975). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30551 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2021-30551)
Vulnerability in Google Chromium V8 (CVE-2021-30551). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-37973 KEV |
[KEV] Use-After-Free in Google Chromium Portals (CVE-2021-37973)
Vulnerability in Google Chromium Portals (CVE-2021-37973). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
