CISA KEV

Actively exploited vulnerabilities (CISA KEV)

377 actively exploited CVEs (all severities, all platforms) affect a tracked app or OS. CISA confirms exploitation in the wild for each one.

Matching CVEs: 377
Actively exploited: 377
Publication window: 2007-02-03 → 2026-11-10

All CVEs 27,631 CISA KEV 377 Public exploit 61 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

377 entries Hide N/A CISA KEV Clear all

CVE	Severity	Apps	Published
CVE-2022-3038 HIGH 8.8 2022-09-26 Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	HIGH 8.8		2022-09-26
CVE-2022-2856 MEDIUM 6.5 2022-09-26 Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a …	MEDIUM 6.5		2022-09-26
CVE-2022-37969 HIGH 7.8 Windows 2022-09-13 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2022-09-13
CVE-2022-34713 HIGH · vendor Windows 2022-08-09 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability	HIGH · vendor	Windows	2022-08-09
CVE-2022-2294 HIGH 8.8 2022-07-28 Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…	HIGH 8.8		2022-07-28
CVE-2022-1364 HIGH 8.8 2022-07-26 Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2022-07-26
CVE-2022-1096 HIGH 8.8 2022-07-23 Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2022-07-23
CVE-2022-22047 HIGH · vendor Windows 2022-07-12 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-07-12
CVE-2022-30190 HIGH 7.8 Windows 2022-06-01 A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully e…	HIGH 7.8	Windows	2022-06-01
CVE-2022-26925 HIGH · vendor Windows 2022-05-10 Windows LSA Spoofing Vulnerability	HIGH · vendor	Windows	2022-05-10
CVE-2022-26923 CRITICAL · vendor Windows 2022-05-10 Active Directory Domain Services Elevation of Privilege Vulnerability	CRITICAL · vendor	Windows	2022-05-10
CVE-2022-26904 HIGH · vendor Windows 2022-04-12 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-04-12
CVE-2022-24521 HIGH · vendor Windows 2022-04-12 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-04-12
CVE-2022-0609 HIGH 8.8 2022-04-05 Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2022-04-05
CVE-2021-4102 HIGH 8.8 2022-02-11 Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2022-02-11
CVE-2022-22718 HIGH · vendor Windows 2022-02-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-02-08
CVE-2022-21999 HIGH · vendor Windows 2022-02-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-02-08
CVE-2022-21971 HIGH · vendor Windows 2022-02-08 Windows Runtime Remote Code Execution Vulnerability	HIGH · vendor	Windows	2022-02-08
CVE-2022-21882 HIGH 7.0 Windows 2022-01-11 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	Windows	2022-01-11
CVE-2022-21919 HIGH · vendor Windows 2022-01-11 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-01-11
CVE-2021-43226 HIGH 7.8 Windows 2021-12-15 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-12-15
CVE-2021-44228 CRITICAL 10.0 Xcode 2021-12-10 Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameter…	CRITICAL 10.0	Xcode	2021-12-10
CVE-2021-38003 HIGH 8.8 2021-11-23 Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	HIGH 8.8		2021-11-23
CVE-2021-38000 MEDIUM 6.1 2021-11-23 Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a m…	MEDIUM 6.1		2021-11-23
CVE-2021-42292 HIGH 7.8 2021-11-10 Microsoft Excel Security Feature Bypass Vulnerability	HIGH 7.8		2021-11-10
CVE-2021-42287 HIGH 7.5 Windows 2021-11-10 Active Directory Domain Services Elevation of Privilege Vulnerability	HIGH 7.5	Windows	2021-11-10
CVE-2021-42278 HIGH 7.5 Windows 2021-11-10 Active Directory Domain Services Elevation of Privilege Vulnerability	HIGH 7.5	Windows	2021-11-10
CVE-2021-41379 MEDIUM 5.5 Windows 2021-11-10 Windows Installer Elevation of Privilege Vulnerability	MEDIUM 5.5	Windows	2021-11-10
CVE-2021-1048 HIGH · vendor Android 2021-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	Android	2021-11-01
CVE-2021-0920 HIGH · vendor Android 2021-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH · vendor	Android	2021-11-01
CVE-2021-41357 HIGH · vendor Windows 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2021-10-12
CVE-2021-40450 HIGH · vendor Windows 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2021-10-12
CVE-2021-40449 HIGH · vendor Windows 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2021-10-12
CVE-2021-37976 MEDIUM 6.5 2021-10-08 Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from proces…	MEDIUM 6.5		2021-10-08
CVE-2021-37975 HIGH 8.8 2021-10-08 Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2021-10-08
CVE-2021-37973 CRITICAL 9.6 2021-10-08 Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sa…	CRITICAL 9.6		2021-10-08
CVE-2021-30633 CRITICAL 9.6 2021-10-08 Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perfo…	CRITICAL 9.6		2021-10-08
CVE-2021-30632 HIGH 8.8 2021-10-08 Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2021-10-08
CVE-2021-40444 HIGH 8.8 Windows 2021-09-15 Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks th…	HIGH 8.8	Windows	2021-09-15
CVE-2021-38646 HIGH 7.8 2021-09-15 Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability	HIGH 7.8		2021-09-15
CVE-2021-36955 HIGH 7.8 Windows 2021-09-15 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-09-15
CVE-2021-36948 HIGH 7.8 Windows 2021-08-12 Windows Update Medic Service Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-08-12
CVE-2021-36942 HIGH 7.5 Windows 2021-08-12 Windows LSA Spoofing Vulnerability	HIGH 7.5	Windows	2021-08-12
CVE-2021-34486 HIGH 7.8 Windows 2021-08-12 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-08-12
CVE-2021-34484 HIGH 7.8 Windows 2021-08-12 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-08-12
CVE-2021-30563 HIGH 8.8 2021-08-03 Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2021-08-03
CVE-2021-36934 HIGH 7.8 Windows 2021-07-22 An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accoun…	HIGH 7.8	Windows	2021-07-22
CVE-2021-34448 MEDIUM 6.8 Windows 2021-07-16 Scripting Engine Memory Corruption Vulnerability	MEDIUM 6.8	Windows	2021-07-16
CVE-2021-33771 HIGH 7.8 Windows 2021-07-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-07-14
CVE-2021-31979 HIGH 7.8 Windows 2021-07-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-07-14

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM