CISA KEV

Actively exploited vulnerabilities (CISA KEV)

294 actively exploited CVEs (High, all platforms) affect a tracked app or OS. CISA confirms exploitation in the wild for each one.

Matching CVEs: 294
Actively exploited: 294
Publication window: 2007-02-03 → 2026-09-09

All CVEs 15,601 CISA KEV 294 Public exploit 47 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

294 entries High Hide N/A CISA KEV Clear all

CVE	Severity	Apps	Published
CVE-2019-0859 HIGH · vendor Windows 2019-04-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2019-04-09
CVE-2019-0841 HIGH · vendor Windows 2019-04-09 Windows Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2019-04-09
CVE-2019-0803 HIGH · vendor Windows 2019-04-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2019-04-09
CVE-2019-0797 HIGH · vendor Windows 2019-03-12 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2019-03-12
CVE-2019-0703 HIGH · vendor Windows 2019-03-12 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	Windows	2019-03-12
CVE-2018-20250 HIGH 7.8 WinRAR 2019-02-05 In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When…	HIGH 7.8	WinRAR	2019-02-05
CVE-2019-0543 HIGH · vendor Windows 2019-01-08 Microsoft Windows Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2019-01-08
CVE-2018-8639 HIGH · vendor Windows 2018-12-11 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2018-12-11
CVE-2018-8611 HIGH · vendor Windows 2018-12-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2018-12-11
CVE-2018-8453 HIGH 7.8 Windows 2018-10-10 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…	HIGH 7.8	Windows	2018-10-10
CVE-2018-8440 HIGH · vendor Windows 2018-09-11 Windows ALPC Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2018-09-11
CVE-2018-8414 HIGH · vendor Windows 2018-08-14 Windows Shell Remote Code Execution Vulnerability	HIGH · vendor	Windows	2018-08-14
CVE-2018-8406 HIGH · vendor Windows 2018-08-14 DirectX Graphics Kernel Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2018-08-14
CVE-2018-8405 HIGH · vendor Windows 2018-08-14 DirectX Graphics Kernel Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2018-08-14
CVE-2016-9079 HIGH 7.5 2018-06-11 A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a…	HIGH 7.5		2018-06-11
CVE-2018-8174 HIGH 7.5 Windows 2018-05-09 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution …	HIGH 7.5	Windows	2018-05-09
CVE-2018-0824 HIGH · vendor Windows 2018-05-08 Microsoft COM for Windows Remote Code Execution Vulnerability	HIGH · vendor	Windows	2018-05-08
CVE-2018-0802 HIGH 7.8 2018-01-10 Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability d…	HIGH 7.8		2018-01-10
CVE-2018-0798 HIGH 8.8 2018-01-10 Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability …	HIGH 8.8		2018-01-10
CVE-2017-11826 HIGH 7.8 2017-10-13 Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 200…	HIGH 7.8		2017-10-13
CVE-2017-11774 HIGH 7.8 2017-10-13 Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles …	HIGH 7.8		2017-10-13
CVE-2017-0263 HIGH · vendor Windows 2017-05-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2017-05-09
CVE-2017-0213 HIGH · vendor Windows 2017-05-09 Windows COM Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2017-05-09
CVE-2017-0145 HIGH 8.8 Windows 2017-03-17 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…	HIGH 8.8	Windows	2017-03-17
CVE-2017-0144 HIGH 8.8 Windows 2017-03-17 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…	HIGH 8.8	Windows	2017-03-17
CVE-2017-0147 HIGH · vendor Windows 2017-03-14 Windows SMB Information Disclosure Vulnerability	HIGH · vendor	Windows	2017-03-14
CVE-2017-0005 HIGH · vendor Windows 2017-03-14 Windows GDI Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2017-03-14
CVE-2017-0001 HIGH · vendor Windows 2017-03-14 Windows GDI Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2017-03-14
CVE-2017-0037 HIGH 8.1 Microsoft Edge 2017-02-26 Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningEle…	HIGH 8.1	Microsoft Edge	2017-02-26
CVE-2016-7262 HIGH 7.8 2016-12-20 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted re…	HIGH 7.8		2016-12-20
CVE-2016-7255 HIGH 7.8 Windows 2016-11-10 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window…	HIGH 7.8	Windows	2016-11-10
CVE-2016-7201 HIGH 8.8 Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 8.8	Microsoft Edge	2016-11-10
CVE-2016-7200 HIGH 8.8 Microsoft Edge 2016-11-10 The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via…	HIGH 8.8	Microsoft Edge	2016-11-10
CVE-2016-7193 HIGH 7.8 2016-10-14 Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word…	HIGH 7.8		2016-10-14
CVE-2016-3309 HIGH · vendor Windows 2016-08-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2016-08-09
CVE-2016-0167 HIGH 7.8 Windows 2016-04-12 The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows…	HIGH 7.8	Windows	2016-04-12
CVE-2016-0165 HIGH 7.8 Windows 2016-04-12 The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows…	HIGH 7.8	Windows	2016-04-12
CVE-2016-0151 HIGH 7.8 Windows 2016-04-12 The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages…	HIGH 7.8	Windows	2016-04-12
CVE-2013-1690 HIGH 8.8 2013-06-26 Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadyst…	HIGH 8.8		2013-06-26
CVE-2012-1854 HIGH 7.8 2012-07-10 Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications …	HIGH 7.8		2012-07-10
CVE-2009-3459 HIGH 8.8 2009-10-13 Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code…	HIGH 8.8		2009-10-13
CVE-2009-0556 HIGH 8.8 2009-04-03 Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary cod…	HIGH 8.8		2009-04-03
CVE-2009-0238 HIGH 8.8 2009-02-25 Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerP…	HIGH 8.8		2009-02-25
CVE-2007-0671 HIGH 8.8 +2 2007-02-03 Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to exe…	HIGH 8.8	+2	2007-02-03

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM