CISA KEV

Actively exploited vulnerabilities (CISA KEV)

246 actively exploited CVEs (High, Windows) affect a tracked app or OS. CISA confirms exploitation in the wild for each one.

Matching CVEs: 246
Actively exploited: 246
Publication window: 2007-02-03 → 2026-11-10

All CVEs 12,468 CISA KEV 246 Public exploit 44 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

246 entries High Windows CISA KEV Clear all

CVE	Severity	Apps	Published
CVE-2023-29336 HIGH · vendor Windows 2023-05-09 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2023-05-09
CVE-2023-2033 HIGH 8.8 2023-04-14 Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…	HIGH 8.8		2023-04-14
CVE-2023-28252 HIGH · vendor Windows 2023-04-11 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2023-04-11
CVE-2023-28229 HIGH · vendor Windows 2023-04-11 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2023-04-11
CVE-2023-21823 HIGH 7.8 Windows 2023-02-14 Windows Graphics Component Remote Code Execution Vulnerability	HIGH 7.8	Windows	2023-02-14
CVE-2023-23376 HIGH 7.8 Windows 2023-02-14 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2023-02-14
CVE-2023-21608 HIGH 7.8 2023-01-18 Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerabil…	HIGH 7.8		2023-01-18
CVE-2023-21674 HIGH · vendor Windows 2023-01-10 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2023-01-10
CVE-2022-4262 HIGH 8.8 2022-12-02 Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…	HIGH 8.8		2022-12-02
CVE-2022-41128 HIGH 8.8 Windows 2022-11-09 Windows Scripting Languages Remote Code Execution Vulnerability	HIGH 8.8	Windows	2022-11-09
CVE-2022-41125 HIGH 7.8 Windows 2022-11-09 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2022-11-09
CVE-2022-41073 HIGH 7.8 Windows 2022-11-09 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2022-11-09
CVE-2022-3723 HIGH 8.8 2022-11-01 Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…	HIGH 8.8		2022-11-01
CVE-2022-41033 HIGH · vendor Windows 2022-10-11 Windows COM+ Event System Service Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-10-11
CVE-2022-38028 HIGH · vendor Windows 2022-10-11 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-10-11
CVE-2022-3038 HIGH 8.8 2022-09-26 Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	HIGH 8.8		2022-09-26
CVE-2022-37969 HIGH 7.8 Windows 2022-09-13 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2022-09-13
CVE-2022-34713 HIGH · vendor Windows 2022-08-09 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability	HIGH · vendor	Windows	2022-08-09
CVE-2022-2294 HIGH 8.8 2022-07-28 Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…	HIGH 8.8		2022-07-28
CVE-2022-1364 HIGH 8.8 2022-07-26 Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2022-07-26
CVE-2022-1096 HIGH 8.8 2022-07-23 Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2022-07-23
CVE-2022-22047 HIGH · vendor Windows 2022-07-12 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-07-12
CVE-2022-30190 HIGH 7.8 Windows 2022-06-01 A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully e…	HIGH 7.8	Windows	2022-06-01
CVE-2022-26925 HIGH · vendor Windows 2022-05-10 Windows LSA Spoofing Vulnerability	HIGH · vendor	Windows	2022-05-10
CVE-2022-26904 HIGH · vendor Windows 2022-04-12 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-04-12
CVE-2022-24521 HIGH · vendor Windows 2022-04-12 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-04-12
CVE-2022-0609 HIGH 8.8 2022-04-05 Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2022-04-05
CVE-2021-4102 HIGH 8.8 2022-02-11 Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2022-02-11
CVE-2022-22718 HIGH · vendor Windows 2022-02-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-02-08
CVE-2022-21999 HIGH · vendor Windows 2022-02-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-02-08
CVE-2022-21971 HIGH · vendor Windows 2022-02-08 Windows Runtime Remote Code Execution Vulnerability	HIGH · vendor	Windows	2022-02-08
CVE-2022-21882 HIGH 7.0 Windows 2022-01-11 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	Windows	2022-01-11
CVE-2022-21919 HIGH · vendor Windows 2022-01-11 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2022-01-11
CVE-2021-43226 HIGH 7.8 Windows 2021-12-15 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-12-15
CVE-2021-38003 HIGH 8.8 2021-11-23 Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…	HIGH 8.8		2021-11-23
CVE-2021-42292 HIGH 7.8 2021-11-10 Microsoft Excel Security Feature Bypass Vulnerability	HIGH 7.8		2021-11-10
CVE-2021-42287 HIGH 7.5 Windows 2021-11-10 Active Directory Domain Services Elevation of Privilege Vulnerability	HIGH 7.5	Windows	2021-11-10
CVE-2021-42278 HIGH 7.5 Windows 2021-11-10 Active Directory Domain Services Elevation of Privilege Vulnerability	HIGH 7.5	Windows	2021-11-10
CVE-2021-41357 HIGH · vendor Windows 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2021-10-12
CVE-2021-40450 HIGH · vendor Windows 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2021-10-12
CVE-2021-40449 HIGH · vendor Windows 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH · vendor	Windows	2021-10-12
CVE-2021-37975 HIGH 8.8 2021-10-08 Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2021-10-08
CVE-2021-30632 HIGH 8.8 2021-10-08 Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	HIGH 8.8		2021-10-08
CVE-2021-40444 HIGH 8.8 Windows 2021-09-15 Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks th…	HIGH 8.8	Windows	2021-09-15
CVE-2021-38646 HIGH 7.8 2021-09-15 Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability	HIGH 7.8		2021-09-15
CVE-2021-36955 HIGH 7.8 Windows 2021-09-15 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-09-15
CVE-2021-36948 HIGH 7.8 Windows 2021-08-12 Windows Update Medic Service Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-08-12
CVE-2021-36942 HIGH 7.5 Windows 2021-08-12 Windows LSA Spoofing Vulnerability	HIGH 7.5	Windows	2021-08-12
CVE-2021-34486 HIGH 7.8 Windows 2021-08-12 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-08-12
CVE-2021-34484 HIGH 7.8 Windows 2021-08-12 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.8	Windows	2021-08-12

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM