CISA KEV

Actively exploited vulnerabilities (CISA KEV)

229 entries

All CVEs 16,390 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2023-36802 HIGH 7.8 KEV 2023-09-12 Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2023-09-12	Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
CVE-2023-35674 HIGH KEV 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-38831 HIGH 7.8 KEV Local 1 apps 2023-08-23 RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because …	HIGH 7.8	Local	KEV	1	2023-08-23	RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because …
CVE-2023-36884 HIGH 7.5 KEV Network 2023-07-11 Windows Search Remote Code Execution Vulnerability	HIGH 7.5	Network	KEV	—	2023-07-11	Windows Search Remote Code Execution Vulnerability
CVE-2023-36874 HIGH 7.8 KEV 2023-07-11 Windows Error Reporting Service Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2023-07-11	Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2023-32049 HIGH 8.8 KEV 2023-07-11 Windows SmartScreen Security Feature Bypass Vulnerability	HIGH 8.8	—	KEV	—	2023-07-11	Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-32046 HIGH 7.8 KEV 2023-07-11 Windows MSHTML Platform Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2023-07-11	Windows MSHTML Platform Elevation of Privilege Vulnerability
CVE-2021-29256 HIGH KEV 2023-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-07-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-29360 HIGH 8.4 KEV 2023-06-13 Microsoft Streaming Service Elevation of Privilege Vulnerability	HIGH 8.4	—	KEV	—	2023-06-13	Microsoft Streaming Service Elevation of Privilege Vulnerability
CVE-2022-22706 HIGH KEV 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-29336 HIGH 7.8 KEV 2023-05-09 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2023-05-09	Win32k Elevation of Privilege Vulnerability
CVE-2023-0266 HIGH 7.8 KEV 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH 7.8	—	KEV	—	2023-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2022-0847 HIGH 7.8 KEV 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH 7.8	—	KEV	—	2023-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-22600 HIGH 7.0 KEV 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH 7.0	—	KEV	—	2023-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-28252 HIGH 7.8 KEV 2023-04-11 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2023-04-11	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-28229 HIGH 7.0 KEV 2023-04-11 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2023-04-11	Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2022-38181 HIGH KEV 2023-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-04-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-20963 HIGH KEV 2023-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-23376 HIGH 7.8 KEV Local 2023-02-14 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2023-02-14	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-21823 HIGH 7.8 KEV 2023-02-14 Windows Graphics Component Remote Code Execution Vulnerability	HIGH 7.8	—	KEV	—	2023-02-14	Windows Graphics Component Remote Code Execution Vulnerability
CVE-2023-21674 HIGH 8.8 KEV 2023-01-10 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability	HIGH 8.8	—	KEV	—	2023-01-10	Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-26485 HIGH 8.8 KEV Network 1 apps 2022-12-22 Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. Th…	HIGH 8.8	Network	KEV	1	2022-12-22	Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. Th…
CVE-2022-41128 HIGH 8.8 KEV Network 2022-11-09 Windows Scripting Languages Remote Code Execution Vulnerability	HIGH 8.8	Network	KEV	—	2022-11-09	Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41125 HIGH 7.8 KEV Local 2022-11-09 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2022-11-09	Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2022-41073 HIGH 7.8 KEV Local 2022-11-09 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2022-11-09	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41033 HIGH 7.8 KEV 2022-10-11 Windows COM+ Event System Service Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-10-11	Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2022-38028 HIGH 7.8 KEV 2022-10-11 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-10-11	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-37969 HIGH 7.8 KEV 2022-09-13 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-09-13	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-34713 HIGH 7.8 KEV 2022-08-09 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability	HIGH 7.8	—	KEV	—	2022-08-09	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVE-2022-22047 HIGH 7.8 KEV 2022-07-12 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-07-12	Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-30190 HIGH 7.8 KEV Local 2022-06-01 A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully e…	HIGH 7.8	Local	KEV	—	2022-06-01	A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully e…
CVE-2022-26925 HIGH 8.1 KEV 2022-05-10 Windows LSA Spoofing Vulnerability	HIGH 8.1	—	KEV	—	2022-05-10	Windows LSA Spoofing Vulnerability
CVE-2022-26904 HIGH 7.0 KEV 2022-04-12 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2022-04-12	Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-24521 HIGH 7.8 KEV 2022-04-12 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-04-12	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-22718 HIGH 7.8 KEV 2022-02-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-02-08	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21999 HIGH 7.8 KEV 2022-02-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-02-08	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21971 HIGH 7.8 KEV 2022-02-08 Windows Runtime Remote Code Execution Vulnerability	HIGH 7.8	—	KEV	—	2022-02-08	Windows Runtime Remote Code Execution Vulnerability
CVE-2022-21919 HIGH 7.0 KEV 2022-01-11 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2022-01-11	Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-21882 HIGH 7.0 KEV 2022-01-11 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2022-01-11	Win32k Elevation of Privilege Vulnerability
CVE-2021-43226 HIGH 7.8 KEV 2021-12-14 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-12-14	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-42287 HIGH 7.5 KEV Network 2021-11-10 Active Directory Domain Services Elevation of Privilege Vulnerability	HIGH 7.5	Network	KEV	—	2021-11-10	Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-42278 HIGH 7.5 KEV Network 2021-11-10 Active Directory Domain Services Elevation of Privilege Vulnerability	HIGH 7.5	Network	KEV	—	2021-11-10	Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-41379 HIGH 5.5 KEV 2021-11-09 Windows Installer Elevation of Privilege Vulnerability	HIGH 5.5	—	KEV	—	2021-11-09	Windows Installer Elevation of Privilege Vulnerability
CVE-2021-1048 HIGH KEV 2021-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-11-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-0920 HIGH KEV 2021-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-11-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-41357 HIGH 7.8 KEV 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-10-12	Win32k Elevation of Privilege Vulnerability
CVE-2021-40450 HIGH 7.8 KEV 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-10-12	Win32k Elevation of Privilege Vulnerability
CVE-2021-40449 HIGH 7.8 KEV 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-10-12	Win32k Elevation of Privilege Vulnerability
CVE-2021-40444 HIGH 8.8 KEV Network 2021-09-15 Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks th…	HIGH 8.8	Network	KEV	—	2021-09-15	Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks th…
CVE-2021-36955 HIGH 7.8 KEV Local 2021-09-15 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-09-15	Windows Common Log File System Driver Elevation of Privilege Vulnerability