CISA KEV

Actively exploited vulnerabilities (CISA KEV)

229 entries

All CVEs 16,390 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2021-36948 HIGH 7.8 KEV Local 2021-08-12 Windows Update Medic Service Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-08-12	Windows Update Medic Service Elevation of Privilege Vulnerability
CVE-2021-36942 HIGH 7.5 KEV Network 2021-08-12 Windows LSA Spoofing Vulnerability	HIGH 7.5	Network	KEV	—	2021-08-12	Windows LSA Spoofing Vulnerability
CVE-2021-34486 HIGH 7.8 KEV Local 2021-08-12 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-08-12	Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-34484 HIGH 7.8 KEV Local 2021-08-12 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-08-12	Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2021-36934 HIGH 7.8 KEV Local 2021-07-22 An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accoun…	HIGH 7.8	Local	KEV	—	2021-07-22	An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accoun…
CVE-2021-33771 HIGH 7.8 KEV Local 2021-07-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-07-14	Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-31979 HIGH 7.8 KEV Local 2021-07-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-07-14	Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-34527 HIGH 8.8 KEV Network 2021-07-02 A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfull…	HIGH 8.8	Network	KEV	—	2021-07-02	A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfull…
CVE-2021-1675 HIGH 7.8 KEV Local 2021-06-08 Windows Print Spooler Remote Code Execution Vulnerability	HIGH 7.8	Local	KEV	—	2021-06-08	Windows Print Spooler Remote Code Execution Vulnerability
CVE-2021-33739 HIGH 8.4 KEV 2021-06-08 Microsoft DWM Core Library Elevation of Privilege Vulnerability	HIGH 8.4	—	KEV	—	2021-06-08	Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2021-31956 HIGH 7.8 KEV 2021-06-08 Windows NTFS Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-06-08	Windows NTFS Elevation of Privilege Vulnerability
CVE-2021-31955 HIGH 5.5 KEV 2021-06-08 Windows Kernel Information Disclosure Vulnerability	HIGH 5.5	—	KEV	—	2021-06-08	Windows Kernel Information Disclosure Vulnerability
CVE-2021-31201 HIGH 5.2 KEV 2021-06-08 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability	HIGH 5.2	—	KEV	—	2021-06-08	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-31199 HIGH 5.2 KEV 2021-06-08 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability	HIGH 5.2	—	KEV	—	2021-06-08	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-28664 HIGH KEV 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-28663 HIGH KEV 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-1905 HIGH KEV 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-28310 HIGH 7.8 KEV 2021-04-13 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-04-13	Win32k Elevation of Privilege Vulnerability
CVE-2021-1732 HIGH 7.8 KEV Local 2021-02-25 Windows Win32k Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-02-25	Windows Win32k Elevation of Privilege Vulnerability
CVE-2020-11261 HIGH KEV 2021-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-01-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-17087 HIGH 7.8 KEV 2020-11-10 Windows Kernel Local Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2020-11-10	Windows Kernel Local Elevation of Privilege Vulnerability
CVE-2020-1464 HIGH 5.3 KEV 2020-08-11 Windows Spoofing Vulnerability	HIGH 5.3	—	KEV	—	2020-08-11	Windows Spoofing Vulnerability
CVE-2020-0986 HIGH KEV 2020-06-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH	—	KEV	—	2020-06-09	Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-1054 HIGH 7.0 KEV 2020-05-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2020-05-12	Win32k Elevation of Privilege Vulnerability
CVE-2020-6820 HIGH 8.1 KEV Network 1 apps 2020-04-24 Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing thi…	HIGH 8.1	Network	KEV	1	2020-04-24	Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing thi…
CVE-2020-6819 HIGH 8.1 KEV Network 1 apps 2020-04-24 Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abu…	HIGH 8.1	Network	KEV	1	2020-04-24	Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abu…
CVE-2020-1027 HIGH 7.8 KEV 2020-04-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2020-04-14	Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-0787 HIGH 7.8 KEV Local 2020-03-12 An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows …	HIGH 7.8	Local	KEV	—	2020-03-12	An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows …
CVE-2019-17026 HIGH 8.8 KEV Network 1 apps 2020-03-02 Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild a…	HIGH 8.8	Network	KEV	1	2020-03-02	Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild a…
CVE-2020-0069 HIGH KEV 2020-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2020-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0041 HIGH KEV 2020-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2020-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0683 HIGH 7.0 KEV 2020-02-11 Windows Installer Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2020-02-11	Windows Installer Elevation of Privilege Vulnerability
CVE-2019-18426 HIGH 8.2 KEV Network 1 apps 2020-01-21 A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and l…	HIGH 8.2	Network	KEV	1	2020-01-21	A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and l…
CVE-2020-0638 HIGH 7.8 KEV Local 2020-01-14 An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first …	HIGH 7.8	Local	KEV	—	2020-01-14	An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first …
CVE-2020-0601 HIGH 8.1 KEV 2020-01-14 Windows CryptoAPI Spoofing Vulnerability	HIGH 8.1	—	KEV	—	2020-01-14	Windows CryptoAPI Spoofing Vulnerability
CVE-2019-1458 HIGH 7.8 KEV Local 2019-12-10 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…	HIGH 7.8	Local	KEV	—	2019-12-10	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…
CVE-2019-1405 HIGH 7.8 KEV Local 2019-11-12 An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP…	HIGH 7.8	Local	KEV	—	2019-11-12	An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP…
CVE-2019-1385 HIGH 7.8 KEV Local 2019-11-12 An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to sys…	HIGH 7.8	Local	KEV	—	2019-11-12	An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to sys…
CVE-2019-1388 HIGH 7.8 KEV 2019-11-12 Windows Certificate Dialog Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-11-12	Windows Certificate Dialog Elevation of Privilege Vulnerability
CVE-2019-1322 HIGH 7.0 KEV 2019-10-08 Microsoft Windows Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2019-10-08	Microsoft Windows Elevation of Privilege Vulnerability
CVE-2019-1315 HIGH 7.8 KEV 2019-10-08 Windows Error Reporting Manager Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-10-08	Windows Error Reporting Manager Elevation of Privilege Vulnerability
CVE-2019-2215 HIGH KEV 2019-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2019-10-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-1253 HIGH 7.8 KEV 2019-09-10 Windows Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-09-10	Windows Elevation of Privilege Vulnerability
CVE-2019-1215 HIGH 7.8 KEV 2019-09-10 Windows Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-09-10	Windows Elevation of Privilege Vulnerability
CVE-2019-1214 HIGH 7.8 KEV 2019-09-10 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-09-10	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2019-11707 HIGH 8.8 KEV Network 1 apps 2019-07-23 A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware…	HIGH 8.8	Network	KEV	1	2019-07-23	A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware…
CVE-2019-1130 HIGH 7.8 KEV Local 2019-07-15 An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…	HIGH 7.8	Local	KEV	—	2019-07-15	An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…
CVE-2019-1129 HIGH 7.8 KEV 2019-07-09 Windows Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-07-09	Windows Elevation of Privilege Vulnerability
CVE-2019-0880 HIGH 7.0 KEV 2019-07-09 Microsoft splwow64 Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2019-07-09	Microsoft splwow64 Elevation of Privilege Vulnerability
CVE-2019-1069 HIGH 7.8 KEV Local 2019-06-12 An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited …	HIGH 7.8	Local	KEV	—	2019-06-12	An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited …