CISA KEV

Actively exploited vulnerabilities (CISA KEV)

49 entries

All CVEs 16,158 CISA KEV 285 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2025-48595 HIGH 8.4 KEV Local 2026-06-01 In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no a…	HIGH 8.4	Local	KEV	—	2026-06-01	In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no a…
CVE-2026-21385 HIGH KEV 2026-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2026-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48633 HIGH KEV 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48572 HIGH KEV 2025-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2025-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-48543 HIGH KEV 2025-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2025-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-27038 HIGH KEV 2025-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2025-08-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-21479 CRITICAL KEV 2025-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	KEV	—	2025-08-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-38352 HIGH 7.8 KEV Local 2025-07-22 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If…	HIGH 7.8	Local	KEV	—	2025-07-22	In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If…
CVE-2025-27363 HIGH 8.1 KEV 2025-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH 8.1	—	KEV	—	2025-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-53197 HIGH KEV 2025-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2025-04-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-53150 HIGH 7.8 KEV 2025-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH 7.8	—	KEV	—	2025-04-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-50302 MEDIUM 5.5 KEV 2025-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM 5.5	—	KEV	—	2025-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-43093 HIGH KEV 2025-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2025-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-53104 HIGH KEV 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2025-02-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-43047 HIGH KEV 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2024-11-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-32896 HIGH KEV 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2024-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-36971 HIGH 7.8 KEV 2024-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH 7.8	—	KEV	—	2024-08-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-39891 MEDIUM 5.3 KEV Network 2 apps 2024-07-02 In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-numb…	MEDIUM 5.3	Network	KEV	2	2024-07-02	In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-numb…
CVE-2024-4610 HIGH KEV 2024-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2024-07-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33107 HIGH KEV 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33106 HIGH KEV 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-33063 HIGH KEV 2023-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-4211 HIGH KEV 2023-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-10-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-5217 HIGH 8.8 KEV Network 2 apps 2023-09-28 Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap…	HIGH 8.8	Network	KEV	2	2023-09-28	Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap…
CVE-2023-4863 HIGH 8.8 KEV Network 1 apps 2023-09-12 Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write v…	HIGH 8.8	Network	KEV	1	2023-09-12	Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write v…
CVE-2023-35674 HIGH KEV 2023-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-26083 MEDIUM KEV 2023-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM	—	KEV	—	2023-07-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-29256 HIGH KEV 2023-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-07-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2022-22706 HIGH KEV 2023-06-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-06-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-0266 HIGH 7.8 KEV 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH 7.8	—	KEV	—	2023-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2022-0847 HIGH 7.8 KEV 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH 7.8	—	KEV	—	2023-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-22600 HIGH 7.0 KEV 2023-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH 7.0	—	KEV	—	2023-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-2136 CRITICAL 9.6 KEV Network 2023-04-19 Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a s…	CRITICAL 9.6	Network	KEV	—	2023-04-19	Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a s…
CVE-2022-38181 HIGH KEV 2023-04-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-04-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2023-20963 HIGH KEV 2023-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2023-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2022-26486 CRITICAL 9.6 KEV Network 1 apps 2022-12-22 An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abu…	CRITICAL 9.6	Network	KEV	1	2022-12-22	An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abu…
CVE-2022-26485 HIGH 8.8 KEV Network 1 apps 2022-12-22 Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. Th…	HIGH 8.8	Network	KEV	1	2022-12-22	Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. Th…
CVE-2021-1048 HIGH KEV 2021-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-11-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-0920 HIGH KEV 2021-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-11-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-28664 HIGH KEV 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-28663 HIGH KEV 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-1906 MEDIUM KEV 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM	—	KEV	—	2021-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-1905 HIGH KEV 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-11261 HIGH KEV 2021-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-01-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-15999 CRITICAL 9.6 KEV Network 2020-11-03 Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…	CRITICAL 9.6	Network	KEV	—	2020-11-03	Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…
CVE-2020-0069 HIGH KEV 2020-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2020-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0041 HIGH KEV 2020-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2020-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-2215 HIGH KEV 2019-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2019-10-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2016-5195 CRITICAL KEV 2016-12-01 Indexed via Android Security Bulletin; full NVD metadata pending.	CRITICAL	—	KEV	—	2016-12-01	Indexed via Android Security Bulletin; full NVD metadata pending.