CISA KEV

Actively exploited vulnerabilities (CISA KEV)

285 entries

All CVEs 16,158 CISA KEV 285 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2025-24201 CRITICAL 10.0 KEV Network 2025-03-11 An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15…	CRITICAL 10.0	Network	KEV	—	2025-03-11	An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Safari 18.3.1, iOS 15.8.4 and iPadOS 15…
CVE-2025-26633 HIGH 7.0 KEV Local 2025-03-11 Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.	HIGH 7.0	Local	KEV	—	2025-03-11	Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-24993 HIGH 7.8 KEV 2025-03-11 Windows NTFS Remote Code Execution Vulnerability	HIGH 7.8	—	KEV	—	2025-03-11	Windows NTFS Remote Code Execution Vulnerability
CVE-2025-24991 HIGH 5.5 KEV 2025-03-11 Windows NTFS Information Disclosure Vulnerability	HIGH 5.5	—	KEV	—	2025-03-11	Windows NTFS Information Disclosure Vulnerability
CVE-2025-24985 HIGH 7.8 KEV 2025-03-11 Windows Fast FAT File System Driver Remote Code Execution Vulnerability	HIGH 7.8	—	KEV	—	2025-03-11	Windows Fast FAT File System Driver Remote Code Execution Vulnerability
CVE-2025-24984 HIGH 4.6 KEV 2025-03-11 Windows NTFS Information Disclosure Vulnerability	HIGH 4.6	—	KEV	—	2025-03-11	Windows NTFS Information Disclosure Vulnerability
CVE-2025-24983 HIGH 7.0 KEV 2025-03-11 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2025-03-11	Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2025-24054 HIGH 6.5 KEV 2025-03-11 NTLM Hash Disclosure Spoofing Vulnerability	HIGH 6.5	—	KEV	—	2025-03-11	NTLM Hash Disclosure Spoofing Vulnerability
CVE-2024-50302 MEDIUM 5.5 KEV 2025-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM 5.5	—	KEV	—	2025-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-43093 HIGH KEV 2025-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2025-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-21418 HIGH 7.8 KEV 2025-02-11 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2025-02-11	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-21391 HIGH 7.1 KEV 2025-02-11 Windows Storage Elevation of Privilege Vulnerability	HIGH 7.1	—	KEV	—	2025-02-11	Windows Storage Elevation of Privilege Vulnerability
CVE-2025-24200 MEDIUM 6.1 KEV Physical 2025-02-10 An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 1…	MEDIUM 6.1	Physical	KEV	—	2025-02-10	An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iOS 1…
CVE-2024-53104 HIGH KEV 2025-02-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2025-02-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2025-24085 CRITICAL 10.0 KEV Network 2025-01-27 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS…	CRITICAL 10.0	Network	KEV	—	2025-01-27	A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS…
CVE-2025-0411 HIGH 7.0 KEV Local 1 apps 2025-01-25 7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installat…	HIGH 7.0	Local	KEV	1	2025-01-25	7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installat…
CVE-2025-21335 HIGH 7.8 KEV 2025-01-14 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2025-01-14	Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21334 HIGH 7.8 KEV 2025-01-14 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2025-01-14	Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21333 HIGH 7.8 KEV 2025-01-14 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2025-01-14	Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2024-49138 HIGH 7.8 KEV 2024-12-10 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2024-12-10	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-44309 MEDIUM 6.3 KEV Network 2024-11-20 A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPad…	MEDIUM 6.3	Network	KEV	—	2024-11-20	A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPad…
CVE-2024-44308 HIGH 8.8 KEV Network 2024-11-20 The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 1…	HIGH 8.8	Network	KEV	—	2024-11-20	The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 1…
CVE-2024-49039 HIGH 8.8 KEV Local 2024-11-12 Windows Task Scheduler Elevation of Privilege Vulnerability	HIGH 8.8	Local	KEV	—	2024-11-12	Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2024-43451 HIGH 6.5 KEV 2024-11-12 NTLM Hash Disclosure Spoofing Vulnerability	HIGH 6.5	—	KEV	—	2024-11-12	NTLM Hash Disclosure Spoofing Vulnerability
CVE-2024-43047 HIGH KEV 2024-11-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2024-11-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-9680 CRITICAL 9.8 KEV Network 1 apps 2024-10-09 An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner…	CRITICAL 9.8	Network	KEV	1	2024-10-09	An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner…
CVE-2024-43573 MEDIUM 6.5 KEV 2024-10-08 Windows MSHTML Platform Spoofing Vulnerability	MEDIUM 6.5	—	KEV	—	2024-10-08	Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43572 HIGH 7.8 KEV 2024-10-08 Microsoft Management Console Remote Code Execution Vulnerability	HIGH 7.8	—	KEV	—	2024-10-08	Microsoft Management Console Remote Code Execution Vulnerability
CVE-2024-43461 HIGH 8.8 KEV Network 2024-09-10 Windows MSHTML Platform Spoofing Vulnerability	HIGH 8.8	Network	KEV	—	2024-09-10	Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-38217 MEDIUM 5.4 KEV Network 2024-09-10 Windows Mark of the Web Security Feature Bypass Vulnerability	MEDIUM 5.4	Network	KEV	—	2024-09-10	Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2024-38014 HIGH 7.8 KEV Local 2024-09-10 Windows Installer Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2024-09-10	Windows Installer Elevation of Privilege Vulnerability
CVE-2024-32896 HIGH KEV 2024-09-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2024-09-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-38213 MEDIUM 6.5 KEV 2024-08-13 Windows Mark of the Web Security Feature Bypass Vulnerability	MEDIUM 6.5	—	KEV	—	2024-08-13	Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2024-38193 HIGH 7.8 KEV 2024-08-13 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2024-08-13	Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2024-38178 HIGH 7.5 KEV 2024-08-13 Scripting Engine Memory Corruption Vulnerability	HIGH 7.5	—	KEV	—	2024-08-13	Scripting Engine Memory Corruption Vulnerability
CVE-2024-38107 HIGH 7.8 KEV 2024-08-13 Windows Power Dependency Coordinator Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2024-08-13	Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
CVE-2024-38106 HIGH 7.0 KEV 2024-08-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2024-08-13	Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-36971 HIGH 7.8 KEV 2024-08-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH 7.8	—	KEV	—	2024-08-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-38112 HIGH 7.5 KEV 2024-07-09 Windows MSHTML Platform Spoofing Vulnerability	HIGH 7.5	—	KEV	—	2024-07-09	Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-38080 HIGH 7.8 KEV 2024-07-09 Windows Hyper-V Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2024-07-09	Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2024-39891 MEDIUM 5.3 KEV Network 2 apps 2024-07-02 In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-numb…	MEDIUM 5.3	Network	KEV	2	2024-07-02	In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-numb…
CVE-2024-4610 HIGH KEV 2024-07-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2024-07-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2024-35250 HIGH 7.8 KEV Local 2024-06-11 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2024-06-11	Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-30088 HIGH 7.0 KEV Local 2024-06-11 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.0	Local	KEV	—	2024-06-11	Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-30051 HIGH 7.8 KEV 2024-05-14 Windows DWM Core Library Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2024-05-14	Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2024-30040 HIGH 8.8 KEV 2024-05-14 Windows MSHTML Platform Security Feature Bypass Vulnerability	HIGH 8.8	—	KEV	—	2024-05-14	Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2024-29988 HIGH 8.8 KEV 2024-04-09 SmartScreen Prompt Security Feature Bypass Vulnerability	HIGH 8.8	—	KEV	—	2024-04-09	SmartScreen Prompt Security Feature Bypass Vulnerability
CVE-2024-26169 HIGH 7.8 KEV 2024-03-12 Windows Error Reporting Service Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2024-03-12	Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2024-23296 HIGH 7.8 KEV Local 2024-03-05 A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey…	HIGH 7.8	Local	KEV	—	2024-03-05	A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey…
CVE-2024-23225 HIGH 7.8 KEV Local 2024-03-05 A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey…	HIGH 7.8	Local	KEV	—	2024-03-05	A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey…