CISA KEV

Actively exploited vulnerabilities (CISA KEV)

213 entries

All CVEs 16,390 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2022-26925 HIGH 8.1 KEV 2022-05-10 Windows LSA Spoofing Vulnerability	HIGH 8.1	—	KEV	—	2022-05-10	Windows LSA Spoofing Vulnerability
CVE-2022-26923 CRITICAL 8.8 KEV 2022-05-10 Active Directory Domain Services Elevation of Privilege Vulnerability	CRITICAL 8.8	—	KEV	—	2022-05-10	Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2022-26904 HIGH 7.0 KEV 2022-04-12 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2022-04-12	Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-24521 HIGH 7.8 KEV 2022-04-12 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-04-12	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-22718 HIGH 7.8 KEV 2022-02-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-02-08	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21999 HIGH 7.8 KEV 2022-02-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-02-08	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21971 HIGH 7.8 KEV 2022-02-08 Windows Runtime Remote Code Execution Vulnerability	HIGH 7.8	—	KEV	—	2022-02-08	Windows Runtime Remote Code Execution Vulnerability
CVE-2022-21919 HIGH 7.0 KEV 2022-01-11 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2022-01-11	Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-21882 HIGH 7.0 KEV 2022-01-11 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2022-01-11	Win32k Elevation of Privilege Vulnerability
CVE-2013-3900 MEDIUM 5.5 KEV 2022-01-11 WinVerifyTrust Signature Validation Vulnerability	MEDIUM 5.5	—	KEV	—	2022-01-11	WinVerifyTrust Signature Validation Vulnerability
CVE-2021-43226 HIGH 7.8 KEV 2021-12-14 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-12-14	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-42287 HIGH 7.5 KEV Network 2021-11-10 Active Directory Domain Services Elevation of Privilege Vulnerability	HIGH 7.5	Network	KEV	—	2021-11-10	Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-42278 HIGH 7.5 KEV Network 2021-11-10 Active Directory Domain Services Elevation of Privilege Vulnerability	HIGH 7.5	Network	KEV	—	2021-11-10	Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-41379 HIGH 5.5 KEV 2021-11-09 Windows Installer Elevation of Privilege Vulnerability	HIGH 5.5	—	KEV	—	2021-11-09	Windows Installer Elevation of Privilege Vulnerability
CVE-2021-41357 HIGH 7.8 KEV 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-10-12	Win32k Elevation of Privilege Vulnerability
CVE-2021-40450 HIGH 7.8 KEV 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-10-12	Win32k Elevation of Privilege Vulnerability
CVE-2021-40449 HIGH 7.8 KEV 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-10-12	Win32k Elevation of Privilege Vulnerability
CVE-2021-40444 HIGH 8.8 KEV Network 2021-09-15 Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks th…	HIGH 8.8	Network	KEV	—	2021-09-15	Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks th…
CVE-2021-36955 HIGH 7.8 KEV Local 2021-09-15 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-09-15	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-36948 HIGH 7.8 KEV Local 2021-08-12 Windows Update Medic Service Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-08-12	Windows Update Medic Service Elevation of Privilege Vulnerability
CVE-2021-36942 HIGH 7.5 KEV Network 2021-08-12 Windows LSA Spoofing Vulnerability	HIGH 7.5	Network	KEV	—	2021-08-12	Windows LSA Spoofing Vulnerability
CVE-2021-34486 HIGH 7.8 KEV Local 2021-08-12 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-08-12	Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-34484 HIGH 7.8 KEV Local 2021-08-12 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-08-12	Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2021-36934 HIGH 7.8 KEV Local 2021-07-22 An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accoun…	HIGH 7.8	Local	KEV	—	2021-07-22	An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accoun…
CVE-2021-34448 MEDIUM 6.8 KEV Network 2021-07-16 Scripting Engine Memory Corruption Vulnerability	MEDIUM 6.8	Network	KEV	—	2021-07-16	Scripting Engine Memory Corruption Vulnerability
CVE-2021-33771 HIGH 7.8 KEV Local 2021-07-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-07-14	Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-31979 HIGH 7.8 KEV Local 2021-07-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-07-14	Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-34527 HIGH 8.8 KEV Network 2021-07-02 A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfull…	HIGH 8.8	Network	KEV	—	2021-07-02	A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfull…
CVE-2021-1675 HIGH 7.8 KEV Local 2021-06-08 Windows Print Spooler Remote Code Execution Vulnerability	HIGH 7.8	Local	KEV	—	2021-06-08	Windows Print Spooler Remote Code Execution Vulnerability
CVE-2021-33742 CRITICAL 7.5 KEV 2021-06-08 Windows MSHTML Platform Remote Code Execution Vulnerability	CRITICAL 7.5	—	KEV	—	2021-06-08	Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-33739 HIGH 8.4 KEV 2021-06-08 Microsoft DWM Core Library Elevation of Privilege Vulnerability	HIGH 8.4	—	KEV	—	2021-06-08	Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2021-31956 HIGH 7.8 KEV 2021-06-08 Windows NTFS Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-06-08	Windows NTFS Elevation of Privilege Vulnerability
CVE-2021-31955 HIGH 5.5 KEV 2021-06-08 Windows Kernel Information Disclosure Vulnerability	HIGH 5.5	—	KEV	—	2021-06-08	Windows Kernel Information Disclosure Vulnerability
CVE-2021-31201 HIGH 5.2 KEV 2021-06-08 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability	HIGH 5.2	—	KEV	—	2021-06-08	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-31199 HIGH 5.2 KEV 2021-06-08 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability	HIGH 5.2	—	KEV	—	2021-06-08	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-31166 CRITICAL 9.8 KEV 2021-05-11 HTTP Protocol Stack Remote Code Execution Vulnerability	CRITICAL 9.8	—	KEV	—	2021-05-11	HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2021-28310 HIGH 7.8 KEV 2021-04-13 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-04-13	Win32k Elevation of Privilege Vulnerability
CVE-2021-1732 HIGH 7.8 KEV Local 2021-02-25 Windows Win32k Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-02-25	Windows Win32k Elevation of Privilege Vulnerability
CVE-2020-17087 HIGH 7.8 KEV 2020-11-10 Windows Kernel Local Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2020-11-10	Windows Kernel Local Elevation of Privilege Vulnerability
CVE-2020-1472 CRITICAL 10.0 KEV 2020-08-11 Netlogon Elevation of Privilege Vulnerability	CRITICAL 10.0	—	KEV	—	2020-08-11	Netlogon Elevation of Privilege Vulnerability
CVE-2020-1464 HIGH 5.3 KEV 2020-08-11 Windows Spoofing Vulnerability	HIGH 5.3	—	KEV	—	2020-08-11	Windows Spoofing Vulnerability
CVE-2020-1350 CRITICAL 10.0 KEV 2020-07-14 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 10.0	—	KEV	—	2020-07-14	Windows DNS Server Remote Code Execution Vulnerability
CVE-2020-1040 CRITICAL 8.0 KEV 2020-07-14 Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability	CRITICAL 8.0	—	KEV	—	2020-07-14	Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
CVE-2020-0986 HIGH KEV 2020-06-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH	—	KEV	—	2020-06-09	Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-1054 HIGH 7.0 KEV 2020-05-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2020-05-12	Win32k Elevation of Privilege Vulnerability
CVE-2020-6820 HIGH 8.1 KEV Network 1 apps 2020-04-24 Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing thi…	HIGH 8.1	Network	KEV	1	2020-04-24	Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing thi…
CVE-2020-6819 HIGH 8.1 KEV Network 1 apps 2020-04-24 Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abu…	HIGH 8.1	Network	KEV	1	2020-04-24	Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abu…
CVE-2020-1027 HIGH 7.8 KEV 2020-04-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2020-04-14	Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-1020 CRITICAL 7.8 KEV 2020-04-14 Adobe Font Manager Library Remote Code Execution Vulnerability	CRITICAL 7.8	—	KEV	—	2020-04-14	Adobe Font Manager Library Remote Code Execution Vulnerability
CVE-2020-0938 CRITICAL 7.8 KEV 2020-04-14 Adobe Font Manager Library Remote Code Execution Vulnerability	CRITICAL 7.8	—	KEV	—	2020-04-14	Adobe Font Manager Library Remote Code Execution Vulnerability