KEV CISA

Vulnérabilités activement exploitées (KEV CISA)

286 entrées

Toutes les CVE 16 390 KEV CISA 286 Toutes sévérités Critique Élevé Modéré Faible Masquer les N/A

Toutes plateformes iOS Android macOS Windows

Tri chronologique : du plus récent au plus ancien. Pour prioriser, utilise les filtres KEV / sévérité ci-dessus.

CVE	Sévérité	Vecteur	KEV	Apps	Publié	Description
CVE-2022-41091 MEDIUM 5.4 KEV Réseau 2022-11-09 Windows Mark of the Web Security Feature Bypass Vulnerability	MEDIUM 5.4	Réseau	KEV	—	2022-11-09	Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-41073 HIGH 7.8 KEV Local 2022-11-09 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2022-11-09	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41049 MEDIUM 5.4 KEV Réseau 2022-11-09 Windows Mark of the Web Security Feature Bypass Vulnerability	MEDIUM 5.4	Réseau	KEV	—	2022-11-09	Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-41033 HIGH 7.8 KEV 2022-10-11 Windows COM+ Event System Service Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-10-11	Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2022-38028 HIGH 7.8 KEV 2022-10-11 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-10-11	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-37969 HIGH 7.8 KEV 2022-09-13 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-09-13	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-34713 HIGH 7.8 KEV 2022-08-09 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability	HIGH 7.8	—	KEV	—	2022-08-09	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVE-2022-22047 HIGH 7.8 KEV 2022-07-12 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-07-12	Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-30190 HIGH 7.8 KEV Local 2022-06-01 A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully e…	HIGH 7.8	Local	KEV	—	2022-06-01	A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully e…
CVE-2022-26925 HIGH 8.1 KEV 2022-05-10 Windows LSA Spoofing Vulnerability	HIGH 8.1	—	KEV	—	2022-05-10	Windows LSA Spoofing Vulnerability
CVE-2022-26923 CRITICAL 8.8 KEV 2022-05-10 Active Directory Domain Services Elevation of Privilege Vulnerability	CRITICAL 8.8	—	KEV	—	2022-05-10	Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2022-26904 HIGH 7.0 KEV 2022-04-12 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2022-04-12	Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-24521 HIGH 7.8 KEV 2022-04-12 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-04-12	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-22718 HIGH 7.8 KEV 2022-02-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-02-08	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21999 HIGH 7.8 KEV 2022-02-08 Windows Print Spooler Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2022-02-08	Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21971 HIGH 7.8 KEV 2022-02-08 Windows Runtime Remote Code Execution Vulnerability	HIGH 7.8	—	KEV	—	2022-02-08	Windows Runtime Remote Code Execution Vulnerability
CVE-2022-21919 HIGH 7.0 KEV 2022-01-11 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2022-01-11	Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-21882 HIGH 7.0 KEV 2022-01-11 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2022-01-11	Win32k Elevation of Privilege Vulnerability
CVE-2013-3900 MEDIUM 5.5 KEV 2022-01-11 WinVerifyTrust Signature Validation Vulnerability	MEDIUM 5.5	—	KEV	—	2022-01-11	WinVerifyTrust Signature Validation Vulnerability
CVE-2021-43226 HIGH 7.8 KEV 2021-12-14 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-12-14	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-44228 CRITICAL 10.0 KEV Réseau 1 apps 2021-12-10 Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameter…	CRITICAL 10.0	Réseau	KEV	1	2021-12-10	Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameter…
CVE-2021-42287 HIGH 7.5 KEV Réseau 2021-11-10 Active Directory Domain Services Elevation of Privilege Vulnerability	HIGH 7.5	Réseau	KEV	—	2021-11-10	Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-42278 HIGH 7.5 KEV Réseau 2021-11-10 Active Directory Domain Services Elevation of Privilege Vulnerability	HIGH 7.5	Réseau	KEV	—	2021-11-10	Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-41379 HIGH 5.5 KEV 2021-11-09 Windows Installer Elevation of Privilege Vulnerability	HIGH 5.5	—	KEV	—	2021-11-09	Windows Installer Elevation of Privilege Vulnerability
CVE-2021-1048 HIGH KEV 2021-11-01 Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.	HIGH	—	KEV	—	2021-11-01	Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.
CVE-2021-0920 HIGH KEV 2021-11-01 Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.	HIGH	—	KEV	—	2021-11-01	Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.
CVE-2021-41357 HIGH 7.8 KEV 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-10-12	Win32k Elevation of Privilege Vulnerability
CVE-2021-40450 HIGH 7.8 KEV 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-10-12	Win32k Elevation of Privilege Vulnerability
CVE-2021-40449 HIGH 7.8 KEV 2021-10-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-10-12	Win32k Elevation of Privilege Vulnerability
CVE-2021-40444 HIGH 8.8 KEV Réseau 2021-09-15 Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks th…	HIGH 8.8	Réseau	KEV	—	2021-09-15	Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks th…
CVE-2021-36955 HIGH 7.8 KEV Local 2021-09-15 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-09-15	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-36948 HIGH 7.8 KEV Local 2021-08-12 Windows Update Medic Service Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-08-12	Windows Update Medic Service Elevation of Privilege Vulnerability
CVE-2021-36942 HIGH 7.5 KEV Réseau 2021-08-12 Windows LSA Spoofing Vulnerability	HIGH 7.5	Réseau	KEV	—	2021-08-12	Windows LSA Spoofing Vulnerability
CVE-2021-34486 HIGH 7.8 KEV Local 2021-08-12 Windows Event Tracing Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-08-12	Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-34484 HIGH 7.8 KEV Local 2021-08-12 Windows User Profile Service Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-08-12	Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2021-36934 HIGH 7.8 KEV Local 2021-07-22 An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accoun…	HIGH 7.8	Local	KEV	—	2021-07-22	An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accoun…
CVE-2021-34448 MEDIUM 6.8 KEV Réseau 2021-07-16 Scripting Engine Memory Corruption Vulnerability	MEDIUM 6.8	Réseau	KEV	—	2021-07-16	Scripting Engine Memory Corruption Vulnerability
CVE-2021-33771 HIGH 7.8 KEV Local 2021-07-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-07-14	Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-31979 HIGH 7.8 KEV Local 2021-07-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-07-14	Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-34527 HIGH 8.8 KEV Réseau 2021-07-02 A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfull…	HIGH 8.8	Réseau	KEV	—	2021-07-02	A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfull…
CVE-2021-1675 HIGH 7.8 KEV Local 2021-06-08 Windows Print Spooler Remote Code Execution Vulnerability	HIGH 7.8	Local	KEV	—	2021-06-08	Windows Print Spooler Remote Code Execution Vulnerability
CVE-2021-33742 CRITICAL 7.5 KEV 2021-06-08 Windows MSHTML Platform Remote Code Execution Vulnerability	CRITICAL 7.5	—	KEV	—	2021-06-08	Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-33739 HIGH 8.4 KEV 2021-06-08 Microsoft DWM Core Library Elevation of Privilege Vulnerability	HIGH 8.4	—	KEV	—	2021-06-08	Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2021-31956 HIGH 7.8 KEV 2021-06-08 Windows NTFS Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-06-08	Windows NTFS Elevation of Privilege Vulnerability
CVE-2021-31955 HIGH 5.5 KEV 2021-06-08 Windows Kernel Information Disclosure Vulnerability	HIGH 5.5	—	KEV	—	2021-06-08	Windows Kernel Information Disclosure Vulnerability
CVE-2021-31201 HIGH 5.2 KEV 2021-06-08 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability	HIGH 5.2	—	KEV	—	2021-06-08	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-31199 HIGH 5.2 KEV 2021-06-08 Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability	HIGH 5.2	—	KEV	—	2021-06-08	Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
CVE-2021-31166 CRITICAL 9.8 KEV 2021-05-11 HTTP Protocol Stack Remote Code Execution Vulnerability	CRITICAL 9.8	—	KEV	—	2021-05-11	HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2021-28664 HIGH KEV 2021-05-01 Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.	HIGH	—	KEV	—	2021-05-01	Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.
CVE-2021-28663 HIGH KEV 2021-05-01 Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.	HIGH	—	KEV	—	2021-05-01	Indexée via Android Security Bulletin ; métadonnées NVD complètes à venir.