CISA KEV

Actively exploited vulnerabilities (CISA KEV)

286 entries

All CVEs 16,390 CISA KEV 286 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2021-1906 MEDIUM KEV 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	MEDIUM	—	KEV	—	2021-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-1905 HIGH KEV 2021-05-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-05-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2021-28310 HIGH 7.8 KEV 2021-04-13 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2021-04-13	Win32k Elevation of Privilege Vulnerability
CVE-2021-1732 HIGH 7.8 KEV Local 2021-02-25 Windows Win32k Elevation of Privilege Vulnerability	HIGH 7.8	Local	KEV	—	2021-02-25	Windows Win32k Elevation of Privilege Vulnerability
CVE-2020-11261 HIGH KEV 2021-01-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2021-01-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-17087 HIGH 7.8 KEV 2020-11-10 Windows Kernel Local Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2020-11-10	Windows Kernel Local Elevation of Privilege Vulnerability
CVE-2020-15999 CRITICAL 9.6 KEV Network 2020-11-03 Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…	CRITICAL 9.6	Network	KEV	—	2020-11-03	Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa…
CVE-2020-1472 CRITICAL 10.0 KEV 2020-08-11 Netlogon Elevation of Privilege Vulnerability	CRITICAL 10.0	—	KEV	—	2020-08-11	Netlogon Elevation of Privilege Vulnerability
CVE-2020-1464 HIGH 5.3 KEV 2020-08-11 Windows Spoofing Vulnerability	HIGH 5.3	—	KEV	—	2020-08-11	Windows Spoofing Vulnerability
CVE-2020-1350 CRITICAL 10.0 KEV 2020-07-14 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 10.0	—	KEV	—	2020-07-14	Windows DNS Server Remote Code Execution Vulnerability
CVE-2020-1040 CRITICAL 8.0 KEV 2020-07-14 Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability	CRITICAL 8.0	—	KEV	—	2020-07-14	Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
CVE-2020-0986 HIGH KEV 2020-06-09 Windows Kernel Elevation of Privilege Vulnerability	HIGH	—	KEV	—	2020-06-09	Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-1054 HIGH 7.0 KEV 2020-05-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2020-05-12	Win32k Elevation of Privilege Vulnerability
CVE-2020-6820 HIGH 8.1 KEV Network 1 apps 2020-04-24 Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing thi…	HIGH 8.1	Network	KEV	1	2020-04-24	Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing thi…
CVE-2020-6819 HIGH 8.1 KEV Network 1 apps 2020-04-24 Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abu…	HIGH 8.1	Network	KEV	1	2020-04-24	Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abu…
CVE-2020-1027 HIGH 7.8 KEV 2020-04-14 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2020-04-14	Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-1020 CRITICAL 7.8 KEV 2020-04-14 Adobe Font Manager Library Remote Code Execution Vulnerability	CRITICAL 7.8	—	KEV	—	2020-04-14	Adobe Font Manager Library Remote Code Execution Vulnerability
CVE-2020-0938 CRITICAL 7.8 KEV 2020-04-14 Adobe Font Manager Library Remote Code Execution Vulnerability	CRITICAL 7.8	—	KEV	—	2020-04-14	Adobe Font Manager Library Remote Code Execution Vulnerability
CVE-2020-0796 CRITICAL 10.0 KEV Network 2020-03-12 A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S…	CRITICAL 10.0	Network	KEV	—	2020-03-12	A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows S…
CVE-2020-0787 HIGH 7.8 KEV Local 2020-03-12 An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows …	HIGH 7.8	Local	KEV	—	2020-03-12	An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows …
CVE-2019-17026 HIGH 8.8 KEV Network 1 apps 2020-03-02 Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild a…	HIGH 8.8	Network	KEV	1	2020-03-02	Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild a…
CVE-2020-0069 HIGH KEV 2020-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2020-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0041 HIGH KEV 2020-03-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2020-03-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2020-0683 HIGH 7.0 KEV 2020-02-11 Windows Installer Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2020-02-11	Windows Installer Elevation of Privilege Vulnerability
CVE-2019-18426 HIGH 8.2 KEV Network 1 apps 2020-01-21 A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and l…	HIGH 8.2	Network	KEV	1	2020-01-21	A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and l…
CVE-2020-0638 HIGH 7.8 KEV Local 2020-01-14 An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first …	HIGH 7.8	Local	KEV	—	2020-01-14	An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first …
CVE-2020-0601 HIGH 8.1 KEV 2020-01-14 Windows CryptoAPI Spoofing Vulnerability	HIGH 8.1	—	KEV	—	2020-01-14	Windows CryptoAPI Spoofing Vulnerability
CVE-2019-1458 HIGH 7.8 KEV Local 2019-12-10 An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…	HIGH 7.8	Local	KEV	—	2019-12-10	An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privil…
CVE-2019-1405 HIGH 7.8 KEV Local 2019-11-12 An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP…	HIGH 7.8	Local	KEV	—	2019-11-12	An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP…
CVE-2019-1385 HIGH 7.8 KEV Local 2019-11-12 An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to sys…	HIGH 7.8	Local	KEV	—	2019-11-12	An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to sys…
CVE-2019-1388 HIGH 7.8 KEV 2019-11-12 Windows Certificate Dialog Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-11-12	Windows Certificate Dialog Elevation of Privilege Vulnerability
CVE-2019-1322 HIGH 7.0 KEV 2019-10-08 Microsoft Windows Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2019-10-08	Microsoft Windows Elevation of Privilege Vulnerability
CVE-2019-1315 HIGH 7.8 KEV 2019-10-08 Windows Error Reporting Manager Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-10-08	Windows Error Reporting Manager Elevation of Privilege Vulnerability
CVE-2019-2215 HIGH KEV 2019-10-01 Indexed via Android Security Bulletin; full NVD metadata pending.	HIGH	—	KEV	—	2019-10-01	Indexed via Android Security Bulletin; full NVD metadata pending.
CVE-2019-1253 HIGH 7.8 KEV 2019-09-10 Windows Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-09-10	Windows Elevation of Privilege Vulnerability
CVE-2019-1215 HIGH 7.8 KEV 2019-09-10 Windows Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-09-10	Windows Elevation of Privilege Vulnerability
CVE-2019-1214 HIGH 7.8 KEV 2019-09-10 Windows Common Log File System Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-09-10	Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2019-11708 CRITICAL 10.0 KEV Network 1 apps 2019-07-23 Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op…	CRITICAL 10.0	Network	KEV	1	2019-07-23	Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op…
CVE-2019-11707 HIGH 8.8 KEV Network 1 apps 2019-07-23 A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware…	HIGH 8.8	Network	KEV	1	2019-07-23	A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware…
CVE-2019-1130 HIGH 7.8 KEV Local 2019-07-15 An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…	HIGH 7.8	Local	KEV	—	2019-07-15	An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…
CVE-2019-1129 HIGH 7.8 KEV 2019-07-09 Windows Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-07-09	Windows Elevation of Privilege Vulnerability
CVE-2019-0880 HIGH 7.0 KEV 2019-07-09 Microsoft splwow64 Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2019-07-09	Microsoft splwow64 Elevation of Privilege Vulnerability
CVE-2019-1069 HIGH 7.8 KEV Local 2019-06-12 An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited …	HIGH 7.8	Local	KEV	—	2019-06-12	An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited …
CVE-2019-1064 HIGH 7.8 KEV 2019-06-11 Windows Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-06-11	Windows Elevation of Privilege Vulnerability
CVE-2019-0903 CRITICAL 8.8 KEV 2019-05-14 GDI+ Remote Code Execution Vulnerability	CRITICAL 8.8	—	KEV	—	2019-05-14	GDI+ Remote Code Execution Vulnerability
CVE-2019-0863 HIGH 7.8 KEV 2019-05-14 Windows Error Reporting Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-05-14	Windows Error Reporting Elevation of Privilege Vulnerability
CVE-2019-0859 HIGH 7.8 KEV 2019-04-09 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	KEV	—	2019-04-09	Win32k Elevation of Privilege Vulnerability
CVE-2019-0841 HIGH 6.8 KEV 2019-04-09 Windows Elevation of Privilege Vulnerability	HIGH 6.8	—	KEV	—	2019-04-09	Windows Elevation of Privilege Vulnerability
CVE-2019-0803 HIGH 7.0 KEV 2019-04-09 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2019-04-09	Win32k Elevation of Privilege Vulnerability
CVE-2019-0797 HIGH 7.0 KEV 2019-03-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.0	—	KEV	—	2019-03-12	Win32k Elevation of Privilege Vulnerability