CISA KEV

Actively exploited vulnerabilities (CISA KEV)

25 entries

All CVEs 16,158 CISA KEV 285 All severities Critical High Medium Low Hide N/A

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

CVE	Severity	Vector	KEV	Apps	Published	Description
CVE-2025-59287 CRITICAL 9.8 KEV 2025-10-14 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability	CRITICAL 9.8	—	KEV	—	2025-10-14	Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
CVE-2024-9680 CRITICAL 9.8 KEV Network 1 apps 2024-10-09 An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner…	CRITICAL 9.8	Network	KEV	1	2024-10-09	An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner…
CVE-2022-26923 CRITICAL 8.8 KEV 2022-05-10 Active Directory Domain Services Elevation of Privilege Vulnerability	CRITICAL 8.8	—	KEV	—	2022-05-10	Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2021-33742 CRITICAL 7.5 KEV 2021-06-08 Windows MSHTML Platform Remote Code Execution Vulnerability	CRITICAL 7.5	—	KEV	—	2021-06-08	Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-1675 CRITICAL 7.8 KEV 2021-06-08 Windows Print Spooler Remote Code Execution Vulnerability	CRITICAL 7.8	—	KEV	—	2021-06-08	Windows Print Spooler Remote Code Execution Vulnerability
CVE-2021-31166 CRITICAL 9.8 KEV 2021-05-11 HTTP Protocol Stack Remote Code Execution Vulnerability	CRITICAL 9.8	—	KEV	—	2021-05-11	HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2020-1472 CRITICAL 10.0 KEV 2020-08-11 Netlogon Elevation of Privilege Vulnerability	CRITICAL 10.0	—	KEV	—	2020-08-11	Netlogon Elevation of Privilege Vulnerability
CVE-2020-1350 CRITICAL 10.0 KEV 2020-07-14 Windows DNS Server Remote Code Execution Vulnerability	CRITICAL 10.0	—	KEV	—	2020-07-14	Windows DNS Server Remote Code Execution Vulnerability
CVE-2020-1040 CRITICAL 8.0 KEV 2020-07-14 Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability	CRITICAL 8.0	—	KEV	—	2020-07-14	Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
CVE-2020-1020 CRITICAL 7.8 KEV 2020-04-14 Adobe Font Manager Library Remote Code Execution Vulnerability	CRITICAL 7.8	—	KEV	—	2020-04-14	Adobe Font Manager Library Remote Code Execution Vulnerability
CVE-2020-0938 CRITICAL 7.8 KEV 2020-04-14 Adobe Font Manager Library Remote Code Execution Vulnerability	CRITICAL 7.8	—	KEV	—	2020-04-14	Adobe Font Manager Library Remote Code Execution Vulnerability
CVE-2020-0796 CRITICAL 10.0 KEV 2020-03-10 Windows SMBv3 Client/Server Remote Code Execution Vulnerability	CRITICAL 10.0	—	KEV	—	2020-03-10	Windows SMBv3 Client/Server Remote Code Execution Vulnerability
CVE-2019-11708 CRITICAL 10.0 KEV Network 1 apps 2019-07-23 Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op…	CRITICAL 10.0	Network	KEV	1	2019-07-23	Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op…
CVE-2019-0903 CRITICAL 8.8 KEV 2019-05-14 GDI+ Remote Code Execution Vulnerability	CRITICAL 8.8	—	KEV	—	2019-05-14	GDI+ Remote Code Execution Vulnerability
CVE-2018-8174 CRITICAL 7.5 KEV 2018-05-08 Windows VBScript Engine Remote Code Execution Vulnerability	CRITICAL 7.5	—	KEV	—	2018-05-08	Windows VBScript Engine Remote Code Execution Vulnerability
CVE-2017-8543 CRITICAL 8.1 KEV 2017-06-13 Windows Search Remote Code Execution Vulnerability	CRITICAL 8.1	—	KEV	—	2017-06-13	Windows Search Remote Code Execution Vulnerability
CVE-2017-8464 CRITICAL 7.5 KEV 2017-06-13 LNK Remote Code Execution Vulnerability	CRITICAL 7.5	—	KEV	—	2017-06-13	LNK Remote Code Execution Vulnerability
CVE-2017-0148 CRITICAL 8.1 KEV 2017-03-14 Windows SMB Remote Code Execution Vulnerability	CRITICAL 8.1	—	KEV	—	2017-03-14	Windows SMB Remote Code Execution Vulnerability
CVE-2017-0146 CRITICAL 8.1 KEV 2017-03-14 Windows SMB Remote Code Execution Vulnerability	CRITICAL 8.1	—	KEV	—	2017-03-14	Windows SMB Remote Code Execution Vulnerability
CVE-2017-0145 CRITICAL 8.1 KEV 2017-03-14 Windows SMB Remote Code Execution Vulnerability	CRITICAL 8.1	—	KEV	—	2017-03-14	Windows SMB Remote Code Execution Vulnerability
CVE-2017-0144 CRITICAL 8.1 KEV 2017-03-14 Windows SMB Remote Code Execution Vulnerability	CRITICAL 8.1	—	KEV	—	2017-03-14	Windows SMB Remote Code Execution Vulnerability
CVE-2017-0143 CRITICAL 8.1 KEV 2017-03-14 Windows SMB Remote Code Execution Vulnerability	CRITICAL 8.1	—	KEV	—	2017-03-14	Windows SMB Remote Code Execution Vulnerability
CVE-2016-7256 CRITICAL 8.8 KEV 2016-11-08 Microsoft Graphics Remote Code Execution Vulnerability	CRITICAL 8.8	—	KEV	—	2016-11-08	Microsoft Graphics Remote Code Execution Vulnerability
CVE-2016-3393 CRITICAL 8.8 KEV 2016-10-11 GDI+ Remote Code Execution Vulnerability	CRITICAL 8.8	—	KEV	—	2016-10-11	GDI+ Remote Code Execution Vulnerability
CVE-2010-3765 CRITICAL 9.8 KEV Network 1 apps 2010-10-28 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when Ja…	CRITICAL 9.8	Network	KEV	1	2010-10-28	Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when Ja…