Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 08:59 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2018-13382
Ransomware
FO
FortiOS
Fortinet
7.5Jan 10Jul 10Fortinet FortiOS and FortiProxy Improper Authorization
CVE-2018-13383
Ransomware
FO
FortiOS
Fortinet
6.5Jan 10Jul 10Fortinet FortiOS and FortiProxy Out-of-bounds Write
CVE-2013-3900W1
Windows 10 Version 1507
Microsoft
5.5Jan 10Jul 10WinVerifyTrust Signature Validation Vulnerability
CVE-2021-22017VS
vCenter Server
VMware
5.3Jan 10Jan 24VMware vCenter Server Improper Access Control
CVE-2021-4102CH
Chrome
Google
8.8Dec 15Dec 29Google Chromium V8 Use-After-Free Vulnerability
CVE-2021-43890
Ransomware
WI
Windows
Microsoft
7.1Dec 15Dec 29Windows AppX Installer Spoofing Vulnerability
CVE-2021-44228
Ransomware
LO
Log4j
Apache
10.0Dec 10Dec 24Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
CVE-2019-10758MO
MongoDB
MongoDB
9.9Dec 10Jun 10MongoDB mongo-express Remote Code Execution Vulnerability
CVE-2021-35394RJ
Rtl819x Jungle Software Development Kit
Realtek
9.8Dec 10Dec 24Realtek Jungle SDK Remote Code Execution Vulnerability
CVE-2020-17463FC
Fuel Cms
Thedaylightstudio
9.8Dec 10Jun 10Fuel CMS SQL Injection Vulnerability
CVE-2019-7238NR
Nexus Repository Manager
Sonatype
9.8Dec 10Jun 10Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
CVE-2021-44515MD
Manageengine Desktop Central
Zohocorp
9.8Dec 10Dec 24Zoho Desktop Central Authentication Bypass Vulnerability
CVE-2017-12149
Ransomware
JB
jbossas
Red Hat, Inc.
9.8Dec 10Jun 10Red Hat JBoss Application Server Remote Code Execution Vulnerability
CVE-2010-1871OB
Oncommand Balance
Netapp
8.8Dec 10Jun 10Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
CVE-2017-17562GO
Goahead
Embedthis
8.1Dec 10Jun 10Embedthis GoAhead Remote Code Execution Vulnerability
CVE-2021-44168FO
FortiOS
Fortinet
7.8Dec 10Dec 24Fortinet FortiOS Arbitrary File Download
CVE-2019-13272KE
Kernel
Linux
7.8Dec 10Jun 10Linux Kernel Improper Privilege Management Vulnerability
CVE-2020-8816PI
Pi-hole
Pi-hole
7.2Dec 10Jun 10Pi-Hole AdminLTE Remote Code Execution Vulnerability
CVE-2019-0193AS
Apache Solr
Apache
7.2Dec 10Jun 10Apache Solr DataImportHandler Code Injection Vulnerability
CVE-2021-44077MS
Manageengine Servicedesk Plus
Zohocorp
9.8Dec 1Dec 15Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
CVE-2021-37415MS
Manageengine Servicedesk Plus
Zohocorp
9.8Dec 1Dec 15Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
CVE-2018-14847RO
Routeros
Mikrotik
9.1Dec 1Jun 1MikroTik Router OS Directory Traversal Vulnerability
CVE-2021-40438
Ransomware
HS
HTTP Server
Apache
9.0Dec 1Dec 15mod_proxy SSRF
CVE-2020-11261SA
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Qualcomm, Inc.
7.8Dec 1Jun 1Qualcomm Multiple Chipsets Improper Input Validation Vulnerability
CVE-2021-42321
Ransomware
ES
Exchange Server
Microsoft
8.8Nov 17Dec 1Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-42292OF
Office
Microsoft
7.8Nov 17Dec 1Microsoft Excel Security Feature Bypass Vulnerability
CVE-2021-40449
Ransomware
WI
Windows
Microsoft
7.8Nov 17Dec 1Win32k Elevation of Privilege Vulnerability
CVE-2021-22204EX
ExifTool
ExifTool
7.8Nov 17Dec 1ExifTool Remote Code Execution Vulnerability
CVE-2020-1350WI
Windows
Microsoft
10.0Nov 3May 3Microsoft Windows DNS Server Remote Code Execution Vulnerability
CVE-2020-6287SN
SAP NetWeaver AS JAVA (LM Configuration Wizard)
SAP SE
10.0Nov 3May 3SAP NetWeaver Missing Authentication for Critical Function Vulnerability
CVE-2021-35211
Ransomware
SE
Serv-U
SolarWinds
10.0Nov 3Nov 17Serv-U Remote Memory Escape Vulnerability
CVE-2020-14871SO
Solaris Operating System
Oracle Corporation
10.0Nov 3May 3Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
CVE-2010-5326NA
Netweaver Application Server Java
Sap
10.0Nov 3May 3SAP NetWeaver Remote Code Execution Vulnerability
CVE-2021-22893
Ransomware
CS
Connect Secure
Ivanti
10.0Nov 3May 3Ivanti Pulse Connect Secure Use-After-Free Vulnerability
CVE-2021-22205
Ransomware
GI
GitLab
GitLab
10.0Nov 3Nov 17GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
CVE-2019-11510
Ransomware
CS
Connect Secure
Ivanti
10.0Nov 3May 3Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
CVE-2020-10181EM
Enhanced Multimedia Router Firmware
Sumavision
9.8Nov 3May 3Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability
CVE-2019-11634
Ransomware
RE
Receiver
Citrix
9.8Nov 3May 3Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
CVE-2019-11580
Ransomware
CR
Crowd
Atlassian
9.8Nov 3May 3Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
CVE-2017-9248SI
Sitefinity
Progress
9.8Nov 3May 3Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
CVE-2021-22502OB
Operation Bridge Reporter.
9.8Nov 3Nov 17Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
CVE-2021-22005
Ransomware
VS
vCenter Server
VMware
9.8Nov 3Nov 17VMware vCenter Server File Upload Vulnerability
CVE-2019-0708
Ransomware
WI
Windows
Microsoft
9.8Nov 3May 3Microsoft Remote Desktop Services Remote Code Execution Vulnerability
CVE-2019-0604
Ransomware
SH
SharePoint
Microsoft
9.8Nov 3May 3Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2021-21985
Ransomware
VS
vCenter Server
VMware
9.8Nov 3Nov 17VMware vCenter Server Improper Input Validation Vulnerability
CVE-2018-7600
Ransomware
DR
Drupal
Drupal
9.8Nov 3May 3Drupal Core Remote Code Execution Vulnerability
CVE-2018-6789
Ransomware
UL
Ubuntu Linux
Canonical
9.8Nov 3May 3Exim Buffer Overflow Vulnerability
CVE-2018-4939CO
ColdFusion
Adobe
9.8Nov 3May 3Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
CVE-2021-21972
Ransomware
VS
vCenter Server
VMware
9.8Nov 3Nov 17VMware vCenter Server Remote Code Execution Vulnerability
CVE-2021-31755AF
Ac11 Firmware
Tenda
9.8Nov 3Nov 17Tenda AC11 Router Stack Buffer Overflow Vulnerability
Page 30 of 36 · 1,765 total
1…293031…36