Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 30, 05:40 UTC
Added this week
8
0%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2021-26084
Ransomware
CO
Confluence
Atlassian
9.8Nov 3Nov 17Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
CVE-2020-10987AF
Ac15 Firmware
Tenda
9.8Nov 3May 3Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
CVE-2021-38647
Ransomware
AA
Azure Automation State Configuration, DSC Extension
Microsoft
9.8Nov 3Nov 17Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVE-2020-10189MA
ManageEngine ADSelfService Plus
Zoho
9.8Nov 3May 3Zoho ManageEngine Desktop Central File Upload Vulnerability
CVE-2020-10148OP
Orion Platform
SolarWinds
9.8Nov 3May 3SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands
CVE-2020-0646MN
Microsoft .NET Framework 3.0
Microsoft
9.8Nov 3May 3Microsoft .NET Framework Remote Code Execution Vulnerability
CVE-2021-22986
Ransomware
BB
BIG-IP; BIG-IQ
9.8Nov 3Nov 17F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
CVE-2019-5544
Ransomware
ES
ESXi
VMware
9.8Nov 3May 3VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
CVE-2019-4716PA
Planning Analytics
IBM
9.8Nov 3May 3IBM Planning Analytics Remote Code Execution Vulnerability
CVE-2019-3396
Ransomware
CO
Confluence
Atlassian
9.8Nov 3May 3Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability
CVE-2019-19781
Ransomware
AD
Application Delivery Controller Firmware
Citrix
9.8Nov 3May 3Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
CVE-2017-5638
Ransomware
ST
Struts
Apache
9.8Nov 3May 3The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload…
CVE-2021-35464
Ransomware
AM
Access Management
Forgerock
9.8Nov 3Nov 17ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
CVE-2019-18935
Ransomware
UF
UI For Asp.net Ajax
Telerik
9.8Nov 3May 3Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability
CVE-2021-35395RJ
Rtl819x Jungle Software Development Kit
Realtek
9.8Nov 3Nov 17Realtek AP-Router SDK Buffer Overflow Vulnerability
CVE-2019-16759VB
Vbulletin
Vbulletin
9.8Nov 3May 3vBulletin PHP Module Remote Code Execution Vulnerability
CVE-2019-16256SB
S@t Browser
Trustedconnectivityalliance
9.8Nov 3May 3SIMalliance Toolbox Browser Command Injection Vulnerability
CVE-2017-7269II
Internet Information Services
Microsoft
9.8Nov 3May 3Microsoft Windows Server Buffer Overflow Vulnerability
CVE-2021-37973CH
Chrome
Google
9.6Nov 3Nov 17Google Chromium Portals Use-After-Free Vulnerability
CVE-2020-15999CH
Chrome
Google
9.6Nov 3Nov 17Google Chrome FreeType Heap Buffer Overflow Vulnerability
CVE-2020-16017CH
Chrome
Google
9.6Nov 3May 3Google Chrome Use-After-Free Vulnerability
CVE-2021-30633CH
Chrome
Google
9.6Nov 3Nov 17Google Chromium Indexed DB API Use-After-Free Vulnerability
CVE-2020-16010CH
Chrome
Google
9.6Nov 3May 3Google Chrome for Android UI Heap Buffer Overflow Vulnerability
CVE-2020-4006WO
Workspace ONE Access
VMware
9.1Nov 3May 3Multiple VMware Products Command Injection Vulnerability
CVE-2012-3152FM
Fusion Middleware
Oracle
9.1Nov 3May 3Oracle Fusion Middleware Unspecified Vulnerability
CVE-2021-26855
Ransomware
ES
Exchange Server
Microsoft
9.1Nov 3May 3Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2020-4428DR
Data Risk Manager
IBM
9.1Nov 3May 3IBM Data Risk Manager Remote Code Execution Vulnerability
CVE-2021-34473
Ransomware
ES
Exchange Server
Microsoft
9.1Nov 3Nov 17Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2020-1040WI
Windows
Microsoft
9.0Nov 3May 3Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
CVE-2021-34523
Ransomware
ES
Exchange Server
Microsoft
9.0Nov 3Nov 17Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2017-6327MG
Messaging Gateway
Symantec Corporation
8.8Nov 3May 3Symantec Messaging Gateway Remote Code Execution Vulnerability
CVE-2020-10221RC
Rconfig
Rconfig
8.8Nov 3May 3rConfig OS Command Injection Vulnerability
CVE-2020-1020WI
Windows
Microsoft
8.8Nov 3May 3Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
CVE-2020-10199NE
Nexus
Sonatype
8.8Nov 3May 3Sonatype Nexus Repository Remote Code Execution Vulnerability
CVE-2021-21017AR
Acrobat Reader
Adobe
8.8Nov 3Nov 17Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
CVE-2019-17026FI
Firefox
Mozilla
8.8Nov 3May 3Mozilla Firefox And Thunderbird Type Confusion Vulnerability
CVE-2012-0158
Ransomware
OF
Office
Microsoft
8.8Nov 3May 3Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
CVE-2021-38003CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium V8 Memory Corruption Vulnerability
CVE-2021-21148CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium V8 Heap Buffer Overflow Vulnerability
CVE-2021-21166CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium Race Condition Vulnerability
CVE-2021-30762IO
iOS
Apple
8.8Nov 3Nov 17Apple iOS WebKit Use-After-Free Vulnerability
CVE-2021-30661MA
macOS
Apple
8.8Nov 3Nov 17Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
CVE-2020-0688
Ransomware
ES
Exchange Server
Microsoft
8.8Nov 3May 3Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
CVE-2021-30551CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium V8 Type Confusion Vulnerability
CVE-2020-5735AM
Amcrest
8.8Nov 3May 3Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
CVE-2021-30666IO
iOS
Apple
8.8Nov 3Nov 17Apple iOS WebKit Buffer Overflow Vulnerability
CVE-2021-37975CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium V8 Use-After-Free Vulnerability
CVE-2021-34527
Ransomware
WI
Windows
Microsoft
8.8Nov 3May 3Windows Print Spooler Remote Code Execution Vulnerability
CVE-2021-30663MA
macOS
Apple
8.8Nov 3Nov 17Apple Multiple Products WebKit Integer Overflow Vulnerability
CVE-2020-6418CH
Chrome
Google
8.8Nov 3May 3Google Chromium V8 Type Confusion Vulnerability
Page 32 of 36 · 1,765 total
1…313233…36