Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 29, 20:56 UTC
Added this week
10
▲ 25%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
All KEVRansomware-linked
1,765 entries
CVEProductCVSSAddedDue dateSummary
CVE-2020-8467AO
Apex One
Trend Micro
8.8Nov 3May 3Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
CVE-2020-8468AO
Apex One
Trend Micro
8.8Nov 3May 3Trend Micro Multiple Products Content Validation Escape Vulnerability
CVE-2021-28550AR
Acrobat Reader
Adobe
8.8Nov 3Nov 17Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution
CVE-2021-26411
Ransomware
IE
Internet Explorer 11
Microsoft
8.8Nov 3Nov 17Internet Explorer Memory Corruption Vulnerability
CVE-2020-9818IO
iOS
Apple
8.8Nov 3May 3Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
CVE-2021-30563CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium V8 Type Confusion Vulnerability
CVE-2021-30761IO
iOS
Apple
8.8Nov 3Nov 17Apple iOS WebKit Memory Corruption Vulnerability
CVE-2017-9822
Ransomware
DC
DotNetNuke CMS Fixed in 9.1.1
DotNetNuke
8.8Nov 3May 3DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
CVE-2017-0143
Ransomware
WI
Windows
Microsoft
8.8Nov 3May 3Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
CVE-2021-22899CS
Connect Secure
Ivanti
8.8Nov 3May 3Ivanti Pulse Connect Secure Command Injection Vulnerability
CVE-2021-30665MA
macOS
Apple
8.8Nov 3Nov 17Apple Multiple Products WebKit Memory Corruption Vulnerability
CVE-2021-22894CS
Connect Secure
Ivanti
8.8Nov 3May 3Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
CVE-2021-30858IO
iOS
Apple
8.8Nov 3Nov 17Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
CVE-2021-28663BG
Bifrost Gpu Kernel Driver
Arm
8.8Nov 3Nov 17Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
CVE-2019-0541OF
Office
Microsoft
8.8Nov 3May 3Microsoft MSHTML Remote Code Execution Vulnerability
CVE-2020-16013CH
Chrome
Google
8.8Nov 3May 3Google Chromium V8 Incorrect Implementation Vulnerabililty
CVE-2020-16009CH
Chrome
Google
8.8Nov 3May 3Google Chromium V8 Type Confusion Vulnerability
CVE-2019-3398CO
Confluence
Atlassian
8.8Nov 3May 3Atlassian Confluence Server and Data Center Path Traversal Vulnerability
CVE-2019-15949NX
Nagios XI
Nagios
8.8Nov 3May 3Nagios XI Remote Code Execution Vulnerability
CVE-2014-1812
Ransomware
WI
Windows
Microsoft
8.8Nov 3May 3Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability
CVE-2018-0798OF
Office
Microsoft
8.8Nov 3May 3Microsoft Office Memory Corruption Vulnerability
CVE-2021-21193CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium Blink Use-After-Free Vulnerability
CVE-2021-21206CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium Blink Use-After-Free Vulnerability
CVE-2020-3118CI
Cisco IOS XR Software
Cisco
8.8Nov 3May 3Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability
CVE-2019-9082OS
Open Source Background Management System
Opensourcebms
8.8Nov 3May 3ThinkPHP Remote Code Execution Vulnerability
CVE-2021-40444
Ransomware
W1
Windows 10 Version 1507
Microsoft
8.8Nov 3Nov 17Microsoft MSHTML Remote Code Execution Vulnerability
CVE-2021-27085IE
Internet Explorer 11
Microsoft
8.8Nov 3Nov 17Internet Explorer Remote Code Execution Vulnerability
CVE-2021-28664BG
Bifrost Gpu Kernel Driver
Arm
8.8Nov 3Nov 17Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
CVE-2021-21220CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium V8 Improper Input Validation Vulnerability
CVE-2021-21224CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium V8 Type Confusion Vulnerability
CVE-2021-30554CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium WebGL Use-After-Free Vulnerability
CVE-2021-36741AO
Apex One
Trend Micro
8.8Nov 3Nov 17Trend Micro Multiple Products Improper Input Validation Vulnerability
CVE-2021-30632CH
Chrome
Google
8.8Nov 3Nov 17Google Chromium V8 Out-of-Bounds Write Vulnerability
CVE-2020-3566CI
Cisco IOS XR Software
Cisco
8.6Nov 3May 3Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
CVE-2020-3569CI
Cisco IOS XR Software
Cisco
8.6Nov 3May 3Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities
CVE-2021-33739WI
Windows
Microsoft
8.4Nov 3Nov 17Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2020-17144ES
Exchange Server
Microsoft
8.4Nov 3May 3Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-6820FI
Firefox
Mozilla
8.1Nov 3May 3Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
CVE-2017-9805ST
Struts
Apache
8.1Nov 3May 3The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type…
CVE-2020-0601WI
Windows
Microsoft
8.1Nov 3May 3Microsoft Windows CryptoAPI Spoofing Vulnerability
CVE-2018-11776ST
Struts
Apache
8.1Nov 3May 3Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like…
CVE-2020-6819FI
Firefox
Mozilla
8.1Nov 3May 3Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
CVE-2021-31956WI
Windows
Microsoft
7.8Nov 3Nov 17Windows NTFS Elevation of Privilege Vulnerability
CVE-2021-28310W1
Windows 10 Version 1803
Microsoft
7.8Nov 3Nov 17Win32k Elevation of Privilege Vulnerability
CVE-2021-27102
Ransomware
FT
FTA
Accellion
7.8Nov 3Nov 17Accellion FTA OS Command Injection Vulnerability
CVE-2021-27065
Ransomware
ES
Exchange Server
Microsoft
7.8Nov 3May 3Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26858
Ransomware
ES
Exchange Server
Microsoft
7.8Nov 3May 3Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26857
Ransomware
ES
Exchange Server
Microsoft
7.8Nov 3May 3Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-23874MT
McAfee Total Protection (MTP)
McAfee,LLC
7.8Nov 3Nov 17McAfee Total Protection (MTP) privilege escalation vulnerability
CVE-2021-1905SA
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Qualcomm, Inc.
7.8Nov 3May 3Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Page 33 of 36 · 1,765 total
1…323334…36