CISA KEV
Known exploited
The government must-patch list, mapped to our product index so you can go straight to the product affected.
Updated Oct 29, 22:01 UTC
Added this week
10
▲ 25%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
9
federalremediation deadlines
Total on KEV
1,765
since 2021all entries
| CVE | Product | CVSS | Added | Summary |
|---|---|---|---|---|
| CVE-2022-22954 Ransomware | WO Workspace ONE Access VMware | 9.8 | Apr 14 | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability |
| CVE-2018-20753 Ransomware | VS Virtual System Administrator Kaseya | 9.8 | Apr 13 | Kaseya VSA Remote Code Execution Vulnerability |
| CVE-2018-7602 Ransomware | DR Drupal Drupal | 9.8 | Apr 13 | Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004 |
| CVE-2022-24521 Ransomware | WI Windows Microsoft | 7.8 | Apr 13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2021-42278 Ransomware | WS Windows Server 2008 R2 Service Pack 1 Microsoft | 7.5 | Apr 11 | Active Directory Domain Services Elevation of Privilege Vulnerability |
| CVE-2021-42287 Ransomware | WS Windows Server 2008 R2 Service Pack 1 Microsoft | 7.5 | Apr 11 | Active Directory Domain Services Elevation of Privilege Vulnerability |
| CVE-2017-0148 Ransomware | WS Windows SMB Microsoft Corporation | 8.1 | Apr 6 | Microsoft SMBv1 Server Remote Code Execution Vulnerability |
| CVE-2018-10562 Ransomware | GR Gpon Router Firmware Dasannetworks | 9.8 | Mar 31 | Dasan GPON Routers Command Injection Vulnerability |
| CVE-2021-28799 Ransomware | H3 HBS 3 QNAP Systems Inc. | 9.8 | Mar 31 | Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync) |
| CVE-2021-20028 Ransomware | SS SonicWall SRA/SMA100 SonicWall | 9.8 | Mar 28 | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability |
| CVE-2013-2465 Ransomware | JR Jre Oracle | 9.8 | Mar 28 | Oracle Java SE Unspecified Vulnerability |
| CVE-2013-2551 Ransomware | IE Internet Explorer Microsoft | 8.8 | Mar 28 | Microsoft Internet Explorer Use-After-Free Vulnerability |
| CVE-2018-8440 Ransomware | WI Windows Microsoft | 7.8 | Mar 28 | Microsoft Windows Privilege Escalation Vulnerability |
| CVE-2021-38646 Ransomware | OF Office Microsoft | 7.8 | Mar 28 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability |
| CVE-2018-8405 Ransomware | WI Windows Microsoft | 7.8 | Mar 28 | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability |
| CVE-2016-0151 Ransomware | W1 Windows 10 1507 Microsoft | 7.8 | Mar 28 | Microsoft Windows CSRSS Security Feature Bypass Vulnerability |
| CVE-2018-8406 Ransomware | WI Windows Microsoft | 7.8 | Mar 28 | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability |
| CVE-2016-0189 Ransomware | IE Internet Explorer Microsoft | 7.5 | Mar 28 | Microsoft Internet Explorer Memory Corruption Vulnerability |
| CVE-2017-0213 Ransomware | WI Windows Microsoft | 7.3 | Mar 28 | Microsoft Windows Privilege Escalation Vulnerability |
| CVE-2021-26085 Ransomware | CO Confluence Atlassian | 5.3 | Mar 28 | Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability |
| CVE-2020-2021 Ransomware | PA PAN-OS Palo Alto Networks | 10.0 | Mar 25 | PAN-OS: Authentication Bypass in SAML Authentication |
| CVE-2018-11138 Ransomware | KS Kace System Management Appliance Quest | 9.8 | Mar 25 | Quest KACE System Management Appliance Remote Command Execution Vulnerability |
| CVE-2010-2861 Ransomware | CO ColdFusion Adobe | 9.8 | Mar 25 | Adobe ColdFusion Directory Traversal Vulnerability |
| CVE-2021-22941 Ransomware | CS Citrix ShareFile storage zones controller | 9.8 | Mar 25 | Citrix ShareFile Improper Access Control Vulnerability |
| CVE-2021-42237 Ransomware | EP Experience Platform Sitecore | 9.8 | Mar 25 | Sitecore XP Remote Command Execution Vulnerability |
| CVE-2018-1273 Ransomware | SF Spring Framework Spring by Pivotal | 9.8 | Mar 25 | Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of… |
| CVE-2019-15107 Ransomware | WE Webmin Webmin | 9.8 | Mar 25 | Webmin Command Injection Vulnerability |
| CVE-2019-11043 Ransomware | PH PHP PHP | 9.8 | Mar 25 | Underflow in PHP-FPM can lead to RCE |
| CVE-2017-0146 Ransomware | WI Windows Microsoft | 8.8 | Mar 25 | Microsoft Windows SMB Remote Code Execution Vulnerability |
| CVE-2017-12615 Ransomware | TO Tomcat Apache | 8.1 | Mar 25 | When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g |
| CVE-2022-21999 Ransomware | WI Windows Microsoft | 7.8 | Mar 25 | Windows Print Spooler Elevation of Privilege Vulnerability |
| CVE-2020-5135 Ransomware | SO SonicOS SonicWall | 9.8 | Mar 15 | SonicWall SonicOS Buffer Overflow Vulnerability |
| CVE-2015-2546 Ransomware | W1 Windows 10 1507 Microsoft | 8.2 | Mar 15 | Microsoft Win32k Memory Corruption Vulnerability |
| CVE-2019-1253 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability |
| CVE-2019-0543 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Privilege Escalation Vulnerability |
| CVE-2017-0101 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Transaction Manager Privilege Escalation Vulnerability |
| CVE-2019-1405 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability |
| CVE-2016-3309 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| CVE-2019-1322 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Privilege Escalation Vulnerability |
| CVE-2019-1315 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability |
| CVE-2019-1129 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability |
| CVE-2019-1069 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2019-1064 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Windows Elevation of Privilege Vulnerability |
| CVE-2019-0841 Ransomware | WI Windows Microsoft | 7.8 | Mar 15 | Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability |
| CVE-2018-8120 Ransomware | W7 Windows 7 Microsoft | 7.0 | Mar 15 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2009-3960 Ransomware | CO ColdFusion Adobe | 6.5 | Mar 7 | Adobe BlazeDS Information Disclosure Vulnerability |
| CVE-2016-4117 Ransomware | FP Flash Player Adobe | 9.8 | Mar 3 | Adobe Flash Player Arbitrary Code Execution Vulnerability |
| CVE-2012-4681 Ransomware | JD Jdk Oracle | 9.8 | Mar 3 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
| CVE-2012-0507 Ransomware | DL Debian Linux Debian | 9.8 | Mar 3 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability |
| CVE-2016-1019 Ransomware | AD Air Desktop Runtime Adobe | 9.8 | Mar 3 | Adobe Flash Player Arbitrary Code Execution Vulnerability |