Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2013-7331 | An information disclosure vulnerability exists in Internet Explorer which allows resources loaded into memory to be queried. This… | Microsoft / Internet Explorer | May 25, 2022 | — | View → |
| CVE-2014-0546 | Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a… | Adobe / Reader and Acrobat | May 25, 2022 | — | View → |
| CVE-2014-2817 | Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site. | Microsoft / Internet Explorer | May 25, 2022 | — | View → |
| CVE-2014-3153 | The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows… | Linux / Kernel | May 25, 2022 | — | View → |
| CVE-2014-4077 | Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is… | Microsoft / Input Method Editor (IME) Japanese | May 25, 2022 | — | View → |
| CVE-2014-4123 | Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site. | Microsoft / Internet Explorer | May 25, 2022 | — | View → |
| CVE-2014-4148 | A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts. | Microsoft / Windows | May 25, 2022 | — | View → |
| CVE-2014-8439 | Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution. | Adobe / Flash Player | May 25, 2022 | — | View → |
| CVE-2015-0016 | Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate… | Microsoft / Windows | May 25, 2022 | — | View → |
| CVE-2015-0071 | Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a… | Microsoft / Internet Explorer | May 25, 2022 | — | View → |
| CVE-2015-0310 | Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout… | Adobe / Flash Player | May 25, 2022 | — | View → |
| CVE-2015-1671 | A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly… | Microsoft / Windows | May 25, 2022 | — | View → |
| CVE-2015-1769 | A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links. | Microsoft / Windows | May 25, 2022 | — | View → |
| CVE-2015-2360 | Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS). | Microsoft / Win32k | May 25, 2022 | — | View → |
| CVE-2015-2425 | Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause… | Microsoft / Internet Explorer | May 25, 2022 | — | View → |
| CVE-2015-4495 | Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges. | Mozilla / Firefox | May 25, 2022 | — | View → |
| CVE-2015-6175 | The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application. | Microsoft / Windows | May 25, 2022 | — | View → |
| CVE-2015-8651 | Integer overflow in Adobe Flash Player allows attackers to execute code. | Adobe / Flash Player | May 25, 2022 | — | View → |
| CVE-2016-0034 | Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a… | Microsoft / Silverlight | May 25, 2022 | Ransomware | View → |
| CVE-2016-0984 | Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code. | Adobe / Flash Player and AIR | May 25, 2022 | — | View → |