Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2016-1010 | Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code. | Adobe / Flash Player and AIR | May 25, 2022 | — | View → |
| CVE-2016-3393 | A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who… | Microsoft / Windows | May 25, 2022 | — | View → |
| CVE-2016-7256 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An… | Microsoft / Windows | May 25, 2022 | — | View → |
| CVE-2019-3010 | Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation. | Oracle / Solaris | May 25, 2022 | — | View → |
| CVE-2016-0162 | An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow… | Microsoft / Internet Explorer | May 24, 2022 | — | View → |
| CVE-2016-3298 | An information disclosure vulnerability exists when the Microsoft Internet Messaging API improperly handles objects in memory. An attacker… | Microsoft / Internet Explorer | May 24, 2022 | — | View → |
| CVE-2016-3351 | An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory.… | Microsoft / Internet Explorer and Edge | May 24, 2022 | Ransomware | View → |
| CVE-2016-4655 | The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application. | Apple / iOS | May 24, 2022 | — | View → |
| CVE-2016-4656 | A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a… | Apple / iOS | May 24, 2022 | — | View → |
| CVE-2016-4657 | Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service… | Apple / iOS | May 24, 2022 | — | View → |
| CVE-2016-6366 | A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to… | Cisco / Adaptive Security Appliance (ASA) | May 24, 2022 | — | View → |
| CVE-2016-6367 | A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a… | Cisco / Adaptive Security Appliance (ASA) | May 24, 2022 | — | View → |
| CVE-2017-0005 | The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application. | Microsoft / Windows | May 24, 2022 | — | View → |
| CVE-2017-0022 | Microsoft XML Core Services (MSXML) improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web… | Microsoft / XML Core Services | May 24, 2022 | — | View → |
| CVE-2017-0147 | The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet. | Microsoft / SMBv1 server | May 24, 2022 | Ransomware | View → |
| CVE-2017-0149 | Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a… | Microsoft / Internet Explorer | May 24, 2022 | — | View → |
| CVE-2017-0210 | A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an… | Microsoft / Internet Explorer | May 24, 2022 | — | View → |
| CVE-2017-18362 | ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the… | Kaseya / Virtual System/Server Administrator (VSA) | May 24, 2022 | Ransomware | View → |
| CVE-2017-8291 | Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile. | Artifex / Ghostscript | May 24, 2022 | — | View → |
| CVE-2017-8543 | Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory. | Microsoft / Windows | May 24, 2022 | — | View → |