Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2021-21551 | Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service… | Dell / dbutil Driver | Mar 31, 2022 | — | View → |
| CVE-2021-28799 | QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device. | QNAP / Network Attached Storage (NAS) | Mar 31, 2022 | Ransomware | View → |
| CVE-2021-34484 | Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Mar 31, 2022 | — | View → |
| CVE-2022-1040 | An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution. | Sophos / Firewall | Mar 31, 2022 | — | View → |
| CVE-2022-26871 | An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution. | Trend Micro / Apex Central | Mar 31, 2022 | — | View → |
| CVE-2010-4398 | Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain… | Microsoft / Windows | Mar 28, 2022 | — | View → |
| CVE-2011-2005 | afd.sys in the Ancillary Function Driver in Microsoft Windows does not properly validate user-mode input passed to kernel mode, which… | Microsoft / Ancillary Function Driver (afd.sys) | Mar 28, 2022 | — | View → |
| CVE-2012-0518 | Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to… | Oracle / Fusion Middleware | Mar 28, 2022 | — | View → |
| CVE-2012-2034 | Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS). | Adobe / Flash Player | Mar 28, 2022 | — | View → |
| CVE-2012-2539 | Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data. | Microsoft / Word | Mar 28, 2022 | — | View → |
| CVE-2012-5076 | The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and… | Oracle / Java SE | Mar 28, 2022 | — | View → |
| CVE-2013-1690 | Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote… | Mozilla / Firefox and Thunderbird | Mar 28, 2022 | — | View → |
| CVE-2013-2465 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect… | Oracle / Java SE | Mar 28, 2022 | Ransomware | View → |
| CVE-2013-2551 | Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that… | Microsoft / Internet Explorer | Mar 28, 2022 | Ransomware | View → |
| CVE-2013-2729 | Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code. | Adobe / Reader and Acrobat | Mar 28, 2022 | — | View → |
| CVE-2013-3660 | The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the… | Microsoft / Win32k | Mar 28, 2022 | — | View → |
| CVE-2015-1770 | Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document. | Microsoft / Office | Mar 28, 2022 | — | View → |
| CVE-2015-2419 | JScript in Microsoft Internet Explorer allows remote attackers to execute remote code or cause a denial of service (memory corruption) via… | Microsoft / Internet Explorer | Mar 28, 2022 | — | View → |
| CVE-2015-2426 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially… | Microsoft / Windows | Mar 28, 2022 | — | View → |
| CVE-2016-0040 | The kernel in Microsoft Windows allows local users to gain privileges via a crafted application. | Microsoft / Windows | Mar 28, 2022 | — | View → |