Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2016-0151 | The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a… | Microsoft / Client-Server Run-time Subsystem (CSRSS) | Mar 28, 2022 | Ransomware | View → |
| CVE-2016-0189 | The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or… | Microsoft / Internet Explorer | Mar 28, 2022 | Ransomware | View → |
| CVE-2016-7200 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service… | Microsoft / Edge | Mar 28, 2022 | — | View → |
| CVE-2016-7201 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute remote code or cause a denial of service… | Microsoft / Edge | Mar 28, 2022 | — | View → |
| CVE-2017-0037 | Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution. | Microsoft / Edge and Internet Explorer | Mar 28, 2022 | — | View → |
| CVE-2017-0059 | Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site. | Microsoft / Internet Explorer | Mar 28, 2022 | — | View → |
| CVE-2017-0213 | Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application. | Microsoft / Windows | Mar 28, 2022 | Ransomware | View → |
| CVE-2018-8405 | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory. | Microsoft / DirectX Graphics Kernel (DXGKRNL) | Mar 28, 2022 | Ransomware | View → |
| CVE-2018-8406 | An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory. | Microsoft / DirectX Graphics Kernel (DXGKRNL) | Mar 28, 2022 | Ransomware | View → |
| CVE-2018-8440 | An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). | Microsoft / Windows | Mar 28, 2022 | Ransomware | View → |
| CVE-2019-7483 | In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the… | SonicWall / SMA100 | Mar 28, 2022 | — | View → |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection. | SonicWall / Secure Remote Access (SRA) | Mar 28, 2022 | Ransomware | View → |
| CVE-2021-26085 | Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary… | Atlassian / Confluence Server | Mar 28, 2022 | Ransomware | View → |
| CVE-2021-34486 | Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation. | Microsoft / Windows | Mar 28, 2022 | — | View → |
| CVE-2021-38646 | Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution. | Microsoft / Office | Mar 28, 2022 | Ransomware | View → |
| CVE-2022-0543 | Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution. | Redis / Debian-specific Redis Servers | Mar 28, 2022 | — | View → |
| CVE-2022-1096 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via… | Google / Chromium V8 | Mar 28, 2022 | — | View → |
| CVE-2005-2773 | HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system. | Hewlett Packard (HP) / OpenView Network Node Manager | Mar 25, 2022 | — | View → |
| CVE-2009-0927 | Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code. | Adobe / Reader and Acrobat | Mar 25, 2022 | — | View → |
| CVE-2009-1151 | Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated… | phpMyAdmin / phpMyAdmin | Mar 25, 2022 | — | View → |