Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2022-21999 | Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation. | Microsoft / Windows | Mar 25, 2022 | Ransomware | View → |
| CVE-2022-26143 | A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access… | Mitel / MiCollab, MiVoice Business Express | Mar 25, 2022 | — | View → |
| CVE-2022-26318 | On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code. | WatchGuard / Firebox and XTM Appliances | Mar 25, 2022 | — | View → |
| CVE-2015-2546 | The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application. | Microsoft / Win32k | Mar 15, 2022 | Ransomware | View → |
| CVE-2016-3309 | A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who… | Microsoft / Windows | Mar 15, 2022 | Ransomware | View → |
| CVE-2017-0101 | A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. | Microsoft / Windows | Mar 15, 2022 | Ransomware | View → |
| CVE-2018-8120 | A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. | Microsoft / Win32k | Mar 15, 2022 | Ransomware | View → |
| CVE-2019-0543 | A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully… | Microsoft / Windows | Mar 15, 2022 | Ransomware | View → |
| CVE-2019-0841 | A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited… | Microsoft / Windows | Mar 15, 2022 | Ransomware | View → |
| CVE-2019-1064 | A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited… | Microsoft / Windows | Mar 15, 2022 | Ransomware | View → |
| CVE-2019-1069 | A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations. | Microsoft / Task Scheduler | Mar 15, 2022 | Ransomware | View → |
| CVE-2019-1129 | A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited… | Microsoft / Windows | Mar 15, 2022 | Ransomware | View → |
| CVE-2019-1132 | A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. | Microsoft / Win32k | Mar 15, 2022 | — | View → |
| CVE-2019-1253 | A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions. | Microsoft / Windows | Mar 15, 2022 | Ransomware | View → |
| CVE-2019-1315 | A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who… | Microsoft / Windows | Mar 15, 2022 | Ransomware | View → |
| CVE-2019-1322 | A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully… | Microsoft / Windows | Mar 15, 2022 | Ransomware | View → |
| CVE-2019-1405 | A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation. | Microsoft / Windows | Mar 15, 2022 | Ransomware | View → |
| CVE-2020-5135 | A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary… | SonicWall / SonicOS | Mar 15, 2022 | Ransomware | View → |
| CVE-2009-3960 | Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure. | Adobe / BlazeDS | Mar 7, 2022 | Ransomware | View → |
| CVE-2013-0625 | Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access. | Adobe / ColdFusion | Mar 7, 2022 | — | View → |