Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2015-2545 | Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image. | Microsoft / Office | Mar 3, 2022 | — | View → |
| CVE-2015-2590 | An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution. | Oracle / Java SE | Mar 3, 2022 | — | View → |
| CVE-2015-3043 | A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution. | Adobe / Flash Player | Mar 3, 2022 | — | View → |
| CVE-2015-4902 | Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment. | Oracle / Java SE | Mar 3, 2022 | — | View → |
| CVE-2015-5119 | A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform… | Adobe / Flash Player | Mar 3, 2022 | — | View → |
| CVE-2015-7645 | Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file. | Adobe / Flash Player | Mar 3, 2022 | Ransomware | View → |
| CVE-2016-0099 | A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request… | Microsoft / Windows | Mar 3, 2022 | Ransomware | View → |
| CVE-2016-1019 | Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code. | Adobe / Flash Player | Mar 3, 2022 | Ransomware | View → |
| CVE-2016-4117 | An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote… | Adobe / Flash Player | Mar 3, 2022 | Ransomware | View → |
| CVE-2016-5195 | Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges. | Linux / Kernel | Mar 3, 2022 | — | View → |
| CVE-2016-7193 | Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution. | Microsoft / Office | Mar 3, 2022 | — | View → |
| CVE-2016-7262 | A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the… | Microsoft / Excel | Mar 3, 2022 | — | View → |
| CVE-2016-7855 | Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code. | Adobe / Flash Player | Mar 3, 2022 | — | View → |
| CVE-2016-8562 | An improper privilege management vulnerability exists within the Siemens SIMATIC Communication Processor (CP) that allows a privileged… | Siemens / SIMATIC CP | Mar 3, 2022 | — | View → |
| CVE-2017-0001 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;… | Microsoft / Graphics Device Interface (GDI) | Mar 3, 2022 | — | View → |
| CVE-2017-0261 | Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution. | Microsoft / Office | Mar 3, 2022 | — | View → |
| CVE-2017-11292 | Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution. | Adobe / Flash Player | Mar 3, 2022 | — | View → |
| CVE-2017-11826 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An… | Microsoft / Office | Mar 3, 2022 | — | View → |
| CVE-2017-12231 | A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS could allow an unauthenticated,… | Cisco / IOS software | Mar 3, 2022 | — | View → |
| CVE-2017-12232 | A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS… | Cisco / IOS software | Mar 3, 2022 | — | View → |