Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2018-0156 | A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote… | Cisco / IOS Software and Cisco IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2018-0158 | A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE… | Cisco / IOS Software and Cisco IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2018-0159 | A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE… | Cisco / IOS Software and Cisco IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2018-0161 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco… | Cisco / IOS Software | Mar 3, 2022 | — | View → |
| CVE-2018-0167 | There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE… | Cisco / IOS, XR, and XE Software | Mar 3, 2022 | — | View → |
| CVE-2018-0172 | A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2018-0173 | A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP… | Cisco / IOS and IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2018-0174 | A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for… | Cisco / IOS XE Software | Mar 3, 2022 | — | View → |
| CVE-2018-0175 | Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco… | Cisco / IOS, XR, and XE Software | Mar 3, 2022 | — | View → |
| CVE-2018-0179 | A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to… | Cisco / IOS Software | Mar 3, 2022 | — | View → |
| CVE-2018-0180 | A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to… | Cisco / IOS Software | Mar 3, 2022 | — | View → |
| CVE-2018-8298 | The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution. | ChakraCore / ChakraCore scripting engine | Mar 3, 2022 | — | View → |
| CVE-2018-8581 | A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could… | Microsoft / Exchange Server | Mar 3, 2022 | Ransomware | View → |
| CVE-2019-1297 | A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory. | Microsoft / Excel | Mar 3, 2022 | — | View → |
| CVE-2019-1652 | A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an… | Cisco / Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers | Mar 3, 2022 | — | View → |
| CVE-2019-16928 | Exim contains an out-of-bounds write vulnerability which can allow for remote code execution. | Exim / Exim Internet Mailer | Mar 3, 2022 | — | View → |
| CVE-2020-11899 | The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability. | Treck TCP/IP stack / IPv6 | Mar 3, 2022 | — | View → |
| CVE-2020-1938 | Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such… | Apache / Tomcat | Mar 3, 2022 | — | View → |
| CVE-2021-41379 | Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Mar 3, 2022 | Ransomware | View → |
| CVE-2022-20699 | A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following:… | Cisco / Small Business RV160, RV260, RV340, and RV345 Series Routers | Mar 3, 2022 | — | View → |