Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2014-4404 | Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute… | Apple / OS X | Feb 10, 2022 | — | View → |
| CVE-2015-1130 | The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin… | Apple / OS X | Feb 10, 2022 | — | View → |
| CVE-2015-1635 | Microsoft HTTP protocol stack (HTTP.sys) contains a vulnerability that allows for remote code execution. | Microsoft / HTTP.sys | Feb 10, 2022 | — | View → |
| CVE-2015-2051 | D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP… | D-Link / DIR-645 Router | Feb 10, 2022 | — | View → |
| CVE-2016-3088 | The Fileserver web application in Apache ActiveMQ allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed… | Apache / ActiveMQ | Feb 10, 2022 | — | View → |
| CVE-2017-0144 | The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets. | Microsoft / SMBv1 | Feb 10, 2022 | Ransomware | View → |
| CVE-2017-0145 | The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets. | Microsoft / SMBv1 | Feb 10, 2022 | Ransomware | View → |
| CVE-2017-0262 | A remote code execution vulnerability exists in Microsoft Office. | Microsoft / Office | Feb 10, 2022 | — | View → |
| CVE-2017-0263 | Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in… | Microsoft / Win32k | Feb 10, 2022 | — | View → |
| CVE-2017-10271 | Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution. | Oracle / WebLogic Server | Feb 10, 2022 | Ransomware | View → |
| CVE-2017-8464 | Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted… | Microsoft / Windows | Feb 10, 2022 | — | View → |
| CVE-2017-9791 | The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the… | Apache / Struts 1 | Feb 10, 2022 | — | View → |
| CVE-2018-1000861 | A code execution vulnerability exists in the Stapler web framework used by Jenkins | Jenkins / Jenkins Stapler Web Framework | Feb 10, 2022 | — | View → |
| CVE-2020-0796 | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain… | Microsoft / SMBv3 | Feb 10, 2022 | Ransomware | View → |
| CVE-2021-36934 | If a Volume Shadow Copy (VSS) shadow copy of the system drive is available, users can read the SAM file which would allow any user to… | Microsoft / Windows | Feb 10, 2022 | — | View → |
| CVE-2022-21882 | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Win32k | Feb 4, 2022 | Ransomware | View → |
| CVE-2014-1776 | Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the… | Microsoft / Internet Explorer | Jan 28, 2022 | — | View → |
| CVE-2014-6271 | GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote… | GNU / Bourne-Again Shell (Bash) | Jan 28, 2022 | — | View → |
| CVE-2014-7169 | GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote… | GNU / Bourne-Again Shell (Bash) | Jan 28, 2022 | — | View → |
| CVE-2017-5689 | Intel products contain a vulnerability which can allow attackers to perform privilege escalation. | Intel / Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | Jan 28, 2022 | — | View → |