Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2010-5326 | SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote code execution via a… | SAP / NetWeaver | Nov 3, 2021 | — | View → |
| CVE-2012-0158 | Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete… | Microsoft / MSCOMCTL.OCX | Nov 3, 2021 | Ransomware | View → |
| CVE-2012-3152 | Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality… | Oracle / Fusion Middleware | Nov 3, 2021 | — | View → |
| CVE-2014-1812 | Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are… | Microsoft / Windows | Nov 3, 2021 | Ransomware | View → |
| CVE-2015-1641 | Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful… | Microsoft / Office | Nov 3, 2021 | — | View → |
| CVE-2015-4852 | Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote… | Oracle / WebLogic Server | Nov 3, 2021 | — | View → |
| CVE-2016-0167 | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application | Microsoft / Win32k | Nov 3, 2021 | Ransomware | View → |
| CVE-2016-0185 | Microsoft Windows Media Center contains a remote code execution vulnerability when Windows Media Center opens a specially crafted Media… | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2016-3235 | Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly… | Microsoft / Office | Nov 3, 2021 | — | View → |
| CVE-2016-3643 | SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo. | SolarWinds / Virtualization Manager | Nov 3, 2021 | — | View → |
| CVE-2016-3715 | ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo… | ImageMagick / ImageMagick | Nov 3, 2021 | — | View → |
| CVE-2016-3718 | ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image. | ImageMagick / ImageMagick | Nov 3, 2021 | — | View → |
| CVE-2016-3976 | SAP NetWeaver Application Server Java Platforms contains a directory traversal vulnerability via a ..\ (dot dot backslash) in the fileName… | SAP / NetWeaver | Nov 3, 2021 | — | View → |
| CVE-2016-4437 | Apache Shiro contains a vulnerability which may allow remote attackers to execute code or bypass intended access restrictions via an… | Apache / Shiro | Nov 3, 2021 | — | View → |
| CVE-2016-7255 | Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful… | Microsoft / Win32k | Nov 3, 2021 | Ransomware | View → |
| CVE-2016-9563 | SAP NetWeaver Application Server Java Platforms contains an unspecified vulnerability in BC-BMT-BPM-DSK which allows remote, authenticated… | SAP / NetWeaver | Nov 3, 2021 | — | View → |
| CVE-2017-0143 | Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution. | Microsoft / Windows | Nov 3, 2021 | Ransomware | View → |
| CVE-2017-0199 | Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files.… | Microsoft / Office and WordPad | Nov 3, 2021 | Ransomware | View → |
| CVE-2017-11774 | Microsoft Office Outlook contains a security feature bypass vulnerability due to improperly handling objects in memory. Successful… | Microsoft / Office | Nov 3, 2021 | — | View → |
| CVE-2017-11882 | Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user. | Microsoft / Office | Nov 3, 2021 | Ransomware | View → |