Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2018-4878 | Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution. | Adobe / Flash Player | Nov 3, 2021 | Ransomware | View → |
| CVE-2018-4939 | Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution. | Adobe / ColdFusion | Nov 3, 2021 | — | View → |
| CVE-2018-6789 | Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution. | Exim / Exim | Nov 3, 2021 | Ransomware | View → |
| CVE-2018-7600 | Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal… | Drupal / Drupal Core | Nov 3, 2021 | Ransomware | View → |
| CVE-2018-8653 | Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading… | Microsoft / Internet Explorer | Nov 3, 2021 | — | View → |
| CVE-2019-0211 | Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts… | Apache / HTTP Server | Nov 3, 2021 | — | View → |
| CVE-2019-0541 | Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability. | Microsoft / MSHTML | Nov 3, 2021 | — | View → |
| CVE-2019-0604 | Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability… | Microsoft / SharePoint | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-0708 | Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an… | Microsoft / Remote Desktop Services | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-0797 | Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory.… | Microsoft / Win32k | Nov 3, 2021 | — | View → |
| CVE-2019-0803 | Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege… | Microsoft / Win32k | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-0808 | Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory.… | Microsoft / Win32k | Nov 3, 2021 | — | View → |
| CVE-2019-0859 | Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to… | Microsoft / Win32k | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-0863 | Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code… | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2019-11510 | Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network… | Ivanti / Pulse Connect Secure | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-11539 | Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands. | Ivanti / Pulse Connect Secure and Pulse Policy Secure | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-11580 | Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being… | Atlassian / Crowd and Crowd Data Center | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-11634 | Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access… | Citrix / Workspace Application and Receiver for Windows | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-1214 | Microsoft Windows Common Log File System (CLFS) driver improperly handles objects in memory which can allow for privilege escalation. | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2019-1215 | Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for… | Microsoft / Windows | Nov 3, 2021 | Ransomware | View → |