Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2019-5544 | VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker… | VMware / VMware ESXi and Horizon DaaS | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-5591 | Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept… | Fortinet / FortiOS | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-6223 | Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device… | Apple / iOS and macOS | Nov 3, 2021 | — | View → |
| CVE-2019-7481 | SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources. | SonicWall / SMA100 | Nov 3, 2021 | Ransomware | View → |
| CVE-2019-8394 | Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page… | Zoho / ManageEngine | Nov 3, 2021 | — | View → |
| CVE-2019-9082 | ThinkPHP contains an unspecified vulnerability that allows for remote code execution via… | ThinkPHP / ThinkPHP | Nov 3, 2021 | — | View → |
| CVE-2019-9978 | WordPress Social Warfare plugin contains a cross-site scripting (XSS) vulnerability that allows for remote code execution. This… | WordPress / Social Warfare Plugin | Nov 3, 2021 | — | View → |
| CVE-2020-0041 | Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could… | Android / Android Kernel | Nov 3, 2021 | — | View → |
| CVE-2020-0069 | Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command… | MediaTek / Multiple Chipsets | Nov 3, 2021 | — | View → |
| CVE-2020-0601 | Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC)… | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2020-0646 | Microsoft .NET Framework contains an improper input validation vulnerability that allows for remote code execution. | Microsoft / .NET Framework | Nov 3, 2021 | — | View → |
| CVE-2020-0674 | Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory.… | Microsoft / Internet Explorer | Nov 3, 2021 | — | View → |
| CVE-2020-0683 | Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers… | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2020-0688 | Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution. | Microsoft / Exchange Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2020-0878 | Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the… | Microsoft / Edge and Internet Explorer | Nov 3, 2021 | Ransomware | View → |
| CVE-2020-0938 | Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts… | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2020-0968 | Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading… | Microsoft / Internet Explorer | Nov 3, 2021 | Ransomware | View → |
| CVE-2020-0986 | Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate… | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2020-10148 | SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands. | SolarWinds / Orion | Nov 3, 2021 | — | View → |
| CVE-2020-10181 | Sumavision Enhanced Multimedia Router (EMR) contains a cross-site request forgery (CSRF) vulnerability allowing the creation of users with… | Sumavision / Enhanced Multimedia Router (EMR) | Nov 3, 2021 | — | View → |