Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2021-1497 | Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to… | Cisco / HyperFlex HX | Nov 3, 2021 | — | View → |
| CVE-2021-1498 | Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to… | Cisco / HyperFlex HX | Nov 3, 2021 | — | View → |
| CVE-2021-1647 | Microsoft Defender contains an unspecified vulnerability that allows for remote code execution. | Microsoft / Defender | Nov 3, 2021 | — | View → |
| CVE-2021-1675 | Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution. | Microsoft / Windows | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-1732 | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Win32k | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-1782 | Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate… | Apple / Multiple Products | Nov 3, 2021 | — | View → |
| CVE-2021-1870 | Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This… | Apple / iOS, iPadOS, and macOS | Nov 3, 2021 | — | View → |
| CVE-2021-1871 | Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This… | Apple / iOS, iPadOS, and macOS | Nov 3, 2021 | — | View → |
| CVE-2021-1879 | Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when… | Apple / iOS, iPadOS, and watchOS | Nov 3, 2021 | — | View → |
| CVE-2021-1905 | Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes… | Qualcomm / Multiple Chipsets | Nov 3, 2021 | — | View → |
| CVE-2021-1906 | Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address… | Qualcomm / Multiple Chipsets | Nov 3, 2021 | — | View → |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 contains a SQL injection vulnerability that allows remote exploitation for credential access by an unauthenticated… | SonicWall / SSLVPN SMA100 | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-20021 | SonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative… | SonicWall / SonicWall Email Security | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-20022 | SonicWall Email Security contains an unrestricted upload of file with dangerous type vulnerability that allows a post-authenticated… | SonicWall / SonicWall Email Security | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-20023 | SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated attacker to read files on the remote… | SonicWall / SonicWall Email Security | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-20090 | Arcadyan Buffalo firmware contains a path traversal vulnerability that could allow unauthenticated, remote attackers to bypass… | Arcadyan / Buffalo Firmware | Nov 3, 2021 | — | View → |
| CVE-2021-21017 | Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code… | Adobe / Acrobat and Reader | Nov 3, 2021 | — | View → |
| CVE-2021-21148 | Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap… | Google / Chromium V8 | Nov 3, 2021 | — | View → |
| CVE-2021-21166 | Google Chromium contains a race condition vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted… | Google / Chromium | Nov 3, 2021 | — | View → |
| CVE-2021-21193 | Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a… | Google / Chromium Blink | Nov 3, 2021 | — | View → |