Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2021-21206 | Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a… | Google / Chromium Blink | Nov 3, 2021 | — | View → |
| CVE-2021-21220 | Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap… | Google / Chromium V8 | Nov 3, 2021 | — | View → |
| CVE-2021-21224 | Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a… | Google / Chromium V8 | Nov 3, 2021 | — | View → |
| CVE-2021-21972 | VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Server plugin which allows an attacker… | VMware / vCenter Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-21985 | VMware vSphere Client contains an improper input validation vulnerability in the Virtual SAN Health Check plug-in, which is enabled by… | VMware / vCenter Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-22005 | VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to… | VMware / vCenter Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-22205 | GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code… | GitLab / Community and Enterprise Editions | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-22502 | Micro Focus Operation Bridge Report (OBR) contains an unspecified vulnerability that allows for remote code execution. | Micro Focus / Operation Bridge Reporter (OBR) | Nov 3, 2021 | — | View → |
| CVE-2021-22506 | Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the… | Micro Focus / Micro Focus Access Manager | Nov 3, 2021 | — | View → |
| CVE-2021-22893 | Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via… | Ivanti / Pulse Connect Secure | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-22894 | Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to… | Ivanti / Pulse Connect Secure | Nov 3, 2021 | — | View → |
| CVE-2021-22899 | Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code… | Ivanti / Pulse Connect Secure | Nov 3, 2021 | — | View → |
| CVE-2021-22900 | Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a… | Ivanti / Pulse Connect Secure | Nov 3, 2021 | — | View → |
| CVE-2021-22986 | F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows… | F5 / BIG-IP and BIG-IQ Centralized Management | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-23874 | McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges… | McAfee / McAfee Total Protection (MTP) | Nov 3, 2021 | — | View → |
| CVE-2021-26084 | Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an… | Atlassian / Confluence Server and Data Center | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-26411 | Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption. | Microsoft / Internet Explorer | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-26855 | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the… | Microsoft / Exchange Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-26857 | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the… | Microsoft / Exchange Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-26858 | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the… | Microsoft / Exchange Server | Nov 3, 2021 | Ransomware | View → |