Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2021-30661 | Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution… | Apple / Multiple Products | Nov 3, 2021 | — | View → |
| CVE-2021-30663 | Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability that leads to code execution when processing… | Apple / Multiple Products | Nov 3, 2021 | — | View → |
| CVE-2021-30665 | Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing… | Apple / Multiple Products | Nov 3, 2021 | — | View → |
| CVE-2021-30666 | Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content.… | Apple / iOS | Nov 3, 2021 | — | View → |
| CVE-2021-30713 | Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to… | Apple / macOS | Nov 3, 2021 | — | View → |
| CVE-2021-30761 | Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content.… | Apple / iOS | Nov 3, 2021 | — | View → |
| CVE-2021-30762 | Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content.… | Apple / iOS | Nov 3, 2021 | — | View → |
| CVE-2021-30807 | Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to… | Apple / Multiple Products | Nov 3, 2021 | — | View → |
| CVE-2021-30858 | Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously… | Apple / iOS, iPadOS, and macOS | Nov 3, 2021 | — | View → |
| CVE-2021-30860 | Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when… | Apple / Multiple Products | Nov 3, 2021 | — | View → |
| CVE-2021-30869 | Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code… | Apple / iOS, iPadOS, and macOS | Nov 3, 2021 | — | View → |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Enhanced Cryptographic Provider | Nov 3, 2021 | — | View → |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Enhanced Cryptographic Provider | Nov 3, 2021 | — | View → |
| CVE-2021-31207 | Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass. | Microsoft / Exchange Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-31755 | Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted… | Tenda / AC11 Router | Nov 3, 2021 | — | View → |
| CVE-2021-31955 | Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows… | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2021-31956 | Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via… | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2021-31979 | Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2021-33739 | Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2021-33742 | Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution. | Microsoft / Windows | Nov 3, 2021 | — | View → |