Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2021-33771 | Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2021-34448 | Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption. | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2021-34473 | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. | Microsoft / Exchange Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-34523 | Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Exchange Server | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-34527 | Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing… | Microsoft / Windows | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-35211 | SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution. | SolarWinds / Serv-U | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-35395 | Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters… | Realtek / AP-Router SDK | Nov 3, 2021 | — | View → |
| CVE-2021-35464 | ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints… | ForgeRock / Access Management (AM) | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-36741 | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that… | Trend Micro / Apex One, Apex One as a Service, and Worry-Free Business Security | Nov 3, 2021 | — | View → |
| CVE-2021-36742 | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that… | Trend Micro / Apex One, Apex One as a Service, and Worry-Free Business Security | Nov 3, 2021 | — | View → |
| CVE-2021-36942 | Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method… | Microsoft / Windows | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-36948 | Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Nov 3, 2021 | — | View → |
| CVE-2021-36955 | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. | Microsoft / Windows | Nov 3, 2021 | Ransomware | View → |
| CVE-2021-37973 | Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process,… | Google / Chromium Portals | Nov 3, 2021 | — | View → |
| CVE-2021-37975 | Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via… | Google / Chromium V8 | Nov 3, 2021 | — | View → |
| CVE-2021-37976 | Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain… | Google / Chromium | Nov 3, 2021 | — | View → |
| CVE-2021-38000 | Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a… | Google / Chromium Intents | Nov 3, 2021 | — | View → |
| CVE-2021-38003 | Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory… | Google / Chromium V8 | Nov 3, 2021 | — | View → |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for… | Microsoft / Open Management Infrastructure (OMI) | Nov 3, 2021 | — | View → |
| CVE-2021-38647 | Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote… | Microsoft / Open Management Infrastructure (OMI) | Nov 3, 2021 | Ransomware | View → |