Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2022-26925 | Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to… | Microsoft / Windows | Jul 1, 2022 | — | View → |
| CVE-2018-4344 | Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution. | Apple / Multiple Products | Jun 27, 2022 | — | View → |
| CVE-2019-8605 | A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system… | Apple / Multiple Products | Jun 27, 2022 | — | View → |
| CVE-2020-3837 | Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with… | Apple / Multiple Products | Jun 27, 2022 | — | View → |
| CVE-2020-9907 | Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel… | Apple / Multiple Products | Jun 27, 2022 | — | View → |
| CVE-2021-30533 | Google Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation… | Google / Chromium PopupBlocker | Jun 27, 2022 | — | View → |
| CVE-2021-30983 | Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges. | Apple / iOS and iPadOS | Jun 27, 2022 | — | View → |
| CVE-2021-4034 | The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with… | Red Hat / Polkit | Jun 27, 2022 | Ransomware | View → |
| CVE-2022-29499 | The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation. | Mitel / MiVoice Connect | Jun 27, 2022 | Ransomware | View → |
| CVE-2022-30190 | A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An… | Microsoft / Windows | Jun 14, 2022 | Ransomware | View → |
| CVE-2016-2386 | SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands… | SAP / NetWeaver | Jun 9, 2022 | — | View → |
| CVE-2016-2388 | The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a… | SAP / NetWeaver | Jun 9, 2022 | — | View → |
| CVE-2021-38163 | SAP NetWeaver contains a vulnerability that allows unrestricted file upload. | SAP / NetWeaver | Jun 9, 2022 | — | View → |
| CVE-2006-2492 | Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code. | Microsoft / Word | Jun 8, 2022 | — | View → |
| CVE-2007-5659 | Adobe Acrobat and Reader contain a buffer overflow vulnerability that allows remote attackers to execute code via a PDF file with long… | Adobe / Acrobat and Reader | Jun 8, 2022 | — | View → |
| CVE-2008-0655 | Adobe Acrobat and Reader contains an unespecified vulnerability described as a design flaw which could allow a specially crafted file to… | Adobe / Acrobat and Reader | Jun 8, 2022 | — | View → |
| CVE-2009-0557 | Microsoft Office contains an object record corruption vulnerability that allows remote attackers to execute code via a crafted Excel file… | Microsoft / Office | Jun 8, 2022 | — | View → |
| CVE-2009-0563 | Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted… | Microsoft / Office | Jun 8, 2022 | — | View → |
| CVE-2009-1862 | Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS). | Adobe / Acrobat and Reader, Flash Player | Jun 8, 2022 | — | View → |
| CVE-2009-3953 | Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution. | Adobe / Acrobat and Reader | Jun 8, 2022 | — | View → |