CISA KEV
Known exploited
The government must-patch list, mapped to our product index so you can go straight to the product affected.
Updated Oct 28, 12:49 UTC
Added this week
6
▼ 33%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
7
federalremediation deadlines
Total on KEV
1,761
since 2021all entries
| CVE | Product | CVSS | Added | Summary |
|---|---|---|---|---|
| CVE-2020-8655 | EY Eyesofnetwork Eyesofnetwork | 7.8 | Nov 3 | EyesOfNetwork Improper Privilege Management Vulnerability |
| CVE-2020-3950 | VF VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac | 7.8 | Nov 3 | VMware Multiple Products Privilege Escalation Vulnerability |
| CVE-2020-27932 | MA macOS Apple | 7.8 | Nov 3 | Apple Multiple Products Type Confusion Vulnerability |
| CVE-2020-27930 | MA macOS Apple | 7.8 | Nov 3 | Apple Multiple Products Memory Corruption Vulnerability |
| CVE-2020-24557 | AO Apex One Trend Micro | 7.8 | Nov 3 | Trend Micro Multiple Products Improper Access Control Vulnerability |
| CVE-2020-17087 | WI Windows Microsoft | 7.8 | Nov 3 | Windows Kernel Local Elevation of Privilege Vulnerability |
| CVE-2020-1464 | WI Windows Microsoft | 7.8 | Nov 3 | Windows Spoofing Vulnerability |
| CVE-2021-30713 | MA macOS Apple | 7.8 | Nov 3 | Apple macOS Unspecified Vulnerability |
| CVE-2020-1380 | IE Internet Explorer 11 Microsoft | 7.8 | Nov 3 | Scripting Engine Memory Corruption Vulnerability |
| CVE-2020-1147 | SH SharePoint Microsoft | 7.8 | Nov 3 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability |
| CVE-2020-0986 | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Windows Kernel Privilege Escalation Vulnerability |
| CVE-2020-0938 | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability |
| CVE-2021-30807 | MA macOS Apple | 7.8 | Nov 3 | Apple Multiple Products Memory Corruption Vulnerability |
| CVE-2020-0683 | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Windows Installer Privilege Escalation Vulnerability |
| CVE-2020-0069 | AN Android Google | 7.8 | Nov 3 | Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability |
| CVE-2020-0041 | AN Android Google | 7.8 | Nov 3 | Android Kernel Out-of-Bounds Write Vulnerability |
| CVE-2019-2215 | AN Android Google | 7.8 | Nov 3 | Android Kernel Use-After-Free Vulnerability |
| CVE-2019-15752 | GE Geode Apache | 7.8 | Nov 3 | Docker Desktop Community Edition Privilege Escalation Vulnerability |
| CVE-2019-1215 Ransomware | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Windows Privilege Escalation Vulnerability |
| CVE-2019-1214 | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability |
| CVE-2019-0863 | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability |
| CVE-2019-0859 Ransomware | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2019-0808 | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2019-0803 Ransomware | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2019-0797 | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2021-30860 | IO iOS Apple | 7.8 | Nov 3 | Apple Multiple Products Integer Overflow Vulnerability |
| CVE-2019-0211 | HS HTTP Server Apache | 7.8 | Nov 3 | Apache HTTP Server Privilege Escalation Vulnerability |
| CVE-2021-30869 | MA macOS Apple | 7.8 | Nov 3 | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability |
| CVE-2018-4878 Ransomware | AF Adobe Flash Player before 28.0.0.161 | 7.8 | Nov 3 | Adobe Flash Player Use-After-Free Vulnerability |
| CVE-2018-0802 Ransomware | OF Office Microsoft | 7.8 | Nov 3 | Microsoft Office Memory Corruption Vulnerability |
| CVE-2021-31979 | WI Windows Microsoft | 7.8 | Nov 3 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2021-33771 | WI Windows Microsoft | 7.8 | Nov 3 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2017-8759 | MN Microsoft .NET Framework Microsoft Corporation | 7.8 | Nov 3 | Microsoft .NET Framework Remote Code Execution Vulnerability |
| CVE-2017-16651 | DL Debian Linux Debian | 7.8 | Nov 3 | Roundcube Webmail File Disclosure Vulnerability |
| CVE-2021-36742 | AO Apex One Trend Micro | 7.8 | Nov 3 | Trend Micro Multiple Products Improper Input Validation Vulnerability |
| CVE-2021-36948 | WI Windows Microsoft | 7.8 | Nov 3 | Windows Update Medic Service Elevation of Privilege Vulnerability |
| CVE-2021-36955 Ransomware | WI Windows Microsoft | 7.8 | Nov 3 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2017-11882 Ransomware | OF Office Microsoft | 7.8 | Nov 3 | Microsoft Office Memory Corruption Vulnerability |
| CVE-2017-11774 | OU Outlook Microsoft | 7.8 | Nov 3 | Microsoft Office Outlook Security Feature Bypass Vulnerability |
| CVE-2017-0199 Ransomware | OF Office Microsoft | 7.8 | Nov 3 | Microsoft Office and WordPad Remote Code Execution Vulnerability |
| CVE-2021-38645 | AA Azure Automation State Configuration, DSC Extension Microsoft | 7.8 | Nov 3 | Open Management Infrastructure Elevation of Privilege Vulnerability |
| CVE-2021-38648 | AA Azure Automation State Configuration, DSC Extension Microsoft | 7.8 | Nov 3 | Open Management Infrastructure Elevation of Privilege Vulnerability |
| CVE-2016-7255 Ransomware | W1 Windows 10 1507 Microsoft | 7.8 | Nov 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2016-3643 | VM Virtualization Manager Solarwinds | 7.8 | Nov 3 | SolarWinds Virtualization Manager Privilege Escalation Vulnerability |
| CVE-2016-3235 | OF Office Microsoft | 7.8 | Nov 3 | Microsoft Office OLE DLL Side Loading Vulnerability |
| CVE-2016-0185 | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Windows Media Center Remote Code Execution Vulnerability |
| CVE-2016-0167 Ransomware | W1 Windows 10 1507 Microsoft | 7.8 | Nov 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2015-1641 | OF Office Microsoft | 7.8 | Nov 3 | Microsoft Office Memory Corruption Vulnerability |
| CVE-2021-27059 | OF Office Microsoft | 7.6 | Nov 3 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2018-18325 | DO Dotnetnuke Dnnsoftware | 7.5 | Nov 3 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability |