Login Request a demo
CISA KEV

Known exploited

The government must-patch list, mapped to our product index so you can go straight to the product affected.

Updated Oct 28, 11:20 UTC
Added this week
6
▼ 33%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
7
federalremediation deadlines
Total on KEV
1,761
since 2021all entries
All KEVRansomware-linked
1,761 entries
CVEProductCVSSAddedDue dateSummary
CVE-2019-1367
Ransomware
IE
Internet Explorer 10
Microsoft
7.5Nov 3May 3Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVE-2019-13608
Ransomware
SS
Storefront Server
Citrix
7.5Nov 3May 3Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
CVE-2020-0674IE
Internet Explorer 10
Microsoft
7.5Nov 3May 3Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVE-2018-8653IE
Internet Explorer 10
Microsoft
7.5Nov 3May 3Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVE-2020-0968
Ransomware
IE
Internet Explorer 11
Microsoft
7.5Nov 3May 3Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVE-2019-19356WF
Wf2419 Firmware
Netis-systems
7.5Nov 3May 3Netis WF2419 Devices Remote Code Execution Vulnerability
CVE-2019-20085NF
Nvms-1000 Firmware
Tvt
7.5Nov 3May 3TVT NVMS-1000 Directory Traversal Vulnerability
CVE-2020-5849UN
Unraid
Unraid
7.5Nov 3May 3Unraid Authentication Bypass Vulnerability
CVE-2020-11738WO
WordPress
WordPress
7.5Nov 3May 3WordPress Snap Creek Duplicator Plugin File Download Vulnerability
CVE-2016-3976NA
Netweaver Application Server Java
Sap
7.5Nov 3May 3SAP NetWeaver Directory Traversal Vulnerability
CVE-2021-33742WI
Windows
Microsoft
7.5Nov 3Nov 17Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-22506AM
Access Manager.
7.5Nov 3Nov 17Micro Focus Access Manager Information Leakage Vulnerability
CVE-2018-0296CA
Cisco Adaptive Security Appliance unknown
7.5Nov 3May 3Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
CVE-2018-15811DO
Dotnetnuke
Dnnsoftware
7.5Nov 3May 3DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters
CVE-2020-3452CA
Cisco Adaptive Security Appliance (ASA) Software
Cisco
7.5Nov 3May 3Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
CVE-2019-17558AS
Apache Solr
7.5Nov 3May 3Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability
CVE-2019-18187TM
Trend Micro OfficeScan
Trend Micro
7.5Nov 3May 3Trend Micro OfficeScan Directory Traversal Vulnerability
CVE-2019-6223IO
iOS
Apple
7.5Nov 3May 3Apple iOS and macOS Group Facetime Vulnerability
CVE-2019-1429IE
Internet Explorer 10
Microsoft
7.5Nov 3May 3Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVE-2021-36942
Ransomware
WI
Windows
Microsoft
7.5Nov 3Nov 17Windows LSA Spoofing Vulnerability
CVE-2019-7481
Ransomware
SM
SMA
SonicWall
7.5Nov 3May 3SonicWall SMA100 SQL Injection Vulnerability
CVE-2019-1653CS
Cisco Small Business RV Series Router Firmware
Cisco
7.5Nov 3May 3Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
CVE-2021-22900CS
Connect Secure
Ivanti
7.2Nov 3May 3Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
CVE-2020-14883WS
WebLogic Server
Oracle
7.2Nov 3May 3Oracle WebLogic Server Unspecified Vulnerability
CVE-2019-11539
Ransomware
CS
Connect Secure
Ivanti
7.2Nov 3May 3Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
CVE-2020-8243CS
Connect Secure
Ivanti
7.2Nov 3May 3Ivanti Pulse Connect Secure Code Execution Vulnerability
CVE-2020-8260CS
Connect Secure
Ivanti
7.2Nov 3May 3Ivanti Pulse Connect Secure Code Execution Vulnerability
CVE-2021-20022
Ransomware
ES
Email Security
SonicWall
7.2Nov 3Nov 17SonicWall Email Security Unrestricted Upload of File Vulnerability
CVE-2020-1054W1
Windows 10 Version 1507
Microsoft
7.0Nov 3May 3Win32k Elevation of Privilege Vulnerability
CVE-2019-18988TE
Teamviewer
Teamviewer
7.0Nov 3May 3TeamViewer Desktop Bypass Remote Login Vulnerability
CVE-2021-38649AA
Azure Automation State Configuration, DSC Extension
Microsoft
7.0Nov 3Nov 17Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-1782MA
macOS
Apple
7.0Nov 3Nov 17Apple Multiple Products Race Condition Vulnerability
CVE-2021-34448WI
Windows
Microsoft
6.8Nov 3Nov 17Scripting Engine Memory Corruption Vulnerability
CVE-2021-31207
Ransomware
ES
Exchange Server
Microsoft
6.6Nov 3Nov 17Microsoft Exchange Server Security Feature Bypass Vulnerability
CVE-2018-2380
Ransomware
SC
SAP CRM
SAP SE
6.6Nov 3May 3SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
CVE-2019-8394MA
ManageEngine ADSelfService Plus
Zoho
6.5Nov 3May 3Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
CVE-2020-8195CA
Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
6.5Nov 3May 3Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
CVE-2019-5591
Ransomware
FO
FortiOS
Fortinet
6.5Nov 3May 3Fortinet FortiOS Default Configuration Vulnerability
CVE-2021-37976CH
Chrome
Google
6.5Nov 3Nov 17Google Chromium Information Disclosure Vulnerability
CVE-2020-11652WS
Workspaces Server
Blackberry
6.5Nov 3May 3SaltStack Salt Path Traversal Vulnerability
CVE-2016-9563NA
Netweaver Application Server Java
Sap
6.5Nov 3May 3SAP NetWeaver XML External Entity (XXE) Vulnerability
CVE-2020-8193CA
Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP
6.5Nov 3May 3Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
CVE-2019-9978WO
WordPress
WordPress
6.1Nov 3May 3WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
CVE-2020-3580
Ransomware
CA
Cisco Adaptive Security Appliance (ASA) Software
Cisco
6.1Nov 3May 3Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities
CVE-2021-1879IO
iOS
Apple
6.1Nov 3Nov 17Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
CVE-2021-38000CH
Chrome
Google
6.1Nov 3Nov 17Google Chromium Intents Improper Input Validation Vulnerability
CVE-2021-30657MA
macOS
Apple
5.5Nov 3Nov 17Apple macOS Unspecified Vulnerability
CVE-2016-3715UL
Ubuntu Linux
Canonical
5.5Nov 3May 3ImageMagick Arbitrary File Deletion Vulnerability
CVE-2016-3718UL
Ubuntu Linux
Canonical
5.5Nov 3May 3ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
CVE-2021-27562TF
Trusted Firmware-m
Trustedfirmware
5.5Nov 3Nov 17Arm Trusted Firmware Out-of-Bounds Write Vulnerability
Page 35 of 36 · 1,761 total
1…343536