CISA KEV
Known exploited
The government must-patch list, mapped to our product index so you can go straight to the product affected.
Updated Oct 28, 10:39 UTC
Added this week
6
▼ 33%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
7
federalremediation deadlines
Total on KEV
1,761
since 2021all entries
| CVE | Product | CVSS | Added | Summary |
|---|---|---|---|---|
| CVE-2021-1906 | SA Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Qualcomm, Inc. | 5.5 | Nov 3 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability |
| CVE-2020-27950 | MA macOS Apple | 5.5 | Nov 3 | Apple Multiple Products Memory Initialization Vulnerability |
| CVE-2020-1472 Ransomware | NE Netlogon Microsoft | 5.5 | Nov 3 | Netlogon Elevation of Privilege Vulnerability |
| CVE-2021-31955 | WI Windows Microsoft | 5.5 | Nov 3 | Windows Kernel Information Disclosure Vulnerability |
| CVE-2021-31199 | W1 Windows 10 Version 1507 Microsoft | 5.2 | Nov 3 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability |
| CVE-2021-31201 | W1 Windows 10 Version 1507 Microsoft | 5.2 | Nov 3 | Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability |
| CVE-2021-20023 Ransomware | ES Email Security SonicWall | 4.9 | Nov 3 | SonicWall Email Security Path Traversal Vulnerability |
| CVE-2020-8196 | CA Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP | 4.3 | Nov 3 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability |
| CVE-2020-9819 | IO iOS Apple | 4.3 | Nov 3 | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability |
| CVE-2020-4430 | DR Data Risk Manager IBM | 4.3 | Nov 3 | IBM Data Risk Manager Directory Traversal Vulnerability |
| CVE-2020-0878 Ransomware | CH ChakraCore Microsoft | 4.2 | Nov 3 | Microsoft Browser Memory Corruption Vulnerability |