CISA KEV
Known exploited
The government must-patch list, mapped to our product index so you can go straight to the product affected.
Updated Oct 28, 12:57 UTC
Added this week
6
▼ 33%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
7
federalremediation deadlines
Total on KEV
1,761
since 2021all entries
| CVE | Product | CVSS | Added | Summary |
|---|---|---|---|---|
| CVE-2021-21985 Ransomware | VS vCenter Server VMware | 9.8 | Nov 3 | VMware vCenter Server Improper Input Validation Vulnerability |
| CVE-2021-21972 Ransomware | VS vCenter Server VMware | 9.8 | Nov 3 | VMware vCenter Server Remote Code Execution Vulnerability |
| CVE-2021-20021 Ransomware | ES Email Security SonicWall | 9.8 | Nov 3 | SonicWall Email Security Improper Privilege Management Vulnerability |
| CVE-2021-20016 Ransomware | SS SonicWall SMA100 SonicWall | 9.8 | Nov 3 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability |
| CVE-2020-5902 Ransomware | BI BIG-IP F5 | 9.8 | Nov 3 | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability |
| CVE-2020-3992 Ransomware | ES ESXi VMware | 9.8 | Nov 3 | VMware ESXi OpenSLP Use-After-Free Vulnerability |
| CVE-2020-12812 Ransomware | FO FortiOS Fortinet | 9.8 | Nov 3 | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability |
| CVE-2020-12271 Ransomware | FI Firewall Sophos | 9.8 | Nov 3 | Sophos SFOS SQL Injection Vulnerability |
| CVE-2019-5544 Ransomware | ES ESXi VMware | 9.8 | Nov 3 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability |
| CVE-2019-3396 Ransomware | CO Confluence Atlassian | 9.8 | Nov 3 | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability |
| CVE-2019-19781 Ransomware | AD Application Delivery Controller Firmware Citrix | 9.8 | Nov 3 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability |
| CVE-2019-18935 Ransomware | UF UI For Asp.net Ajax Telerik | 9.8 | Nov 3 | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability |
| CVE-2019-11634 Ransomware | RE Receiver Citrix | 9.8 | Nov 3 | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability |
| CVE-2019-11580 Ransomware | CR Crowd Atlassian | 9.8 | Nov 3 | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability |
| CVE-2019-0708 Ransomware | WI Windows Microsoft | 9.8 | Nov 3 | Microsoft Remote Desktop Services Remote Code Execution Vulnerability |
| CVE-2019-0604 Ransomware | SH SharePoint Microsoft | 9.8 | Nov 3 | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2018-7600 Ransomware | DR Drupal Drupal | 9.8 | Nov 3 | Drupal Core Remote Code Execution Vulnerability |
| CVE-2018-6789 Ransomware | UL Ubuntu Linux Canonical | 9.8 | Nov 3 | Exim Buffer Overflow Vulnerability |
| CVE-2018-13379 Ransomware | FO FortiOS Fortinet | 9.8 | Nov 3 | Fortinet FortiOS SSL VPN Path Traversal Vulnerability |
| CVE-2017-5638 Ransomware | ST Struts Apache | 9.8 | Nov 3 | The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload… |
| CVE-2021-34473 Ransomware | ES Exchange Server Microsoft | 9.1 | Nov 3 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-26855 Ransomware | ES Exchange Server Microsoft | 9.1 | Nov 3 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-34523 Ransomware | ES Exchange Server Microsoft | 9.0 | Nov 3 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2021-34527 Ransomware | WI Windows Microsoft | 8.8 | Nov 3 | Windows Print Spooler Remote Code Execution Vulnerability |
| CVE-2012-0158 Ransomware | OF Office Microsoft | 8.8 | Nov 3 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability |
| CVE-2020-0688 Ransomware | ES Exchange Server Microsoft | 8.8 | Nov 3 | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability |
| CVE-2014-1812 Ransomware | WI Windows Microsoft | 8.8 | Nov 3 | Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability |
| CVE-2021-26411 Ransomware | IE Internet Explorer 11 Microsoft | 8.8 | Nov 3 | Internet Explorer Memory Corruption Vulnerability |
| CVE-2017-9822 Ransomware | DC DotNetNuke CMS Fixed in 9.1.1 DotNetNuke | 8.8 | Nov 3 | DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites." |
| CVE-2021-40444 Ransomware | W1 Windows 10 Version 1507 Microsoft | 8.8 | Nov 3 | Microsoft MSHTML Remote Code Execution Vulnerability |
| CVE-2017-0143 Ransomware | WI Windows Microsoft | 8.8 | Nov 3 | Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability |
| CVE-2021-27102 Ransomware | FT FTA Accellion | 7.8 | Nov 3 | Accellion FTA OS Command Injection Vulnerability |
| CVE-2019-0859 Ransomware | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2019-1215 Ransomware | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Windows Privilege Escalation Vulnerability |
| CVE-2017-0199 Ransomware | OF Office Microsoft | 7.8 | Nov 3 | Microsoft Office and WordPad Remote Code Execution Vulnerability |
| CVE-2021-36955 Ransomware | WI Windows Microsoft | 7.8 | Nov 3 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2019-0803 Ransomware | WI Windows Microsoft | 7.8 | Nov 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2021-26857 Ransomware | ES Exchange Server Microsoft | 7.8 | Nov 3 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-26858 Ransomware | ES Exchange Server Microsoft | 7.8 | Nov 3 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2021-27065 Ransomware | ES Exchange Server Microsoft | 7.8 | Nov 3 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2016-7255 Ransomware | W1 Windows 10 1507 Microsoft | 7.8 | Nov 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2016-0167 Ransomware | W1 Windows 10 1507 Microsoft | 7.8 | Nov 3 | Microsoft Win32k Privilege Escalation Vulnerability |
| CVE-2018-4878 Ransomware | AF Adobe Flash Player before 28.0.0.161 | 7.8 | Nov 3 | Adobe Flash Player Use-After-Free Vulnerability |
| CVE-2018-0802 Ransomware | OF Office Microsoft | 7.8 | Nov 3 | Microsoft Office Memory Corruption Vulnerability |
| CVE-2021-1675 Ransomware | WI Windows Microsoft | 7.8 | Nov 3 | Windows Print Spooler Remote Code Execution Vulnerability |
| CVE-2021-1732 Ransomware | W1 Windows 10 Version 1803 Microsoft | 7.8 | Nov 3 | Windows Win32k Elevation of Privilege Vulnerability |
| CVE-2017-11882 Ransomware | OF Office Microsoft | 7.8 | Nov 3 | Microsoft Office Memory Corruption Vulnerability |
| CVE-2019-1367 Ransomware | IE Internet Explorer 10 Microsoft | 7.5 | Nov 3 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
| CVE-2021-36942 Ransomware | WI Windows Microsoft | 7.5 | Nov 3 | Windows LSA Spoofing Vulnerability |
| CVE-2019-13608 Ransomware | SS Storefront Server Citrix | 7.5 | Nov 3 | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability |