CISA KEV
Known exploited
The government must-patch list, mapped to our product index so you can go straight to the product affected.
Updated Oct 28, 11:20 UTC
Added this week
6
▼ 33%vs last week
Ransomware-linked
361
known usein ransomware campaigns
Due in 14 days
7
federalremediation deadlines
Total on KEV
1,761
since 2021all entries
| CVE | Product | CVSS | Added | Summary |
|---|---|---|---|---|
| CVE-2020-0968 Ransomware | IE Internet Explorer 11 Microsoft | 7.5 | Nov 3 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
| CVE-2019-7481 Ransomware | SM SMA SonicWall | 7.5 | Nov 3 | SonicWall SMA100 SQL Injection Vulnerability |
| CVE-2019-11539 Ransomware | CS Connect Secure Ivanti | 7.2 | Nov 3 | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability |
| CVE-2021-20022 Ransomware | ES Email Security SonicWall | 7.2 | Nov 3 | SonicWall Email Security Unrestricted Upload of File Vulnerability |
| CVE-2021-31207 Ransomware | ES Exchange Server Microsoft | 6.6 | Nov 3 | Microsoft Exchange Server Security Feature Bypass Vulnerability |
| CVE-2018-2380 Ransomware | SC SAP CRM SAP SE | 6.6 | Nov 3 | SAP Customer Relationship Management (CRM) Path Traversal Vulnerability |
| CVE-2019-5591 Ransomware | FO FortiOS Fortinet | 6.5 | Nov 3 | Fortinet FortiOS Default Configuration Vulnerability |
| CVE-2020-3580 Ransomware | CA Cisco Adaptive Security Appliance (ASA) Software Cisco | 6.1 | Nov 3 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities |
| CVE-2020-1472 Ransomware | NE Netlogon Microsoft | 5.5 | Nov 3 | Netlogon Elevation of Privilege Vulnerability |
| CVE-2021-20023 Ransomware | ES Email Security SonicWall | 4.9 | Nov 3 | SonicWall Email Security Path Traversal Vulnerability |
| CVE-2020-0878 Ransomware | CH ChakraCore Microsoft | 4.2 | Nov 3 | Microsoft Browser Memory Corruption Vulnerability |