CISA KEV CVEs with vendor advisories

273 CVEs tracked by VulniPulse are listed in the CISA Known Exploited Vulnerabilities catalog, which means CISA has evidence of exploitation in the wild. Newest KEV listing first.

A CVE missing from this list may still be exploited; KEV only covers what CISA has confirmed. Latest tracked CVEs · How CVSS, EPSS and KEV differ

CVE-2019-7194Critical CISA KEV
QNAP Photo Station Path Traversal Vulnerability
QNAP · 1 advisory
KEV listed Jun 8, 2022
CVE-2019-7193Critical CISA KEV
QNAP QTS Improper Input Validation Vulnerability
QNAP · 1 advisory
KEV listed Jun 8, 2022
CVE-2019-7192Critical CISA KEV
QNAP Photo Station Improper Access Control Vulnerability
QNAP · 1 advisory
KEV listed Jun 8, 2022
CVE-2022-26134Critical CISA KEV
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Atlassian · 1 advisory
KEV listed Jun 2, 2022
CVE-2018-19953Medium CISA KEV
QNAP NAS File Station Cross-Site Scripting Vulnerability
QNAP · 1 advisory
KEV listed May 24, 2022
CVE-2018-19949Critical CISA KEV
QNAP NAS File Station Command Injection Vulnerability
QNAP · 1 advisory
KEV listed May 24, 2022
CVE-2018-19943High CISA KEV
QNAP NAS File Station Cross-Site Scripting Vulnerability
QNAP · 1 advisory
KEV listed May 24, 2022
CVE-2020-0638Unrated CISA KEV
Microsoft Update Notification Manager Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed May 23, 2022
CVE-2019-1385Unrated CISA KEV
Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed May 23, 2022
CVE-2019-1130Unrated CISA KEV
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed May 23, 2022
CVE-2022-1388Critical CISA KEV
F5 BIG-IP Missing Authentication Vulnerability
F5 · 1 advisory
KEV listed May 10, 2022
CVE-2010-5330Critical CISA KEV
Ubiquiti AirOS Command Injection Vulnerability
Ubiquiti · 1 advisory
KEV listed Apr 15, 2022
CVE-2021-42287High CISA KEV
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Apr 11, 2022
CVE-2021-42278High CISA KEV
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Apr 11, 2022
CVE-2022-1040Critical CISA KEV
Sophos Firewall Authentication Bypass Vulnerability
Sophos · 1 advisory
KEV listed Mar 31, 2022
CVE-2021-34484High CISA KEV
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Mar 31, 2022
CVE-2021-34486High CISA KEV
Microsoft Windows Event Tracing Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Mar 28, 2022
CVE-2021-26085Medium CISA KEV
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
Atlassian · 1 advisory
KEV listed Mar 28, 2022
CVE-2020-2506High CISA KEV
QNAP Helpdesk Improper Access Control Vulnerability
QNAP · 1 advisory
KEV listed Mar 25, 2022
CVE-2017-12615Unrated CISA KEV
Apache Tomcat on Windows Remote Code Execution Vulnerability
Apache · 1 advisory
KEV listed Mar 25, 2022
CVE-2019-1405Unrated CISA KEV
Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Mar 15, 2022
CVE-2019-1129Unrated CISA KEV
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Mar 15, 2022
CVE-2019-1069High CISA KEV
Microsoft Task Scheduler Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Mar 15, 2022
CVE-2018-8120Unrated CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Mar 15, 2022
CVE-2021-41379Medium CISA KEV
Microsoft Windows Installer Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Mar 3, 2022
CVE-2018-8174Unrated CISA KEV
Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
MS Server · 1 advisory
KEV listed Feb 15, 2022
CVE-2020-0796Unrated CISA KEV
Microsoft SMBv3 Remote Code Execution Vulnerability
MS Server · 1 advisory
KEV listed Feb 10, 2022
CVE-2022-21882High CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Feb 4, 2022
CVE-2020-0787Unrated CISA KEV
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
MS Server · 1 advisory
KEV listed Jan 28, 2022
CVE-2018-8453Unrated CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Jan 21, 2022
CVE-2021-33766High CISA KEV
Microsoft Exchange Server Information Disclosure
MS Server · 1 advisory
KEV listed Jan 18, 2022
CVE-2021-22991Critical CISA KEV
F5 BIG-IP Traffic Management Microkernel Buffer Overflow
F5 · 1 advisory
KEV listed Jan 18, 2022
CVE-2021-21975Unrated CISA KEV
VMware Server Side Request Forgery in vRealize Operations Manager API
VMware · 1 advisory
KEV listed Jan 18, 2022
CVE-2019-1579High CISA KEV
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Palo Alto · 1 advisory
KEV listed Jan 10, 2022
CVE-2019-1458Unrated CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Jan 10, 2022
CVE-2013-3900Medium CISA KEV
Microsoft WinVerifyTrust function Remote Code Execution
MS Server · 1 advisory
KEV listed Jan 10, 2022
CVE-2021-44228Critical CISA KEV
Apache Log4j2 Remote Code Execution Vulnerability
Commvault · 1 advisory
KEV listed Dec 10, 2021
CVE-2021-40438Unrated CISA KEV
Apache HTTP Server-Side Request Forgery (SSRF)
Apache · 1 advisory
KEV listed Dec 1, 2021
CVE-2021-42321High CISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory
KEV listed Nov 17, 2021
CVE-2021-40444High CISA KEV
Microsoft MSHTML Remote Code Execution Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-38649High CISA KEV
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-38648High CISA KEV
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-38647Critical CISA KEV
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-38645High CISA KEV
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-36955High CISA KEV
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-36948High CISA KEV
Microsoft Windows Update Medic Service Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-36942High CISA KEV
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-34527High CISA KEV
Microsoft Windows Print Spooler Remote Code Execution Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-34523Critical CISA KEV
Microsoft Exchange Server Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-34473Critical CISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-34448Medium CISA KEV
Microsoft Windows Scripting Engine Memory Corruption Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-33771High CISA KEV
Microsoft Windows Kernel Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-31979High CISA KEV
Microsoft Windows Kernel Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-27065High CISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-26858High CISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-26857High CISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-26855Critical CISA KEV
Microsoft Exchange Server Remote Code Execution Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-26084Critical CISA KEV
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
Atlassian · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-22986Critical CISA KEV
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
F5 · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-22205Critical CISA KEV
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
GitLab · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-21985Unrated CISA KEV
VMware vCenter Server Improper Input Validation Vulnerability
VMware · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-21972Unrated CISA KEV
VMware vCenter Server Remote Code Execution Vulnerability
VMware · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-20023Unrated CISA KEV
SonicWall Email Security Path Traversal Vulnerability
SonicWall · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-20022Unrated CISA KEV
SonicWall Email Security Unrestricted Upload of File Vulnerability
SonicWall · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-20021Unrated CISA KEV
SonicWall Email Security Improper Privilege Management Vulnerability
SonicWall · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-20016Unrated CISA KEV
SonicWall SSLVPN SMA100 SQL Injection Vulnerability
SonicWall · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-1732High CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2021-1675High CISA KEV
Microsoft Windows Print Spooler Remote Code Execution Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2020-3992Unrated CISA KEV
VMware ESXi OpenSLP Use-After-Free Vulnerability
VMware · 1 advisory
KEV listed Nov 3, 2021
CVE-2020-12812Medium CISA KEV
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
Fortinet · 1 advisory
KEV listed Nov 3, 2021
CVE-2020-1054High CISA KEV
Microsoft Win32k Privilege Escalation Vulnerability
MS Server · 1 advisory
KEV listed Nov 3, 2021
CVE-2019-7481Unrated CISA KEV
SonicWall SMA100 SQL Injection Vulnerability
SonicWall · 1 advisory
KEV listed Nov 3, 2021
CVE-2019-5591Medium CISA KEV
Fortinet FortiOS Default Configuration Vulnerability
Fortinet · 1 advisory
KEV listed Nov 3, 2021