Known exploited vulnerabilities
From CISA’s Known Exploited Vulnerabilities catalogue: flaws that attackers are using now, when each was added, and the date federal agencies were told to fix it by.
- In the catalogue
- 1781
- Added in the last 7 days
- 12
- Used in ransomware
- 361
The catalogue, newest first
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2021-22205 | GitLab | Community and Enterprise Editions | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-22502 | Micro Focus | Operation Bridge Reporter (OBR) | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-22506 | Micro Focus | Micro Focus Access Manager | Micro Focus Access Manager Information Leakage Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-22893 | Ivanti | Pulse Connect Secure | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2021-22894 | Ivanti | Pulse Connect Secure | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2021-22899 | Ivanti | Pulse Connect Secure | Ivanti Pulse Connect Secure Command Injection Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2021-22900 | Ivanti | Pulse Connect Secure | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2021-22986 | F5 | BIG-IP and BIG-IQ Centralized Management | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-23874 | McAfee | McAfee Total Protection (MTP) | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-26084 | Atlassian | Confluence Server and Data Center | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-26411 | Microsoft | Internet Explorer | Microsoft Internet Explorer Memory Corruption Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-26855 | Microsoft | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2021-26857 | Microsoft | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2021-26858 | Microsoft | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2021-27059 | Microsoft | Office | Microsoft Office Remote Code Execution Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-27065 | Microsoft | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2021-27085 | Microsoft | Internet Explorer | Microsoft Internet Explorer Remote Code Execution Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-27101 | Accellion | FTA | Accellion FTA SQL Injection Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-27102 | Accellion | FTA | Accellion FTA OS Command Injection Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-27103 | Accellion | FTA | Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-27104 | Accellion | FTA | Accellion FTA OS Command Injection Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-27561 | Yealink | Device Management | Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-27562 | Arm | Trusted Firmware | Arm Trusted Firmware Out-of-Bounds Write Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-28310 | Microsoft | Win32k | Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-28550 | Adobe | Acrobat and Reader | Adobe Acrobat and Reader Use-After-Free Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-28663 | Arm | Mali Graphics Processing Unit (GPU) | Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-28664 | Arm | Mali Graphics Processing Unit (GPU) | Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30116 | Kaseya | Virtual System/Server Administrator (VSA) | Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-30551 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown | |
| CVE-2021-30554 | Chromium WebGL | Google Chromium WebGL Use-After-Free Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown | |
| CVE-2021-30563 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown | |
| CVE-2021-30632 | Chromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown | |
| CVE-2021-30633 | Chromium Indexed DB API | Google Chromium Indexed DB API Use-After-Free Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown | |
| CVE-2021-30657 | Apple | macOS | Apple macOS Unspecified Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30661 | Apple | Multiple Products | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30663 | Apple | Multiple Products | Apple Multiple Products WebKit Integer Overflow Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30665 | Apple | Multiple Products | Apple Multiple Products WebKit Memory Corruption Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30666 | Apple | iOS | Apple iOS WebKit Buffer Overflow Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30713 | Apple | macOS | Apple macOS Unspecified Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30761 | Apple | iOS | Apple iOS WebKit Memory Corruption Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30762 | Apple | iOS | Apple iOS WebKit Use-After-Free Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30807 | Apple | Multiple Products | Apple Multiple Products Memory Corruption Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30858 | Apple | iOS, iPadOS, and macOS | Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30860 | Apple | Multiple Products | Apple Multiple Products Integer Overflow Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-30869 | Apple | iOS, iPadOS, and macOS | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-31199 | Microsoft | Enhanced Cryptographic Provider | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-31201 | Microsoft | Enhanced Cryptographic Provider | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-31207 | Microsoft | Exchange Server | Microsoft Exchange Server Security Feature Bypass Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-31755 | Tenda | AC11 Router | Tenda AC11 Router Stack Buffer Overflow Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-31955 | Microsoft | Windows | Microsoft Windows Kernel Information Disclosure Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-31956 | Microsoft | Windows | Microsoft Windows NTFS Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-31979 | Microsoft | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-33739 | Microsoft | Windows | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-33742 | Microsoft | Windows | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-33771 | Microsoft | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-34448 | Microsoft | Windows | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-34473 | Microsoft | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-34523 | Microsoft | Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-34527 | Microsoft | Windows | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2021-35211 | SolarWinds | Serv-U | SolarWinds Serv-U Remote Code Execution Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-35395 | Realtek | AP-Router SDK | Realtek AP-Router SDK Buffer Overflow Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-35464 | ForgeRock | Access Management (AM) | ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-36741 | Trend Micro | Apex One, Apex One as a Service, and Worry-Free Business Security | Trend Micro Multiple Products Improper Input Validation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-36742 | Trend Micro | Apex One, Apex One as a Service, and Worry-Free Business Security | Trend Micro Multiple Products Improper Input Validation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-36942 | Microsoft | Windows | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-36948 | Microsoft | Windows | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-36955 | Microsoft | Windows | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-37973 | Chromium Portals | Google Chromium Portals Use-After-Free Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown | |
| CVE-2021-37975 | Chromium V8 | Google Chromium V8 Use-After-Free Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown | |
| CVE-2021-37976 | Chromium | Google Chromium Information Disclosure Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown | |
| CVE-2021-38000 | Chromium Intents | Google Chromium Intents Improper Input Validation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown | |
| CVE-2021-38003 | Chromium V8 | Google Chromium V8 Memory Corruption Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown | |
| CVE-2021-38645 | Microsoft | Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-38647 | Microsoft | Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-38648 | Microsoft | Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-38649 | Microsoft | Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Unknown |
| CVE-2021-40444 | Microsoft | MSHTML | Microsoft MSHTML Remote Code Execution Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-40539 | Zoho | ManageEngine | Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-41773 | Apache | HTTP Server | Apache HTTP Server Path Traversal Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-42013 | Apache | HTTP Server | Apache HTTP Server Path Traversal Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-42258 | BQE | BillQuick Web Suite | BQE BillQuick Web Suite SQL Injection Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |