CISA Known Exploited Vulnerabilities (KEV)

  1. Home
  2. CISA KEV
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild. Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework.Y

    9.3

    HIGH
    CVE-2010-1297 - Adobe Flash Player Memory Corruption Vulnerability -

    Action Due Jun 22, 2022 Target Vendor : Adobe

    Description : Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

    Action : The impacted product is end-of-life and should be disconnected if still in use.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2010-1297

    Alert Date: Jun 08, 2022 | 1247 days ago

    9.8

    CRITICAL
    CVE-2022-26134 - Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability -

    Action Due Jun 06, 2022 Target Vendor : Atlassian

    Description : Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.

    Action : Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.

    Known To Be Used in Ransomware Campaigns? : Known

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2022-26134

    Alert Date: Jun 02, 2022 | 1253 days ago

    9.3

    HIGH
    CVE-2016-7256 - Microsoft Windows Open Type Font Remote Code Execution Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2016-7256

    Alert Date: May 25, 2022 | 1261 days ago

    9.3

    HIGH
    CVE-2016-1010 - Adobe Flash Player and AIR Integer Overflow Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Adobe

    Description : Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.

    Action : The impacted products are end-of-life and should be disconnected if still in use.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2016-1010

    Alert Date: May 25, 2022 | 1261 days ago

    9.3

    HIGH
    CVE-2016-0984 - Adobe Flash Player and AIR Use-After-Free Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Adobe

    Description : Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.

    Action : The impacted products are end-of-life and should be disconnected if still in use.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2016-0984

    Alert Date: May 25, 2022 | 1261 days ago

    9.3

    HIGH
    CVE-2016-0034 - Microsoft Silverlight Runtime Remote Code Execution Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).

    Action : The impacted products are end-of-life and should be disconnected if still in use.

    Known To Be Used in Ransomware Campaigns? : Known

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2016-0034

    Alert Date: May 25, 2022 | 1261 days ago

    10.0

    HIGH
    CVE-2015-0310 - Adobe Flash Player ASLR Bypass Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Adobe

    Description : Adobe Flash Player does not properly restrict discovery of memory addresses, which allows attackers to bypass the address space layout randomization (ASLR) protection mechanism.

    Action : The impacted product is end-of-life and should be disconnected if still in use.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2015-0310

    Alert Date: May 25, 2022 | 1261 days ago

    9.3

    HIGH
    CVE-2015-0016 - Microsoft Windows TS WebProxy Directory Traversal Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges.

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2015-0016

    Alert Date: May 25, 2022 | 1261 days ago

    6.5

    MEDIUM
    CVE-2015-0071 - Microsoft Internet Explorer ASLR Bypass Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : Microsoft Internet Explorer allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted web site.

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2015-0071

    Alert Date: May 25, 2022 | 1261 days ago

    8.8

    HIGH
    CVE-2015-2360 - Microsoft Win32k Privilege Escalation Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : Win32k.sys in the kernel-mode drivers in Microsoft Windows allows local users to gain privileges or cause denial-of-service (DoS).

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2015-2360

    Alert Date: May 25, 2022 | 1261 days ago

    9.3

    HIGH
    CVE-2015-2425 - Microsoft Internet Explorer Memory Corruption Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2015-2425

    Alert Date: May 25, 2022 | 1261 days ago

    7.2

    HIGH
    CVE-2015-1769 - Microsoft Windows Mount Manager Privilege Escalation Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2015-1769

    Alert Date: May 25, 2022 | 1261 days ago

    9.3

    HIGH
    CVE-2015-8651 - Adobe Flash Player Integer Overflow Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Adobe

    Description : Integer overflow in Adobe Flash Player allows attackers to execute code.

    Action : The impacted product is end-of-life and should be disconnected if still in use.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2015-8651

    Alert Date: May 25, 2022 | 1261 days ago

    7.8

    HIGH
    CVE-2015-6175 - Microsoft Windows Kernel Privilege Escalation Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : The kernel in Microsoft Windows contains a vulnerability that allows local users to gain privileges via a crafted application.

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2015-6175

    Alert Date: May 25, 2022 | 1261 days ago

    9.3

    HIGH
    CVE-2015-1671 - Microsoft Windows Remote Code Execution Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : A remote code execution vulnerability exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts.

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2015-1671

    Alert Date: May 25, 2022 | 1261 days ago

    9.3

    HIGH
    CVE-2014-4148 - Microsoft Windows Remote Code Execution Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts.

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2014-4148

    Alert Date: May 25, 2022 | 1261 days ago

    10.0

    HIGH
    CVE-2014-8439 - Adobe Flash Player Dereferenced Pointer Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Adobe

    Description : Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.

    Action : The impacted product is end-of-life and should be disconnected if still in use.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2014-8439

    Alert Date: May 25, 2022 | 1261 days ago

    8.8

    HIGH
    CVE-2014-4123 - Microsoft Internet Explorer Privilege Escalation Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : Microsoft Internet Explorer contains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2014-4123

    Alert Date: May 25, 2022 | 1261 days ago

    10.0

    HIGH
    CVE-2014-0546 - Adobe Acrobat and Reader Sandbox Bypass Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Adobe

    Description : Adobe Acrobat and Reader on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2014-0546

    Alert Date: May 25, 2022 | 1261 days ago

    8.8

    HIGH
    CVE-2014-2817 - Microsoft Internet Explorer Privilege Escalation Vulnerability -

    Action Due Jun 15, 2022 Target Vendor : Microsoft

    Description : Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.

    Action : Apply updates per vendor instructions.

    Known To Be Used in Ransomware Campaigns? : Unknown

    Notes : https://nvd.nist.gov/vuln/detail/CVE-2014-2817

    Alert Date: May 25, 2022 | 1261 days ago
Showing 20 of 1459 Results

Filters