CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated just now

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2024-32896

Android Pixel Privilege Escalation Vulnerability

Android · Pixelremediation: past CISA due date

P2added 2024-06-13due 2024-07-04

⋮

CVECVE-2024-4358

Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

Progress · Telerik Report Serverremediation: past CISA due date

ATT&CKT1190exploitation

P2added 2024-06-13due 2024-07-04

⋮

CVECVE-2024-4577

PHP-CGI OS Command Injection Vulnerability

PHP Group · PHPremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact T1112secondary impact T1053secondary impact T1543secondary impact T1033secondary impact T1068secondary impact T1071.001secondary impact T1570secondary impact T1003secondary impact T1003.001

CVECVE-2024-4610

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm · Mali GPU Kernel Driverremediation: past CISA due date

P2added 2024-06-12due 2024-07-03

⋮

CVECVE-2017-3506

Oracle WebLogic Server OS Command Injection Vulnerability

Oracle · WebLogic Serverremediation: past CISA due date

P2added 2024-06-03due 2024-06-24

⋮

CVECVE-2024-1086

Linux Kernel Use-After-Free Vulnerability

Linux · Kernelremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-05-30due 2024-06-20

⋮

CVECVE-2024-24919

Check Point Quantum Security Gateways Information Disclosure Vulnerability

Check Point · Quantum Security Gatewaysremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1202exploitation T1003.003secondary impact T1003.008secondary impact T1059.004secondary impact T1005primary impact

P1added 2024-05-30due 2024-06-20

⋮

CVECVE-2024-4978

Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability

Justice AV Solutions · Viewer remediation: past CISA due date

ATT&CKT1005secondary impact T1071.001secondary impact T1105primary impact T1195.002exploitation

P2added 2024-05-29due 2024-06-19

⋮

CVECVE-2024-5274

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

ATT&CKT1203primary impact T1189exploitation

P2added 2024-05-28due 2024-06-18

⋮

CVECVE-2020-17519

Apache Flink Improper Access Control Vulnerability

Apache · Flinkremediation: past CISA due date

P2added 2024-05-23due 2024-06-13

⋮

CVECVE-2023-43208

NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

NextGen Healthcare · Mirth Connectremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-05-20due 2024-06-10

⋮

CVECVE-2024-4947

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

ATT&CKT1059primary impact T1189exploitation

P2added 2024-05-20due 2024-06-10

⋮

CVECVE-2014-100005

D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability

D-Link · DIR-600 Routerremediation: past CISA due date

P2added 2024-05-16due 2024-06-06

⋮

CVECVE-2021-40655

D-Link DIR-605 Router Information Disclosure Vulnerability

D-Link · DIR-605 Routerremediation: past CISA due date

ATT&CKT1190exploitation

P2added 2024-05-16due 2024-06-06

⋮

CVECVE-2024-4761

Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

Google · Chromium V8remediation: past CISA due date

ATT&CKT1059exploitation

P2added 2024-05-16due 2024-06-06

⋮

CVECVE-2024-30040

Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-05-14due 2024-06-04

⋮

CVECVE-2024-30051

Microsoft DWM Core Library Privilege Escalation Vulnerability

Microsoft · DWM Core Libraryremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1068primary impact

P1added 2024-05-14due 2024-06-04

⋮

CVECVE-2024-4671

Google Chromium Visuals Use-After-Free Vulnerability

Google · Chromiumremediation: past CISA due date

ATT&CKT1059primary impact T1189exploitation

P2added 2024-05-13due 2024-06-03

⋮

CVECVE-2023-7028

GitLab Community and Enterprise Editions Improper Access Control Vulnerability

GitLab · GitLab CE/EEremediation: past CISA due date

P2added 2024-05-01due 2024-05-22

⋮

CVECVE-2024-29988

Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

Microsoft · SmartScreen Promptremediation: past CISA due date

P2added 2024-04-30due 2024-05-21

⋮

CVECVE-2024-20353

Cisco ASA and FTD Denial of Service Vulnerability

Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)remediation: past CISA due date

ATT&CKT1190exploitation T1608.001secondary impact T1653primary impact T1037secondary impact

P2added 2024-04-24due 2024-05-01

⋮

CVECVE-2024-20359

Cisco ASA and FTD Privilege Escalation Vulnerability

Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)remediation: past CISA due date

ATT&CKT1059primary impact T1078exploitation T1037secondary impact

P2added 2024-04-24due 2024-05-01

⋮

CVECVE-2024-4040

CrushFTP VFS Sandbox Escape Vulnerability

CrushFTP · CrushFTPremediation: past CISA due date

P2added 2024-04-24due 2024-05-01

⋮

CVECVE-2022-38028

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-04-23due 2024-05-14

⋮

CVECVE-2024-3400

Palo Alto Networks PAN-OS Command Injection Vulnerability

Palo Alto Networks · PAN-OSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-04-12due 2024-04-19

⋮

CVECVE-2024-3272

D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

D-Link · Multiple NAS Devicesremediation: past CISA due date

P2added 2024-04-11due 2024-05-02

⋮

CVECVE-2024-3273

D-Link Multiple NAS Devices Command Injection Vulnerability

D-Link · Multiple NAS Devicesremediation: past CISA due date

P2added 2024-04-11due 2024-05-02

⋮

CVECVE-2024-29745

Android Pixel Information Disclosure Vulnerability

Android · Pixelremediation: past CISA due date

P2added 2024-04-04due 2024-04-25

⋮

CVECVE-2024-29748

Android Pixel Privilege Escalation Vulnerability

Android · Pixelremediation: past CISA due date

P2added 2024-04-04due 2024-04-25

⋮

CVECVE-2023-24955

Microsoft SharePoint Server Code Injection Vulnerability

Microsoft · SharePoint Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-03-26due 2024-04-16

⋮

CVECVE-2019-7256

Nice Linear eMerge E3-Series OS Command Injection Vulnerability

Nice · Linear eMerge E3-Seriesremediation: past CISA due date

P2added 2024-03-25due 2024-04-15

⋮

CVECVE-2021-44529

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1195.002primary impact

P1added 2024-03-25due 2024-04-15

⋮

CVECVE-2023-48788MENA

Fortinet FortiClient EMS SQL Injection Vulnerability

Fortinet · FortiClient EMSremediation: known ransomware use · tied to a tracked MENA case · past CISA due date⬤ KNOWN RANSOMWARE USElinked case: 2026-08-18-medusa-update

ATT&CKT1190exploitation T1059primary impact T1105secondary impact

P1added 2024-03-25due 2024-04-15

⋮

ViewLinked report

CVECVE-2024-27198

JetBrains TeamCity Authentication Bypass Vulnerability

JetBrains · TeamCityremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact

P1added 2024-03-07due 2024-03-28

⋮

CVECVE-2024-23225

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2024-03-06due 2024-03-27

⋮

CVECVE-2024-23296

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2024-03-06due 2024-03-27

⋮

CVECVE-2021-36380

Sunhillo SureLine OS Command Injection Vulnerablity

Sunhillo · SureLineremediation: past CISA due date

ATT&CKT1190exploitation T1059.004primary impact

P2added 2024-03-05due 2024-03-26

⋮

CVECVE-2023-21237

Android Pixel Information Disclosure Vulnerability

Android · Pixelremediation: past CISA due date

P2added 2024-03-05due 2024-03-26

⋮

CVECVE-2024-21338

Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-03-04due 2024-03-25

⋮

CVECVE-2023-29360

Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

Microsoft · Streaming Serviceremediation: past CISA due date

P2added 2024-02-29due 2024-03-21

⋮

CVECVE-2024-1709MENA

ConnectWise ScreenConnect Authentication Bypass Vulnerability

ConnectWise · ScreenConnectremediation: known ransomware use · tied to a tracked MENA case · past CISA due date⬤ KNOWN RANSOMWARE USElinked case: 2026-08-18-medusa-update

P1added 2024-02-22due 2024-02-29

⋮

ViewLinked report

CVECVE-2020-3259

Cisco ASA and FTD Information Disclosure Vulnerability

Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-02-15due 2024-03-07

⋮

CVECVE-2024-21410

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Serverremediation: past CISA due date

P2added 2024-02-15due 2024-03-07

⋮

CVECVE-2024-21351

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-02-13due 2024-03-05

⋮

CVECVE-2024-21412

Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-02-13due 2024-03-05

⋮

CVECVE-2023-43770

Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

Roundcube · Webmailremediation: past CISA due date

ATT&CKT1059primary impact T1082secondary impact T1189exploitation

P2added 2024-02-12due 2024-03-04

⋮

CVECVE-2024-21762

Fortinet FortiOS Out-of-Bound Write Vulnerability

Fortinet · FortiOSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1574primary impact T1547.009secondary impact

P1added 2024-02-09due 2024-02-16

⋮

CVECVE-2023-4762

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2024-02-06due 2024-02-27

⋮

CVECVE-2022-48618

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2024-01-31due 2024-02-21

⋮

CVECVE-2024-21893

Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

Ivanti · Connect Secure, Policy Secure, and Neuronsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1078primary impact T1555secondary impact T1505.003secondary impact

P1added 2024-01-31due 2024-02-02

⋮

601–650 of ~1,722

← Prev Next →

secondary impact

T1041secondary impact

P1added 2024-06-12due 2024-07-03

⋮