CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated just now

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2021-22600

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2022-04-11due 2022-05-02

⋮

CVECVE-2021-27852

Checkbox Survey Deserialization of Untrusted Data Vulnerability

Checkbox · Checkbox Surveyremediation: past CISA due date

P2added 2022-04-11due 2022-05-02

⋮

CVECVE-2021-39793

Google Pixel Out-of-Bounds Write Vulnerability

Google · Pixelremediation: past CISA due date

P2added 2022-04-11due 2022-05-02

⋮

CVECVE-2021-42278

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directoryremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-04-11due 2022-05-02

⋮

CVECVE-2021-42287

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directoryremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-04-11due 2022-05-02

⋮

CVECVE-2022-23176

WatchGuard Firebox and XTM Privilege Escalation Vulnerability

WatchGuard · Firebox and XTMremediation: past CISA due date

P2added 2022-04-11due 2022-05-02

⋮

CVECVE-2017-0148

Microsoft SMBv1 Server Remote Code Execution Vulnerability

Microsoft · SMBv1 serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-04-06due 2022-04-27

⋮

CVECVE-2021-31166

Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

Microsoft · HTTP Protocol Stackremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2022-04-06due 2022-04-27

⋮

CVECVE-2021-3156

Sudo Heap-Based Buffer Overflow Vulnerability

Sudo · Sudoremediation: past CISA due date

P2added 2022-04-06due 2022-04-27

⋮

CVECVE-2021-45382

D-Link Multiple Routers Remote Code Execution Vulnerability

D-Link · Multiple Routersremediation: past CISA due date

ATT&CKT1071secondary impact T1190exploitation T1059primary impact T1499.002secondary impact T1543secondary impact T1070secondary impact

P2added 2022-04-04due 2022-04-25

⋮

CVECVE-2022-22674

Apple macOS Out-of-Bounds Read Vulnerability

Apple · macOSremediation: past CISA due date

P2added 2022-04-04due 2022-04-25

⋮

CVECVE-2022-22675

Apple macOS Out-of-Bounds Write Vulnerability

Apple · macOSremediation: past CISA due date

P2added 2022-04-04due 2022-04-25

⋮

CVECVE-2022-22965

Spring Framework JDK 9+ Remote Code Execution Vulnerability

VMware · Spring Frameworkremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2022-04-04due 2022-04-25

⋮

CVECVE-2018-10561

Dasan GPON Routers Authentication Bypass Vulnerability

Dasan · Gigabit Passive Optical Network (GPON) Routersremediation: past CISA due date

P2added 2022-03-31due 2022-04-21

⋮

CVECVE-2018-10562

Dasan GPON Routers Command Injection Vulnerability

Dasan · Gigabit Passive Optical Network (GPON) Routersremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-31due 2022-04-21

⋮

CVECVE-2021-21551

Dell dbutil Driver Insufficient Access Control Vulnerability

Dell · dbutil Driverremediation: past CISA due date

P2added 2022-03-31due 2022-04-21

⋮

CVECVE-2021-28799

QNAP NAS Improper Authorization Vulnerability

QNAP · Network Attached Storage (NAS)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-31due 2022-04-21

⋮

CVECVE-2021-34484

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-31due 2022-04-21

⋮

CVECVE-2022-1040

Sophos Firewall Authentication Bypass Vulnerability

Sophos · Firewallremediation: past CISA due date

ATT&CKT1190exploitation T1078secondary impact T1059primary impact T1040secondary impact T1574secondary impact T1557secondary impact

P2added 2022-03-31due 2022-04-21

⋮

CVECVE-2022-26871

Trend Micro Apex Central Arbitrary File Upload Vulnerability

Trend Micro · Apex Centralremediation: past CISA due date

P2added 2022-03-31due 2022-04-21

⋮

CVECVE-2010-4398

Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-28due 2022-04-21

⋮

CVECVE-2011-2005

Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

Microsoft · Ancillary Function Driver (afd.sys)remediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2012-0518

Oracle Fusion Middleware Unspecified Vulnerability

Oracle · Fusion Middlewareremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2012-2034

Adobe Flash Player Memory Corruption Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1189exploitation

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2012-2539

Microsoft Word Remote Code Execution Vulnerability

Microsoft · Wordremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2012-5076

Oracle Java SE Sandbox Bypass Vulnerability

Oracle · Java SEremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2013-1690

Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

Mozilla · Firefox and Thunderbirdremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2013-2465

Oracle Java SE Unspecified Vulnerability

Oracle · Java SEremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-28due 2022-04-18

⋮

CVECVE-2013-2551

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-28due 2022-04-18

⋮

CVECVE-2013-2729

Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability

Adobe · Reader and Acrobatremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2013-3660

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2015-1770

Microsoft Office Uninitialized Memory Use Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2015-2419

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2015-2426

Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2016-0040

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2016-0151

Microsoft Windows CSRSS Security Feature Bypass Vulnerability

Microsoft · Client-Server Run-time Subsystem (CSRSS)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-28due 2022-04-18

⋮

CVECVE-2016-0189

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-28due 2022-04-18

⋮

CVECVE-2016-7200

Microsoft Edge Memory Corruption Vulnerability

Microsoft · Edgeremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2016-7201

Microsoft Edge Memory Corruption Vulnerability

Microsoft · Edgeremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2017-0037

Microsoft Edge and Internet Explorer Type Confusion Vulnerability

Microsoft · Edge and Internet Explorerremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2017-0059

Microsoft Internet Explorer Information Disclosure Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2017-0213

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-28due 2022-04-18

⋮

CVECVE-2018-8405

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-28due 2022-04-18

⋮

CVECVE-2018-8406

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-28due 2022-04-18

⋮

CVECVE-2018-8440

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-28due 2022-04-18

⋮

CVECVE-2019-7483

SonicWall SMA100 Directory Traversal Vulnerability

SonicWall · SMA100remediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2021-20028

SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

SonicWall · Secure Remote Access (SRA)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-28due 2022-04-18

⋮

CVECVE-2021-26085

Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

Atlassian · Confluence Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1005primary impact

P1added 2022-03-28due 2022-04-18

⋮

CVECVE-2021-34486

Microsoft Windows Event Tracing Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-28due 2022-04-18

⋮

CVECVE-2021-38646

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft · Officeremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-28due 2022-04-18

⋮

1,101–1,150 of ~1,722

← Prev Next →