CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 2h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2010-0188

Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

Adobe · Reader and Acrobatremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1105primary impact T1189exploitation

P1added 2022-03-03due 2022-03-24

⋮

CVECVE-2010-0232

Microsoft Windows Kernel Exception Handler Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2010-3333

Microsoft Office Stack-based Buffer Overflow Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2011-0611

Adobe Flash Player Remote Code Execution Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1204.002exploitation T1105primary impact

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2011-1889

Microsoft Forefront TMG Remote Code Execution Vulnerability

Microsoft · Forefront Threat Management Gateway (TMG)remediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2011-3544

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE JDK and JREremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2012-0507

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SEremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-03due 2022-03-24

⋮

CVECVE-2012-1535

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1204.002exploitation T1105primary impact

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2012-1723

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SEremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-03due 2022-03-24

⋮

CVECVE-2012-1856

Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2012-4681

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SEremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-03due 2022-03-24

⋮

CVECVE-2013-0632

Adobe ColdFusion Authentication Bypass Vulnerability

Adobe · ColdFusionremediation: past CISA due date

ATT&CKT1190exploitation

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2013-0640

Adobe Reader and Acrobat Memory Corruption Vulnerability

Adobe · Reader and Acrobatremediation: past CISA due date

ATT&CKT1566.001exploitation

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2013-0641

Adobe Reader Buffer Overflow Vulnerability

Adobe · Readerremediation: past CISA due date

ATT&CKT1204.002exploitation T1048secondary impact T1105primary impact

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2013-1347

Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2013-1675

Mozilla Firefox Information Disclosure Vulnerability

Mozilla · Firefoxremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2013-3346

Adobe Reader and Acrobat Memory Corruption Vulnerability

Adobe · Reader and Acrobatremediation: past CISA due date

ATT&CKT1059.007exploitation

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2013-3897

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2013-5065

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2014-0496

Adobe Reader and Acrobat Use-After-Free Vulnerability

Adobe · Reader and Acrobatremediation: past CISA due date

ATT&CKT1204.002exploitation

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2014-4114

Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2015-1642

Microsoft Office Memory Corruption Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2015-1701

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-03due 2022-03-24

⋮

CVECVE-2015-2387

Microsoft ATM Font Driver Privilege Escalation Vulnerability

Microsoft · ATM Font Driverremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2015-2424

Microsoft PowerPoint Memory Corruption Vulnerability

Microsoft · PowerPointremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2015-2545

Microsoft Office Malformed EPS File Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2015-2590

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

Oracle · Java SEremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2015-3043

Adobe Flash Player Memory Corruption Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1204.002exploitation T1499.004primary impact T1189exploitation

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2015-4902

Oracle Java SE Integrity Check Vulnerability

Oracle · Java SEremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2015-5119

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1203exploitation T1071.001secondary impact T1055.001secondary impact T1105primary impact T1204.001exploitation T1059.007exploitation T1566.002exploitation

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2015-7645

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Playerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1204.002exploitation

P1added 2022-03-03due 2022-03-24

⋮

CVECVE-2016-0099

Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-03due 2022-03-24

⋮

CVECVE-2016-1019

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Playerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1486secondary impact T1105primary impact T1189exploitation

P1added 2022-03-03due 2022-03-24

⋮

CVECVE-2016-4117

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Playerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1204.002exploitation T1105primary impact

P1added 2022-03-03due 2022-03-24

⋮

CVECVE-2016-5195

Linux Kernel Race Condition Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2016-7193

Microsoft Office Memory Corruption Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2016-7262

Microsoft Office Security Feature Bypass Vulnerability

Microsoft · Excelremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2016-7855

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1189exploitation

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2016-8562

Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability

Siemens · SIMATIC CPremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-0001

Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Microsoft · Graphics Device Interface (GDI)remediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-0261

Microsoft Office Use-After-Free Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-11292

Adobe Flash Player Type Confusion Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1204.002exploitation T1566.001exploitation T1005secondary impact T1105primary impact

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-11826

Microsoft Office Remote Code Execution Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-12231

Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability

Cisco · IOS softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-12232

Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability

Cisco · IOS softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-12233

Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

Cisco · IOS softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-12234

Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability

Cisco · IOS softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-12235

Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability

Cisco · IOS softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-12237

Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-12238

Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability

Cisco · Catalyst 6800 Series Switchesremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

1,251–1,300 of ~1,722

← Prev Next →