CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated just now

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,724

Comfortable Compact

CVECVE-2021-22986

F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

F5 · BIG-IP and BIG-IQ Centralized Managementremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1485secondary impact T1059primary impact T1090primary impact T1133exploitation

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-23874

McAfee Total Protection (MTP) Improper Privilege Management Vulnerability

McAfee · McAfee Total Protection (MTP)remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-26084

Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability

Atlassian · Confluence Server and Data Centerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1496secondary impact T1059primary impact

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-26411

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-26855

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1005secondary impact T1505.003secondary impact T1090primary impact T1133exploitation

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2021-26857

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1505.003primary impact T1133secondary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2021-26858

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1505.003primary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2021-27059

Microsoft Office Remote Code Execution Vulnerability

Microsoft · Officeremediation: past CISA due date

ATT&CKT1203exploitation

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-27065

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1505.003primary impact

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2021-27085

Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-27101

Accellion FTA SQL Injection Vulnerability

Accellion · FTAremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact T1005secondary impact

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-27102

Accellion FTA OS Command Injection Vulnerability

Accellion · FTAremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact T1005secondary impact

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-27103

Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

Accellion · FTAremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1005secondary impact

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-27104

Accellion FTA OS Command Injection Vulnerability

Accellion · FTAremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact T1005secondary impact

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-27561

Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability

Yealink · Device Managementremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-27562

Arm Trusted Firmware Out-of-Bounds Write Vulnerability

Arm · Trusted Firmwareremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-28310

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-28550

Adobe Acrobat and Reader Use-After-Free Vulnerability

Adobe · Acrobat and Readerremediation: past CISA due date

ATT&CKT1204.002exploitation

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-28663

Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability

Arm · Mali Graphics Processing Unit (GPU)remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-28664

Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

Arm · Mali Graphics Processing Unit (GPU)remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30116

Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

Kaseya · Virtual System/Server Administrator (VSA)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30551

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30554

Google Chromium WebGL Use-After-Free Vulnerability

Google · Chromium WebGLremediation: past CISA due date

ATT&CKT1203exploitation T1059.007exploitation

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30563

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30632

Google Chromium V8 Out-of-Bounds Write Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30633

Google Chromium Indexed DB API Use-After-Free Vulnerability

Google · Chromium Indexed DB APIremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30657

Apple macOS Unspecified Vulnerability

Apple · macOSremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30661

Apple Multiple Products WebKit Storage Use-After-Free Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30663

Apple Multiple Products WebKit Integer Overflow Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30665

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30666

Apple iOS WebKit Buffer Overflow Vulnerability

Apple · iOSremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30713

Apple macOS Unspecified Vulnerability

Apple · macOSremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30761

Apple iOS WebKit Memory Corruption Vulnerability

Apple · iOSremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30762

Apple iOS WebKit Use-After-Free Vulnerability

Apple · iOSremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30807

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30858

Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

Apple · iOS, iPadOS, and macOSremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30860

Apple Multiple Products Integer Overflow Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-30869

Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

Apple · iOS, iPadOS, and macOSremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-31199

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft · Enhanced Cryptographic Providerremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-31201

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft · Enhanced Cryptographic Providerremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-31207

Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1565primary impact T1548.002exploitation

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-31755

Tenda AC11 Router Stack Buffer Overflow Vulnerability

Tenda · AC11 Routerremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-31955

Microsoft Windows Kernel Information Disclosure Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-31956

Microsoft Windows NTFS Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-31979

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-33739

Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

ATT&CKT1598.002exploitation T1068primary impact

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-33742

Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-33771

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-34448

Microsoft Windows Scripting Engine Memory Corruption Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-34473

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1053.005primary impact T1190exploitation T1486secondary impact T1048.003secondary impact T1136secondary impact

P1added 2021-11-03due 2021-11-17

⋮

1,651–1,700 of ~1,724

← Prev Next →