CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated just now

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

24 of ~1,724

Comfortable Compact

CVECVE-2021-34523

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-34527

Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2022-05-03

⋮

CVECVE-2021-35211

SolarWinds Serv-U Remote Code Execution Vulnerability

SolarWinds · Serv-Uremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-35395

Realtek AP-Router SDK Buffer Overflow Vulnerability

Realtek · AP-Router SDKremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-35464

ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

ForgeRock · Access Management (AM)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-36741

Trend Micro Multiple Products Improper Input Validation Vulnerability

Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Securityremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-36742

Trend Micro Multiple Products Improper Input Validation Vulnerability

Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Securityremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-36942

Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-36948

Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-36955

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-37973

Google Chromium Portals Use-After-Free Vulnerability

Google · Chromium Portalsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-37975

Google Chromium V8 Use-After-Free Vulnerability

Google · Chromium V8remediation: past CISA due date

ATT&CKT1203primary impact T1059.007exploitation

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-37976

Google Chromium Information Disclosure Vulnerability

Google · Chromiumremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-38000

Google Chromium Intents Improper Input Validation Vulnerability

Google · Chromium Intentsremediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-38003

Google Chromium V8 Memory Corruption Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-38645

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

Microsoft · Open Management Infrastructure (OMI)remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-38647

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Microsoft · Open Management Infrastructure (OMI)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-38648

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

Microsoft · Open Management Infrastructure (OMI)remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-38649

Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

Microsoft · Open Management Infrastructure (OMI)remediation: past CISA due date

P2added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-40444

Microsoft MSHTML Remote Code Execution Vulnerability

Microsoft · MSHTMLremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-40539

Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability

Zoho · ManageEngineremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1087.002secondary impact T1190exploitation T1573.001secondary impact T1560.001secondary impact T1070.004secondary impact T1047secondary impact T1003.003secondary impact T1136secondary impact T1218secondary impact T1003secondary impact T1140secondary impact T1027secondary impact T1505.003primary impact T1505.003secondary impact

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-41773

Apache HTTP Server Path Traversal Vulnerability

Apache · HTTP Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact T1210exploitation

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-42013

Apache HTTP Server Path Traversal Vulnerability

Apache · HTTP Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact T1210exploitation

P1added 2021-11-03due 2021-11-17

⋮

CVECVE-2021-42258

BQE BillQuick Web Suite SQL Injection Vulnerability

BQE · BillQuick Web Suiteremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact T1486secondary impact

P1added 2021-11-03due 2021-11-17

⋮

1,701–1,724 of ~1,724

← PrevNext →