CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated just now

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2014-0502

Adobe Flash Player Double Free Vulnerablity

Adobe · Flash Playerremediation: past CISA due date

P2added 2024-09-17due 2024-10-08

⋮

CVECVE-2024-43461

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-09-16due 2024-10-07

⋮

CVECVE-2024-6670

Progress WhatsUp Gold SQL Injection Vulnerability

Progress · WhatsUp Goldremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-09-16due 2024-10-07

⋮

CVECVE-2024-8190

Ivanti Cloud Services Appliance OS Command Injection Vulnerability

Ivanti · Cloud Services Applianceremediation: past CISA due date

P2added 2024-09-13due 2024-10-04

⋮

CVECVE-2024-38014

Microsoft Windows Installer Improper Privilege Management Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-09-10due 2024-10-01

⋮

CVECVE-2024-38217

Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-09-10due 2024-10-01

⋮

CVECVE-2024-38226

Microsoft Publisher Protection Mechanism Failure Vulnerability

Microsoft · Publisherremediation: past CISA due date

P2added 2024-09-10due 2024-10-01

⋮

CVECVE-2016-3714

ImageMagick Improper Input Validation Vulnerability

ImageMagick · ImageMagickremediation: past CISA due date

P2added 2024-09-09due 2024-09-30

⋮

CVECVE-2017-1000253

Linux Kernel PIE Stack Buffer Corruption Vulnerability

Linux · Kernelremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-09-09due 2024-09-30

⋮

CVECVE-2024-40766

SonicWall SonicOS Improper Access Control Vulnerability

SonicWall · SonicOSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-09-09due 2024-09-30

⋮

CVECVE-2021-20123

Draytek VigorConnect Path Traversal Vulnerability

DrayTek · VigorConnectremediation: past CISA due date

P2added 2024-09-03due 2024-09-24

⋮

CVECVE-2021-20124

Draytek VigorConnect Path Traversal Vulnerability

DrayTek · VigorConnectremediation: past CISA due date

P2added 2024-09-03due 2024-09-24

⋮

CVECVE-2024-7262

Kingsoft WPS Office Path Traversal Vulnerability

Kingsoft · WPS Officeremediation: past CISA due date

P2added 2024-09-03due 2024-09-24

⋮

CVECVE-2024-7965

Google Chromium V8 Inappropriate Implementation Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2024-08-28due 2024-09-18

⋮

CVECVE-2024-38856

Apache OFBiz Incorrect Authorization Vulnerability

Apache · OFBizremediation: past CISA due date

P2added 2024-08-27due 2024-09-17

⋮

CVECVE-2024-7971

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2024-08-26due 2024-09-16

⋮

CVECVE-2024-39717

Versa Director Dangerous File Type Upload Vulnerability

Versa · Directorremediation: past CISA due date

P2added 2024-08-23due 2024-09-13

⋮

CVECVE-2021-31196

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft · Exchange Serverremediation: past CISA due date

P2added 2024-08-21due 2024-09-11

⋮

CVECVE-2021-33044

Dahua IP Camera Authentication Bypass Vulnerability

Dahua · IP Camera Firmwareremediation: past CISA due date

P2added 2024-08-21due 2024-09-11

⋮

CVECVE-2021-33045

Dahua IP Camera Authentication Bypass Vulnerability

Dahua · IP Camera Firmwareremediation: past CISA due date

P2added 2024-08-21due 2024-09-11

⋮

CVECVE-2022-0185

Linux Kernel Heap-Based Buffer Overflow Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2024-08-21due 2024-09-11

⋮

CVECVE-2024-23897

Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

Jenkins · Jenkins Command Line Interface (CLI)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2024-08-19due 2024-09-09

⋮

CVECVE-2024-28986

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

SolarWinds · Web Help Deskremediation: past CISA due date

P2added 2024-08-15due 2024-09-05

⋮

CVECVE-2024-38106

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-08-13due 2024-09-03

⋮

CVECVE-2024-38107

Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-08-13due 2024-09-03

⋮

CVECVE-2024-38178

Microsoft Windows Scripting Engine Memory Corruption Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-08-13due 2024-09-03

⋮

CVECVE-2024-38189

Microsoft Project Remote Code Execution Vulnerability

Microsoft · Projectremediation: past CISA due date

P2added 2024-08-13due 2024-09-03

⋮

CVECVE-2024-38193

Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-08-13due 2024-09-03

⋮

CVECVE-2024-38213

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-08-13due 2024-09-03

⋮

CVECVE-2024-32113

Apache OFBiz Path Traversal Vulnerability

Apache · OFBizremediation: past CISA due date

P2added 2024-08-07due 2024-08-28

⋮

CVECVE-2024-36971

Android Kernel Remote Code Execution Vulnerability

Android · Kernelremediation: past CISA due date

P2added 2024-08-07due 2024-08-28

⋮

CVECVE-2018-0824

Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2024-08-05due 2024-08-26

⋮

CVECVE-2024-37085

VMware ESXi Authentication Bypass Vulnerability

VMware · ESXiremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1078exploitation T1608.001secondary impact T1068primary impact

P1added 2024-07-30due 2024-08-20

⋮

CVECVE-2023-45249

Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability

Acronis · Cyber Infrastructure (ACI)remediation: past CISA due date

P2added 2024-07-29due 2024-08-19

⋮

CVECVE-2024-4879

ServiceNow Improper Input Validation Vulnerability

ServiceNow · Utah, Vancouver, and Washington DC Now Platformremediation: past CISA due date

ATT&CKT1190primary impact T1059exploitation T1005primary impact

P2added 2024-07-29due 2024-08-19

⋮

CVECVE-2024-5217

ServiceNow Incomplete List of Disallowed Inputs Vulnerability

ServiceNow · Utah, Vancouver, and Washington DC Now Platformremediation: past CISA due date

ATT&CKT1059exploitation T1005primary impact

P2added 2024-07-29due 2024-08-19

⋮

CVECVE-2012-4792

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2024-07-23due 2024-08-13

⋮

CVECVE-2024-39891

Twilio Authy Information Disclosure Vulnerability

Twilio · Authyremediation: past CISA due date

P2added 2024-07-23due 2024-08-13

⋮

CVECVE-2022-22948

VMware vCenter Server Incorrect Default File Permissions Vulnerability

VMware · vCenter Serverremediation: past CISA due date

ATT&CKT1068secondary impact T1212primary impact T1078exploitation

P2added 2024-07-17due 2024-08-07

⋮

CVECVE-2024-28995

SolarWinds Serv-U Path Traversal Vulnerability

SolarWinds · Serv-Uremediation: past CISA due date

P2added 2024-07-17due 2024-08-07

⋮

CVECVE-2024-34102

Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

Adobe · Commerce and Magento Open Sourceremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact T1005secondary impact

P2added 2024-07-17due 2024-08-07

⋮

CVECVE-2024-36401

OSGeo GeoServer GeoTools Eval Injection Vulnerability

OSGeo · GeoServerremediation: past CISA due date

P2added 2024-07-15due 2024-08-05

⋮

CVECVE-2024-23692

Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Rejetto · HTTP File Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1496secondary impact T1005secondary impact T1105secondary impact T1082primary impact T1221exploitation

P1added 2024-07-09due 2024-07-30

⋮

CVECVE-2024-38080

Microsoft Windows Hyper-V Privilege Escalation Vulnerability

Microsoft · Windows remediation: past CISA due date

ATT&CKT1204.002exploitation T1068primary impact

P2added 2024-07-09due 2024-07-30

⋮

CVECVE-2024-38112

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Microsoft · Windowsremediation: past CISA due date

ATT&CKT1189exploitation T1204.001exploitation

P2added 2024-07-09due 2024-07-30

⋮

CVECVE-2024-20399

Cisco NX-OS Command Injection Vulnerability

Cisco · NX-OSremediation: past CISA due date

ATT&CKT1059primary impact T1078exploitation

P2added 2024-07-02due 2024-07-23

⋮

CVECVE-2020-13965

Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

Roundcube · Webmailremediation: past CISA due date

P2added 2024-06-26due 2024-07-17

⋮

CVECVE-2022-24816

OSGeo GeoServer JAI-EXT Code Injection Vulnerability

OSGeo · JAI-EXTremediation: past CISA due date

P2added 2024-06-26due 2024-07-17

⋮

CVECVE-2022-2586

Linux Kernel Use-After-Free Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2024-06-26due 2024-07-17

⋮

CVECVE-2024-26169

Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact T1203exploitation T1112exploitation

P1added 2024-06-13due 2024-07-04

⋮

551–600 of ~1,722

← Prev Next →