CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 4h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2014-4123

Microsoft Internet Explorer Privilege Escalation Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2014-4148

Microsoft Windows Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2014-8439

Adobe Flash Player Dereferenced Pointer Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1189exploitation

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2015-0016

Microsoft Windows TS WebProxy Directory Traversal Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2015-0071

Microsoft Internet Explorer ASLR Bypass Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2015-0310

Adobe Flash Player ASLR Bypass Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1189exploitation

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2015-1671

Microsoft Windows Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2015-1769

Microsoft Windows Mount Manager Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2015-2360

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2015-2425

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2015-4495

Mozilla Firefox Security Feature Bypass Vulnerability

Mozilla · Firefoxremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2015-6175

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2015-8651

Adobe Flash Player Integer Overflow Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1486secondary impact T1105primary impact T1189exploitation

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2016-0034

Microsoft Silverlight Runtime Remote Code Execution Vulnerability

Microsoft · Silverlightremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-25due 2022-06-15

⋮

CVECVE-2016-0984

Adobe Flash Player and AIR Use-After-Free Vulnerability

Adobe · Flash Player and AIRremediation: past CISA due date

ATT&CKT1204.002exploitation T1105primary impact

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2016-1010

Adobe Flash Player and AIR Integer Overflow Vulnerability

Adobe · Flash Player and AIRremediation: past CISA due date

ATT&CKT1574exploitation

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2016-3393

Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2016-7256

Microsoft Windows Open Type Font Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2019-3010

Oracle Solaris Privilege Escalation Vulnerability

Oracle · Solarisremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2016-0162

Microsoft Internet Explorer Information Disclosure Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2016-3298

Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2016-3351

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

Microsoft · Internet Explorer and Edgeremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-24due 2022-06-14

⋮

CVECVE-2016-4655

Apple iOS Information Disclosure Vulnerability

Apple · iOSremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2016-4656

Apple iOS Memory Corruption Vulnerability

Apple · iOSremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2016-4657

Apple iOS Webkit Memory Corruption Vulnerability

Apple · iOSremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2016-6366

Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability

Cisco · Adaptive Security Appliance (ASA)remediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2016-6367

Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

Cisco · Adaptive Security Appliance (ASA)remediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2017-0005

Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2017-0022

Microsoft XML Core Services Information Disclosure Vulnerability

Microsoft · XML Core Servicesremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2017-0147

Microsoft Windows SMBv1 Information Disclosure Vulnerability

Microsoft · SMBv1 serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-24due 2022-06-14

⋮

CVECVE-2017-0149

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2017-0210

Microsoft Internet Explorer Privilege Escalation Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2017-18362

Kaseya VSA SQL Injection Vulnerability

Kaseya · Virtual System/Server Administrator (VSA)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-24due 2022-06-14

⋮

CVECVE-2017-8291

Artifex Ghostscript Type Confusion Vulnerability

Artifex · Ghostscriptremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2017-8543

Microsoft Windows Search Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2018-19943

QNAP NAS File Station Cross-Site Scripting Vulnerability

QNAP · Network Attached Storage (NAS)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-24due 2022-06-14

⋮

CVECVE-2018-19949

QNAP NAS File Station Command Injection Vulnerability

QNAP · Network Attached Storage (NAS)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-24due 2022-06-14

⋮

CVECVE-2018-19953

QNAP NAS File Station Cross-Site Scripting Vulnerability

QNAP · Network Attached Storage (NAS)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-24due 2022-06-14

⋮

CVECVE-2018-8611

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-24due 2022-06-14

⋮

CVECVE-2018-5002

Adobe Flash Player Stack-based Buffer Overflow Vulnerability

Adobe · Flash Playerremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2018-8589

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-0676

Microsoft Internet Explorer Information Disclosure Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-0703

Microsoft Windows SMB Information Disclosure Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-0880

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-1130

Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-11707

Mozilla Firefox and Thunderbird Type Confusion Vulnerability

Mozilla · Firefox and Thunderbirdremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-11708

Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability

Mozilla · Firefox and Thunderbirdremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-13720

Google Chrome WebAudio Use-After-Free Vulnerability

Google · Chrome WebAudioremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-1385

Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-18426

WhatsApp Cross-Site Scripting Vulnerability

Meta Platforms · WhatsAppremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

1,001–1,050 of ~1,722

← Prev Next →