CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1091–1100 of 1746 records

CVE Vendor Product Added Due Status
CVE-2019-8506 — Apple Multiple Products Type Confusion Vulnerability
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
 Apple Multiple Products May 4, 2022 May 25, 2022
CVE-2021-1789 — Apple Multiple Products Type Confusion Vulnerability
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
 Apple Multiple Products May 4, 2022 May 25, 2022
CVE-2019-1003029 — Jenkins Script Security Plugin Sandbox Bypass Vulnerability
Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.
 Jenkins Script Security Plugin Apr 25, 2022 May 16, 2022
CVE-2021-40450 — Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Win32k Apr 25, 2022 May 16, 2022
CVE-2021-41357 — Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Win32k Apr 25, 2022 May 16, 2022
CVE-2022-0847 — Linux Kernel Privilege Escalation Vulnerability
Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."
 Linux Kernel Apr 25, 2022 May 16, 2022
CVE-2022-21919 — Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Windows Apr 25, 2022 May 16, 2022
CVE-2022-26904 — Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Windows Apr 25, 2022 May 16, 2022
CVE-2022-29464 — WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.
 WSO2 Multiple Products Apr 25, 2022 May 16, 2022 Ransomware
CVE-2018-6882 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML.
 Synacor Zimbra Collaboration Suite (ZCS) Apr 19, 2022 May 10, 2022 Ransomware