CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1251–1260 of 1746 records

CVE Vendor Product Added Due Status
CVE-2019-1129 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1132 — Microsoft Win32k Privilege Escalation Vulnerability
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
 Microsoft Win32k Mar 15, 2022 Apr 5, 2022
CVE-2019-1253 — Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1315 — Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1322 — Microsoft Windows Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1405 — Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2020-5135 — SonicWall SonicOS Buffer Overflow Vulnerability
A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.
 SonicWall SonicOS Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2009-3960 — Adobe BlazeDS Information Disclosure Vulnerability
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.
 Adobe BlazeDS Mar 7, 2022 Sep 7, 2022 Ransomware
CVE-2013-0625 — Adobe ColdFusion Authentication Bypass Vulnerability
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.
 Adobe ColdFusion Mar 7, 2022 Sep 7, 2022
CVE-2013-0629 — Adobe ColdFusion Directory Traversal Vulnerability
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.
 Adobe ColdFusion Mar 7, 2022 Sep 7, 2022