Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2019-0797 — Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.
|
Microsoft | Win32k | Nov 3, 2021 | May 3, 2022 | |
|
CVE-2019-0803 — Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.
|
Microsoft | Win32k | Nov 3, 2021 | May 3, 2022 | Ransomware |
|
CVE-2019-0808 — Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.
|
Microsoft | Win32k | Nov 3, 2021 | May 3, 2022 | |
|
CVE-2019-0859 — Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.
|
Microsoft | Win32k | Nov 3, 2021 | May 3, 2022 | Ransomware |
|
CVE-2019-0863 — Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability
Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode.
|
Microsoft | Windows | Nov 3, 2021 | May 3, 2022 | |
|
CVE-2019-11510 — Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.
|
Ivanti | Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | Ransomware |
|
CVE-2019-11539 — Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands.
|
Ivanti | Pulse Connect Secure and Pulse Policy Secure | Nov 3, 2021 | May 3, 2022 | Ransomware |
|
CVE-2019-11580 — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.
|
Atlassian | Crowd and Crowd Data Center | Nov 3, 2021 | May 3, 2022 | Ransomware |
|
CVE-2019-11634 — Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.
|
Citrix | Workspace Application and Receiver for Windows | Nov 3, 2021 | May 3, 2022 | Ransomware |
|
CVE-2019-1214 — Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability
Microsoft Windows Common Log File System (CLFS) driver improperly handles objects in memory which can allow for privilege escalation.
|
Microsoft | Windows | Nov 3, 2021 | May 3, 2022 |
Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.
Win32k · Nov 3, 2021
Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.
Win32k · Nov 3, 2021
Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.
Win32k · Nov 3, 2021
Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.
Win32k · Nov 3, 2021
Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode.
Windows · Nov 3, 2021
Ivanti Pulse Connect Secure contains an arbitrary file read vulnerability that allows an unauthenticated remote attacker with network access via HTTPS to send a specially crafted URI.
Pulse Connect Secure · Nov 3, 2021
Ivanti Pulse Connect Secure and Policy Secure allows an authenticated attacker from the admin web interface to inject and execute commands.
Pulse Connect Secure and Pulse Policy Secure · Nov 3, 2021
Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.
Crowd and Crowd Data Center · Nov 3, 2021
Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.
Workspace Application and Receiver for Windows · Nov 3, 2021
Microsoft Windows Common Log File System (CLFS) driver improperly handles objects in memory which can allow for privilege escalation.
Windows · Nov 3, 2021