Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2020-9859 — Apple Multiple Products Code Execution Vulnerability
Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.
|
Apple | Multiple Products | Nov 3, 2021 | May 3, 2022 | |
|
CVE-2021-1497 — Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user.
|
Cisco | HyperFlex HX | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-1498 — Cisco HyperFlex HX Data Platform Command Injection Vulnerability
Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.
|
Cisco | HyperFlex HX | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-1647 — Microsoft Defender Remote Code Execution Vulnerability
Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.
|
Microsoft | Defender | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-1675 — Microsoft Windows Print Spooler Remote Code Execution Vulnerability
Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.
|
Microsoft | Windows | Nov 3, 2021 | Nov 17, 2021 | Ransomware |
|
CVE-2021-1732 — Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
|
Microsoft | Win32k | Nov 3, 2021 | Nov 17, 2021 | Ransomware |
|
CVE-2021-1782 — Apple Multiple Products Race Condition Vulnerability
Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.
|
Apple | Multiple Products | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-1870 — Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
|
Apple | iOS, iPadOS, and macOS | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-1871 — Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
|
Apple | iOS, iPadOS, and macOS | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-1879 — Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
|
Apple | iOS, iPadOS, and watchOS | Nov 3, 2021 | Nov 17, 2021 |
Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.
Multiple Products · Nov 3, 2021
Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user.
HyperFlex HX · Nov 3, 2021
Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.
HyperFlex HX · Nov 3, 2021
Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.
Defender · Nov 3, 2021
Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.
Windows · Nov 3, 2021
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
Win32k · Nov 3, 2021
Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.
Multiple Products · Nov 3, 2021
Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
iOS, iPadOS, and macOS · Nov 3, 2021
Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
iOS, iPadOS, and macOS · Nov 3, 2021
Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
iOS, iPadOS, and watchOS · Nov 3, 2021