Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2021-30860 — Apple Multiple Products Integer Overflow Vulnerability
Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.
|
Apple | Multiple Products | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-30869 — Apple iOS, iPadOS, and macOS Type Confusion Vulnerability
Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.
|
Apple | iOS, iPadOS, and macOS | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-31199 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
|
Microsoft | Enhanced Cryptographic Provider | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-31201 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
|
Microsoft | Enhanced Cryptographic Provider | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-31207 — Microsoft Exchange Server Security Feature Bypass Vulnerability
Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.
|
Microsoft | Exchange Server | Nov 3, 2021 | Nov 17, 2021 | Ransomware |
|
CVE-2021-31755 — Tenda AC11 Router Stack Buffer Overflow Vulnerability
Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.
|
Tenda | AC11 Router | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-31955 — Microsoft Windows Kernel Information Disclosure Vulnerability
Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.
|
Microsoft | Windows | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-31956 — Microsoft Windows NTFS Privilege Escalation Vulnerability
Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.
|
Microsoft | Windows | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-31979 — Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
|
Microsoft | Windows | Nov 3, 2021 | Nov 17, 2021 | |
|
CVE-2021-33739 — Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.
|
Microsoft | Windows | Nov 3, 2021 | Nov 17, 2021 |
Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.
Multiple Products · Nov 3, 2021
Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.
iOS, iPadOS, and macOS · Nov 3, 2021
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
Enhanced Cryptographic Provider · Nov 3, 2021
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
Enhanced Cryptographic Provider · Nov 3, 2021
Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.
Exchange Server · Nov 3, 2021
Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.
AC11 Router · Nov 3, 2021
Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.
Windows · Nov 3, 2021
Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.
Windows · Nov 3, 2021
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
Windows · Nov 3, 2021
Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.
Windows · Nov 3, 2021