CISA Known Exploited Vulnerabilities Directory

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.

SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.

Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service (DoS).

ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the current user (unless ForgeRock AM is running as root user, which the vendor does not recommend).

Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.