CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 41–50 of 54 records

CVE Vendor Product Added Due Status
CVE-2019-7286 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.
 Apple Multiple Products May 23, 2022 Jun 13, 2022
CVE-2021-30883 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.
 Apple Multiple Products May 23, 2022 Jun 13, 2022
CVE-2019-8506 — Apple Multiple Products Type Confusion Vulnerability
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
 Apple Multiple Products May 4, 2022 May 25, 2022
CVE-2021-1789 — Apple Multiple Products Type Confusion Vulnerability
A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.
 Apple Multiple Products May 4, 2022 May 25, 2022
CVE-2020-27930 — Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front.
 Apple Multiple Products Nov 3, 2021 May 3, 2022
CVE-2020-27932 — Apple Multiple Products Type Confusion Vulnerability
Apple iOS, iPadOS, macOS, and watchOS contain a type confusion vulnerability that may allow a malicious application to execute code with kernel privileges.
 Apple Multiple Products Nov 3, 2021 May 3, 2022
CVE-2020-27950 — Apple Multiple Products Memory Initialization Vulnerability
Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.
 Apple Multiple Products Nov 3, 2021 May 3, 2022
CVE-2020-9859 — Apple Multiple Products Code Execution Vulnerability
Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.
 Apple Multiple Products Nov 3, 2021 May 3, 2022
CVE-2021-1782 — Apple Multiple Products Race Condition Vulnerability
Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.
 Apple Multiple Products Nov 3, 2021 Nov 17, 2021
CVE-2021-30661 — Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
 Apple Multiple Products Nov 3, 2021 Nov 17, 2021