CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 191–200 of 390 records

CVE Vendor Product Added Due Status
CVE-2017-0149 — Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial-of-service (DoS) via a crafted website.
 Microsoft Internet Explorer May 24, 2022 Jun 14, 2022
CVE-2017-0210 — Microsoft Internet Explorer Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information.
 Microsoft Internet Explorer May 24, 2022 Jun 14, 2022
CVE-2017-8543 — Microsoft Windows Search Remote Code Execution Vulnerability
Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.
 Microsoft Windows May 24, 2022 Jun 14, 2022
CVE-2018-8611 — Microsoft Windows Kernel Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.
 Microsoft Windows May 24, 2022 Jun 14, 2022
CVE-2018-8589 — Microsoft Win32k Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.
 Microsoft Win32k May 23, 2022 Jun 13, 2022
CVE-2019-0676 — Microsoft Internet Explorer Information Disclosure Vulnerability
An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.
 Microsoft Internet Explorer May 23, 2022 Jun 13, 2022
CVE-2019-0703 — Microsoft Windows SMB Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.
 Microsoft Windows May 23, 2022 Jun 13, 2022
CVE-2019-0880 — Microsoft Windows Privilege Escalation Vulnerability
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.
 Microsoft Windows May 23, 2022 Jun 13, 2022
CVE-2019-1130 — Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.
 Microsoft Windows May 23, 2022 Jun 13, 2022 Ransomware
CVE-2019-1385 — Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.
 Microsoft Windows May 23, 2022 Jun 13, 2022 Ransomware