CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 201–210 of 390 records

CVE Vendor Product Added Due Status
CVE-2020-0638 — Microsoft Update Notification Manager Privilege Escalation Vulnerability
Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Update Notification Manager May 23, 2022 Jun 13, 2022 Ransomware
CVE-2020-1027 — Microsoft Windows Kernel Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
 Microsoft Windows May 23, 2022 Jun 13, 2022
CVE-2014-0322 — Microsoft Internet Explorer Use-After-Free Vulnerability
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.
 Microsoft Internet Explorer May 4, 2022 May 25, 2022
CVE-2014-4113 — Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Win32k May 4, 2022 May 25, 2022
CVE-2021-40450 — Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Win32k Apr 25, 2022 May 16, 2022
CVE-2021-41357 — Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Win32k Apr 25, 2022 May 16, 2022
CVE-2022-21919 — Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Windows Apr 25, 2022 May 16, 2022
CVE-2022-26904 — Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Windows Apr 25, 2022 May 16, 2022
CVE-2022-22718 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.
 Microsoft Windows Apr 19, 2022 May 10, 2022
CVE-2015-2502 — Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).
 Microsoft Internet Explorer Apr 13, 2022 May 4, 2022