CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2017-0059 — Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.	Microsoft	Internet Explorer	Mar 28, 2022	Apr 18, 2022
CVE-2017-0213 — Microsoft Windows Privilege Escalation Vulnerability Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.	Microsoft	Windows	Mar 28, 2022	Apr 18, 2022	Ransomware
CVE-2018-8405 — Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.	Microsoft	DirectX Graphics Kernel (DXGKRNL)	Mar 28, 2022	Apr 18, 2022	Ransomware
CVE-2018-8406 — Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.	Microsoft	DirectX Graphics Kernel (DXGKRNL)	Mar 28, 2022	Apr 18, 2022	Ransomware
CVE-2018-8440 — Microsoft Windows Privilege Escalation Vulnerability An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).	Microsoft	Windows	Mar 28, 2022	Apr 18, 2022	Ransomware
CVE-2021-34486 — Microsoft Windows Event Tracing Privilege Escalation Vulnerability Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.	Microsoft	Windows	Mar 28, 2022	Apr 18, 2022
CVE-2021-38646 — Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.	Microsoft	Office	Mar 28, 2022	Apr 18, 2022	Ransomware
CVE-2014-6324 — Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.	Microsoft	Kerberos Key Distribution Center (KDC)	Mar 25, 2022	Apr 15, 2022
CVE-2014-6332 — Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.	Microsoft	Windows	Mar 25, 2022	Apr 15, 2022
CVE-2017-0146 — Microsoft Windows SMB Remote Code Execution Vulnerability The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution.	Microsoft	Windows	Mar 25, 2022	Apr 15, 2022	Ransomware

Microsoft

CVE-2017-0059 — Microsoft Internet Explorer Information Disclosure Vulnerability

Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site.

Internet Explorer · Mar 28, 2022

Ransomware Microsoft

CVE-2017-0213 — Microsoft Windows Privilege Escalation Vulnerability

Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.

Windows · Mar 28, 2022

Ransomware Microsoft

CVE-2018-8405 — Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

DirectX Graphics Kernel (DXGKRNL) · Mar 28, 2022

Ransomware Microsoft

CVE-2018-8406 — Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

DirectX Graphics Kernel (DXGKRNL) · Mar 28, 2022

Ransomware Microsoft

CVE-2018-8440 — Microsoft Windows Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).

Windows · Mar 28, 2022

Microsoft

CVE-2021-34486 — Microsoft Windows Event Tracing Privilege Escalation Vulnerability

Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.

Windows · Mar 28, 2022

Ransomware Microsoft

CVE-2021-38646 — Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

Office · Mar 28, 2022

Microsoft

CVE-2014-6324 — Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.

Kerberos Key Distribution Center (KDC) · Mar 25, 2022

Microsoft

CVE-2014-6332 — Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.

Windows · Mar 25, 2022

Ransomware Microsoft

CVE-2017-0146 — Microsoft Windows SMB Remote Code Execution Vulnerability

The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution.

Windows · Mar 25, 2022