CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2018-8373 — Microsoft Scripting Engine Memory Corruption Vulnerability A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.	Microsoft	Internet Explorer Scripting Engine	Mar 25, 2022	Apr 15, 2022
CVE-2018-8414 — Microsoft Windows Shell Remote Code Execution Vulnerability A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.	Microsoft	Windows	Mar 25, 2022	Apr 15, 2022
CVE-2019-0903 — Microsoft GDI Remote Code Execution Vulnerability A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.	Microsoft	Graphics Device Interface (GDI)	Mar 25, 2022	Apr 15, 2022
CVE-2022-21999 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.	Microsoft	Windows	Mar 25, 2022	Apr 15, 2022	Ransomware
CVE-2015-2546 — Microsoft Win32k Memory Corruption Vulnerability The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.	Microsoft	Win32k	Mar 15, 2022	Apr 5, 2022	Ransomware
CVE-2016-3309 — Microsoft Windows Kernel Privilege Escalation Vulnerability A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.	Microsoft	Windows	Mar 15, 2022	Apr 5, 2022	Ransomware
CVE-2017-0101 — Microsoft Windows Transaction Manager Privilege Escalation Vulnerability A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.	Microsoft	Windows	Mar 15, 2022	Apr 5, 2022	Ransomware
CVE-2018-8120 — Microsoft Win32k Privilege Escalation Vulnerability A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.	Microsoft	Win32k	Mar 15, 2022	Apr 5, 2022	Ransomware
CVE-2019-0543 — Microsoft Windows Privilege Escalation Vulnerability A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.	Microsoft	Windows	Mar 15, 2022	Apr 5, 2022	Ransomware
CVE-2019-0841 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.	Microsoft	Windows	Mar 15, 2022	Apr 5, 2022	Ransomware

Microsoft

CVE-2018-8373 — Microsoft Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.

Internet Explorer Scripting Engine · Mar 25, 2022

Microsoft

CVE-2018-8414 — Microsoft Windows Shell Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.

Windows · Mar 25, 2022

Microsoft

CVE-2019-0903 — Microsoft GDI Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.

Graphics Device Interface (GDI) · Mar 25, 2022

Ransomware Microsoft

CVE-2022-21999 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.

Windows · Mar 25, 2022

Ransomware Microsoft

CVE-2015-2546 — Microsoft Win32k Memory Corruption Vulnerability

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.

Win32k · Mar 15, 2022

Ransomware Microsoft

CVE-2016-3309 — Microsoft Windows Kernel Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

Windows · Mar 15, 2022

Ransomware Microsoft

CVE-2017-0101 — Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.

Windows · Mar 15, 2022

Ransomware Microsoft

CVE-2018-8120 — Microsoft Win32k Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

Win32k · Mar 15, 2022

Ransomware Microsoft

CVE-2019-0543 — Microsoft Windows Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Windows · Mar 15, 2022

Ransomware Microsoft

CVE-2019-0841 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Windows · Mar 15, 2022