CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 251–260 of 390 records

CVE Vendor Product Added Due Status
CVE-2019-1064 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1069 — Microsoft Task Scheduler Privilege Escalation Vulnerability
A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.
 Microsoft Task Scheduler Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1129 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1132 — Microsoft Win32k Privilege Escalation Vulnerability
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
 Microsoft Win32k Mar 15, 2022 Apr 5, 2022
CVE-2019-1253 — Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1315 — Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1322 — Microsoft Windows Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1405 — Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2002-0367 — Microsoft Windows Privilege Escalation Vulnerability
smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.
 Microsoft Windows Mar 3, 2022 Mar 24, 2022
CVE-2004-0210 — Microsoft Windows Privilege Escalation Vulnerability
A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.
 Microsoft Windows Mar 3, 2022 Mar 24, 2022