CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2022-21882 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Win32k	Feb 4, 2022	Feb 18, 2022	Ransomware
CVE-2014-1776 — Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user.	Microsoft	Internet Explorer	Jan 28, 2022	Jul 28, 2022
CVE-2020-0787 — Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.	Microsoft	Windows	Jan 28, 2022	Jul 28, 2022	Ransomware
CVE-2018-8453 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.	Microsoft	Win32k	Jan 21, 2022	Jul 21, 2022	Ransomware
CVE-2021-33766 — Microsoft Exchange Server Information Disclosure Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.	Microsoft	Exchange Server	Jan 18, 2022	Feb 1, 2022
CVE-2013-3900 — Microsoft WinVerifyTrust function Remote Code Execution A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.	Microsoft	WinVerifyTrust function	Jan 10, 2022	Jul 10, 2022
CVE-2019-1458 — Microsoft Win32k Privilege Escalation Vulnerability A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.	Microsoft	Win32k	Jan 10, 2022	Jul 10, 2022	Ransomware
CVE-2021-43890 — Microsoft Windows AppX Installer Spoofing Vulnerability Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.	Microsoft	Windows	Dec 15, 2021	Dec 29, 2021	Ransomware
CVE-2021-40449 — Microsoft Windows Win32k Privilege Escalation Vulnerability Unspecified vulnerability allows for an authenticated user to escalate privileges.	Microsoft	Windows	Nov 17, 2021	Dec 1, 2021	Ransomware
CVE-2021-42292 — Microsoft Excel Security Feature Bypass A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.	Microsoft	Office	Nov 17, 2021	Dec 1, 2021

Ransomware Microsoft

CVE-2022-21882 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Win32k · Feb 4, 2022

Microsoft

CVE-2014-1776 — Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code in the context of the current user.

Internet Explorer · Jan 28, 2022

Ransomware Microsoft

CVE-2020-0787 — Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.

Windows · Jan 28, 2022

Ransomware Microsoft

CVE-2018-8453 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.

Win32k · Jan 21, 2022

Microsoft

CVE-2021-33766 — Microsoft Exchange Server Information Disclosure

Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.

Exchange Server · Jan 18, 2022

Microsoft

CVE-2013-3900 — Microsoft WinVerifyTrust function Remote Code Execution

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

WinVerifyTrust function · Jan 10, 2022

Ransomware Microsoft

CVE-2019-1458 — Microsoft Win32k Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.

Win32k · Jan 10, 2022

Ransomware Microsoft

CVE-2021-43890 — Microsoft Windows AppX Installer Spoofing Vulnerability

Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.

Windows · Dec 15, 2021

Ransomware Microsoft

CVE-2021-40449 — Microsoft Windows Win32k Privilege Escalation Vulnerability

Unspecified vulnerability allows for an authenticated user to escalate privileges.

Windows · Nov 17, 2021

Microsoft

CVE-2021-42292 — Microsoft Excel Security Feature Bypass

A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.

Office · Nov 17, 2021