CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2021-1732 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Win32k	Nov 3, 2021	Nov 17, 2021	Ransomware
CVE-2021-26411 — Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.	Microsoft	Internet Explorer	Nov 3, 2021	Nov 17, 2021	Ransomware
CVE-2021-26855 — Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.	Microsoft	Exchange Server	Nov 3, 2021	May 3, 2022	Ransomware
CVE-2021-26857 — Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.	Microsoft	Exchange Server	Nov 3, 2021	May 3, 2022	Ransomware
CVE-2021-26858 — Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.	Microsoft	Exchange Server	Nov 3, 2021	May 3, 2022	Ransomware
CVE-2021-27059 — Microsoft Office Remote Code Execution Vulnerability Microsoft Office contains an unspecified vulnerability that allows for remote code execution.	Microsoft	Office	Nov 3, 2021	Nov 17, 2021
CVE-2021-27065 — Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.	Microsoft	Exchange Server	Nov 3, 2021	May 3, 2022	Ransomware
CVE-2021-27085 — Microsoft Internet Explorer Remote Code Execution Vulnerability Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.	Microsoft	Internet Explorer	Nov 3, 2021	Nov 17, 2021
CVE-2021-28310 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Win32k	Nov 3, 2021	Nov 17, 2021
CVE-2021-31199 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Enhanced Cryptographic Provider	Nov 3, 2021	Nov 17, 2021

Ransomware Microsoft

CVE-2021-1732 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Win32k · Nov 3, 2021

Ransomware Microsoft

CVE-2021-26411 — Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.

Internet Explorer · Nov 3, 2021

Ransomware Microsoft

CVE-2021-26855 — Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

Exchange Server · Nov 3, 2021

Ransomware Microsoft

CVE-2021-26857 — Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

Exchange Server · Nov 3, 2021

Ransomware Microsoft

CVE-2021-26858 — Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

Exchange Server · Nov 3, 2021

Microsoft

CVE-2021-27059 — Microsoft Office Remote Code Execution Vulnerability

Microsoft Office contains an unspecified vulnerability that allows for remote code execution.

Office · Nov 3, 2021

Ransomware Microsoft

CVE-2021-27065 — Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

Exchange Server · Nov 3, 2021

Microsoft

CVE-2021-27085 — Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.

Internet Explorer · Nov 3, 2021

Microsoft

CVE-2021-28310 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.

Win32k · Nov 3, 2021

Microsoft

CVE-2021-31199 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

Enhanced Cryptographic Provider · Nov 3, 2021