CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2021-31201 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Enhanced Cryptographic Provider	Nov 3, 2021	Nov 17, 2021
CVE-2021-31207 — Microsoft Exchange Server Security Feature Bypass Vulnerability Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.	Microsoft	Exchange Server	Nov 3, 2021	Nov 17, 2021	Ransomware
CVE-2021-31955 — Microsoft Windows Kernel Information Disclosure Vulnerability Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-31956 — Microsoft Windows NTFS Privilege Escalation Vulnerability Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-31979 — Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-33739 — Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-33742 — Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-33771 — Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-34448 — Microsoft Windows Scripting Engine Memory Corruption Vulnerability Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-34473 — Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.	Microsoft	Exchange Server	Nov 3, 2021	Nov 17, 2021	Ransomware

Microsoft

CVE-2021-31201 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

Enhanced Cryptographic Provider · Nov 3, 2021

Ransomware Microsoft

CVE-2021-31207 — Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.

Exchange Server · Nov 3, 2021

Microsoft

CVE-2021-31955 — Microsoft Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.

Windows · Nov 3, 2021

Microsoft

CVE-2021-31956 — Microsoft Windows NTFS Privilege Escalation Vulnerability

Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.

Windows · Nov 3, 2021

Microsoft

CVE-2021-31979 — Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

Windows · Nov 3, 2021

Microsoft

CVE-2021-33739 — Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.

Windows · Nov 3, 2021

Microsoft

CVE-2021-33742 — Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.

Windows · Nov 3, 2021

Microsoft

CVE-2021-33771 — Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

Windows · Nov 3, 2021

Microsoft

CVE-2021-34448 — Microsoft Windows Scripting Engine Memory Corruption Vulnerability

Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.

Windows · Nov 3, 2021

Ransomware Microsoft

CVE-2021-34473 — Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.

Exchange Server · Nov 3, 2021