CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2026-41091 — Microsoft Defender Link Following Vulnerability Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally.	Microsoft	Defender	May 20, 2026	Jun 3, 2026
CVE-2026-45498 — Microsoft Defender Denial of Service Vulnerability Microsoft Defender contains an unspecified vulnerability that allows for denial of service.	Microsoft	Defender	May 20, 2026	Jun 3, 2026
CVE-2026-33825 — Microsoft Defender Insufficient Granularity of Access Control Vulnerability Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.	Microsoft	Defender	Apr 22, 2026	May 6, 2026	Ransomware
CVE-2022-44698 — Microsoft Defender SmartScreen Security Feature Bypass Vulnerability Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.	Microsoft	Defender	Dec 13, 2022	Jan 3, 2023	Ransomware
CVE-2021-1647 — Microsoft Defender Remote Code Execution Vulnerability Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.	Microsoft	Defender	Nov 3, 2021	Nov 17, 2021

Microsoft

CVE-2026-41091 — Microsoft Defender Link Following Vulnerability

Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally.

Defender · May 20, 2026

Microsoft

CVE-2026-45498 — Microsoft Defender Denial of Service Vulnerability

Microsoft Defender contains an unspecified vulnerability that allows for denial of service.

Defender · May 20, 2026

Ransomware Microsoft

CVE-2026-33825 — Microsoft Defender Insufficient Granularity of Access Control Vulnerability

Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an authorized attacker to escalate privileges locally.

Defender · Apr 22, 2026

Ransomware Microsoft

CVE-2022-44698 — Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

Defender · Dec 13, 2022

Microsoft

CVE-2021-1647 — Microsoft Defender Remote Code Execution Vulnerability

Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.

Defender · Nov 3, 2021