CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2021-31199 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Enhanced Cryptographic Provider	Nov 3, 2021	Nov 17, 2021
CVE-2021-31201 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Enhanced Cryptographic Provider	Nov 3, 2021	Nov 17, 2021

Microsoft

CVE-2021-31199 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.

Microsoft

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.