CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–3 of 3 records

CVE Vendor Product Added Due Status
CVE-2024-29059 — Microsoft .NET Framework Information Disclosure Vulnerability
Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.
Microsoft .NET Framework Feb 4, 2025 Feb 25, 2025
CVE-2017-8759 — Microsoft .NET Framework Remote Code Execution Vulnerability
Microsoft .NET Framework contains a remote code execution vulnerability when processing untrusted input that could allow an attacker to take control of an affected system.
Microsoft .NET Framework Nov 3, 2021 May 3, 2022
CVE-2020-0646 — Microsoft .NET Framework Remote Code Execution Vulnerability
Microsoft .NET Framework contains an improper input validation vulnerability that allows for remote code execution.
Microsoft .NET Framework Nov 3, 2021 May 3, 2022