CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2015-1770 — Microsoft Office Uninitialized Memory Use Vulnerability Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.	Microsoft	Office	Mar 28, 2022	Apr 18, 2022
CVE-2021-38646 — Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.	Microsoft	Office	Mar 28, 2022	Apr 18, 2022	Ransomware
CVE-2010-3333 — Microsoft Office Stack-based Buffer Overflow Vulnerability A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.	Microsoft	Office	Mar 3, 2022	Mar 24, 2022
CVE-2012-1856 — Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.	Microsoft	Office	Mar 3, 2022	Mar 24, 2022
CVE-2015-1642 — Microsoft Office Memory Corruption Vulnerability Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.	Microsoft	Office	Mar 3, 2022	Mar 24, 2022
CVE-2015-2545 — Microsoft Office Malformed EPS File Vulnerability Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.	Microsoft	Office	Mar 3, 2022	Mar 24, 2022
CVE-2016-7193 — Microsoft Office Memory Corruption Vulnerability Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.	Microsoft	Office	Mar 3, 2022	Mar 24, 2022
CVE-2017-0261 — Microsoft Office Use-After-Free Vulnerability Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.	Microsoft	Office	Mar 3, 2022	Mar 24, 2022
CVE-2017-11826 — Microsoft Office Remote Code Execution Vulnerability A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.	Microsoft	Office	Mar 3, 2022	Mar 24, 2022
CVE-2017-8570 — Microsoft Office Remote Code Execution Vulnerability A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.	Microsoft	Office	Feb 25, 2022	Aug 25, 2022

Microsoft

CVE-2015-1770 — Microsoft Office Uninitialized Memory Use Vulnerability

Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.

Office · Mar 28, 2022

Ransomware Microsoft

CVE-2021-38646 — Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

Office · Mar 28, 2022

Microsoft

CVE-2010-3333 — Microsoft Office Stack-based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.

Office · Mar 3, 2022

Microsoft

CVE-2012-1856 — Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted (1) document or (2) web page that triggers system-state corruption.

Office · Mar 3, 2022

Microsoft

CVE-2015-1642 — Microsoft Office Memory Corruption Vulnerability

Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.

Office · Mar 3, 2022

Microsoft

CVE-2015-2545 — Microsoft Office Malformed EPS File Vulnerability

Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.

Office · Mar 3, 2022

Microsoft

CVE-2016-7193 — Microsoft Office Memory Corruption Vulnerability

Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution.

Office · Mar 3, 2022

Microsoft

CVE-2017-0261 — Microsoft Office Use-After-Free Vulnerability

Microsoft Office contains a use-after-free vulnerability which can allow for remote code execution.

Office · Mar 3, 2022

Microsoft

CVE-2017-11826 — Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.

Office · Mar 3, 2022

Microsoft

CVE-2017-8570 — Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory.

Office · Feb 25, 2022