CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2019-1132 — Microsoft Win32k Privilege Escalation Vulnerability A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.	Microsoft	Win32k	Mar 15, 2022	Apr 5, 2022
CVE-2015-1701 — Microsoft Win32k Privilege Escalation Vulnerability An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.	Microsoft	Win32k	Mar 3, 2022	Mar 24, 2022	Ransomware
CVE-2017-0263 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.	Microsoft	Win32k	Feb 10, 2022	Aug 10, 2022
CVE-2022-21882 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Win32k	Feb 4, 2022	Feb 18, 2022	Ransomware
CVE-2018-8453 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.	Microsoft	Win32k	Jan 21, 2022	Jul 21, 2022	Ransomware
CVE-2019-1458 — Microsoft Win32k Privilege Escalation Vulnerability A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.	Microsoft	Win32k	Jan 10, 2022	Jul 10, 2022	Ransomware
CVE-2016-0167 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application	Microsoft	Win32k	Nov 3, 2021	May 3, 2022	Ransomware
CVE-2016-7255 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.	Microsoft	Win32k	Nov 3, 2021	May 3, 2022	Ransomware
CVE-2019-0797 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.	Microsoft	Win32k	Nov 3, 2021	May 3, 2022
CVE-2019-0803 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.	Microsoft	Win32k	Nov 3, 2021	May 3, 2022	Ransomware

Microsoft

CVE-2019-1132 — Microsoft Win32k Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

Win32k · Mar 15, 2022

Ransomware Microsoft

CVE-2015-1701 — Microsoft Win32k Privilege Escalation Vulnerability

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.

Win32k · Mar 3, 2022

Microsoft

CVE-2017-0263 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory.

Win32k · Feb 10, 2022

Ransomware Microsoft

CVE-2022-21882 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Win32k · Feb 4, 2022

Ransomware Microsoft

CVE-2018-8453 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.

Win32k · Jan 21, 2022

Ransomware Microsoft

CVE-2019-1458 — Microsoft Win32k Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.

Win32k · Jan 10, 2022

Ransomware Microsoft

CVE-2016-0167 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application

Win32k · Nov 3, 2021

Ransomware Microsoft

CVE-2016-7255 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.

Win32k · Nov 3, 2021

Microsoft

CVE-2019-0797 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.

Win32k · Nov 3, 2021

Ransomware Microsoft

CVE-2019-0803 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.

Win32k · Nov 3, 2021