CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2019-0808 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.	Microsoft	Win32k	Nov 3, 2021	May 3, 2022
CVE-2019-0859 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.	Microsoft	Win32k	Nov 3, 2021	May 3, 2022	Ransomware
CVE-2020-1054 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.	Microsoft	Win32k	Nov 3, 2021	May 3, 2022
CVE-2021-1732 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Win32k	Nov 3, 2021	Nov 17, 2021	Ransomware
CVE-2021-28310 — Microsoft Win32k Privilege Escalation Vulnerability Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Win32k	Nov 3, 2021	Nov 17, 2021

Microsoft

CVE-2019-0808 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.

Win32k · Nov 3, 2021

Ransomware Microsoft

CVE-2019-0859 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.

Win32k · Nov 3, 2021

Microsoft

CVE-2020-1054 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.

Win32k · Nov 3, 2021

Ransomware Microsoft

CVE-2021-1732 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Win32k · Nov 3, 2021

Microsoft

CVE-2021-28310 — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.

Win32k · Nov 3, 2021