CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 101–110 of 175 records

CVE Vendor Product Added Due Status
CVE-2016-7256 — Microsoft Windows Open Type Font Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system.
 Microsoft Windows May 25, 2022 Jun 15, 2022
CVE-2017-0005 — Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability
The Graphics Device Interface (GDI) in Microsoft Windows allows local users to gain privileges via a crafted application.
 Microsoft Windows May 24, 2022 Jun 14, 2022
CVE-2017-8543 — Microsoft Windows Search Remote Code Execution Vulnerability
Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.
 Microsoft Windows May 24, 2022 Jun 14, 2022
CVE-2018-8611 — Microsoft Windows Kernel Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory.
 Microsoft Windows May 24, 2022 Jun 14, 2022
CVE-2019-0703 — Microsoft Windows SMB Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.
 Microsoft Windows May 23, 2022 Jun 13, 2022
CVE-2019-0880 — Microsoft Windows Privilege Escalation Vulnerability
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.
 Microsoft Windows May 23, 2022 Jun 13, 2022
CVE-2019-1130 — Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.
 Microsoft Windows May 23, 2022 Jun 13, 2022 Ransomware
CVE-2019-1385 — Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.
 Microsoft Windows May 23, 2022 Jun 13, 2022 Ransomware
CVE-2020-1027 — Microsoft Windows Kernel Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
 Microsoft Windows May 23, 2022 Jun 13, 2022
CVE-2022-21919 — Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Windows Apr 25, 2022 May 16, 2022