CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 111–120 of 175 records

CVE Vendor Product Added Due Status
CVE-2022-26904 — Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Windows Apr 25, 2022 May 16, 2022
CVE-2022-22718 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.
 Microsoft Windows Apr 19, 2022 May 10, 2022
CVE-2022-24521 — Microsoft Windows CLFS Driver Privilege Escalation Vulnerability
Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Windows Apr 13, 2022 May 4, 2022 Ransomware
CVE-2021-34484 — Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
 Microsoft Windows Mar 31, 2022 Apr 21, 2022
CVE-2010-4398 — Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows allows local users to gain privileges, and bypass the User Account Control (UAC) feature.
 Microsoft Windows Mar 28, 2022 Apr 21, 2022
CVE-2015-2426 — Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts.
 Microsoft Windows Mar 28, 2022 Apr 18, 2022
CVE-2016-0040 — Microsoft Windows Kernel Privilege Escalation Vulnerability
The kernel in Microsoft Windows allows local users to gain privileges via a crafted application.
 Microsoft Windows Mar 28, 2022 Apr 18, 2022
CVE-2017-0213 — Microsoft Windows Privilege Escalation Vulnerability
Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.
 Microsoft Windows Mar 28, 2022 Apr 18, 2022 Ransomware
CVE-2018-8440 — Microsoft Windows Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).
 Microsoft Windows Mar 28, 2022 Apr 18, 2022 Ransomware
CVE-2021-34486 — Microsoft Windows Event Tracing Privilege Escalation Vulnerability
Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.
 Microsoft Windows Mar 28, 2022 Apr 18, 2022