CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 121–130 of 175 records

CVE Vendor Product Added Due Status
CVE-2014-6332 — Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.
 Microsoft Windows Mar 25, 2022 Apr 15, 2022
CVE-2017-0146 — Microsoft Windows SMB Remote Code Execution Vulnerability
The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution.
 Microsoft Windows Mar 25, 2022 Apr 15, 2022 Ransomware
CVE-2018-8414 — Microsoft Windows Shell Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.
 Microsoft Windows Mar 25, 2022 Apr 15, 2022
CVE-2022-21999 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.
 Microsoft Windows Mar 25, 2022 Apr 15, 2022 Ransomware
CVE-2016-3309 — Microsoft Windows Kernel Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2017-0101 — Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-0543 — Microsoft Windows Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-0841 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1064 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware
CVE-2019-1129 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
 Microsoft Windows Mar 15, 2022 Apr 5, 2022 Ransomware