CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due	Status
CVE-2020-1350 — Microsoft Windows DNS Server Remote Code Execution Vulnerability Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.	Microsoft	Windows	Nov 3, 2021	May 3, 2022
CVE-2020-1464 — Microsoft Windows Spoofing Vulnerability Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files.	Microsoft	Windows	Nov 3, 2021	May 3, 2022
CVE-2020-17087 — Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Windows	Nov 3, 2021	May 3, 2022
CVE-2021-1675 — Microsoft Windows Print Spooler Remote Code Execution Vulnerability Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021	Ransomware
CVE-2021-31955 — Microsoft Windows Kernel Information Disclosure Vulnerability Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-31956 — Microsoft Windows NTFS Privilege Escalation Vulnerability Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-31979 — Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-33739 — Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-33742 — Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021
CVE-2021-33771 — Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.	Microsoft	Windows	Nov 3, 2021	Nov 17, 2021

Microsoft

CVE-2020-1350 — Microsoft Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

Windows · Nov 3, 2021

Microsoft

CVE-2020-1464 — Microsoft Windows Spoofing Vulnerability

Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files.

Windows · Nov 3, 2021

Microsoft

CVE-2020-17087 — Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

Windows · Nov 3, 2021

Ransomware Microsoft

CVE-2021-1675 — Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.

Windows · Nov 3, 2021

Microsoft

CVE-2021-31955 — Microsoft Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.

Windows · Nov 3, 2021

Microsoft

CVE-2021-31956 — Microsoft Windows NTFS Privilege Escalation Vulnerability

Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.

Windows · Nov 3, 2021

Microsoft

CVE-2021-31979 — Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

Windows · Nov 3, 2021

Microsoft

CVE-2021-33739 — Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.

Windows · Nov 3, 2021

Microsoft

CVE-2021-33742 — Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.

Windows · Nov 3, 2021

Microsoft

CVE-2021-33771 — Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

Windows · Nov 3, 2021