Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2021-27103 | Accellion | FTA | 9.8 Critical | Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-27102 | Accellion | FTA | 7.8 High | Accellion FTA OS Command Injection Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-27101 | Accellion | FTA | 9.8 Critical | Accellion FTA SQL Injection Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-27085 | Microsoft | Internet Explorer | 8.8 High | Microsoft Internet Explorer Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-27065 | Microsoft | Exchange Server | 7.8 High | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2021-27059 | Microsoft | Office | 7.6 High | Microsoft Office Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-26858 | Microsoft | Exchange Server | 7.8 High | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2021-26857 | Microsoft | Exchange Server | 7.8 High | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2021-26855 | Microsoft | Exchange Server | 9.1 Critical | Microsoft Exchange Server Remote Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2021-26411 | Microsoft | Internet Explorer | 8.8 High | Microsoft Internet Explorer Memory Corruption Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-26084 | Atlassian | Confluence Server and Data Center | 9.8 Critical | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-23874 | McAfee | McAfee Total Protection (MTP) | 7.8 High | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-22986 | F5 | BIG-IP and BIG-IQ Centralized Management | 9.8 Critical | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-22900 | Ivanti | Pulse Connect Secure | 7.2 High | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2021-22899 | Ivanti | Pulse Connect Secure | 8.8 High | Ivanti Pulse Connect Secure Command Injection Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2021-22894 | Ivanti | Pulse Connect Secure | 8.8 High | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2021-22893 | Ivanti | Pulse Connect Secure | 10.0 Critical | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Known |
| CVE-2021-22506 | Micro Focus | Micro Focus Access Manager | 7.5 High | Micro Focus Access Manager Information Leakage Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-22502 | Micro Focus | Operation Bridge Reporter (OBR) | 9.8 Critical | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-22205 | GitLab | Community and Enterprise Editions | 10.0 Critical | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-22005 | VMware | vCenter Server | 9.8 Critical | VMware vCenter Server File Upload Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-21985 | VMware | vCenter Server | 9.8 Critical | VMware vCenter Server Improper Input Validation Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-21972 | VMware | vCenter Server | 9.8 Critical | VMware vCenter Server Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-21224 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21220 | Chromium V8 | 8.8 High | Google Chromium V8 Improper Input Validation Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21206 | Chromium Blink | 8.8 High | Google Chromium Blink Use-After-Free Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21193 | Chromium Blink | 8.8 High | Google Chromium Blink Use-After-Free Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21166 | Chromium | 8.8 High | Google Chromium Race Condition Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21148 | Chromium V8 | 8.8 High | Google Chromium V8 Heap Buffer Overflow Vulnerability | 2021-11-03 | 2021-11-17 | Unknown | |
| CVE-2021-21017 | Adobe | Acrobat and Reader | 8.8 High | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-20090 | Arcadyan | Buffalo Firmware | 9.8 Critical | Arcadyan Buffalo Firmware Path Traversal Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-20023 | SonicWall | SonicWall Email Security | 4.9 Medium | SonicWall Email Security Path Traversal Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-20022 | SonicWall | SonicWall Email Security | 7.2 High | SonicWall Email Security Unrestricted Upload of File Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-20021 | SonicWall | SonicWall Email Security | 9.8 Critical | SonicWall Email Security Improper Privilege Management Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-20016 | SonicWall | SSLVPN SMA100 | 9.8 Critical | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-1906 | Qualcomm | Multiple Chipsets | 5.5 Medium | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1905 | Qualcomm | Multiple Chipsets | 7.8 High | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2021-1879 | Apple | iOS, iPadOS, and watchOS | 6.1 Medium | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1871 | Apple | iOS, iPadOS, and macOS | 9.8 Critical | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1870 | Apple | iOS, iPadOS, and macOS | 9.8 Critical | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1782 | Apple | Multiple Products | 7.0 High | Apple Multiple Products Race Condition Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1732 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-1675 | Microsoft | Windows | 7.8 High | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Known |
| CVE-2021-1647 | Microsoft | Defender | 7.8 High | Microsoft Defender Remote Code Execution Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1498 | Cisco | HyperFlex HX | 9.8 Critical | Cisco HyperFlex HX Data Platform Command Injection Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2021-1497 | Cisco | HyperFlex HX | 9.8 Critical | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | 2021-11-03 | 2021-11-17 | Unknown |
| CVE-2020-9859 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Code Execution Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-9819 | Apple | iOS, iPadOS, and watchOS | 4.3 Medium | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-9818 | Apple | iOS, iPadOS, and watchOS | 8.8 High | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |
| CVE-2020-8657 | EyesOfNetwork | EyesOfNetwork | 9.8 Critical | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | 2021-11-03 | 2022-05-03 | Unknown |