CVE Intelligence
Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

Severity
Clear

405 result(s)

Export this search: RSS · CSV · STIX
CVE-2025-24984 Medium · 4.6 KEV High · 50 CWE-532 Mar 11, 2025
Microsoft Windows NTFS Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2025-24985 High · 7.8 KEV High · 61 Public exploit CWE-122 Mar 11, 2025
Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVE-2025-24983 High · 7.0 KEV High · 52 CWE-416 Mar 11, 2025
Microsoft Windows Win32k Use-After-Free Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2025-24054 Medium · 5.4 KEV High · 67 Public exploit CWE-73 Mar 11, 2025
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-24989 Critical · 9.8 KEV High · 56 CWE-284 Feb 19, 2025
Microsoft Power Pages Improper Access Control Vulnerability
An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected customers have been notified. This update addressed the registration control bypass. Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you've not been notified this vulnerability does not affect you.
CVE-2025-21418 High · 7.8 KEV High · 52 CWE-122 Feb 11, 2025
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-21391 High · 7.1 KEV High · 53 CWE-59 Feb 11, 2025
Microsoft Windows Storage Link Following Vulnerability
Windows Storage Elevation of Privilege Vulnerability
CVE-2025-21333 High · 7.8 KEV High · 69 Public exploit CWE-122 Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21334 High · 7.8 KEV High · 52 CWE-416 Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21335 High · 7.8 KEV High · 52 CWE-416 Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2024-49138 High · 7.8 KEV Urgent · 70 Public exploit CWE-122 Dec 11, 2024
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-49035 Critical · 9.8 KEV High · 56 CWE-269 Nov 26, 2024
Microsoft Partner Center Improper Access Control Vulnerability
An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.
CVE-2024-49039 High · 8.8 KEV Urgent · 71 Public exploit Ransomware CWE-287 Nov 12, 2024
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2024-43451 Medium · 6.5 KEV High · 59 Public exploit CWE-73 Nov 12, 2024
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
CVE-2024-43572 High · 7.8 KEV High · 56 CWE-707 Oct 8, 2024
Microsoft Windows Management Console Remote Code Execution Vulnerability
Microsoft Management Console Remote Code Execution Vulnerability
CVE-2024-43573 High · 8.1 KEV High · 56 CWE-79 Oct 8, 2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43468 Critical · 9.8 KEV High · 69 Public exploit CWE-89 Oct 8, 2024
Microsoft Configuration Manager SQL Injection Vulnerability
Microsoft Configuration Manager Remote Code Execution Vulnerability
CVE-2024-43461 High · 8.8 KEV High · 56 CWE-451 Sep 10, 2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-38226 High · 7.3 KEV High · 54 CWE-693 Sep 10, 2024
Microsoft Publisher Protection Mechanism Failure Vulnerability
Microsoft Publisher Security Feature Bypass Vulnerability
CVE-2024-38217 Medium · 5.4 KEV High · 52 CWE-693 Sep 10, 2024
Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2024-38014 High · 7.8 KEV High · 55 CWE-269 Sep 10, 2024
Microsoft Windows Installer Improper Privilege Management Vulnerability
Windows Installer Elevation of Privilege Vulnerability
CVE-2024-7971 Critical · 9.6 KEV High · 66 Public exploit CWE-843 Aug 21, 2024
Google Chromium V8 Type Confusion Vulnerability
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-7965 High · 8.8 KEV High · 62 Public exploit CWE-787 Aug 21, 2024
Google Chromium V8 Inappropriate Implementation Vulnerability
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-38213 Medium · 6.5 KEV High · 52 CWE-693 Aug 13, 2024
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2024-38193 High · 7.8 KEV Urgent · 70 Public exploit CWE-416 Aug 13, 2024
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability