CVE Intelligence
Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

Severity
Clear

406 result(s)

Export this search: RSS · CSV · STIX
CVE-2024-38193 High · 7.8 KEV Urgent · 70 Public exploit CWE-416 Aug 13, 2024
Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2024-38189 High · 8.8 KEV High · 55 CWE-20 Aug 13, 2024
Microsoft Project Remote Code Execution Vulnerability
Microsoft Project Remote Code Execution Vulnerability
CVE-2024-38178 High · 7.5 KEV High · 56 CWE-843 Aug 13, 2024
Microsoft Windows Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
CVE-2024-38106 High · 7.0 KEV High · 55 CWE-591 Aug 13, 2024
Microsoft Windows Kernel Privilege Escalation Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-38107 High · 7.8 KEV High · 52 CWE-416 Aug 13, 2024
Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
CVE-2024-38112 High · 7.5 KEV High · 62 Public exploit CWE-451 Jul 9, 2024
Microsoft Windows MSHTML Platform Spoofing Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-38094 High · 7.2 KEV High · 66 Ransomware CWE-502 Jul 9, 2024
Microsoft SharePoint Deserialization Vulnerability
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2024-38080 High · 7.8 KEV High · 61 Public exploit CWE-190 Jul 9, 2024
Microsoft Windows Hyper-V Privilege Escalation Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2024-35250 High · 7.8 KEV Urgent · 74 Public exploit CWE-822 Jun 11, 2024
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-30088 High · 7.0 KEV Urgent · 82 Public exploit Ransomware CWE-367 Jun 11, 2024
Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-30051 High · 7.8 KEV Urgent · 71 Public exploit Ransomware CWE-787 May 14, 2024
Microsoft DWM Core Library Privilege Escalation Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2024-30040 High · 8.8 KEV High · 55 CWE-20 May 14, 2024
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2024-29988 High · 8.8 KEV High · 62 Public exploit CWE-693 Apr 9, 2024
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
SmartScreen Prompt Security Feature Bypass Vulnerability
CVE-2024-29059 High · 7.5 KEV High · 69 Public exploit CWE-209 Mar 22, 2024
Microsoft .NET Framework Information Disclosure Vulnerability
.NET Framework Information Disclosure Vulnerability
CVE-2024-26169 High · 7.8 KEV Urgent · 71 Public exploit Ransomware CWE-269 Mar 12, 2024
Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2024-21413 Critical · 9.8 KEV High · 69 Public exploit CWE-20 Feb 13, 2024
Microsoft Outlook Improper Input Validation Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-21412 High · 8.1 KEV Urgent · 72 Public exploit Ransomware CWE-693 Feb 13, 2024
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
Internet Shortcut Files Security Feature Bypass Vulnerability
CVE-2024-21410 Critical · 9.8 KEV High · 68 Public exploit CWE-287 Feb 13, 2024
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2024-21351 High · 7.6 KEV High · 56 CWE-94 Feb 13, 2024
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2024-21338 High · 7.8 KEV Urgent · 80 Public exploit Ransomware CWE-822 Feb 13, 2024
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-6345 Critical · 9.6 KEV High · 63 CWE-190 Nov 29, 2023
Google Skia Integer Overflow Vulnerability
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
CVE-2023-36424 High · 7.8 KEV High · 61 Public exploit CWE-125 Nov 14, 2023
Microsoft Windows Out-of-Bounds Read Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36036 High · 7.8 KEV High · 56 CWE-787 Nov 14, 2023
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36033 High · 7.8 KEV High · 55 CWE-119 Nov 14, 2023
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2023-36025 High · 8.8 KEV High · 62 Public exploit Nov 14, 2023
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability