Home / CVEs
Exploited vulnerabilities (CISA KEV)
CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.
CVE-2023-41763
Medium · 5.3
KEV High · 60 Public exploit CWE-918 Oct 10, 2023
Microsoft Skype for Business Privilege Escalation Vulnerability
Skype for Business Elevation of Privilege Vulnerability
CVE-2023-36584
Medium · 5.4
KEV High · 51 Oct 10, 2023
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2023-36563
Medium · 5.5
KEV High · 53 CWE-20 Oct 10, 2023
Microsoft WordPad Information Disclosure Vulnerability
Microsoft WordPad Information Disclosure Vulnerability
CVE-2023-44487
High · 7.5
KEV Urgent · 73 Public exploit CWE-400 Oct 10, 2023
HTTP/2 Rapid Reset Attack Vulnerability
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-5217
High · 8.8
KEV High · 62 Public exploit CWE-787 Sep 28, 2023
Google Chromium libvpx Heap Buffer Overflow Vulnerability
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-36802
High · 7.8
KEV High · 62 Public exploit CWE-416 Sep 12, 2023
Microsoft Streaming Service Proxy Privilege Escalation Vulnerability
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
CVE-2023-36761
Medium · 6.5
KEV High · 53 CWE-20 Sep 12, 2023
Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
CVE-2023-4863
High · 8.8
KEV High · 62 Public exploit CWE-787 Sep 12, 2023
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2023-4762
High · 8.8
KEV High · 62 Public exploit CWE-843 Sep 5, 2023
Google Chromium V8 Type Confusion Vulnerability
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2023-38180
High · 7.5
KEV High · 58 CWE-400 Aug 8, 2023
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
.NET and Visual Studio Denial of Service Vulnerability
CVE-2023-36884
High · 7.5
KEV Urgent · 72 Public exploit Ransomware CWE-362 Jul 11, 2023
Microsoft Windows Search Remote Code Execution Vulnerability
Windows Search Remote Code Execution Vulnerability
CVE-2023-36874
High · 7.8
KEV Urgent · 74 Public exploit CWE-59 Jul 11, 2023
Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2023-35311
High · 8.8
KEV High · 56 CWE-367 Jul 11, 2023
Microsoft Outlook Security Feature Bypass Vulnerability
Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2023-32049
High · 8.8
KEV High · 55 Jul 11, 2023
Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-32046
High · 7.8
KEV High · 55 Jul 11, 2023
Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability
Windows MSHTML Platform Elevation of Privilege Vulnerability
CVE-2023-29360
High · 8.4
KEV High · 62 Public exploit CWE-822 Jun 13, 2023
Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
Microsoft Streaming Service Elevation of Privilege Vulnerability
CVE-2023-29357
Critical · 9.8
KEV Urgent · 93 Public exploit Ransomware CWE-303 Jun 13, 2023
Microsoft SharePoint Server Privilege Escalation Vulnerability
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-29336
High · 7.8
KEV Urgent · 70 Public exploit CWE-416 May 9, 2023
Microsoft Win32K Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2023-24955
High · 7.2
KEV Urgent · 84 Public exploit Ransomware CWE-94 May 9, 2023
Microsoft SharePoint Server Code Injection Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-28252
High · 7.8
KEV Urgent · 84 Public exploit Ransomware CWE-787 Apr 11, 2023
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-28229
High · 7.0
KEV High · 59 Public exploit CWE-591 Apr 11, 2023
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2023-24880
Medium · 4.4
KEV High · 63 Ransomware CWE-863 Mar 14, 2023
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-23397
Critical · 9.8
KEV High · 66 Public exploit CWE-294 Mar 14, 2023
Microsoft Office Outlook Privilege Escalation Vulnerability
Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2023-21823
High · 7.8
KEV High · 61 Public exploit CWE-190 Feb 14, 2023
Microsoft Windows Graphic Component Privilege Escalation Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2023-23376
High · 7.8
KEV High · 65 Ransomware CWE-787 Feb 14, 2023
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability