1,734 totalEPSS avg 50.4%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 35 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2021-31207Microsoft / Exchange ServerMicrosoft Exchange Server Security Feature Bypass Vulnerability2021-11-03
99.8%
CVE-2021-31755Tenda / AC11 RouterTenda AC11 Router Stack Buffer Overflow Vulnerability2021-11-03
86.5%
CVE-2021-31955Microsoft / WindowsMicrosoft Windows Kernel Information Disclosure Vulnerability2021-11-03
81.1%
CVE-2021-31956Microsoft / WindowsMicrosoft Windows NTFS Privilege Escalation Vulnerability2021-11-03
22.3%
CVE-2021-31979Microsoft / WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability2021-11-03
4.5%
CVE-2021-33739Microsoft / WindowsMicrosoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vuln…2021-11-03
6.6%
CVE-2021-33742Microsoft / WindowsMicrosoft Windows MSHTML Platform Remote Code Execution Vulnerability2021-11-03
59.4%
CVE-2021-33771Microsoft / WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability2021-11-03
10.2%
CVE-2021-34448Microsoft / WindowsMicrosoft Windows Scripting Engine Memory Corruption Vulnerability2021-11-03
40.1%
CVE-2021-34473Microsoft / Exchange ServerMicrosoft Exchange Server Remote Code Execution Vulnerability2021-11-03
100.0%
CVE-2021-34523Microsoft / Exchange ServerMicrosoft Exchange Server Privilege Escalation Vulnerability2021-11-03
100.0%
CVE-2021-34527Microsoft / WindowsMicrosoft Windows Print Spooler Remote Code Execution Vulnerability2021-11-03
99.8%
CVE-2021-35211SolarWinds / Serv-USolarWinds Serv-U Remote Code Execution Vulnerability2021-11-03
91.2%
CVE-2021-35395Realtek / AP-Router SDKRealtek AP-Router SDK Buffer Overflow Vulnerability2021-11-03
98.1%
CVE-2021-35464ForgeRock / Access Management (AM)ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability2021-11-03
100.0%
CVE-2021-36741Trend Micro / Apex One, Apex One as a Service, and Worry-Free Business SecurityTrend Micro Multiple Products Improper Input Validation Vulnerability2021-11-03
5.0%
CVE-2021-36742Trend Micro / Apex One, Apex One as a Service, and Worry-Free Business SecurityTrend Micro Multiple Products Improper Input Validation Vulnerability2021-11-03
1.5%
CVE-2021-36942Microsoft / WindowsMicrosoft Windows Local Security Authority (LSA) Spoofing Vulnerability2021-11-03
66.0%
CVE-2021-36948Microsoft / WindowsMicrosoft Windows Update Medic Service Privilege Escalation Vulnerability2021-11-03
23.3%
CVE-2021-36955Microsoft / WindowsMicrosoft Windows Common Log File System (CLFS) Driver Privilege Escalation V…2021-11-03
4.1%
CVE-2021-37973Google / Chromium PortalsGoogle Chromium Portals Use-After-Free Vulnerability2021-11-03
11.7%
CVE-2021-37975Google / Chromium V8Google Chromium V8 Use-After-Free Vulnerability2021-11-03
34.9%
CVE-2021-37976Google / ChromiumGoogle Chromium Information Disclosure Vulnerability2021-11-03
19.9%
CVE-2021-38000Google / Chromium IntentsGoogle Chromium Intents Improper Input Validation Vulnerability2021-11-03
4.9%
CVE-2021-38003Google / Chromium V8Google Chromium V8 Memory Corruption Vulnerability2021-11-03
38.6%
CVE-2021-38645Microsoft / Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerabi…2021-11-03
2.7%
CVE-2021-38647Microsoft / Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerab…2021-11-03
99.9%
CVE-2021-38648Microsoft / Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerabi…2021-11-03
11.4%
CVE-2021-38649Microsoft / Open Management Infrastructure (OMI)Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerabi…2021-11-03
2.9%
CVE-2021-40444Microsoft / MSHTMLMicrosoft MSHTML Remote Code Execution Vulnerability2021-11-03
97.5%
CVE-2021-40539Zoho / ManageEngineZoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability2021-11-03
99.0%
CVE-2021-41773Apache / HTTP ServerApache HTTP Server Path Traversal Vulnerability2021-11-03
100.0%
CVE-2021-42013Apache / HTTP ServerApache HTTP Server Path Traversal Vulnerability2021-11-03
100.0%
CVE-2021-42258BQE / BillQuick Web SuiteBQE BillQuick Web Suite SQL Injection Vulnerability2021-11-03
74.4%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.
KEV explorer — Known Exploited Vulnerabilities | SQUR Knowledge Base