CISA Known Exploited Vulnerabilities
390 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2022-21882 |
Microsoft | Win32k | — | 0.5920 | 2022-02-04 | 2022-02-18 | RW |
CVE-2020-0787 |
Microsoft | Windows | — | 0.4252 | 2022-01-28 | 2022-07-28 | RW |
CVE-2014-1776 |
Microsoft | Internet Explorer | — | 0.8268 | 2022-01-28 | 2022-07-28 | |
CVE-2018-8453 |
Microsoft | Win32k | — | 0.7004 | 2022-01-21 | 2022-07-21 | RW |
CVE-2021-33766 |
Microsoft | Exchange Server | — | 0.9818 | 2022-01-18 | 2022-02-01 | |
CVE-2019-1458 |
Microsoft | Win32k | — | 0.7444 | 2022-01-10 | 2022-07-10 | RW |
CVE-2013-3900 |
Microsoft | WinVerifyTrust function | — | 0.4465 | 2022-01-10 | 2022-07-10 | |
CVE-2021-43890 |
Microsoft | Windows | — | 0.1129 | 2021-12-15 | 2021-12-29 | RW |
CVE-2021-40449 |
Microsoft | Windows | — | 0.8194 | 2021-11-17 | 2021-12-01 | RW |
CVE-2021-42321 |
Microsoft | Exchange | — | 0.9174 | 2021-11-17 | 2021-12-01 | RW |
CVE-2021-42292 |
Microsoft | Office | — | 0.4300 | 2021-11-17 | 2021-12-01 | |
CVE-2014-1812 |
Microsoft | Windows | — | 0.6512 | 2021-11-03 | 2022-05-03 | RW |
CVE-2021-38647 |
Microsoft | Open Management Infrastructure (OMI) | — | 0.9993 | 2021-11-03 | 2021-11-17 | RW |
CVE-2016-0167 |
Microsoft | Win32k | — | 0.0566 | 2021-11-03 | 2022-05-03 | RW |
CVE-2020-0878 |
Microsoft | Edge and Internet Explorer | — | 0.0270 | 2021-11-03 | 2022-05-03 | RW |
CVE-2021-31955 |
Microsoft | Windows | — | 0.8111 | 2021-11-03 | 2021-11-17 | |
CVE-2021-1647 |
Microsoft | Defender | — | 0.3965 | 2021-11-03 | 2021-11-17 | |
CVE-2021-33739 |
Microsoft | Windows | — | 0.0655 | 2021-11-03 | 2021-11-17 | |
CVE-2016-0185 |
Microsoft | Windows | — | 0.6985 | 2021-11-03 | 2022-05-03 | |
CVE-2020-0683 |
Microsoft | Windows | — | 0.0761 | 2021-11-03 | 2022-05-03 | |
CVE-2020-17087 |
Microsoft | Windows | — | 0.0543 | 2021-11-03 | 2022-05-03 | |
CVE-2021-33742 |
Microsoft | Windows | — | 0.5941 | 2021-11-03 | 2021-11-17 | |
CVE-2021-31199 |
Microsoft | Enhanced Cryptographic Provider | — | 0.0295 | 2021-11-03 | 2021-11-17 | |
CVE-2021-33771 |
Microsoft | Windows | — | 0.1017 | 2021-11-03 | 2021-11-17 | |
CVE-2021-31956 |
Microsoft | Windows | — | 0.2227 | 2021-11-03 | 2021-11-17 | |
CVE-2021-31201 |
Microsoft | Enhanced Cryptographic Provider | — | 0.0262 | 2021-11-03 | 2021-11-17 | |
CVE-2021-31979 |
Microsoft | Windows | — | 0.0454 | 2021-11-03 | 2021-11-17 | |
CVE-2020-0938 |
Microsoft | Windows | — | 0.6895 | 2021-11-03 | 2022-05-03 | |
CVE-2020-17144 |
Microsoft | Exchange Server | — | 0.3651 | 2021-11-03 | 2022-05-03 | |
CVE-2020-0986 |
Microsoft | Windows | — | 0.1641 | 2021-11-03 | 2022-05-03 | |
CVE-2020-1020 |
Microsoft | Windows | — | 0.6504 | 2021-11-03 | 2022-05-03 | |
CVE-2021-38645 |
Microsoft | Open Management Infrastructure (OMI) | — | 0.0273 | 2021-11-03 | 2021-11-17 | |
CVE-2021-34523 |
Microsoft | Exchange Server | — | 0.9999 | 2021-11-03 | 2021-11-17 | RW |
CVE-2017-7269 |
Microsoft | Internet Information Services (IIS) | — | 0.9982 | 2021-11-03 | 2022-05-03 | |
CVE-2021-36948 |
Microsoft | Windows | — | 0.2327 | 2021-11-03 | 2021-11-17 | |
CVE-2021-38649 |
Microsoft | Open Management Infrastructure (OMI) | — | 0.0289 | 2021-11-03 | 2021-11-17 | |
CVE-2020-0688 |
Microsoft | Exchange Server | — | 0.9996 | 2021-11-03 | 2022-05-03 | RW |
CVE-2017-0143 |
Microsoft | Windows | — | 0.9331 | 2021-11-03 | 2022-05-03 | RW |
CVE-2016-7255 |
Microsoft | Win32k | — | 0.8097 | 2021-11-03 | 2022-05-03 | RW |
CVE-2019-0708 |
Microsoft | Remote Desktop Services | — | 1.0000 | 2021-11-03 | 2022-05-03 | RW |
CVE-2021-34473 |
Microsoft | Exchange Server | — | 1.0000 | 2021-11-03 | 2021-11-17 | RW |
CVE-2020-1464 |
Microsoft | Windows | — | 0.3895 | 2021-11-03 | 2022-05-03 | |
CVE-2021-1732 |
Microsoft | Win32k | — | 0.7838 | 2021-11-03 | 2021-11-17 | RW |
CVE-2021-34527 |
Microsoft | Windows | — | 0.9979 | 2021-11-03 | 2022-05-03 | RW |
CVE-2021-31207 |
Microsoft | Exchange Server | — | 0.9978 | 2021-11-03 | 2021-11-17 | RW |
CVE-2019-0803 |
Microsoft | Win32k | — | 0.4523 | 2021-11-03 | 2022-05-03 | RW |
CVE-2020-1040 |
Microsoft | Hyper-V RemoteFX | — | 0.0739 | 2021-11-03 | 2022-05-03 | |
CVE-2021-28310 |
Microsoft | Win32k | — | 0.0840 | 2021-11-03 | 2021-11-17 | |
CVE-2020-1350 |
Microsoft | Windows | — | 0.9672 | 2021-11-03 | 2022-05-03 | |
CVE-2021-26411 |
Microsoft | Internet Explorer | — | 0.8167 | 2021-11-03 | 2021-11-17 | RW |