CISA Known Exploited Vulnerabilities
KEV additions — November 2021
258 CVEs entered the KEV catalog in November 2021.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added November 17, 20214
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-22204 | ExifTool Remote Code Execution Vulnerability | 7.8 | 100.0 % | Dec 1, 2021 |
| CVE-2021-40449ransomware | Microsoft Windows Win32k Privilege Escalation Vulnerability | 7.8 | 81.9 % | Dec 1, 2021 |
| CVE-2021-42292 | Microsoft Excel Security Feature Bypass | 7.8 | 43.0 % | Dec 1, 2021 |
| CVE-2021-42321ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.8 | 91.7 % | Dec 1, 2021 |
Added November 3, 2021254
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-0171 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | 9.8 | 99.5 % | May 3, 2022 |
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | 7.5 | 99.9 % | May 3, 2022 |
| CVE-2018-11776 | Apache Struts Remote Code Execution Vulnerability | 8.1 | 100.0 % | May 3, 2022 |
| CVE-2018-13379ransomware | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | 9.8 | 100.0 % | May 3, 2022 |
| CVE-2018-14558 | Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | 9.8 | 8.5 % | May 3, 2022 |
| CVE-2018-15811 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 7.5 | 76.3 % | May 3, 2022 |
| CVE-2018-15961 | Adobe ColdFusion Unrestricted File Upload Vulnerability | 9.8 | 100.0 % | May 3, 2022 |
| CVE-2018-18325 | DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 7.5 | 74.0 % | May 3, 2022 |
| CVE-2018-20062 | ThinkPHP "noneCms" Remote Code Execution Vulnerability | 9.8 | 99.5 % | May 3, 2022 |
| CVE-2018-4939 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 9.8 | 62.0 % | May 3, 2022 |
| CVE-2018-7600ransomware | Drupal Core Remote Code Execution Vulnerability | 9.8 | 100.0 % | May 3, 2022 |
| CVE-2018-8653 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 29.6 % | May 3, 2022 |
| CVE-2019-0211 | Apache HTTP Server Privilege Escalation Vulnerability | 7.8 | 65.0 % | May 3, 2022 |
| CVE-2019-0541 | Microsoft MSHTML Remote Code Execution Vulnerability | 8.8 | 53.2 % | May 3, 2022 |
| CVE-2019-0604ransomware | Microsoft SharePoint Remote Code Execution Vulnerability | 9.8 | 99.9 % | May 3, 2022 |
| CVE-2019-0708ransomware | Microsoft Remote Desktop Services Remote Code Execution Vulnerability | 9.8 | 100.0 % | May 3, 2022 |
| CVE-2019-0797 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 1.9 % | May 3, 2022 |
| CVE-2019-0803 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 45.2 % | May 3, 2022 |
| CVE-2019-0808 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 53.0 % | May 3, 2022 |
| CVE-2019-0859 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 4.2 % | May 3, 2022 |
| CVE-2019-0863 | Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability | 7.8 | 5.2 % | May 3, 2022 |
| CVE-2019-11510ransomware | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | 10 | 100.0 % | May 3, 2022 |
| CVE-2019-11539ransomware | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | 7.2 | 98.5 % | May 3, 2022 |
| CVE-2019-11580ransomware | Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | 9.8 | 95.4 % | May 3, 2022 |
| CVE-2019-11634ransomware | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | 9.8 | 8.1 % | May 3, 2022 |
| CVE-2019-1214 | Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | 7.8 | 1.4 % | May 3, 2022 |
| CVE-2019-1215ransomware | Microsoft Windows Privilege Escalation Vulnerability | 7.8 | 19.3 % | May 3, 2022 |
| CVE-2019-13608ransomware | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | 7.5 | 30.0 % | May 3, 2022 |
| CVE-2019-1367ransomware | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 52.4 % | May 3, 2022 |
| CVE-2019-1429 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 77.3 % | May 3, 2022 |
| CVE-2019-15752 | Docker Desktop Community Edition Privilege Escalation Vulnerability | 7.8 | 48.6 % | May 3, 2022 |
| CVE-2019-15949 | Nagios XI Remote Code Execution Vulnerability | 8.8 | 77.0 % | May 3, 2022 |
| CVE-2019-16256 | SIMalliance Toolbox Browser Command Injection Vulnerability | 9.8 | 4.9 % | May 3, 2022 |
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | 7.5 | 99.9 % | May 3, 2022 |
| CVE-2019-16759 | vBulletin PHP Module Remote Code Execution Vulnerability | 9.8 | 99.7 % | May 3, 2022 |
| CVE-2019-17026 | Mozilla Firefox And Thunderbird Type Confusion Vulnerability | 8.8 | 46.3 % | May 3, 2022 |
| CVE-2019-17558 | Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability | 7.5 | 98.6 % | May 3, 2022 |
| CVE-2019-18187 | Trend Micro OfficeScan Directory Traversal Vulnerability | 7.5 | 25.1 % | May 3, 2022 |
| CVE-2019-18935ransomware | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | 9.8 | 99.7 % | May 3, 2022 |
| CVE-2019-18988 | TeamViewer Desktop Bypass Remote Login Vulnerability | 7 | 4.7 % | May 3, 2022 |
| CVE-2019-19356 | Netis WF2419 Devices Remote Code Execution Vulnerability | 7.5 | 28.2 % | May 3, 2022 |
| CVE-2019-19781ransomware | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | 9.8 | 100.0 % | May 3, 2022 |
| CVE-2019-20085 | TVT NVMS-1000 Directory Traversal Vulnerability | 7.5 | 96.1 % | May 3, 2022 |
| CVE-2019-2215 | Android Kernel Use-After-Free Vulnerability | 7.8 | 72.1 % | May 3, 2022 |
| CVE-2019-3396ransomware | Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | 9.8 | 99.9 % | May 3, 2022 |
| CVE-2019-3398 | Atlassian Confluence Server and Data Center Path Traversal Vulnerability | 8.8 | 97.0 % | May 3, 2022 |
| CVE-2019-4716 | IBM Planning Analytics Remote Code Execution Vulnerability | 9.8 | 86.4 % | May 3, 2022 |
| CVE-2019-5544ransomware | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability | 9.8 | 98.1 % | May 3, 2022 |
| CVE-2019-5591 | Fortinet FortiOS Default Configuration Vulnerability | 6.5 | 18.6 % | May 3, 2022 |
| CVE-2019-6223 | Apple iOS and macOS Group Facetime Vulnerability | 7.5 | 2.6 % | May 3, 2022 |
| CVE-2019-7481ransomware | SonicWall SMA100 SQL Injection Vulnerability | 7.5 | 99.9 % | May 3, 2022 |
| CVE-2019-8394 | Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | 6.5 | 63.3 % | May 3, 2022 |
| CVE-2019-9082 | ThinkPHP Remote Code Execution Vulnerability | 8.8 | 97.4 % | May 3, 2022 |
| CVE-2019-9978 | WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | 6.1 | 72.9 % | May 3, 2022 |
| CVE-2020-0041 | Android Kernel Out-of-Bounds Write Vulnerability | 7.8 | 3.1 % | May 3, 2022 |
| CVE-2020-0069 | Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability | 7.8 | 1.4 % | May 3, 2022 |
| CVE-2020-0601 | Microsoft Windows CryptoAPI Spoofing Vulnerability | 8.1 | 89.4 % | May 3, 2022 |
| CVE-2020-0646 | Microsoft .NET Framework Remote Code Execution Vulnerability | 9.8 | 99.2 % | May 3, 2022 |
| CVE-2020-0674 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 86.9 % | May 3, 2022 |
| CVE-2020-0683 | Microsoft Windows Installer Privilege Escalation Vulnerability | 7.8 | 7.6 % | May 3, 2022 |
| CVE-2020-0688ransomware | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability | 8.8 | 100.0 % | May 3, 2022 |
| CVE-2020-0878ransomware | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | 4.2 | 2.7 % | May 3, 2022 |
| CVE-2020-0938 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 7.8 | 69.0 % | May 3, 2022 |
| CVE-2020-0968 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.5 | 30.7 % | May 3, 2022 |
| CVE-2020-0986 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 16.4 % | May 3, 2022 |
| CVE-2020-10148 | SolarWinds Orion Authentication Bypass Vulnerability | 9.8 | 92.0 % | May 3, 2022 |
| CVE-2020-10181 | Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | 9.8 | 14.7 % | May 3, 2022 |
| CVE-2020-10189 | Zoho ManageEngine Desktop Central File Upload Vulnerability | 9.8 | 99.9 % | May 3, 2022 |
| CVE-2020-10199 | Sonatype Nexus Repository Remote Code Execution Vulnerability | 8.8 | 99.1 % | May 3, 2022 |
| CVE-2020-1020 | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 8.8 | 65.0 % | May 3, 2022 |
| CVE-2020-10221 | rConfig OS Command Injection Vulnerability | 8.8 | 77.1 % | May 3, 2022 |
| CVE-2020-1040 | Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability | 9 | 7.4 % | May 3, 2022 |
| CVE-2020-1054 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 53.9 % | May 3, 2022 |
| CVE-2020-10987 | Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | 9.8 | 79.8 % | May 3, 2022 |
| CVE-2020-1147 | Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | 7.8 | 94.0 % | May 3, 2022 |
| CVE-2020-11651 | SaltStack Salt Authentication Bypass Vulnerability | 9.8 | 96.6 % | May 3, 2022 |
| CVE-2020-11652 | SaltStack Salt Path Traversal Vulnerability | 6.5 | 86.2 % | May 3, 2022 |
| CVE-2020-11738 | WordPress Snap Creek Duplicator Plugin File Download Vulnerability | 7.5 | 97.8 % | May 3, 2022 |
| CVE-2020-12271ransomware | Sophos SFOS SQL Injection Vulnerability | 9.8 | 42.4 % | May 3, 2022 |
| CVE-2020-12812ransomware | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 9.8 | 45.4 % | May 3, 2022 |
| CVE-2020-1350 | Microsoft Windows DNS Server Remote Code Execution Vulnerability | 10 | 96.7 % | May 3, 2022 |
| CVE-2020-1380 | Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 7.8 | 24.2 % | May 3, 2022 |
| CVE-2020-1464 | Microsoft Windows Spoofing Vulnerability | 7.8 | 38.9 % | May 3, 2022 |
| CVE-2020-1472ransomware | Microsoft Netlogon Privilege Escalation Vulnerability | 5.5 | 99.4 % | May 3, 2022 |
| CVE-2020-14750 | Oracle WebLogic Server Remote Code Execution Vulnerability | 9.8 | 99.2 % | May 3, 2022 |
| CVE-2020-14871 | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | 10 | 80.2 % | May 3, 2022 |
| CVE-2020-14882 | Oracle WebLogic Server Remote Code Execution Vulnerability | 9.8 | 100.0 % | May 3, 2022 |
| CVE-2020-14883 | Oracle WebLogic Server Unspecified Vulnerability | 7.2 | 97.7 % | May 3, 2022 |
| CVE-2020-15505 | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | 9.8 | 99.7 % | May 3, 2022 |
| CVE-2020-15999 | Google Chrome FreeType Heap Buffer Overflow Vulnerability | 9.6 | 63.9 % | Nov 17, 2021 |
| CVE-2020-16009 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 48.3 % | May 3, 2022 |
| CVE-2020-16010 | Google Chrome for Android UI Heap Buffer Overflow Vulnerability | 9.6 | 6.4 % | May 3, 2022 |
| CVE-2020-16013 | Google Chromium V8 Incorrect Implementation Vulnerabililty | 8.8 | 2.8 % | May 3, 2022 |
| CVE-2020-16017 | Google Chrome Use-After-Free Vulnerability | 9.6 | 2.7 % | May 3, 2022 |
| CVE-2020-16846 | SaltStack Salt Shell Injection Vulnerability | 9.8 | 99.6 % | May 3, 2022 |
| CVE-2020-17087 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 5.4 % | May 3, 2022 |
| CVE-2020-17144 | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.4 | 36.5 % | May 3, 2022 |
| CVE-2020-17496 | vBulletin PHP Module Remote Code Execution Vulnerability | 9.8 | 87.5 % | May 3, 2022 |
| CVE-2020-17530 | Apache Struts Remote Code Execution Vulnerability | 9.8 | 95.9 % | May 3, 2022 |
| CVE-2020-24557 | Trend Micro Multiple Products Improper Access Control Vulnerability | 7.8 | 2.7 % | May 3, 2022 |
| CVE-2020-25213 | WordPress File Manager Plugin Remote Code Execution Vulnerability | 9.8 | 97.3 % | May 3, 2022 |
| CVE-2020-25506 | D-Link DNS-320 Device Command Injection Vulnerability | 9.8 | 100.0 % | May 3, 2022 |
| CVE-2020-2555 | Oracle Multiple Products Remote Code Execution Vulnerability | 9.8 | 97.1 % | May 3, 2022 |
| CVE-2020-26919 | Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | 9.8 | 57.5 % | May 3, 2022 |
| CVE-2020-27930 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 22.0 % | May 3, 2022 |
| CVE-2020-27932 | Apple Multiple Products Type Confusion Vulnerability | 7.8 | 10.3 % | May 3, 2022 |
| CVE-2020-27950 | Apple Multiple Products Memory Initialization Vulnerability | 5.5 | 16.5 % | May 3, 2022 |
| CVE-2020-29557 | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 9.8 | 54.3 % | May 3, 2022 |
| CVE-2020-29583 | Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | 9.8 | 90.2 % | May 3, 2022 |
| CVE-2020-3118 | Cisco IOS XR Software Discovery Protocol Format String Vulnerability | 8.8 | 11.7 % | May 3, 2022 |
| CVE-2020-3161 | Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | 9.8 | 83.9 % | May 3, 2022 |
| CVE-2020-3452 | Cisco ASA and FTD Read-Only Path Traversal Vulnerability | 7.5 | 100.0 % | May 3, 2022 |
| CVE-2020-3566 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 8.6 | 3.7 % | May 3, 2022 |
| CVE-2020-3569 | Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 8.6 | 3.3 % | May 3, 2022 |
| CVE-2020-3580ransomware | Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | 6.1 | 85.6 % | May 3, 2022 |
| CVE-2020-3950 | VMware Multiple Products Privilege Escalation Vulnerability | 7.8 | 7.3 % | May 3, 2022 |
| CVE-2020-3952 | VMware vCenter Server Information Disclosure Vulnerability | 9.8 | 90.4 % | May 3, 2022 |
| CVE-2020-3992ransomware | VMware ESXi OpenSLP Use-After-Free Vulnerability | 9.8 | 83.0 % | May 3, 2022 |
| CVE-2020-4006 | Multiple VMware Products Command Injection Vulnerability | 9.1 | 17.3 % | May 3, 2022 |
| CVE-2020-4427 | IBM Data Risk Manager Security Bypass Vulnerability | 9.8 | 70.0 % | May 3, 2022 |
| CVE-2020-4428 | IBM Data Risk Manager Remote Code Execution Vulnerability | 9.1 | 61.7 % | May 3, 2022 |
| CVE-2020-4430 | IBM Data Risk Manager Directory Traversal Vulnerability | 4.3 | 68.5 % | May 3, 2022 |
| CVE-2020-5735 | Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | 8.8 | 36.2 % | May 3, 2022 |
| CVE-2020-5847 | Unraid Remote Code Execution Vulnerability | 9.8 | 95.8 % | May 3, 2022 |
| CVE-2020-5849 | Unraid Authentication Bypass Vulnerability | 7.5 | 93.2 % | May 3, 2022 |
| CVE-2020-5902ransomware | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | 9.8 | 100.0 % | May 3, 2022 |
| CVE-2020-6207 | SAP Solution Manager Missing Authentication for Critical Function Vulnerability | 9.8 | 98.1 % | May 3, 2022 |
| CVE-2020-6287 | SAP NetWeaver Missing Authentication for Critical Function Vulnerability | 10 | 94.7 % | May 3, 2022 |
| CVE-2020-6418 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 78.8 % | May 3, 2022 |
| CVE-2020-6819 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 8.1 | 3.0 % | May 3, 2022 |
| CVE-2020-6820 | Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 8.1 | 7.1 % | May 3, 2022 |
| CVE-2020-7961 | Liferay Portal Deserialization of Untrusted Data Vulnerability | 9.8 | 99.9 % | May 3, 2022 |
| CVE-2020-8193 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 6.5 | 88.3 % | May 3, 2022 |
| CVE-2020-8195 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 6.5 | 33.0 % | May 3, 2022 |
| CVE-2020-8196 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 4.3 | 26.3 % | May 3, 2022 |
| CVE-2020-8243 | Ivanti Pulse Connect Secure Code Execution Vulnerability | 7.2 | 90.8 % | May 3, 2022 |
| CVE-2020-8260 | Ivanti Pulse Connect Secure Code Execution Vulnerability | 7.2 | 96.5 % | May 3, 2022 |
| CVE-2020-8467 | Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | 8.8 | 10.9 % | May 3, 2022 |
| CVE-2020-8468 | Trend Micro Multiple Products Content Validation Escape Vulnerability | 8.8 | 6.2 % | May 3, 2022 |
| CVE-2020-8515 | Multiple DrayTek Vigor Routers Web Management Page Vulnerability | 9.8 | 100.0 % | May 3, 2022 |
| CVE-2020-8599 | Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | 9.8 | 11.9 % | May 3, 2022 |
| CVE-2020-8644 | PlaySMS Server-Side Template Injection Vulnerability | 9.8 | 86.7 % | May 3, 2022 |
| CVE-2020-8655 | EyesOfNetwork Improper Privilege Management Vulnerability | 7.8 | 60.1 % | May 3, 2022 |
| CVE-2020-8657 | EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | 9.8 | 91.9 % | May 3, 2022 |
| CVE-2020-9818 | Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | 8.8 | 2.3 % | May 3, 2022 |
| CVE-2020-9819 | Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | 4.3 | 2.2 % | May 3, 2022 |
| CVE-2020-9859 | Apple Multiple Products Code Execution Vulnerability | 7.8 | 0.8 % | May 3, 2022 |
| CVE-2021-1497 | Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | 9.8 | 99.9 % | Nov 17, 2021 |
| CVE-2021-1498 | Cisco HyperFlex HX Data Platform Command Injection Vulnerability | 9.8 | 100.0 % | Nov 17, 2021 |
| CVE-2021-1647 | Microsoft Defender Remote Code Execution Vulnerability | 7.8 | 39.7 % | Nov 17, 2021 |
| CVE-2021-1675ransomware | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 7.8 | 85.3 % | Nov 17, 2021 |
| CVE-2021-1732ransomware | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 78.4 % | Nov 17, 2021 |
| CVE-2021-1782 | Apple Multiple Products Race Condition Vulnerability | 7 | 2.2 % | Nov 17, 2021 |
| CVE-2021-1870 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 9.8 | 7.7 % | Nov 17, 2021 |
| CVE-2021-1871 | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 9.8 | 7.0 % | Nov 17, 2021 |
| CVE-2021-1879 | Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | 6.1 | 7.1 % | Nov 17, 2021 |
| CVE-2021-1905 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 7.8 | 1.5 % | May 3, 2022 |
| CVE-2021-1906 | Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | 5.5 | 0.5 % | Nov 17, 2021 |
| CVE-2021-20016ransomware | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 9.8 | 40.0 % | Nov 17, 2021 |
| CVE-2021-20021ransomware | SonicWall Email Security Improper Privilege Management Vulnerability | 9.8 | 88.8 % | Nov 17, 2021 |
| CVE-2021-20022ransomware | SonicWall Email Security Unrestricted Upload of File Vulnerability | 7.2 | 16.6 % | Nov 17, 2021 |
| CVE-2021-20023ransomware | SonicWall Email Security Path Traversal Vulnerability | 4.9 | 51.7 % | Nov 17, 2021 |
| CVE-2021-20090 | Arcadyan Buffalo Firmware Path Traversal Vulnerability | 9.8 | 100.0 % | Nov 17, 2021 |
| CVE-2021-21017 | Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability | 8.8 | 86.3 % | Nov 17, 2021 |
| CVE-2021-21148 | Google Chromium V8 Heap Buffer Overflow Vulnerability | 8.8 | 20.0 % | Nov 17, 2021 |
| CVE-2021-21166 | Google Chromium Race Condition Vulnerability | 8.8 | 24.0 % | Nov 17, 2021 |
| CVE-2021-21193 | Google Chromium Blink Use-After-Free Vulnerability | 8.8 | 9.9 % | Nov 17, 2021 |
| CVE-2021-21206 | Google Chromium Blink Use-After-Free Vulnerability | 8.8 | 9.3 % | Nov 17, 2021 |
| CVE-2021-21220 | Google Chromium V8 Improper Input Validation Vulnerability | 8.8 | 70.4 % | Nov 17, 2021 |
| CVE-2021-21224 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 84.2 % | Nov 17, 2021 |
| CVE-2021-21972ransomware | VMware vCenter Server Remote Code Execution Vulnerability | 9.8 | 99.9 % | Nov 17, 2021 |
| CVE-2021-21985ransomware | VMware vCenter Server Improper Input Validation Vulnerability | 9.8 | 100.0 % | Nov 17, 2021 |
| CVE-2021-22005ransomware | VMware vCenter Server File Upload Vulnerability | 9.8 | 100.0 % | Nov 17, 2021 |
| CVE-2021-22205ransomware | GitLab Community and Enterprise Editions Remote Code Execution Vulnerability | 10 | 99.7 % | Nov 17, 2021 |
| CVE-2021-22502 | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | 9.8 | 96.7 % | Nov 17, 2021 |
| CVE-2021-22506 | Micro Focus Access Manager Information Leakage Vulnerability | 7.5 | 25.7 % | Nov 17, 2021 |
| CVE-2021-22893ransomware | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | 10 | 47.2 % | May 3, 2022 |
| CVE-2021-22894 | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | 8.8 | 41.3 % | May 3, 2022 |
| CVE-2021-22899 | Ivanti Pulse Connect Secure Command Injection Vulnerability | 8.8 | 22.9 % | May 3, 2022 |
| CVE-2021-22900 | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 7.2 | 14.1 % | May 3, 2022 |
| CVE-2021-22986ransomware | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | 9.8 | 99.9 % | Nov 17, 2021 |
| CVE-2021-23874 | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | 7.8 | 1.0 % | Nov 17, 2021 |
| CVE-2021-26084ransomware | Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 9.8 | 100.0 % | Nov 17, 2021 |
| CVE-2021-26411ransomware | Microsoft Internet Explorer Memory Corruption Vulnerability | 8.8 | 80.8 % | Nov 17, 2021 |
| CVE-2021-26855ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.1 | 100.0 % | May 3, 2022 |
| CVE-2021-26857ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability | 7.8 | 95.8 % | May 3, 2022 |
| CVE-2021-26858ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability | 7.8 | 93.7 % | May 3, 2022 |
| CVE-2021-27059 | Microsoft Office Remote Code Execution Vulnerability | 7.6 | 6.1 % | Nov 17, 2021 |
| CVE-2021-27065ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability | 7.8 | 99.9 % | May 3, 2022 |
| CVE-2021-27085 | Microsoft Internet Explorer Remote Code Execution Vulnerability | 8.8 | 5.4 % | Nov 17, 2021 |
| CVE-2021-27101ransomware | Accellion FTA SQL Injection Vulnerability | 9.8 | 6.0 % | Nov 17, 2021 |
| CVE-2021-27102ransomware | Accellion FTA OS Command Injection Vulnerability | 7.8 | 3.7 % | Nov 17, 2021 |
| CVE-2021-27103ransomware | Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability | 9.8 | 11.4 % | Nov 17, 2021 |
| CVE-2021-27104ransomware | Accellion FTA OS Command Injection Vulnerability | 9.8 | 56.7 % | Nov 17, 2021 |
| CVE-2021-27561 | Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | 9.8 | 82.9 % | Nov 17, 2021 |
| CVE-2021-27562 | Arm Trusted Firmware Out-of-Bounds Write Vulnerability | 5.5 | 3.1 % | Nov 17, 2021 |
| CVE-2021-28310 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 8.4 % | Nov 17, 2021 |
| CVE-2021-28550 | Adobe Acrobat and Reader Use-After-Free Vulnerability | 8.8 | 51.9 % | Nov 17, 2021 |
| CVE-2021-28663 | Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability | 8.8 | 12.1 % | Nov 17, 2021 |
| CVE-2021-28664 | Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | 8.8 | 5.4 % | Nov 17, 2021 |
| CVE-2021-30116ransomware | Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability | 9.8 | 85.7 % | Nov 17, 2021 |
| CVE-2021-30551 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 64.7 % | Nov 17, 2021 |
| CVE-2021-30554 | Google Chromium WebGL Use-After-Free Vulnerability | 8.8 | 7.4 % | Nov 17, 2021 |
| CVE-2021-30563 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 9.0 % | Nov 17, 2021 |
| CVE-2021-30632 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 8.8 | 63.2 % | Nov 17, 2021 |
| CVE-2021-30633 | Google Chromium Indexed DB API Use-After-Free Vulnerability | 9.6 | 33.2 % | Nov 17, 2021 |
| CVE-2021-30657 | Apple macOS Unspecified Vulnerability | 5.5 | 68.5 % | Nov 17, 2021 |
| CVE-2021-30661 | Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | 8.8 | 4.5 % | Nov 17, 2021 |
| CVE-2021-30663 | Apple Multiple Products WebKit Integer Overflow Vulnerability | 8.8 | 3.5 % | Nov 17, 2021 |
| CVE-2021-30665 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 8.8 | 3.7 % | Nov 17, 2021 |
| CVE-2021-30666 | Apple iOS WebKit Buffer Overflow Vulnerability | 8.8 | 3.0 % | Nov 17, 2021 |
| CVE-2021-30713 | Apple macOS Unspecified Vulnerability | 7.8 | 7.0 % | Nov 17, 2021 |
| CVE-2021-30761 | Apple iOS WebKit Memory Corruption Vulnerability | 8.8 | 10.5 % | Nov 17, 2021 |
| CVE-2021-30762 | Apple iOS WebKit Use-After-Free Vulnerability | 8.8 | 11.0 % | Nov 17, 2021 |
| CVE-2021-30807 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 28.8 % | Nov 17, 2021 |
| CVE-2021-30858 | Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | 8.8 | 13.4 % | Nov 17, 2021 |
| CVE-2021-30860 | Apple Multiple Products Integer Overflow Vulnerability | 7.8 | 76.0 % | Nov 17, 2021 |
| CVE-2021-30869 | Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | 7.8 | 4.1 % | Nov 17, 2021 |
| CVE-2021-31199 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 5.2 | 3.0 % | Nov 17, 2021 |
| CVE-2021-31201 | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 5.2 | 2.6 % | Nov 17, 2021 |
| CVE-2021-31207ransomware | Microsoft Exchange Server Security Feature Bypass Vulnerability | 6.6 | 99.8 % | Nov 17, 2021 |
| CVE-2021-31755 | Tenda AC11 Router Stack Buffer Overflow Vulnerability | 9.8 | 86.5 % | Nov 17, 2021 |
| CVE-2021-31955 | Microsoft Windows Kernel Information Disclosure Vulnerability | 5.5 | 81.1 % | Nov 17, 2021 |
| CVE-2021-31956 | Microsoft Windows NTFS Privilege Escalation Vulnerability | 7.8 | 22.3 % | Nov 17, 2021 |
| CVE-2021-31979 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 4.5 % | Nov 17, 2021 |
| CVE-2021-33739 | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 8.4 | 6.6 % | Nov 17, 2021 |
| CVE-2021-33742 | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability | 7.5 | 59.4 % | Nov 17, 2021 |
| CVE-2021-33771 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 10.2 % | Nov 17, 2021 |
| CVE-2021-34448 | Microsoft Windows Scripting Engine Memory Corruption Vulnerability | 6.8 | 40.1 % | Nov 17, 2021 |
| CVE-2021-34473ransomware | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.1 | 100.0 % | Nov 17, 2021 |
| CVE-2021-34523ransomware | Microsoft Exchange Server Privilege Escalation Vulnerability | 9 | 100.0 % | Nov 17, 2021 |
| CVE-2021-34527ransomware | Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 8.8 | 99.8 % | May 3, 2022 |
| CVE-2021-35211ransomware | SolarWinds Serv-U Remote Code Execution Vulnerability | 10 | 91.2 % | Nov 17, 2021 |
| CVE-2021-35395 | Realtek AP-Router SDK Buffer Overflow Vulnerability | 9.8 | 98.1 % | Nov 17, 2021 |
| CVE-2021-35464ransomware | ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | 9.8 | 100.0 % | Nov 17, 2021 |
| CVE-2021-36741 | Trend Micro Multiple Products Improper Input Validation Vulnerability | 8.8 | 5.0 % | Nov 17, 2021 |
| CVE-2021-36742 | Trend Micro Multiple Products Improper Input Validation Vulnerability | 7.8 | 1.5 % | Nov 17, 2021 |
| CVE-2021-36942ransomware | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | 7.5 | 66.0 % | Nov 17, 2021 |
| CVE-2021-36948 | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | 7.8 | 23.3 % | Nov 17, 2021 |
| CVE-2021-36955ransomware | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 7.8 | 4.1 % | Nov 17, 2021 |
| CVE-2021-37973 | Google Chromium Portals Use-After-Free Vulnerability | 9.6 | 11.7 % | Nov 17, 2021 |
| CVE-2021-37975 | Google Chromium V8 Use-After-Free Vulnerability | 8.8 | 34.9 % | Nov 17, 2021 |
| CVE-2021-37976 | Google Chromium Information Disclosure Vulnerability | 6.5 | 19.9 % | Nov 17, 2021 |
| CVE-2021-38000 | Google Chromium Intents Improper Input Validation Vulnerability | 6.1 | 4.9 % | Nov 17, 2021 |
| CVE-2021-38003 | Google Chromium V8 Memory Corruption Vulnerability | 8.8 | 38.6 % | Nov 17, 2021 |
| CVE-2021-38645 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 7.8 | 2.7 % | Nov 17, 2021 |
| CVE-2021-38647ransomware | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | 9.8 | 99.9 % | Nov 17, 2021 |
| CVE-2021-38648 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 7.8 | 11.4 % | Nov 17, 2021 |
| CVE-2021-38649 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 7 | 2.9 % | Nov 17, 2021 |
| CVE-2021-40444ransomware | Microsoft MSHTML Remote Code Execution Vulnerability | 8.8 | 97.8 % | Nov 17, 2021 |
| CVE-2021-40539ransomware | Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | 9.8 | 99.0 % | Nov 17, 2021 |
| CVE-2021-41773ransomware | Apache HTTP Server Path Traversal Vulnerability | 9.8 | 100.0 % | Nov 17, 2021 |
| CVE-2021-42013ransomware | Apache HTTP Server Path Traversal Vulnerability | 9.8 | 100.0 % | Nov 17, 2021 |
| CVE-2021-42258ransomware | BQE BillQuick Web Suite SQL Injection Vulnerability | 9.8 | 74.4 % | Nov 17, 2021 |