Share of each bar's KEVs linked to ransomware. Thresholds track the catalog average of 20.4%, so they stay meaningful as it grows. Bars under 5 KEVs are left uncoloured — too few to rate a share.
Share of each bar's KEVs linked to ransomware. Thresholds track the catalog average of 20.4%, so they stay meaningful as it grows. Bars under 5 KEVs are left uncoloured — too few to rate a share.
| CVE | Vendor | Product | Vulnerability | CVSS | Added | Federal due date | BOD 26-04 | Ransomware |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-38649 | Microsoft | Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation. | 7.0 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2021-36948 | Microsoft | Windows | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation. | 7.8 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2017-7269 | Microsoft | Internet Information Services (IIS) | Microsoft Windows Server Buffer Overflow Vulnerability Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote attackers to execute code via a long header beginning with "If: <http://" in a PROPFIND request. | 9.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage automatable · total | Unknown |
| CVE-2021-34523 | Microsoft | Exchange Server | Microsoft Exchange Server Privilege Escalation Vulnerability Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. | 9.0 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Known |
| CVE-2021-38645 | Microsoft | Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation. | 7.8 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2020-1020 | Microsoft | Windows | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities. | 8.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2020-0986 | Microsoft | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode. | 7.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2020-17144 | Microsoft | Exchange Server | Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution. | 8.4 CNA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage automatable · total | Unknown |
| CVE-2020-0938 | Microsoft | Windows | Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities. | 7.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2021-31979 | Microsoft | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation. | 7.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2021-31956 | Microsoft | Windows | Microsoft Windows NTFS Privilege Escalation Vulnerability Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application. | 7.8 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2021-33771 | Microsoft | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation. | 7.8 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2021-31199 | Microsoft | Enhanced Cryptographic Provider | Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation. | 5.2 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2021-33742 | Microsoft | Windows | Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution. | 7.5 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2020-17087 | Microsoft | Windows | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation. | 7.8 CNA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2020-0683 | Microsoft | Windows | Microsoft Windows Installer Privilege Escalation Vulnerability Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files. | 7.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2016-0185 | Microsoft | Windows | Microsoft Windows Media Center Remote Code Execution Vulnerability Microsoft Windows Media Center contains a remote code execution vulnerability when Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code. | 7.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2021-33739 | Microsoft | Windows | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation. | 8.4 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2021-1647 | Microsoft | Defender | Microsoft Defender Remote Code Execution Vulnerability Microsoft Defender contains an unspecified vulnerability that allows for remote code execution. | 7.8 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2020-0878 | Microsoft | Edge and Internet Explorer | Microsoft Edge and Internet Explorer Memory Corruption Vulnerability Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user. | 4.2 CNA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Known |
| CVE-2016-0167 | Microsoft | Win32k | Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application | 7.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Known |
| CVE-2021-38647 | Microsoft | Open Management Infrastructure (OMI) | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution. | 9.8 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage automatable · total | Known |
| CVE-2021-22502 | Micro Focus | Operation Bridge Reporter (OBR) | Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability Micro Focus Operation Bridge Report (OBR) contains an unspecified vulnerability that allows for remote code execution. | 9.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage automatable · total | Unknown |
| CVE-2021-23874 | McAfee | McAfee Total Protection (MTP) | McAfee Total Protection (MTP) Improper Privilege Management Vulnerability McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense. | 8.2 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2020-7961 | Liferay | Liferay Portal | Liferay Portal Deserialization of Untrusted Data Vulnerability Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web services. | 9.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage automatable · total | Unknown |
| CVE-2021-30116 | Kaseya | Virtual System/Server Administrator (VSA) | Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system. | 10.0 CNA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage automatable · total | Known |
| CVE-2020-15505 | Ivanti | MobileIron Multiple Products | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability Ivanti MobileIron's Core & Connector, Sentry, and Monitor and Reporting Database (RDB) products contain an unspecified vulnerability that allows for remote code execution. | 9.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage automatable · total | Unknown |
| CVE-2019-4716 | IBM | Planning Analytics | IBM Planning Analytics Remote Code Execution Vulnerability IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. | 10.0 CNA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage automatable · total | Unknown |
| CVE-2020-4428 | IBM | Data Risk Manager | IBM Data Risk Manager Remote Code Execution Vulnerability IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.� | 9.1 CNA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown |
| CVE-2020-4427 | IBM | Data Risk Manager | IBM Data Risk Manager Security Bypass Vulnerability IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. | 9.0 CNA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage automatable · total | Unknown |
| CVE-2021-30563 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-21220 | Chromium V8 | Google Chromium V8 Improper Input Validation Vulnerability Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-21193 | Chromium Blink | Google Chromium Blink Use-After-Free Vulnerability Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-21224 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-38003 | Chromium V8 | Google Chromium V8 Memory Corruption Vulnerability Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-21206 | Chromium Blink | Google Chromium Blink Use-After-Free Vulnerability Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-30554 | Chromium WebGL | Google Chromium WebGL Use-After-Free Vulnerability Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2020-6418 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-37975 | Chromium V8 | Google Chromium V8 Use-After-Free Vulnerability Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-30551 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-37973 | Chromium Portals | Google Chromium Portals Use-After-Free Vulnerability Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge. | 9.6 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-21148 | Chromium V8 | Google Chromium V8 Heap Buffer Overflow Vulnerability Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-30633 | Chromium Indexed DB API | Google Chromium Indexed DB API Use-After-Free Vulnerability Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 9.6 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2020-16013 | Chromium V8 | Google Chromium V8 Incorrect Implementation Vulnerabililty Google Chromium V8 Engine contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-30632 | Chromium V8 | Google Chromium V8 Out-of-Bounds Write Vulnerability Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2020-16009 | Chromium V8 | Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2020-16017 | Chrome | Google Chrome Use-After-Free Vulnerability Google Chrome contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. | 9.6 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2021-21166 | Chromium | Google Chromium Race Condition Vulnerability Google Chromium contains a race condition vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | 8.8 CISA | 2021-11-03 | 2021-11-17 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2020-16010 | Chrome for Android UI | Google Chrome for Android UI Heap Buffer Overflow Vulnerability Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. | 9.6 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage not automatable · total | Unknown | |
| CVE-2020-12812 | Fortinet | FortiOS | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username. | 9.8 CISA | 2021-11-03 | 2022-05-03 | 3 days + forensic triage automatable · total | Known |