Full CISA KEV catalog

Every CVE the U.S. cybersecurity agency has ever flagged as actively exploited. Filter by category, sort by severity or exploit-likelihood, search by vendor or product.

Showing 571–600 of 667 CVEs · Page 20 of 23 30 per page

Added	CVE	Vendor / Product	Name & description	CVSS	EPSS
Nov 3, 2021	CVE-2020-0968	Microsoft Internet Explorer endpoint m365 smb essential	Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution.	—	43.7%
Nov 3, 2021	CVE-2020-0986	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode.	—	16.5%
Nov 3, 2021	CVE-2020-1020	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows …	—	85.7%
Nov 3, 2021	CVE-2020-1040	Microsoft Hyper-V RemoteFX endpoint m365 smb essential	Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate input from an authenticated user on a guest…	—	0.2%
Nov 3, 2021	CVE-2020-1054	Microsoft Win32k endpoint m365 smb essential	Microsoft Win32k Privilege Escalation Vulnerability Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an at…	—	81.2%
Nov 3, 2021	CVE-2020-1147	Microsoft .NET Framework, SharePoint, Visual Studio endpoint m365 smb essential	Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file inpu…	—	93.4%
Nov 3, 2021	CVE-2020-11738	WordPress Snap Creek Duplicator Plugin smb essential web server	WordPress Snap Creek Duplicator Plugin File Download Vulnerability WordPress Snap Creek Duplicator plugin contains a file download vulnerability when an administrator creates a new copy of their site that allows an attacker to download the genera…	—	94.3%
Nov 3, 2021	CVE-2020-1350	Microsoft Windows endpoint m365 smb essential	Microsoft Windows DNS Server Remote Code Execution Vulnerability Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability…	—	93.8%
Nov 3, 2021	CVE-2020-1380	Microsoft Internet Explorer endpoint m365 smb essential	Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.	—	91.7%
Nov 3, 2021	CVE-2020-1464	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Spoofing Vulnerability Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed…	—	7.9%
Nov 3, 2021	CVE-2020-1472 Ransomware	Microsoft Netlogon endpoint m365 smb essential	Microsoft Netlogon Privilege Escalation Vulnerability Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a doma…	—	94.4%
Nov 3, 2021	CVE-2020-15999	Google Chrome FreeType browser smb essential	Google Chrome FreeType Heap Buffer Overflow Vulnerability Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG…	—	93.0%
Nov 3, 2021	CVE-2020-16009	Google Chromium V8 browser smb essential	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability …	—	84.4%
Nov 3, 2021	CVE-2020-16010	Google Chrome for Android UI browser mobile smb essential	Google Chrome for Android UI Heap Buffer Overflow Vulnerability Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbo…	—	19.6%
Nov 3, 2021	CVE-2020-16013	Google Chromium V8 browser smb essential	Google Chromium V8 Incorrect Implementation Vulnerabililty Google Chromium V8 Engine contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This…	—	26.1%
Nov 3, 2021	CVE-2020-16017	Google Chrome browser smb essential	Google Chrome Use-After-Free Vulnerability Google Chrome contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafte…	—	21.4%
Nov 3, 2021	CVE-2020-17087	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.	—	20.4%
Nov 3, 2021	CVE-2020-17144	Microsoft Exchange Server email endpoint m365 smb essential	Microsoft Exchange Server Remote Code Execution Vulnerability Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.	—	92.0%
Nov 3, 2021	CVE-2020-25213	WordPress File Manager Plugin smb essential web server	WordPress File Manager Plugin Remote Code Execution Vulnerability WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.	—	94.4%
Nov 3, 2021	CVE-2020-27930	Apple Multiple Products endpoint mobile smb essential	Apple Multiple Products Memory Corruption Vulnerability Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front.	—	43.9%
Nov 3, 2021	CVE-2020-27932	Apple Multiple Products endpoint mobile smb essential	Apple Multiple Products Type Confusion Vulnerability Apple iOS, iPadOS, macOS, and watchOS contain a type confusion vulnerability that may allow a malicious application to execute code with kernel privileges.	—	15.7%
Nov 3, 2021	CVE-2020-27950	Apple Multiple Products endpoint mobile smb essential	Apple Multiple Products Memory Initialization Vulnerability Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.	—	43.8%
Nov 3, 2021	CVE-2020-6418	Google Chromium V8 browser smb essential	Google Chromium V8 Type Confusion Vulnerability Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could…	—	86.4%
Nov 3, 2021	CVE-2020-6819	Mozilla Firefox and Thunderbird browser smb essential	Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free…	—	0.4%
Nov 3, 2021	CVE-2020-6820	Mozilla Firefox and Thunderbird browser smb essential	Mozilla Firefox And Thunderbird Use-After-Free Vulnerability Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnera…	—	3.1%
Nov 3, 2021	CVE-2020-9818	Apple iOS, iPadOS, and watchOS endpoint mobile smb essential	Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously craf…	—	0.9%
Nov 3, 2021	CVE-2020-9819	Apple iOS, iPadOS, and watchOS endpoint mobile smb essential	Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message.	—	0.6%
Nov 3, 2021	CVE-2020-9859	Apple Multiple Products endpoint mobile smb essential	Apple Multiple Products Code Execution Vulnerability Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.	—	0.1%
Nov 3, 2021	CVE-2021-1647	Microsoft Defender endpoint m365 smb essential	Microsoft Defender Remote Code Execution Vulnerability Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.	—	76.1%
Nov 3, 2021	CVE-2021-1675 Ransomware	Microsoft Windows endpoint m365 smb essential	Microsoft Windows Print Spooler Remote Code Execution Vulnerability Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.	—	94.3%

Source: CISA KEV catalog. Severity (CVSS) and exploit-probability (EPSS) sync nightly from NVD and FIRST.