JASON SOAR

$ grep -i "$QUERY" cisa-kev-archive.log

KEV Archive

Every entry this site has seen from the CISA Known Exploited Vulnerabilities catalog, going back to its start in 2021. Nothing is removed. Search by CVE, vendor, product or any word in the description.

Back to the current feed

1,756 entries Clear search

cisa-kev-archive.log

  1. CVE-2021-37976

    Google Chromium

    Google Chromium Information Disclosure Vulnerability

    Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This vulnerability...

    Read the full description

    Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  2. CVE-2021-37975

    Google Chromium V8

    Google Chromium V8 Use-After-Free Vulnerability

    Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium,...

    Read the full description

    Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  3. CVE-2021-37973

    Google Chromium Portals

    Google Chromium Portals Use-After-Free Vulnerability

    Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web...

    Read the full description

    Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  4. CVE-2021-36955

    Ransomware

    Microsoft Windows

    Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

    Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entryJiaJinRong12138 on GitHub

  5. CVE-2021-36948

    Microsoft Windows

    Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

    Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  6. CVE-2021-36942

    Ransomware

    Microsoft Windows

    Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

    Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  7. CVE-2021-36742

    Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security

    Trend Micro Multiple Products Improper Input Validation Vulnerability

    Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  8. CVE-2021-36741

    Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security

    Trend Micro Multiple Products Improper Input Validation Vulnerability

    Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  9. CVE-2021-35464

    Ransomware

    ForgeRock Access Management (AM)

    ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

    ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the...

    Read the full description

    ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the current user (unless ForgeRock AM is running as root user, which the vendor does not recommend).

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entryExploit-DBY4er on GitHub

  10. CVE-2021-35395

    Realtek AP-Router SDK

    Realtek AP-Router SDK Buffer Overflow Vulnerability

    Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service (DoS).

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  11. CVE-2021-35211

    Ransomware

    SolarWinds Serv-U

    SolarWinds Serv-U Remote Code Execution Vulnerability

    SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entryBishopFox on GitHubNattiSamson on GitHub

  12. CVE-2021-34527

    Ransomware

    Microsoft Windows

    Microsoft Windows Print Spooler Remote Code Execution Vulnerability

    Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution...

    Read the full description

    Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.

    Added
    2021-11-03
    Federal due date
    2022-05-03
    NVD entrybyt3bl33d3r on GitHubJohnHammond on GitHub

  13. CVE-2021-34523

    Ransomware

    Microsoft Exchange Server

    Microsoft Exchange Server Privilege Escalation Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entrymithridates1313 on GitHub

  14. CVE-2021-34473

    Ransomware

    Microsoft Exchange Server

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entryhorizon3ai on GitHubcyberheartmi9 on GitHub

  15. CVE-2021-34448

    Microsoft Windows

    Microsoft Windows Scripting Engine Memory Corruption Vulnerability

    Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  16. CVE-2021-33771

    Microsoft Windows

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  17. CVE-2021-33742

    Microsoft Windows

    Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

    Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  18. CVE-2021-33739

    Microsoft Windows

    Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

    Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entryfreeide2017 on GitHubgiwon9977 on GitHub

  19. CVE-2021-31979

    Microsoft Windows

    Microsoft Windows Kernel Privilege Escalation Vulnerability

    Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entry

  20. CVE-2021-31956

    Microsoft Windows

    Microsoft Windows NTFS Privilege Escalation Vulnerability

    Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.

    Added
    2021-11-03
    Federal due date
    2021-11-17
    NVD entryaazhuliang on GitHubY3A on GitHub

Exploit links go to public code from third parties, found through Exploit-DB and PoC-in-GitHub. They're there for research. Read the code before you run anything, and only test against systems you own or have permission to test.

Source CISA Known Exploited Vulnerabilities Catalog. JSON