Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 22:40:39 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
Trend Micro Multiple Products Improper Input Validation Vulnerability
Trend Micro — Apex One, Apex One as a Service, and Worry-Free Business Security
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.
CVE-2021-35464 · KEV 2021-11-03ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
ForgeRock — Access Management (AM)
ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the …
Ransomware use reportedCVE-2021-35395 · KEV 2021-11-03Realtek AP-Router SDK Buffer Overflow Vulnerability
Realtek — AP-Router SDK
Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service (DoS).
CVE-2021-35211 · KEV 2021-11-03SolarWinds Serv-U Remote Code Execution Vulnerability
SolarWinds — Serv-U
SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.
Ransomware use reportedCVE-2021-34527 · KEV 2021-11-03Microsoft Windows Print Spooler Remote Code Execution Vulnerability
Microsoft — Windows
Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution wit…
Ransomware use reportedCVE-2021-34523 · KEV 2021-11-03Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft — Exchange Server
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.
Ransomware use reportedCVE-2021-34473 · KEV 2021-11-03Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft — Exchange Server
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.
Ransomware use reportedCVE-2021-34448 · KEV 2021-11-03Microsoft Windows Scripting Engine Memory Corruption Vulnerability
Microsoft — Windows
Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.
CVE-2021-33771 · KEV 2021-11-03Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
CVE-2021-33742 · KEV 2021-11-03Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
Microsoft — Windows
Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.
CVE-2021-33739 · KEV 2021-11-03Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.
CVE-2021-31979 · KEV 2021-11-03Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
CVE-2021-31956 · KEV 2021-11-03Microsoft Windows NTFS Privilege Escalation Vulnerability
Microsoft — Windows
Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.
CVE-2021-31955 · KEV 2021-11-03Microsoft Windows Kernel Information Disclosure Vulnerability
Microsoft — Windows
Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.
CVE-2021-31755 · KEV 2021-11-03Tenda AC11 Router Stack Buffer Overflow Vulnerability
Tenda — AC11 Router
Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.
CVE-2021-31207 · KEV 2021-11-03Microsoft Exchange Server Security Feature Bypass Vulnerability
Microsoft — Exchange Server
Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.
Ransomware use reportedCVE-2021-31201 · KEV 2021-11-03Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
Microsoft — Enhanced Cryptographic Provider
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
CVE-2021-31199 · KEV 2021-11-03Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
Microsoft — Enhanced Cryptographic Provider
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
CVE-2021-30869 · KEV 2021-11-03Apple iOS, iPadOS, and macOS Type Confusion Vulnerability
Apple — iOS, iPadOS, and macOS
Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.
CVE-2021-30860 · KEV 2021-11-03Apple Multiple Products Integer Overflow Vulnerability
Apple — Multiple Products
Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.
CVE-2021-30858 · KEV 2021-11-03Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
Apple — iOS, iPadOS, and macOS
Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited…
CVE-2021-30807 · KEV 2021-11-03Apple Multiple Products Memory Corruption Vulnerability
Apple — Multiple Products
Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execute code with kernel privileges.
CVE-2021-30762 · KEV 2021-11-03Apple iOS WebKit Use-After-Free Vulnerability
Apple — iOS
Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari a…
CVE-2021-30761 · KEV 2021-11-03Apple iOS WebKit Memory Corruption Vulnerability
Apple — iOS
Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safar…
CVE-2021-30713 · KEV 2021-11-03Apple macOS Unspecified Vulnerability
Apple — macOS
Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.
CVE-2021-30666 · KEV 2021-11-03Apple iOS WebKit Buffer Overflow Vulnerability
Apple — iOS
Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari …
CVE-2021-30665 · KEV 2021-11-03Apple Multiple Products WebKit Memory Corruption Vulnerability
Apple — Multiple Products
Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, includi…
CVE-2021-30663 · KEV 2021-11-03Apple Multiple Products WebKit Integer Overflow Vulnerability
Apple — Multiple Products
Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, includin…
CVE-2021-30661 · KEV 2021-11-03Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
Apple — Multiple Products
Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use We…
CVE-2021-30657 · KEV 2021-11-03Apple macOS Unspecified Vulnerability
Apple — macOS
Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks.
Source: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.