Threats & CVE Intelligence
Search the locally synchronized CISA known-exploited vulnerabilities catalog, or enter a CVE ID or keyword to search the broader NIST National Vulnerability Database. NVD searches are retrieved on demand and may be rate limited.
Last successful sync: 2026-11-07 22:40:39 UTC · Source catalog updated: 2026-11-06T19:44:45.1797Z · 1769 records in latest import.
CISA Known Exploited Vulnerabilities · 1769 matches
Google Chromium Indexed DB API Use-After-Free Vulnerability
Google — Chromium Indexed DB API
Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect…
CVE-2021-30632 · KEV 2021-11-03Google Chromium V8 Out-of-Bounds Write Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromiu…
CVE-2021-30563 · KEV 2021-11-03Google Chromium V8 Type Confusion Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, inc…
CVE-2021-30554 · KEV 2021-11-03Google Chromium WebGL Use-After-Free Vulnerability
Google — Chromium WebGL
Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, includi…
CVE-2021-30551 · KEV 2021-11-03Google Chromium V8 Type Confusion Vulnerability
Google — Chromium V8
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, inc…
CVE-2021-30116 · KEV 2021-11-03Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability
Kaseya — Virtual System/Server Administrator (VSA)
Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.
Ransomware use reportedCVE-2021-28664 · KEV 2021-11-03Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability
Arm — Mali Graphics Processing Unit (GPU)
Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other p…
CVE-2021-28663 · KEV 2021-11-03Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
Arm — Mali Graphics Processing Unit (GPU)
Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information.
CVE-2021-28550 · KEV 2021-11-03Adobe Acrobat and Reader Use-After-Free Vulnerability
Adobe — Acrobat and Reader
Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.
CVE-2021-28310 · KEV 2021-11-03Microsoft Win32k Privilege Escalation Vulnerability
Microsoft — Win32k
Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation.
CVE-2021-27562 · KEV 2021-11-03Arm Trusted Firmware Out-of-Bounds Write Vulnerability
Arm — Trusted Firmware
Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing en…
CVE-2021-27561 · KEV 2021-11-03Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
Yealink — Device Management
Yealink Device Management contains a server-side request forgery (SSRF) vulnerability that allows for unauthenticated remote code execution.
CVE-2021-27104 · KEV 2021-11-03Accellion FTA OS Command Injection Vulnerability
Accellion — FTA
Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.
Ransomware use reportedCVE-2021-27103 · KEV 2021-11-03Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
Accellion — FTA
Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.
Ransomware use reportedCVE-2021-27102 · KEV 2021-11-03Accellion FTA OS Command Injection Vulnerability
Accellion — FTA
Accellion FTA contains an OS command injection vulnerability exploited via a local web service call.
Ransomware use reportedCVE-2021-27101 · KEV 2021-11-03Accellion FTA SQL Injection Vulnerability
Accellion — FTA
Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.
Ransomware use reportedCVE-2021-27085 · KEV 2021-11-03Microsoft Internet Explorer Remote Code Execution Vulnerability
Microsoft — Internet Explorer
Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.
CVE-2021-27065 · KEV 2021-11-03Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft — Exchange Server
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
Ransomware use reportedCVE-2021-27059 · KEV 2021-11-03Microsoft Office Remote Code Execution Vulnerability
Microsoft — Office
Microsoft Office contains an unspecified vulnerability that allows for remote code execution.
CVE-2021-26858 · KEV 2021-11-03Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft — Exchange Server
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
Ransomware use reportedCVE-2021-26857 · KEV 2021-11-03Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft — Exchange Server
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
Ransomware use reportedCVE-2021-26855 · KEV 2021-11-03Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft — Exchange Server
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
Ransomware use reportedCVE-2021-26411 · KEV 2021-11-03Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft — Internet Explorer
Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.
Ransomware use reportedCVE-2021-26084 · KEV 2021-11-03Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
Atlassian — Confluence Server and Data Center
Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.
Ransomware use reportedCVE-2021-23874 · KEV 2021-11-03McAfee Total Protection (MTP) Improper Privilege Management Vulnerability
McAfee — McAfee Total Protection (MTP)
McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.
CVE-2021-22986 · KEV 2021-11-03F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
F5 — BIG-IP and BIG-IQ Centralized Management
F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disab…
Ransomware use reportedCVE-2021-22900 · KEV 2021-11-03Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
Ivanti — Pulse Connect Secure
Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
CVE-2021-22899 · KEV 2021-11-03Ivanti Pulse Connect Secure Command Injection Vulnerability
Ivanti — Pulse Connect Secure
Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles.
CVE-2021-22894 · KEV 2021-11-03Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
Ivanti — Pulse Connect Secure
Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room.
CVE-2021-22893 · KEV 2021-11-03Ivanti Pulse Connect Secure Use-After-Free Vulnerability
Ivanti — Pulse Connect Secure
Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.
Ransomware use reportedSource: CISA KEV catalog and NIST NVD. “Known” ransomware use is a CISA catalog label, not a real-time incident alert. Always review vendor advisories for patches.