The KEV catalog lists vulnerabilities that are known to be actively exploited in the wild. Federal agencies are required to remediate these on defined deadlines.
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2019-4716 | UNKNOWN | — | IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. | Nov 3, 2021 |
| CVE-2020-1464 | UNKNOWN | — | Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files. | Nov 3, 2021 |
| CVE-2021-1732 | UNKNOWN | — | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. | Nov 3, 2021 |
| CVE-2021-28310 | UNKNOWN | — | Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. | Nov 3, 2021 |
| CVE-2018-8653 | UNKNOWN | — | Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution. | Nov 3, 2021 |
| CVE-2019-0797 | UNKNOWN | — | Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode. | Nov 3, 2021 |
| CVE-2019-1215 | UNKNOWN | — | Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges. | Nov 3, 2021 |
| CVE-2018-0798 | UNKNOWN | — | Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802. | Nov 3, 2021 |
| CVE-2018-0802 | UNKNOWN | — | Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798. | Nov 3, 2021 |
| CVE-2012-0158 | UNKNOWN | — | Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user. | Nov 3, 2021 |
| CVE-2015-1641 | UNKNOWN | — | Microsoft Office contains a memory corruption vulnerability due to failure to properly handle rich text format files in memory. Successful exploitation allows for remote code execution in the context of the current user. | Nov 3, 2021 |
| CVE-2017-11882 | UNKNOWN | — | Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user. | Nov 3, 2021 |
| CVE-2020-0674 | UNKNOWN | — | Microsoft Internet Explorer contains a memory corruption vulnerability due to the way the Scripting Engine handles objects in memory. Successful exploitation could allow remote code execution in the context of the current user. | Nov 3, 2021 |
| CVE-2010-5326 | UNKNOWN | — | SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote code execution via a HTTP or HTTPS request. | Nov 3, 2021 |
| CVE-2020-6287 | UNKNOWN | — | SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical function vulnerability allowing unauthenticated access to execute configuration tasks and create administrative users. | Nov 3, 2021 |
| CVE-2020-6207 | UNKNOWN | — | SAP Solution Manager User Experience Monitoring contains a missing authentication for critical function vulnerability which results in complete compromise of all SMDAgents connected to the Solution Manager. | Nov 3, 2021 |
| CVE-2019-16256 | UNKNOWN | — | SIMalliance Toolbox Browser contains an command injection vulnerability that could allow remote attackers to retrieve location and IMEI information or execute a range of other attacks by modifying the attack message. | Nov 3, 2021 |
| CVE-2021-1675 | UNKNOWN | — | Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution. | Nov 3, 2021 |
| CVE-2019-19356 | UNKNOWN | — | Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the router's web management page. | Nov 3, 2021 |
| CVE-2020-2555 | UNKNOWN | — | Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticated attacker with network access via T3 or HTTP to takeover the affected system. Impacted Oracle products: Oracle Coherence in Fusion Middleware, Oracle Utilities Framework, Oracle Retail Assortment Planning, Oracle Commerce, Oracle Communications Diameter Signaling Router (DSR). | Nov 3, 2021 |
| CVE-2020-14871 | UNKNOWN | — | Oracle Solaris and Oracle ZFS Storage Appliance Kit contain an unspecified vulnerability causing high impacts to confidentiality, integrity, and availability of affected systems. | Nov 3, 2021 |
| CVE-2015-4852 | UNKNOWN | — | Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution. | Nov 3, 2021 |
| CVE-2019-18935 | UNKNOWN | — | Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code execution on the server in the context of the w3wp.exe process. | Nov 3, 2021 |
| CVE-2021-22894 | UNKNOWN | — | Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room. | Nov 3, 2021 |
| CVE-2020-8260 | UNKNOWN | — | Pulse Connect Secure contains an unspecified vulnerability that allows an authenticated attacker to perform code execution using uncontrolled gzip extraction. | Nov 3, 2021 |