Vulnerabilities exploited in the wild
1,781 vulnerabilities that attackers have used in real attacks, as confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA). If you run an affected product, these come before everything else in your patch queue.
| Score | Vulnerability | Added | Federal deadline | Ransomware use |
|---|---|---|---|---|
| 7.8 High severity | Microsoft Windows Kernel Privilege Escalation CVE-2021-33771 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Microsoft Windows MSHTML Platform Remote Code Execution CVE-2021-33742 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 7.8 High severity | Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation CVE-2021-33739 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 7.8 High severity | Microsoft Windows Kernel Privilege Escalation CVE-2021-31979 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 7.8 High severity | Microsoft Windows NTFS Privilege Escalation CVE-2021-31956 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 5.5 Medium severity | Microsoft Windows Kernel Information Disclosure CVE-2021-31955 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 9.8 Critical severity | Tenda AC11 Router Stack Buffer Overflow CVE-2021-31755 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 6.6 Medium severity | Microsoft Exchange Server Security Feature Bypass CVE-2021-31207 | Nov 3, 2021 | Nov 17, 2021 | Known |
| 7.8 High severity | Microsoft Enhanced Cryptographic Provider Privilege Escalation CVE-2021-31201 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 7.8 High severity | Microsoft Enhanced Cryptographic Provider Privilege Escalation CVE-2021-31199 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 7.8 High severity | Apple iOS, iPadOS, and macOS Type Confusion CVE-2021-30869 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 7.8 High severity | Apple Multiple Products Integer Overflow CVE-2021-30860 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Apple iOS, iPadOS, macOS Use-After-Free CVE-2021-30858 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 7.8 High severity | Apple Multiple Products Memory Corruption CVE-2021-30807 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Apple iOS WebKit Use-After-Free CVE-2021-30762 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Apple iOS WebKit Memory Corruption CVE-2021-30761 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 7.8 High severity | Apple macOS Unspecified CVE-2021-30713 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Apple iOS WebKit Buffer Overflow CVE-2021-30666 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Apple Multiple Products WebKit Memory Corruption CVE-2021-30665 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Apple Multiple Products WebKit Integer Overflow CVE-2021-30663 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Apple Multiple Products WebKit Storage Use-After-Free CVE-2021-30661 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 5.5 Medium severity | Apple macOS Unspecified CVE-2021-30657 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 9.6 Critical severity | Google Chromium Indexed DB API Use-After-Free CVE-2021-30633 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Google Chromium V8 Out-of-Bounds Write CVE-2021-30632 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Google Chromium V8 Type Confusion CVE-2021-30563 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Google Chromium WebGL Use-After-Free CVE-2021-30554 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Google Chromium V8 Type Confusion CVE-2021-30551 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 9.8 Critical severity | Kaseya Virtual System/Server Administrator (VSA) Information Disclosure CVE-2021-30116 | Nov 3, 2021 | Nov 17, 2021 | Known |
| 8.8 High severity | Arm Mali Graphics Processing Unit (GPU) Unspecified CVE-2021-28664 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Arm Mali Graphics Processing Unit (GPU) Use-After-Free CVE-2021-28663 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 8.8 High severity | Adobe Acrobat and Reader Use-After-Free CVE-2021-28550 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 7.8 High severity | Microsoft Win32k Privilege Escalation CVE-2021-28310 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 5.5 Medium severity | Arm Trusted Firmware Out-of-Bounds Write CVE-2021-27562 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 9.8 Critical severity | Yealink Device Management Server-Side Request Forgery (SSRF) CVE-2021-27561 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 9.8 Critical severity | Accellion FTA OS Command Injection CVE-2021-27104 | Nov 3, 2021 | Nov 17, 2021 | Known |
| 9.8 Critical severity | Accellion FTA Server-Side Request Forgery (SSRF) CVE-2021-27103 | Nov 3, 2021 | Nov 17, 2021 | Known |
| 7.8 High severity | Accellion FTA OS Command Injection CVE-2021-27102 | Nov 3, 2021 | Nov 17, 2021 | Known |
| 9.8 Critical severity | Accellion FTA SQL Injection CVE-2021-27101 | Nov 3, 2021 | Nov 17, 2021 | Known |
| 8.8 High severity | Microsoft Internet Explorer Remote Code Execution CVE-2021-27085 | Nov 3, 2021 | Nov 17, 2021 | Not reported |
| 7.8 High severity | Microsoft Exchange Server Remote Code Execution CVE-2021-27065 | Nov 3, 2021 | May 3, 2022 | Known |
About this list
CISA adds a vulnerability to its Known Exploited Vulnerabilities (KEV) catalogue only when there is reliable evidence of exploitation and a clear fix or mitigation. US federal agencies must remediate each entry by the deadline shown; everyone else can treat the list as a short, evidence-based set of must-patch issues.
A vulnerability missing from this list is not proof that it is safe. Many exploited flaws are never catalogued, which is why each of our CVE pages also shows the EPSS exploitation forecast.