The CISA KEV Catalogue, Searchable
Every flaw attackers are known to be using: what it is, how bad, and what fixes it.
- Flaws on the list
- 1,779
- Added in 30 days
- 40
- Used in ransomware
- 361
- In web & server software
- 181
1 Jul 2026 Microsoft SharePoint Server Remote code execution
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- What to do
- Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
- Fixed in (NVD)
- microsoft sharepoint server 16.0.19725.20280
- CISA due date
- 4 Jul 2026
- Weakness
- CWE-502
22 Apr 2026 Microsoft Defender Access control flaw
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.
- What to do
- Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
- Fixed in (NVD)
- microsoft defender antimalware platform 4.18.26030.3011
- CISA due date
- 6 May 2026
- Weakness
- CWE-1220
13 Apr 2026 Microsoft Windows Path traversal
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
- What to do
- Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
- Fixed in (NVD)
- microsoft windows server 2025 10.0.26100.7392, microsoft windows 11 25h2 10.0.26200.7392, microsoft windows 11 24h2 10.0.26100.7392
- CISA due date
- 27 Apr 2026
- Weakness
- CWE-59
13 Apr 2026 Microsoft Exchange Server Remote code execution
Microsoft Exchange Server Remote Code Execution Vulnerability
- What to do
- Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
- CISA due date
- 27 Apr 2026
- Weakness
- CWE-502
6 Oct 2025 Microsoft Windows Security flaw
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- What to do
- Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
- Fixed in (NVD)
- microsoft windows server 2019 10.0.17763.2366, microsoft windows server 2016 10.0.14393.4825, microsoft windows server 2004 10.0.19041.1415, microsoft windows 11 21h2 10.0.22000.376, microsoft windows 10 2004 10.0.19041.1415 and 7 older
- CISA due date
- 27 Oct 2025
22 Jul 2025 Microsoft SharePoint Authentication bypass
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
- What to do
- Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
- Fixed in (NVD)
- microsoft sharepoint server 16.0.18526.20424
- CISA due date
- 23 Jul 2025
- Weakness
- CWE-287
22 Jul 2025 Microsoft SharePoint Remote code execution
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- What to do
- Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
- CISA due date
- 23 Jul 2025
- Weakness
- CWE-94
20 Jul 2025 Microsoft SharePoint Remote code execution
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.
- What to do
- Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
- Fixed in (NVD)
- microsoft sharepoint server 16.0.18526.20508
- CISA due date
- 21 Jul 2025
- Weakness
- CWE-502
8 Apr 2025 Microsoft Windows Memory corruption
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- What to do
- Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
- Fixed in (NVD)
- microsoft windows server 2022 23h2 10.0.25398.1551, microsoft windows server 2022 10.0.20348.3453, microsoft windows server 2019 10.0.17763.7136, microsoft windows server 2016 10.0.14393.7969, microsoft windows 11 24h2 10.0.26100.3775 and 7 older
- CISA due date
- 29 Apr 2025
- Weakness
- CWE-416
11 Mar 2025 Microsoft Windows Security flaw
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
- What to do
- Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
- Fixed in (NVD)
- microsoft windows server 2022 23h2 10.0.25398.1486, microsoft windows server 2022 10.0.20348.3270, microsoft windows server 2019 10.0.17763.7009, microsoft windows server 2016 10.0.14393.7876, microsoft windows 11 24h2 10.0.26100.3403 and 7 older
- CISA due date
- 1 Apr 2025
- Weakness
- CWE-707
3 Mar 2025 Microsoft Windows Denial of service
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.
- What to do
- Apply the vendor's update or fix (see the vendor advisory below). If you can't, take it off the internet or stop using it until you can.
- CISA due date
- 24 Mar 2025
- Weakness
- CWE-404
12 Nov 2024 Microsoft Windows Authentication bypass
Windows Task Scheduler Elevation of Privilege Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 23h2 10.0.25398.1251, microsoft windows server 2022 10.0.20348.2849, microsoft windows server 2019 10.0.17763.6532, microsoft windows server 2016 10.0.14393.7515, microsoft windows 11 24h2 10.0.26100.2314 and 7 older
- CISA due date
- 3 Dec 2024
- Weakness
- CWE-287
22 Oct 2024 Microsoft SharePoint Remote code execution
Microsoft SharePoint Remote Code Execution Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 12 Nov 2024
- Weakness
- CWE-502
15 Oct 2024 Microsoft Windows Race condition
Windows Kernel Elevation of Privilege Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 23h2 10.0.25398.950, microsoft windows server 2022 10.0.20348.2522, microsoft windows server 2019 10.0.17763.5936, microsoft windows server 2016 10.0.14393.7070, microsoft windows 11 23h2 10.0.22631.3737 and 7 older
- CISA due date
- 5 Nov 2024
- Weakness
- CWE-367
18 Sep 2024 Microsoft SQL Server Remote code execution
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 9 Oct 2024
- Weakness
- CWE-502
13 Jun 2024 Microsoft Windows Privilege escalation
Windows Error Reporting Service Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 23h2 10.0.25398.763, microsoft windows server 2022 10.0.20348.2333, microsoft windows server 2019 10.0.17763.5576, microsoft windows 11 23h2 10.0.22631.3296, microsoft windows 11 22h2 10.0.22621.3296 and 6 older
- CISA due date
- 4 Jul 2024
- Weakness
- CWE-269
14 May 2024 Microsoft DWM Core Library Memory corruption
Windows DWM Core Library Elevation of Privilege Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.2458, microsoft windows server 2019 10.0.17763.5820, microsoft windows server 2016 10.0.14393.6981, microsoft windows 11 23h2 10.0.22631.3593, microsoft windows 11 22h2 10.0.22621.3593 and 6 older
- CISA due date
- 4 Jun 2024
- Weakness
- CWE-122
26 Mar 2024 Microsoft SharePoint Server Remote code execution
Microsoft SharePoint Server Remote Code Execution Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 16 Apr 2024
- Weakness
- CWE-94
4 Mar 2024 Microsoft Windows Memory corruption
Windows Kernel Elevation of Privilege Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.2322, microsoft windows server 2019 10.0.17763.5458, microsoft windows 11 23h2 10.0.22631.3155, microsoft windows 11 22h2 10.0.22621.3155, microsoft windows 11 21h2 10.0.22000.2777 and 3 older
- CISA due date
- 25 Mar 2024
- Weakness
- CWE-822
13 Feb 2024 Microsoft Windows Security flaw
Internet Shortcut Files Security Feature Bypass Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 23h2 10.0.25398.709, microsoft windows server 2022 10.0.20348.2322, microsoft windows server 2019 10.0.17763.5458, microsoft windows 11 23h2 10.0.22631.3155, microsoft windows 11 22h2 10.0.22621.3155 and 4 older
- CISA due date
- 5 Mar 2024
- Weakness
- CWE-693
10 Jan 2024 Microsoft SharePoint Server Security flaw
Microsoft SharePoint Server Elevation of Privilege Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 31 Jan 2024
- Weakness
- CWE-303
17 Jul 2023 Microsoft Windows Race condition
Windows Search Remote Code Execution Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1903, microsoft windows server 2019 10.0.17763.4737, microsoft windows server 2016 10.0.14393.6167, microsoft windows 11 22h2 10.0.22621.2134, microsoft windows 11 21h2 10.0.22000.2295 and 5 older
- CISA due date
- 29 Aug 2023
- Weakness
- CWE-362
11 Apr 2023 Microsoft Windows Memory corruption
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows 11 22h2 10.0.22621.1555, microsoft windows 11 21h2 10.0.22000.1817, microsoft windows 10 1809 10.0.17763.4252, microsoft windows 10 1607 10.0.14393.5850, microsoft windows 10 1507 10.0.10240.19869 and 3 older
- CISA due date
- 2 May 2023
- Weakness
- CWE-122
7 Apr 2023 Microsoft Windows Privilege escalation
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 28 Apr 2023
- Weakness
- CWE-269
14 Mar 2023 Microsoft Windows Access control flaw
Windows SmartScreen Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1602, microsoft windows server 2019 10.0.17763.4131, microsoft windows server 2016 10.0.14393.5786, microsoft windows 11 22h2 10.0.22000.1413, microsoft windows 11 21h2 10.0.22000.1696 and 5 older
- CISA due date
- 4 Apr 2023
- Weakness
- CWE-863
14 Feb 2023 Microsoft Windows Memory corruption
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1540, microsoft windows server 2019 10.0.17763.4010, microsoft windows server 2016 10.0.14393.5717, microsoft windows 11 22h2 10.0.22621.1265, microsoft windows 11 21h2 10.0.22000.1574 and 6 older
- CISA due date
- 7 Mar 2023
- Weakness
- CWE-122
10 Jan 2023 Microsoft Exchange Server Security flaw
Microsoft Exchange Server Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 31 Jan 2023
13 Dec 2022 Microsoft Defender Security flaw
Windows SmartScreen Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1366, microsoft windows server 2019 10.0.17763.3770, microsoft windows server 2016 10.0.14393.5582, microsoft windows 11 21h2 10.0.22000.1335, microsoft windows 10 1809 10.0.17763.3770 and 5 older
- CISA due date
- 3 Jan 2023
- Weakness
- CWE-755
8 Nov 2022 Microsoft Windows Access control flaw
Windows Mark of the Web Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-863
8 Nov 2022 Microsoft Windows Memory corruption
Windows Print Spooler Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-787
30 Sep 2022 Microsoft Exchange Server Remote code execution
Microsoft Exchange Server Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 21 Oct 2022
- Weakness
- CWE-502
30 Sep 2022 Microsoft Exchange Server Server-side request forgery
Microsoft Exchange Server Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 21 Oct 2022
- Weakness
- CWE-918
14 Sep 2022 Microsoft Windows Memory corruption
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1006, microsoft windows server 2019 10.0.17763.3406, microsoft windows server 2016 10.0.14393.5356, microsoft windows 11 21h2 10.0.22000.978, microsoft windows 10 1809 10.0.17763.3406 and 5 older
- CISA due date
- 5 Oct 2022
- Weakness
- CWE-20, CWE-787
14 Jun 2022 Microsoft Windows Security flaw
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.770, microsoft windows server 2019 10.0.17763.3046, microsoft windows server 2016 10.0.14393.5192, microsoft windows server 20h2 10.0.19042.1766, microsoft windows 11 21h2 10.0.22000.739 and 6 older
- CISA due date
- 5 Jul 2022
- Weakness
- CWE-610
25 May 2022 Microsoft Silverlight Input validation flaw
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."
- What to do
- The impacted products are end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- microsoft silverlight 5.1.41212.0
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-20
25 May 2022 Microsoft Silverlight Security flaw
Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- microsoft silverlight 5.1.20125.0
- CISA due date
- 15 Jun 2022
24 May 2022 Microsoft SMBv1 server Information disclosure
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka "Windows SMB Information Disclosure Vulnerability."
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- siemens acuson sc2000 firmware 4.0e, siemens syngo sc2000 firmware 4.0e
- CISA due date
- 14 Jun 2022
- Weakness
- CWE-200
24 May 2022 Microsoft Internet Explorer and Edge Information disclosure
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 14 Jun 2022
- Weakness
- CWE-200
On Hacker News
Microsoft Patches CVE-2016-3351 Zero-Day, Exploited23 May 2022 Microsoft Update Notification Manager Path traversal
An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 13 Jun 2022
- Weakness
- CWE-59
23 May 2022 Microsoft Windows Path traversal
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 13 Jun 2022
- Weakness
- CWE-59
23 May 2022 Microsoft Windows Path traversal
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 13 Jun 2022
- Weakness
- CWE-59
13 Apr 2022 Microsoft Windows Memory corruption
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.643, microsoft windows server 2019 10.0.17763.2803, microsoft windows server 2016 10.0.14393.5066, microsoft windows server 20h2 10.0.19042.1645, microsoft windows 11 21h2 10.0.22000.613 and 6 older
- CISA due date
- 4 May 2022
- Weakness
- CWE-787, CWE-1285
11 Apr 2022 Microsoft Active Directory Privilege escalation
Active Directory Domain Services Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.350, microsoft windows server 2019 10.0.17763.2300, microsoft windows server 2016 10.0.14393.4770, microsoft windows server 2004 10.0.19041.1348, microsoft windows server 20h2 10.0.19042.1348
- CISA due date
- 2 May 2022
- Weakness
- CWE-269
11 Apr 2022 Microsoft Active Directory Input validation flaw
Active Directory Domain Services Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.350, microsoft windows server 2019 10.0.17763.2300, microsoft windows server 2016 10.0.14393.4770, microsoft windows server 2004 10.0.19041.1348, microsoft windows server 20h2 10.0.19042.1348
- CISA due date
- 2 May 2022
- Weakness
- CWE-20
6 Apr 2022 Microsoft SMBv1 server Input validation flaw
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- siemens acuson sc2000 firmware 4.0e
- CISA due date
- 27 Apr 2022
- Weakness
- CWE-20
28 Mar 2022 Microsoft Office Security flaw
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
28 Mar 2022 Microsoft Windows Security flaw
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
28 Mar 2022 Microsoft DirectX Graphics Kernel (DXGKRNL) Denial of service
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-404
28 Mar 2022 Microsoft DirectX Graphics Kernel (DXGKRNL) Denial of service
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-404
28 Mar 2022 Microsoft Windows Security flaw
Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
Know when it's your software
Get an email within half an hour when a flaw in your software is added. Free.
About the KEV Catalogue
What is the CISA KEV catalogue?
CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.
Why does it matter more than the CVSS score?
Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.
What is the due date?
The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.
Does it apply outside the US?
The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.
What does "used in ransomware" mean?
CISA knows ransomware groups have used the flaw.
How often is it updated?
CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.