CISA Known Exploited Vulnerabilities

The CISA KEV Catalogue, Searchable

Every flaw attackers are known to be using: what it is, how bad, and what fixes it.

Flaws on the list: 1,779
Added in 30 days: 40
Used in ransomware: 361
In web & server software: 181

Latest addition 10 Nov 2026. Checked 12 Nov 2026, 14:04 UTC. The catalogue in numbers ›

405 flaws matching "Microsoft", newest first · page 3 of 9. Clear

13 Aug 2024 Microsoft Windows Memory corruption CVE-2024-38193 7.8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.6189, microsoft windows server 2016 10.0.14393.7259, microsoft windows server 2012 6.2.9200.25031, microsoft windows 11 24h2 10.0.26100.1457, microsoft windows 11 23h2 10.0.22631.4037 and 7 older
CISA due date: 3 Sep 2024
Weakness: CWE-416

NVD Record

13 Aug 2024 Microsoft Project Input validation flaw CVE-2024-38189 8.8

Microsoft Project Remote Code Execution Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft project 2016 16.0.5461.1001
CISA due date: 3 Sep 2024
Weakness: CWE-20

NVD Record

13 Aug 2024 Microsoft Windows Memory corruption CVE-2024-38178 7.5

Scripting Engine Memory Corruption Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.2655, microsoft windows server 2019 10.0.17763.6189, microsoft windows server 2016 10.0.14393.7259, microsoft windows 11 24h2 10.0.26100.1457, microsoft windows 11 23h2 10.0.22631.4037 and 7 older
CISA due date: 3 Sep 2024
Weakness: CWE-843

NVD Record

13 Aug 2024 Microsoft Windows Memory corruption CVE-2024-38107 7.8

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.6189, microsoft windows server 2016 10.0.14393.7259, microsoft windows server 2012 6.2.9200.25031, microsoft windows 11 24h2 10.0.26100.1457, microsoft windows 11 23h2 10.0.22631.4037 and 7 older
CISA due date: 3 Sep 2024
Weakness: CWE-416

NVD Record

13 Aug 2024 Microsoft Windows Security flaw CVE-2024-38106 7.0

Windows Kernel Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.2655, microsoft windows server 2019 10.0.17763.6189, microsoft windows server 2016 10.0.14393.7259, microsoft windows 11 24h2 10.0.26100.1457, microsoft windows 11 23h2 10.0.22631.4037 and 7 older
CISA due date: 3 Sep 2024
Weakness: CWE-591

NVD Record

5 Aug 2024 Microsoft Windows Remote code execution CVE-2018-0824 8.8

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date: 26 Aug 2024
Weakness: CWE-502

NVD Record

23 Jul 2024 Microsoft Internet Explorer Memory corruption CVE-2012-4792 8.8

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.

What to do: The impacted product is end-of-life and should be disconnected if still in use.
CISA due date: 13 Aug 2024
Weakness: CWE-416

NVD Record

9 Jul 2024 Microsoft Windows Security flaw CVE-2024-38112 7.5

Windows MSHTML Platform Spoofing Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 23h2 10.0.25398.1009, microsoft windows server 2022 10.0.20348.2582, microsoft windows server 2019 10.0.17763.6054, microsoft windows server 2016 10.0.14393.7159, microsoft windows 11 23h2 10.0.22631.3880 and 7 older
CISA due date: 30 Jul 2024
Weakness: CWE-451

NVD Record

On Hacker News

Threat Actors Using Zero-Day Tricks in Internet Shortcut Files

9 Jul 2024 Microsoft Windows Memory corruption CVE-2024-38080 7.8

Windows Hyper-V Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 23h2 10.0.25398.1009, microsoft windows server 2022 10.0.20348.2582, microsoft windows 11 23h2 10.0.22631.3880, microsoft windows 11 22h2 10.0.22621.3880, microsoft windows 11 21h2 10.0.22000.3079
CISA due date: 30 Jul 2024
Weakness: CWE-190

NVD Record

13 Jun 2024 Microsoft Windows Privilege escalation CVE-2024-26169 7.8 Ransomware

Windows Error Reporting Service Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Fixed in (NVD): microsoft windows server 2022 23h2 10.0.25398.763, microsoft windows server 2022 10.0.20348.2333, microsoft windows server 2019 10.0.17763.5576, microsoft windows 11 23h2 10.0.22631.3296, microsoft windows 11 22h2 10.0.22621.3296 and 6 older
CISA due date: 4 Jul 2024
Weakness: CWE-269

NVD Record

14 May 2024 Microsoft DWM Core Library Memory corruption CVE-2024-30051 7.8 Ransomware

Windows DWM Core Library Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.2458, microsoft windows server 2019 10.0.17763.5820, microsoft windows server 2016 10.0.14393.6981, microsoft windows 11 23h2 10.0.22631.3593, microsoft windows 11 22h2 10.0.22621.3593 and 6 older
CISA due date: 4 Jun 2024
Weakness: CWE-122

NVD Record

On Hacker News

Windows DWM Core Library Elevation of Privilege Vulnerability (CVE-2024-30051)Windows DWM Core Library Elevation of Privilege Vulnerability New

14 May 2024 Microsoft Windows Input validation flaw CVE-2024-30040 8.8

Windows MSHTML Platform Security Feature Bypass Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 23h2 10.0.25398.887, microsoft windows server 2022 10.0.20348.2458, microsoft windows server 2019 10.0.17763.5820, microsoft windows server 2016 10.0.14393.6981, microsoft windows 11 23h2 10.0.22631.3593 and 7 older
CISA due date: 4 Jun 2024
Weakness: CWE-20

NVD Record

30 Apr 2024 Microsoft SmartScreen Prompt Security flaw CVE-2024-29988 8.8

SmartScreen Prompt Security Feature Bypass Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 23h2 10.0.25398.830, microsoft windows server 2022 10.0.20348.2402, microsoft windows server 2019 10.0.17763.5696, microsoft windows 11 23h2 10.0.22631.3447, microsoft windows 11 22h2 10.0.22621.3447 and 4 older
CISA due date: 21 May 2024
Weakness: CWE-693

NVD Record

23 Apr 2024 Microsoft Windows Security flaw CVE-2022-38028 7.8

Windows Print Spooler Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.1129, microsoft windows server 2019 10.0.17763.3532, microsoft windows server 2016 10.0.14393.5427, microsoft windows 11 22h2 10.0.22621.674, microsoft windows 10 1809 10.0.17763.3532 and 7 older
CISA due date: 14 May 2024

NVD Record

On Hacker News

Analyzing Forest Blizzard's custom post-compromise tool (CVE-2022-38028)

26 Mar 2024 Microsoft SharePoint Server Remote code execution CVE-2023-24955 7.2 Ransomware

Microsoft SharePoint Server Remote Code Execution Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date: 16 Apr 2024
Weakness: CWE-94

NVD Record

4 Mar 2024 Microsoft Windows Memory corruption CVE-2024-21338 7.8 Ransomware

Windows Kernel Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.2322, microsoft windows server 2019 10.0.17763.5458, microsoft windows 11 23h2 10.0.22631.3155, microsoft windows 11 22h2 10.0.22621.3155, microsoft windows 11 21h2 10.0.22000.2777 and 3 older
CISA due date: 25 Mar 2024
Weakness: CWE-822

NVD Record

On Hacker News

Windows AppLocker Driver LPE Vulnerability – CVE-2024-21338 – Crowdfense

29 Feb 2024 Microsoft Streaming Service Memory corruption CVE-2023-29360 8.4

Microsoft Streaming Service Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.1784, microsoft windows server 2019 10.0.17763.4499, microsoft windows server 2016 10.0.14393.5989, microsoft windows 11 22h2 10.0.22621.1848, microsoft windows 11 21h2 10.0.22000.2057 and 4 older
CISA due date: 21 Mar 2024
Weakness: CWE-822

NVD Record

15 Feb 2024 Microsoft Exchange Server Authentication bypass CVE-2024-21410 9.8

Microsoft Exchange Server Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date: 7 Mar 2024
Weakness: CWE-287

NVD Record

13 Feb 2024 Microsoft Windows Security flaw CVE-2024-21412 8.1 Ransomware

Internet Shortcut Files Security Feature Bypass Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 23h2 10.0.25398.709, microsoft windows server 2022 10.0.20348.2322, microsoft windows server 2019 10.0.17763.5458, microsoft windows 11 23h2 10.0.22631.3155, microsoft windows 11 22h2 10.0.22621.3155 and 4 older
CISA due date: 5 Mar 2024
Weakness: CWE-693

NVD Record

13 Feb 2024 Microsoft Windows Remote code execution CVE-2024-21351 7.6

Windows SmartScreen Security Feature Bypass Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 23h2 10.0.25398.709, microsoft windows server 2022 10.0.20348.2322, microsoft windows server 2019 10.0.17763.5458, microsoft windows 11 23h2 10.0.22631.3155, microsoft windows 11 22h2 10.0.22621.3155 and 6 older
CISA due date: 5 Mar 2024
Weakness: CWE-94

NVD Record

6 Feb 2024 Google Chromium V8 Memory corruption CVE-2023-4762 8.8

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): google chrome 116.0.5845.179, microsoft edge chromium 116.0.1938.76
CISA due date: 27 Feb 2024
Weakness: CWE-843

NVD Record · More on Ubuntu / Debian packages

10 Jan 2024 Microsoft SharePoint Server Security flaw CVE-2023-29357 9.8 Ransomware

Microsoft SharePoint Server Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date: 31 Jan 2024
Weakness: CWE-303

NVD Record

30 Nov 2023 Google Chromium Skia Memory corruption CVE-2023-6345 9.6

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): google chrome 119.0.6045.199, microsoft edge chromium 119.0.2151.97
CISA due date: 21 Dec 2023
Weakness: CWE-190

NVD Record · Vendor Advisory · More on Ubuntu / Debian packages

16 Nov 2023 Microsoft Windows Security flaw CVE-2023-36584 5.4

Windows Mark of the Web Security Feature Bypass Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.2031, microsoft windows server 2019 10.0.17763.4974, microsoft windows server 2016 10.0.14393.6351, microsoft windows 11 22h2 10.0.22621.2428, microsoft windows 11 21h2 10.0.22000.2538 and 4 older
CISA due date: 7 Dec 2023

NVD Record · Vendor Advisory

14 Nov 2023 Microsoft Windows Memory corruption CVE-2023-36036 7.8

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.2113, microsoft windows server 2019 10.0.17763.5122, microsoft windows server 2016 10.0.14393.6452, microsoft windows 11 23h2 10.0.22621.2715, microsoft windows 11 22h2 10.0.22621.2715 and 6 older
CISA due date: 5 Dec 2023
Weakness: CWE-122

NVD Record · Vendor Advisory

14 Nov 2023 Microsoft Windows Memory corruption CVE-2023-36033 7.8

Windows DWM Core Library Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 23h2 10.0.25398.531, microsoft windows server 2022 10.0.20348.2113, microsoft windows server 2019 10.0.17763.5122, microsoft windows 11 23h2 10.0.22621.2715, microsoft windows 11 22h2 10.0.22621.2715 and 4 older
CISA due date: 5 Dec 2023
Weakness: CWE-822

NVD Record · Vendor Advisory

14 Nov 2023 Microsoft Windows Security flaw CVE-2023-36025 8.8

Windows SmartScreen Security Feature Bypass Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.2113, microsoft windows server 2019 10.0.17763.5122, microsoft windows server 2016 10.0.14393.6452
CISA due date: 5 Dec 2023

NVD Record

10 Oct 2023 Microsoft Skype for Business Server-side request forgery CVE-2023-41763 5.3

Skype for Business Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date: 31 Oct 2023
Weakness: CWE-918

NVD Record

10 Oct 2023 Microsoft WordPad Input validation flaw CVE-2023-36563 5.5

Microsoft WordPad Information Disclosure Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.2031, microsoft windows server 2019 10.0.17763.4974, microsoft windows server 2016 10.0.14393.6351, microsoft windows 11 22h2 10.0.22621.2428, microsoft windows 11 21h2 10.0.22000.2538 and 5 older
CISA due date: 31 Oct 2023
Weakness: CWE-20

NVD Record

4 Oct 2023 Microsoft Windows CNG Key Isolation Service Security flaw CVE-2023-28229 7.0

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows 11 22h2 10.0.22621.1555, microsoft windows 11 21h2 10.0.22000.1817, microsoft windows 10 1809 10.0.17763.4252, microsoft windows 10 1607 10.0.14393.5850, microsoft windows 10 1507 10.0.10240.19869 and 3 older
CISA due date: 25 Oct 2023
Weakness: CWE-591

NVD Record

2 Oct 2023 Google Chromium libvpx Memory corruption CVE-2023-5217 8.8

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): mozilla firefox 118.1, mozilla firefox 118.0.1, google chrome 117.0.5938.132, mozilla firefox 115.3.1, mozilla thunderbird 115.3.1 and 3 older
CISA due date: 23 Oct 2023
Weakness: CWE-787

NVD Record

On Hacker News

Ask HN: Are there examples of zero-click exploit chains targeting Linux systems? 1 comment Heap buffer overflow in vp8 encoding in libvpx CVE-2023-5217 Mitigates memory vulnerabilities through explicit usage of bzero()

13 Sep 2023 Google Chromium WebP Memory corruption CVE-2023-4863 8.8

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): bentley seequent leapfrog 2023.2, mozilla firefox 117.0.1, google chrome 116.0.5845.187, microsoft edge chromium 116.0.1938.81, mozilla thunderbird 115.2.2 and 7 older
CISA due date: 4 Oct 2023
Weakness: CWE-787

NVD Record · More on Ubuntu / Debian packages

On Hacker News

The WebP vulnerability: a tale of a CVE with much bigger impl 6 comments Facebook Messenger now limits WebP file attachments 8 comments Ask HN: Are there examples of zero-click exploit chains targeting Linux systems? 1 comment

12 Sep 2023 Microsoft Streaming Service Proxy Memory corruption CVE-2023-36802 7.8

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.1970, microsoft windows server 2019 10.0.17763.4851, microsoft windows 11 22h2 10.0.22621.2275, microsoft windows 11 21h2 10.0.22000.2416, microsoft windows 10 1809 10.0.17763.4851 and 2 older
CISA due date: 3 Oct 2023
Weakness: CWE-416

NVD Record

12 Sep 2023 Microsoft Word Input validation flaw CVE-2023-36761 6.5

Microsoft Word Information Disclosure Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date: 3 Oct 2023
Weakness: CWE-668

NVD Record

9 Aug 2023 Microsoft .NET Core and Visual Studio Denial of service CVE-2023-38180 7.5

.NET and Visual Studio Denial of Service Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft visual studio 2022 17.6.6, microsoft visual studio 2022 17.4.10, microsoft visual studio 2022 17.2.18, microsoft .net 7.0.10, microsoft .net 6.0.21 and 1 older
CISA due date: 30 Aug 2023
Weakness: CWE-400

NVD Record

17 Jul 2023 Microsoft Windows Race condition CVE-2023-36884 7.5 Ransomware

Windows Search Remote Code Execution Vulnerability

What to do: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.1903, microsoft windows server 2019 10.0.17763.4737, microsoft windows server 2016 10.0.14393.6167, microsoft windows 11 22h2 10.0.22621.2134, microsoft windows 11 21h2 10.0.22000.2295 and 5 older
CISA due date: 29 Aug 2023
Weakness: CWE-362

NVD Record

11 Jul 2023 Microsoft Windows Path traversal CVE-2023-36874 7.8

Windows Error Reporting Service Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.1850, microsoft windows server 2019 10.0.17763.4645, microsoft windows server 2016 10.0.14393.6085, microsoft windows 11 22h2 10.0.22621.1992, microsoft windows 11 21h2 10.0.22000.2176 and 5 older
CISA due date: 1 Aug 2023
Weakness: CWE-59

NVD Record

11 Jul 2023 Microsoft Outlook Race condition CVE-2023-35311 8.8

Microsoft Outlook Security Feature Bypass Vulnerability

What to do: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
CISA due date: 1 Aug 2023
Weakness: CWE-367

NVD Record

11 Jul 2023 Microsoft Windows Security flaw CVE-2023-32049 8.8

Windows SmartScreen Security Feature Bypass Vulnerability

What to do: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Fixed in (NVD): microsoft windows 11 22h2 10.0.22621.1992, microsoft windows 11 21h2 10.0.22000.2176, microsoft windows 10 1809 10.0.17763.4645, microsoft windows 10 1607 10.0.14393.6085, microsoft windows 10 22h2 10.0.19045.3208 and 1 older
CISA due date: 1 Aug 2023

NVD Record

11 Jul 2023 Microsoft Windows Security flaw CVE-2023-32046 7.8

Windows MSHTML Platform Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Fixed in (NVD): microsoft windows 11 22h2 10.0.22621.1992, microsoft windows 11 21h2 10.0.22000.2176, microsoft windows 10 1809 10.0.17763.4645, microsoft windows 10 1607 10.0.14393.6085, microsoft windows 10 1507 10.0.10240.20048 and 2 older
CISA due date: 1 Aug 2023

NVD Record

22 Jun 2023 Microsoft Win32k Security flaw CVE-2016-0165 7.8

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0167.

What to do: Apply updates per vendor instructions.
CISA due date: 13 Jul 2023
Weakness: CWE-264

NVD Record

9 May 2023 Microsoft Win32k Memory corruption CVE-2023-29336 7.8

Win32k Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows 10 1607 10.0.14393.5921, microsoft windows 10 1507 10.0.10240.19926
CISA due date: 30 May 2023
Weakness: CWE-416

NVD Record

11 Apr 2023 Microsoft Windows Memory corruption CVE-2023-28252 7.8 Ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows 11 22h2 10.0.22621.1555, microsoft windows 11 21h2 10.0.22000.1817, microsoft windows 10 1809 10.0.17763.4252, microsoft windows 10 1607 10.0.14393.5850, microsoft windows 10 1507 10.0.10240.19869 and 3 older
CISA due date: 2 May 2023
Weakness: CWE-122

NVD Record

7 Apr 2023 Microsoft Windows Privilege escalation CVE-2019-1388 7.8 Ransomware

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.

What to do: Apply updates per vendor instructions.
CISA due date: 28 Apr 2023
Weakness: CWE-269

NVD Record

30 Mar 2023 Microsoft Internet Explorer Memory corruption CVE-2013-3163 8.8

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3144 and CVE-2013-3151.

What to do: The impacted product is end-of-life and should be disconnected if still in use.
CISA due date: 20 Apr 2023
Weakness: CWE-94

NVD Record

14 Mar 2023 Microsoft Windows Access control flaw CVE-2023-24880 4.4 Ransomware

Windows SmartScreen Security Feature Bypass Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.1602, microsoft windows server 2019 10.0.17763.4131, microsoft windows server 2016 10.0.14393.5786, microsoft windows 11 22h2 10.0.22000.1413, microsoft windows 11 21h2 10.0.22000.1696 and 5 older
CISA due date: 4 Apr 2023
Weakness: CWE-863

NVD Record

14 Mar 2023 Microsoft Office Authentication bypass CVE-2023-23397 9.8

Microsoft Outlook Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
CISA due date: 4 Apr 2023
Weakness: CWE-294

NVD Record · Vendor Advisory

On Hacker News

Comprehensive analysis of attack samples exploiting CVE-2023-23397 vulnerability CVE-2023-23397 – Microsoft Outlook Privilege Elevation Critical Vulnerability Microsoft Outlook Elevation of Privilege Vulnerability (CVSS 9.8) 1 comment

14 Feb 2023 Microsoft Windows Memory corruption CVE-2023-23376 7.8 Ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.1540, microsoft windows server 2019 10.0.17763.4010, microsoft windows server 2016 10.0.14393.5717, microsoft windows 11 22h2 10.0.22621.1265, microsoft windows 11 21h2 10.0.22000.1574 and 6 older
CISA due date: 7 Mar 2023
Weakness: CWE-122

NVD Record

14 Feb 2023 Microsoft Windows Memory corruption CVE-2023-21823 7.8

Windows Graphics Component Remote Code Execution Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows 11 22h2 10.0.22621.1265, microsoft windows 11 21h2 10.0.22000.1574, microsoft windows 10 1809 10.0.17763.4010, microsoft windows 10 1607 10.0.14393.5717, microsoft windows 10 1507 10.0.10240.19747 and 3 older
CISA due date: 7 Mar 2023
Weakness: CWE-190

NVD Record

14 Feb 2023 Microsoft Office Access control flaw CVE-2023-21715 7.3

Microsoft Publisher Security Feature Bypass Vulnerability

What to do: Apply updates per vendor instructions.
CISA due date: 7 Mar 2023
Weakness: CWE-863

NVD Record

Know when it's your software

Get an email within half an hour when a flaw in your software is added. Free.

Pick Your Software ›

About the KEV Catalogue

What is the CISA KEV catalogue?

CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.

Why does it matter more than the CVSS score?

Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.

What is the due date?

The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.

Does it apply outside the US?

The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.

What does "used in ransomware" mean?

CISA knows ransomware groups have used the flaw.

How often is it updated?

CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.

Source: CISA Known Exploited Vulnerabilities catalogue. Summaries and scores from the NVD. CVE Hawk is not affiliated with CISA or the NVD.