What is the CISA KEV catalogue?

CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.

Why does it matter more than the CVSS score?

Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.

What is the due date?

The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.

Does it apply outside the US?

The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.

What does "used in ransomware" mean?

CISA knows ransomware groups have used the flaw.

How often is it updated?

CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.

CISA KEV catalogue: filtered

3 Nov 2021 Microsoft Open Management Infrastructure (OMI) Security flaw CVE-2021-38645 7.8

Open Management Infrastructure Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft open management infrastructure 1.6.8-1
CISA due date: 17 Nov 2021

NVD Record

3 Nov 2021 Google Chromium V8 Memory corruption CVE-2021-38003 8.8

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): google chrome 95.0.4638.69
CISA due date: 17 Nov 2021
Weakness: CWE-122, CWE-755

NVD Record · More on Ubuntu / Debian packages

3 Nov 2021 Google Chromium Intents Open redirect CVE-2021-38000 6.1

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): google chrome 95.0.4638.69
CISA due date: 17 Nov 2021
Weakness: CWE-20

NVD Record · More on Ubuntu / Debian packages

3 Nov 2021 Google Chromium Access control flaw CVE-2021-37976 6.5

Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): google chrome 94.0.4606.71
CISA due date: 17 Nov 2021
Weakness: CWE-862

NVD Record · More on Ubuntu / Debian packages

3 Nov 2021 Google Chromium V8 Memory corruption CVE-2021-37975 8.8

Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): google chrome 94.0.4606.71
CISA due date: 17 Nov 2021
Weakness: CWE-416

NVD Record · More on Ubuntu / Debian packages

On Hacker News

Chrome in-the-wild bug analysis: CVE-2021-37975 1 comment

3 Nov 2021 Google Chromium Portals Memory corruption CVE-2021-37973 9.6

Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): google chrome 94.0.4606.61
CISA due date: 17 Nov 2021
Weakness: CWE-416

NVD Record · More on Ubuntu / Debian packages

3 Nov 2021 Microsoft Windows Security flaw CVE-2021-36955 7.8 Ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.230, microsoft windows server 2019 10.0.17763.2183, microsoft windows server 2016 10.0.14393.4651, microsoft windows server 2004 10.0.19041.1237, microsoft windows server 20h2 10.0.19042.1237 and 7 older
CISA due date: 17 Nov 2021

NVD Record

3 Nov 2021 Microsoft Windows Security flaw CVE-2021-36948 7.8

Windows Update Medic Service Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.2114, microsoft windows server 2004 10.0.19041.1165, microsoft windows server 20h2 10.0.19042.1165, microsoft windows 10 2004 10.0.19041.1165, microsoft windows 10 1909 10.0.18363.1734 and 3 older
CISA due date: 17 Nov 2021

NVD Record

3 Nov 2021 Microsoft Windows Security flaw CVE-2021-36942 7.5 Ransomware

Windows LSA Spoofing Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.2114, microsoft windows server 2016 10.0.14393.4583, microsoft windows server 2004 10.0.19041.1165, microsoft windows server 20h2 10.0.19042.1165
CISA due date: 17 Nov 2021
Weakness: CWE-749

NVD Record

3 Nov 2021 Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Input validation flaw CVE-2021-36742 7.8

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

What to do: Apply updates per vendor instructions.
CISA due date: 17 Nov 2021
Weakness: CWE-20

NVD Record

3 Nov 2021 Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Malicious file upload CVE-2021-36741 8.8

An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability.

What to do: Apply updates per vendor instructions.
CISA due date: 17 Nov 2021
Weakness: CWE-22

NVD Record

3 Nov 2021 ForgeRock Access Management (AM) Remote code execution CVE-2021-35464 9.8 Ransomware

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server. The vulnerability exists due to the usage of Sun ONE Application Framework (JATO) found in versions of Java 8 or earlier

What to do: Apply updates per vendor instructions.
Fixed in (NVD): forgerock openam 14.6.3, forgerock access management 6.5.4
CISA due date: 17 Nov 2021
Weakness: CWE-502

NVD Record

3 Nov 2021 Realtek AP-Router SDK Memory corruption CVE-2021-35395 9.8

Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exists: one based on Go-Ahead named webs and another based on Boa named boa. Both of them are affected by these vulnerabilities. Specifically, these binaries are vulnerable to the following issues: - stack buffer overflow in formRebootCheck due to unsafe copy of submit-url parameter - stack buffer overflow in formWsc due to unsafe copy of submit-url parameter - stack buffer overflow in formWlanMultipleAP due to unsafe copy of submit-url parameter - stack buffer overflow in formWlSiteSurvey due to unsafe copy of ifname parameter - stack buffer overflow in formStaticDHCP due to unsafe copy of hostname parameter - stack buffer overflow in formWsc due to unsafe copy of 'peerPin' parameter - arbitrary command execution in formSysCmd via the sysCmd parameter - arbitrary command injection in formWsc via the 'peerPin' parameter Exploitability of identified issues will differ based on what the end vendor/manufacturer did with the Realtek SDK webserver. Some vendors use it as-is, others add their own authentication implementation, some kept all the features from the server, some remove some of them, some inserted their own set of features. However, given that Realtek SDK implementation is full of insecure calls and that developers tends to re-use those examples in their custom code, any binary based on Realtek SDK webserver will probably contains its own set of issues on top of the Realtek ones (if kept). Successful exploitation of these issues allows remote attackers to gain arbitrary code execution on the device.

What to do: Apply updates per vendor instructions.
CISA due date: 17 Nov 2021
Weakness: CWE-20, CWE-122

NVD Record

3 Nov 2021 SolarWinds Serv-U Memory corruption CVE-2021-35211 10.0 Ransomware

Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): solarwinds serv-u 15.2.3
CISA due date: 17 Nov 2021
Weakness: CWE-787

NVD Record

3 Nov 2021 Microsoft Windows Privilege escalation CVE-2021-34527 8.8 Ransomware

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDATE July 7, 2021: The security update for Windows Server 2012, Windows Server 2016 and Windows 10, Version 1607 have been released. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability. In addition to installing the updates, in order to secure your system, you must confirm that the following registry settings are set to 0 (zero) or are not defined (Note: These registry keys do not exist by default, and therefore are already at the secure setting.), also that your Group Policy setting are correct (see FAQ): HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint NoWarningNoElevationOnInstall = 0 (DWORD) or not defined (default setting) UpdatePromptSettings = 0 (DWORD) or not defined (default setting) Having NoWarningNoElevationOnInstall set to 1 makes your system vulnerable by design. UPDATE July 6, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability. See also KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates. Note that the security updates released on and after July 6, 2021 contain protections for CVE-2021-1675 and the additional remote code execution exploit in the Windows Print Spooler service known as “PrintNightmare”, documented in CVE-2021-34527.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2022 10.0.20348.230, microsoft windows server 2019 10.0.17763.2029, microsoft windows server 2016 10.0.14393.4470, microsoft windows server 20h2 10.0.19042.1083, microsoft windows 11 22h2 10.0.22621.674 and 7 older
CISA due date: 3 May 2022
Weakness: CWE-269

NVD Record

On Hacker News

Ask HN: Who is at risk from the PrintNightmare RCE? 2 comments Windows Zero Day - PrintNightmare – CVE-2021-34527 Windows Print Spooler Remote Code Execution Vulnerability

3 Nov 2021 Microsoft Exchange Server Authentication bypass CVE-2021-34523 9.0 Ransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
CISA due date: 17 Nov 2021
Weakness: CWE-287

NVD Record

3 Nov 2021 Microsoft Exchange Server Server-side request forgery CVE-2021-34473 9.1 Ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

What to do: Apply updates per vendor instructions.
CISA due date: 17 Nov 2021
Weakness: CWE-918

NVD Record

3 Nov 2021 Microsoft Windows Memory corruption CVE-2021-34448 6.8

Scripting Engine Memory Corruption Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.2061, microsoft windows server 2016 10.0.14393.4530, microsoft windows 10 2004 10.0.19041.1110, microsoft windows 10 1909 10.0.18363.1679, microsoft windows 10 1809 10.0.17763.2061 and 4 older
CISA due date: 17 Nov 2021
Weakness: CWE-787

NVD Record

3 Nov 2021 Microsoft Windows Memory corruption CVE-2021-33771 7.8

Windows Kernel Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.2061, microsoft windows server 2016 10.0.14393.4530, microsoft windows server 2004 10.0.19041.1110, microsoft windows server 20h2 10.0.19042.1110, microsoft windows 10 2004 10.0.19041.1110 and 6 older
CISA due date: 17 Nov 2021
Weakness: CWE-119

NVD Record

3 Nov 2021 Microsoft Windows Memory corruption CVE-2021-33742 7.5

Windows MSHTML Platform Remote Code Execution Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.1999, microsoft windows server 2016 10.0.14393.4467, microsoft windows 10 2004 10.0.19041.1052, microsoft windows 10 1909 10.0.18363.1621, microsoft windows 10 1809 10.0.17763.1999 and 4 older
CISA due date: 17 Nov 2021
Weakness: CWE-787, CWE-823

NVD Record

3 Nov 2021 Microsoft Windows Security flaw CVE-2021-33739 8.4

Microsoft DWM Core Library Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2004 10.0.19041.1052, microsoft windows server 20h2 10.0.19042.1052, microsoft windows 10 2004 10.0.19041.1052, microsoft windows 10 1909 10.0.18363.1621, microsoft windows 10 21h1 10.0.19043.1052 and 1 older
CISA due date: 17 Nov 2021

NVD Record

3 Nov 2021 Microsoft Windows Memory corruption CVE-2021-31979 7.8

Windows Kernel Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.2061, microsoft windows server 2016 10.0.14393.4530, microsoft windows server 2004 10.0.19041.1110, microsoft windows server 20h2 10.0.19042.1110, microsoft windows 10 2004 10.0.19041.1110 and 6 older
CISA due date: 17 Nov 2021
Weakness: CWE-119

NVD Record

3 Nov 2021 Microsoft Windows Memory corruption CVE-2021-31956 7.8

Windows NTFS Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.1999, microsoft windows server 2016 10.0.14393.4467, microsoft windows server 2004 10.0.19041.1052, microsoft windows server 20h2 10.0.19042.1052, microsoft windows 10 2004 10.0.19041.1052 and 6 older
CISA due date: 17 Nov 2021
Weakness: CWE-191, CWE-787

NVD Record

On Hacker News

CVE-2021-31956 Exploiting the Windows Kernel (NTFS with WNF) – Part 1

3 Nov 2021 Microsoft Windows Information disclosure CVE-2021-31955 5.5

Windows Kernel Information Disclosure Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.1999, microsoft windows server 2004 10.0.19041.1052, microsoft windows server 20h2 10.0.19042.1052, microsoft windows 10 2004 10.0.19041.1052, microsoft windows 10 1909 10.0.18363.1621 and 3 older
CISA due date: 17 Nov 2021
Weakness: CWE-497

NVD Record

3 Nov 2021 Tenda AC11 Router Memory corruption CVE-2021-31755 9.8

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request.

What to do: Apply updates per vendor instructions.
CISA due date: 17 Nov 2021
Weakness: CWE-787

NVD Record

3 Nov 2021 Microsoft Exchange Server Malicious file upload CVE-2021-31207 6.6 Ransomware

Microsoft Exchange Server Security Feature Bypass Vulnerability

What to do: Apply updates per vendor instructions.
CISA due date: 17 Nov 2021
Weakness: CWE-20, CWE-434

NVD Record

3 Nov 2021 Microsoft Enhanced Cryptographic Provider Security flaw CVE-2021-31201 5.2

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.1999, microsoft windows server 2016 10.0.14393.4467, microsoft windows server 2004 10.0.19041.1052, microsoft windows server 20h2 10.0.19042.1052, microsoft windows 10 2004 10.0.19041.1052 and 6 older
CISA due date: 17 Nov 2021

NVD Record

3 Nov 2021 Microsoft Enhanced Cryptographic Provider Security flaw CVE-2021-31199 5.2

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
Fixed in (NVD): microsoft windows server 2019 10.0.17763.1999, microsoft windows server 2016 10.0.14393.4467, microsoft windows server 2004 10.0.19041.1052, microsoft windows server 20h2 10.0.19042.1052, microsoft windows 10 2004 10.0.19041.1052 and 6 older
CISA due date: 17 Nov 2021

NVD Record

3 Nov 2021 Apple iOS, iPadOS, and macOS Memory corruption CVE-2021-30869 7.8

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): apple ipados 14.4, apple iphone os 14.4, apple iphone os 12.5.5, apple macos 11.2
CISA due date: 17 Nov 2021
Weakness: CWE-843

NVD Record

3 Nov 2021 Apple Multiple Products Memory corruption CVE-2021-30860 7.8

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): freedesktop poppler 22.09.0, apple ipados 14.8, apple iphone os 14.8, apple iphone os 12.5.5, apple macos 11.6 and 3 older
CISA due date: 17 Nov 2021
Weakness: CWE-20, CWE-190

NVD Record

On Hacker News

Apple macOS/iOS vulnerability CVE-2021-30860 2 comments Analysis of CVE-2021-30860

3 Nov 2021 Apple iOS, iPadOS, and macOS Memory corruption CVE-2021-30858 8.8

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): apple ipados 14.8, apple iphone os 14.8, apple iphone os 12.5.5, apple macos 11.6
CISA due date: 17 Nov 2021
Weakness: CWE-416

NVD Record · More on Ubuntu / Debian packages

3 Nov 2021 Apple Multiple Products Memory corruption CVE-2021-30807 7.8

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): apple ipados 14.7.1, apple iphone os 14.7.1, apple macos 11.5.1, apple watchos 7.6.1
CISA due date: 17 Nov 2021
Weakness: CWE-787

NVD Record

3 Nov 2021 Apple iOS Memory corruption CVE-2021-30762 8.8

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

What to do: Apply updates per vendor instructions.
Fixed in (NVD): apple iphone os 12.5.4
CISA due date: 17 Nov 2021
Weakness: CWE-416

NVD Record

3 Nov 2021 Apple iOS Memory corruption CVE-2021-30761 8.8

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

What to do: Apply updates per vendor instructions.
Fixed in (NVD): apple iphone os 12.5.4
CISA due date: 17 Nov 2021
Weakness: CWE-787

NVD Record

3 Nov 2021 Apple macOS Access control flaw CVE-2021-30713 7.8

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..

What to do: Apply updates per vendor instructions.
Fixed in (NVD): apple macos 11.4
CISA due date: 17 Nov 2021
Weakness: CWE-862

NVD Record

3 Nov 2021 Apple iOS Memory corruption CVE-2021-30666 8.8

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

What to do: Apply updates per vendor instructions.
Fixed in (NVD): apple iphone os 12.5.3
CISA due date: 17 Nov 2021
Weakness: CWE-119

NVD Record

3 Nov 2021 Apple Multiple Products Memory corruption CVE-2021-30665 8.8

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

What to do: Apply updates per vendor instructions.
Fixed in (NVD): apple tvos 14.6, apple ipados 14.5.1, apple iphone os 14.5.1, apple iphone os 12.5.3, apple macos 11.3.1 and 1 older
CISA due date: 17 Nov 2021
Weakness: CWE-787

NVD Record

3 Nov 2021 Apple Multiple Products Memory corruption CVE-2021-30663 8.8

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): apple tvos 14.6, apple ipados 14.5.1, apple iphone os 14.5.1, apple safari 14.1.1, apple iphone os 12.5.3 and 1 older
CISA due date: 17 Nov 2021
Weakness: CWE-20, CWE-190

NVD Record

3 Nov 2021 Apple Multiple Products Memory corruption CVE-2021-30661 8.8

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

What to do: Apply updates per vendor instructions.
Fixed in (NVD): apple ipados 14.5, apple iphone os 14.5, apple tvos 14.5, apple safari 14.1, apple iphone os 12.5.3 and 2 older
CISA due date: 17 Nov 2021
Weakness: CWE-416

NVD Record

3 Nov 2021 Apple macOS Access control flaw CVE-2021-30657 5.5

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..

What to do: Apply updates per vendor instructions.
Fixed in (NVD): apple macos 11.3
CISA due date: 17 Nov 2021
Weakness: CWE-862

NVD Record

3 Nov 2021 Google Chromium Indexed DB API Memory corruption CVE-2021-30633 9.6

Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): google chrome 93.0.4577.82
CISA due date: 17 Nov 2021
Weakness: CWE-416

NVD Record

3 Nov 2021 Google Chromium V8 Memory corruption CVE-2021-30632 8.8

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): google chrome 93.0.4577.82
CISA due date: 17 Nov 2021
Weakness: CWE-122

NVD Record

3 Nov 2021 Google Chromium V8 Memory corruption CVE-2021-30563 8.8

Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): google chrome 91.0.4472.164
CISA due date: 17 Nov 2021
Weakness: CWE-122, CWE-843

NVD Record

3 Nov 2021 Google Chromium WebGL Memory corruption CVE-2021-30554 8.8

Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): google chrome 91.0.4472.114
CISA due date: 17 Nov 2021
Weakness: CWE-416

NVD Record

3 Nov 2021 Google Chromium V8 Memory corruption CVE-2021-30551 8.8

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): google chrome 91.0.4472.101
CISA due date: 17 Nov 2021
Weakness: CWE-122, CWE-843

NVD Record

3 Nov 2021 Kaseya Virtual System/Server Administrator (VSA) Security flaw CVE-2021-30116 9.8 Ransomware

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client for Windows and installs it, the file KaseyaD.ini is generated (C:\Program Files (x86)\Kaseya\XXXXXXXXXX\KaseyaD.ini) which contains an Agent_Guid and AgentPassword This Agent_Guid and AgentPassword can be used to log in on dl.asp (https://x.x.x.x/dl.asp?un=840997037507813&pw=113cc622839a4077a84837485ced6b93e440bf66d44057713cb2f95e503a06d9) This request authenticates the client and returns a sessionId cookie that can be used in subsequent attacks to bypass authentication. Security issues discovered --- * Unauthenticated download page leaks credentials * Credentials of agent software can be used to obtain a sessionId (cookie) that can be used for services not intended for use by agents * dl.asp accepts credentials via a GET request * Access to KaseyaD.ini gives an attacker access to sufficient information to penetrate the Kaseya installation and its clients. Impact --- Via the page /dl.asp enough information can be obtained to give an attacker a sessionId that can be used to execute further (semi-authenticated) attacks against the system.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): kaseya vsa server 9.5.7a, kaseya vsa agent 9.5.0.24
CISA due date: 17 Nov 2021
Weakness: CWE-522

NVD Record

3 Nov 2021 Arm Mali Graphics Processing Unit (GPU) Memory corruption CVE-2021-28664 8.8

The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): arm midgard gpu kernel driver r31p0, arm bifrost gpu kernel driver r29p0, arm valhall gpu kernel driver r29p0
CISA due date: 17 Nov 2021
Weakness: CWE-787

NVD Record

3 Nov 2021 Arm Mali Graphics Processing Unit (GPU) Memory corruption CVE-2021-28663 8.8

The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0.

What to do: Apply updates per vendor instructions.
Fixed in (NVD): arm midgard gpu kernel driver r31p0, arm bifrost gpu kernel driver r29p0, arm valhall gpu kernel driver r29p0
CISA due date: 17 Nov 2021
Weakness: CWE-416

NVD Record

3 Nov 2021 Adobe Acrobat and Reader Memory corruption CVE-2021-28550 8.8

Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

What to do: Apply updates per vendor instructions.
CISA due date: 17 Nov 2021
Weakness: CWE-416

NVD Record

3 Nov 2021 Microsoft Win32k Memory corruption CVE-2021-28310 7.8

Win32k Elevation of Privilege Vulnerability

What to do: Apply updates per vendor instructions.
CISA due date: 17 Nov 2021
Weakness: CWE-787

NVD Record

On Hacker News

Zero-day vulnerability in Desktop Window Manager

The CISA KEV Catalogue, Searchable

About the KEV Catalogue