KEV 2019

Rails Ruby on Rails — Rails Ruby on Rails Path Traversal Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

Sitecore CMS and Experience Platform (XP) — Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

Reolink Multiple IP Cameras — Reolink Multiple IP Cameras OS Command Injection Vulnerability

D-Link DWL-2600AP Access Point — D-Link DWL-2600AP Access Point Command Injection Vulnerability

Apple macOS — Apple macOS Use-After-Free Vulnerability

Microsoft Windows — Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

Cisco RV Series Routers — Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

Apple Multiple Products — Apple Multiple Products Use-After-Free Vulnerability

Oracle Solaris — Oracle Solaris Privilege Escalation Vulnerability

Mozilla Firefox and Thunderbird — Mozilla Firefox and Thunderbird Type Confusion Vulnerability

Google Chrome WebAudio — Google Chrome WebAudio Use-After-Free Vulnerability

WebKitGTK WebKitGTK — WebKitGTK Memory Corruption Vulnerability

Apple Multiple Products — Apple Multiple Products Type Confusion Vulnerability

Meta Platforms WhatsApp — WhatsApp Cross-Site Scripting Vulnerability

Microsoft Windows — Microsoft Windows Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerability

Apple iOS — Apple iOS Memory Corruption Vulnerability

Microsoft Graphics Device Interface (GDI) — Microsoft GDI Remote Code Execution Vulnerability

Citrix SD-WAN and NetScaler — Citrix SD-WAN and NetScaler Command Injection Vulnerability

Microsoft Excel — Microsoft Excel Remote Code Execution Vulnerability

PHP FastCGI Process Manager (FPM) — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

Drupal Core — Drupal Core Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft Task Scheduler — Microsoft Task Scheduler Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

SonicWall SMA100 — SonicWall SMA100 Directory Traversal Vulnerability

Oracle BI Publisher (Formerly XML Publisher) — Oracle BI Publisher Unauthorized Access Vulnerability

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers — Cisco Small Business Routers Improper Input Validation Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Type Confusion Vulnerability

Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Linux Kernel — Linux Kernel Improper Privilege Management Vulnerability

Apache Solr — Apache Solr DataImportHandler Code Injection Vulnerability

Microsoft MSHTML — Microsoft MSHTML Remote Code Execution Vulnerability

Nagios Nagios XI — Nagios XI Remote Code Execution Vulnerability

Mozilla Firefox and Thunderbird — Mozilla Firefox And Thunderbird Type Confusion Vulnerability

Atlassian Confluence Server and Data Center — Atlassian Confluence Server and Data Center Path Traversal Vulnerability

ThinkPHP ThinkPHP — ThinkPHP Remote Code Execution Vulnerability

Apache HTTP Server — Apache HTTP Server Privilege Escalation Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability

Microsoft Windows — Microsoft Windows Privilege Escalation Vulnerability

Docker Desktop Community Edition — Docker Desktop Community Edition Privilege Escalation Vulnerability

Android Android Kernel — Android Kernel Use-After-Free Vulnerability

Citrix StoreFront Server — Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Cisco Small Business RV320 and RV325 Routers — Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

Apache Solr — Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability

Trend Micro OfficeScan — Trend Micro OfficeScan Directory Traversal Vulnerability

Netis WF2419 Devices — Netis WF2419 Devices Remote Code Execution Vulnerability

TVT NVMS-1000 — TVT NVMS-1000 Directory Traversal Vulnerability

Apple iOS and macOS — Apple iOS and macOS Group Facetime Vulnerability

SonicWall SMA100 — SonicWall SMA100 SQL Injection Vulnerability

Ivanti Pulse Connect Secure and Pulse Policy Secure — Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

TeamViewer Desktop — TeamViewer Desktop Bypass Remote Login Vulnerability