KEV 2021

Apple Multiple Products — Apple Multiple Products Integer Overflow or Wraparound Vulnerability

Omnissa Workspace One UEM — Omnissa Workspace ONE Server-Side Request Forgery

OpenPLC ScadaBR — OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

Linux Kernel — Linux Kernel Heap Out-of-Bounds Write Vulnerability

Microsoft Windows — Microsoft Windows Privilege Escalation Vulnerability

Grafana Labs Grafana — Grafana Path Traversal Vulnerability

Adminer Adminer — Adminer Server-Side Request Forgery Vulnerability

Acclaim Systems USAHERDS — Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

Reolink RLC-410W IP Camera — Reolink RLC-410W IP Camera OS Command Injection Vulnerability

DrayTek VigorConnect — Draytek VigorConnect Path Traversal Vulnerability

DrayTek VigorConnect — Draytek VigorConnect Path Traversal Vulnerability

Microsoft Exchange Server — Microsoft Exchange Server Information Disclosure Vulnerability

D-Link DIR-605 Router — D-Link DIR-605 Router Information Disclosure Vulnerability

Arm Mali Graphics Processing Unit (GPU) — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Samsung Mobile Devices — Samsung Mobile Devices Out-of-Bounds Read Vulnerability

Red Hat Polkit — Red Hat Polkit Incorrect Authorization Vulnerability

Veritas Backup Exec Agent — Veritas Backup Exec Agent Command Execution Vulnerability

Veritas Backup Exec Agent — Veritas Backup Exec Agent Improper Authentication Vulnerability

Veritas Backup Exec Agent — Veritas Backup Exec Agent File Access Vulnerability

XStream XStream — XStream Remote Code Execution Vulnerability

Apple iOS, iPadOS, and macOS — Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Ubuntu Linux Kernel — overlayfs File Capabilities Bypass in User Namespaces for Local Privilege Escalation

Delta Electronics DOPSoft 2 — Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability

Apple iOS, macOS, watchOS — Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

Apple iOS and iPadOS — Apple iOS and iPadOS Buffer Overflow Vulnerability

Polkit pkexec 'PwnKit' — Out-of-Bounds Write in Argument Handling Permits Root Escalation on Every Major Linux Distribution

Apple Multiple Products — Apple Multiple Products Type Confusion Vulnerability

Android Kernel — Android Kernel Use-After-Free Vulnerability

Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Google Pixel — Google Pixel Out-of-Bounds Write Vulnerability

Sudo 'Baron Samedit' — Heap-Based Buffer Overflow via Off-by-One Permits Root Escalation Without Any sudoers Entry

Microsoft Active Directory — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft Active Directory — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Dell dbutil Driver — Dell dbutil Driver Insufficient Access Control Vulnerability

Microsoft Windows — Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Event Tracing Privilege Escalation Vulnerability

Microsoft Office — Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows SAM Local Privilege Escalation Vulnerability

Nagios Nagios XI — Nagios XI OS Command Injection

Nagios Nagios XI — Nagios XI OS Command Injection

Nagios Nagios XI — Nagios XI OS Command Injection

October CMS October CMS — October CMS Improper Authentication

VMware vRealize Operations Manager API — VMware Server Side Request Forgery in vRealize Operations Manager API

Microsoft Exchange Server — Microsoft Exchange Server Information Disclosure

Npm package System Information Library for Node.JS — System Information Library for Node.JS Command Injection

Google Chromium V8 — Google Chromium V8 Use-After-Free Vulnerability

Microsoft Windows — Microsoft Windows AppX Installer Spoofing Vulnerability

Microsoft Exchange — Microsoft Exchange Server Remote Code Execution Vulnerability

Adobe Acrobat and Reader — Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability

Google Chromium V8 — Google Chromium V8 Heap Buffer Overflow Vulnerability

Google Chromium — Google Chromium Race Condition Vulnerability

Google Chromium Blink — Google Chromium Blink Use-After-Free Vulnerability

Google Chromium Blink — Google Chromium Blink Use-After-Free Vulnerability

Google Chromium V8 — Google Chromium V8 Improper Input Validation Vulnerability

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

Ivanti Pulse Connect Secure — Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

Ivanti Pulse Connect Secure — Ivanti Pulse Connect Secure Command Injection Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer — Microsoft Internet Explorer Remote Code Execution Vulnerability

Adobe Acrobat and Reader — Adobe Acrobat and Reader Use-After-Free Vulnerability

Arm Mali Graphics Processing Unit (GPU) — Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability

Arm Mali Graphics Processing Unit (GPU) — Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

Google Chromium WebGL — Google Chromium WebGL Use-After-Free Vulnerability

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 — Google Chromium V8 Out-of-Bounds Write Vulnerability

Apple Multiple Products — Apple Multiple Products WebKit Storage Use-After-Free Vulnerability

Apple Multiple Products — Apple Multiple Products WebKit Integer Overflow Vulnerability

Apple Multiple Products — Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple iOS — Apple iOS WebKit Buffer Overflow Vulnerability

Apple iOS — Apple iOS WebKit Memory Corruption Vulnerability

Apple iOS — Apple iOS WebKit Use-After-Free Vulnerability

Apple iOS, iPadOS, and macOS — Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

Microsoft Windows 'PrintNightmare' — Print Spooler Driver Installation Allows Authenticated Remote Code Execution as SYSTEM

Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security — Trend Micro Multiple Products Improper Input Validation Vulnerability

Google Chromium V8 — Google Chromium V8 Use-After-Free Vulnerability

Google Chromium V8 — Google Chromium V8 Memory Corruption Vulnerability

Microsoft MSHTML — Microsoft MSHTML Remote Code Execution Vulnerability

Qualcomm Multiple Chipsets — Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Microsoft Windows — Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

McAfee McAfee Total Protection (MTP) — McAfee Total Protection (MTP) Improper Privilege Management Vulnerability

Microsoft Windows — Microsoft Windows Win32k Privilege Escalation Vulnerability

Microsoft Office — Microsoft Excel Security Feature Bypass

Microsoft Defender — Microsoft Defender Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Exchange Server — Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server — Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server — Microsoft Exchange Server Remote Code Execution Vulnerability

Accellion FTA — Accellion FTA OS Command Injection Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability

Apple macOS — Apple macOS Unspecified Vulnerability

Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerability

Apple Multiple Products — Apple Multiple Products Integer Overflow Vulnerability

Apple iOS, iPadOS, and macOS — Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

Microsoft Windows — Microsoft Windows NTFS Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Kernel Privilege Escalation Vulnerability

Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security — Trend Micro Multiple Products Improper Input Validation Vulnerability

Microsoft Windows — Microsoft Windows Update Medic Service Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft Open Management Infrastructure (OMI) — Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

Microsoft Open Management Infrastructure (OMI) — Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability

Microsoft Office — Microsoft Office Remote Code Execution Vulnerability

Micro Focus Micro Focus Access Manager — Micro Focus Access Manager Information Leakage Vulnerability

Microsoft Windows — Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

SonicWall SonicWall Email Security — SonicWall Email Security Unrestricted Upload of File Vulnerability

Ivanti Pulse Connect Secure — Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

Apple Multiple Products — Apple Multiple Products Race Condition Vulnerability

Microsoft Open Management Infrastructure (OMI) — Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability