Exploited vulnerabilities
CVEs published in the last 120 days, plus everything on CISA’s known-exploited list. Scores, exploit likelihood and exploitation status in one place.
| Score | CVE | Affected | EPSS | Published |
|---|---|---|---|---|
| 7.8 high | CVE-2021-36948 KEV | Microsoft Windows 10 Version 1809 Windows Update Medic Service Elevation of Privilege Vulnerability | 23% | 12 Aug 2021 |
| 7.5 high | CVE-2021-36942 KEV | Microsoft Windows Server 2008 R2 Service Pack 1 Windows LSA Spoofing Vulnerability | 66% | 12 Aug 2021 |
| 7.8 high | CVE-2021-34486 KEV | Microsoft Windows 10 Version 1809 Windows Event Tracing Elevation of Privilege Vulnerability | 9.3% | 12 Aug 2021 |
| 7.8 high | CVE-2021-34484 KEV | Microsoft Windows 10 Version 1507 Windows User Profile Service Elevation of Privilege Vulnerability | 22% | 12 Aug 2021 |
| 9.8 critical | CVE-2021-20028 KEV | SonicWall SRA/SMA100 Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier | 30% | 4 Aug 2021 |
| 8.8 high | CVE-2021-30563 KEV | Google Chrome Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 9.0% | 3 Aug 2021 |
| 5.3 medium | CVE-2021-26085 KEV | Atlassian Confluence Server Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3. | >99% | 3 Aug 2021 |
| 7.8 high | CVE-2021-36742 KEV | Trend Micro Apex One A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. | 1.5% | 29 Jul 2021 |
| 8.8 high | CVE-2021-36741 KEV | Trend Micro Apex One An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability. | 5.0% | 29 Jul 2021 |
| 9.8 critical | CVE-2021-35464 KEV | forgerock access management ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server. The vulnerability exists due to the usage of Sun ONE Application Framework (JATO) found in versions of Java 8 or earlier | >99% | 22 Jul 2021 |
| 7.8 high | CVE-2021-36934 KEV | Microsoft Windows 10 Version 1809 An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. An attacker must have the ability to execute code on a victim system to exploit this vulnerability. After installing this security update, you must manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. Simply installing this security update will not fully mitigate this vulnerability. See KB5005357- Delete Volume Shadow Copies. | 67% | 22 Jul 2021 |
| 6.8 medium | CVE-2021-34448 KEV | Microsoft Windows 10 Version 1507 Scripting Engine Memory Corruption Vulnerability | 40% | 16 Jul 2021 |
| 10.0 critical | CVE-2021-35211 KEV | SolarWinds Serv-U Managed File Transfer Server and Serv-U Secured FTP Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability. | 91% | 14 Jul 2021 |
| 9.0 critical | CVE-2021-34523 KEV | Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server Elevation of Privilege Vulnerability | >99% | 14 Jul 2021 |
| 9.1 critical | CVE-2021-34473 KEV | Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server Remote Code Execution Vulnerability | >99% | 14 Jul 2021 |
| 7.8 high | CVE-2021-33771 KEV | Microsoft Windows 10 Version 1507 Windows Kernel Elevation of Privilege Vulnerability | 10% | 14 Jul 2021 |
| 7.3 high | CVE-2021-33766 KEV | Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server Information Disclosure Vulnerability | 98% | 14 Jul 2021 |
| 7.8 high | CVE-2021-31979 KEV | Microsoft Windows 10 Version 1507 Windows Kernel Elevation of Privilege Vulnerability | 4.5% | 14 Jul 2021 |
| 7.2 high | CVE-2021-31196 KEV | Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server Remote Code Execution Vulnerability | 54% | 14 Jul 2021 |
| 9.8 critical | CVE-2021-30116 KEV | kaseya vsa agent Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client for Windows and installs it, the file KaseyaD.ini is generated (C:\Program Files (x86)\Kaseya\XXXXXXXXXX\KaseyaD.ini) which contains an Agent_Guid and AgentPassword This Agent_Guid and AgentPassword can be used to log in on dl.asp (https://x.x.x.x/dl.asp?un=840997037507813&pw=113cc622839a4077a84837485ced6b93e440bf66d44057713cb2f95e503a06d9) This request authenticates the client and returns a sessionId cookie that can be used in subsequent attacks to bypass authentication. Security issues discovered --- * Unauthenticated download page leaks credentials * Credentials of agent software can be used to obtain a sessionId (cookie) that can be used for services not intended for use by agents * dl.asp accepts credentials via a GET request * Access to KaseyaD.ini gives an attacker access to sufficient information to penetrate the Kaseya installation and its clients. Impact --- Via the page /dl.asp enough information can be obtained to give an attacker a sessionId that can be used to execute further (semi-authenticated) attacks against the system. | 86% | 9 Jul 2021 |