Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2021-42321 Microsoft Exchange Server Remote Code Execution Vulnerability HIGH 8.8 91.74% cvelistv5 2021-11-17
cve-2021-42292 Microsoft Excel Security Feature Bypass HIGH 7.8 43.00% cvelistv5 2021-11-17
cve-2021-42287 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability CRITICAL N/A 77.17% cvelistv5 2022-04-11
cve-2021-42278 Microsoft Active Directory Domain Services Privilege Escalation Vulnerability HIGH 7.5 73.30% cvelistv5 2022-04-11
cve-2021-42258 BQE BillQuick Web Suite SQL Injection Vulnerability CRITICAL 9.8 74.43% cvelistv5 2021-11-03
cve-2021-42237 Sitecore XP Remote Command Execution Vulnerability CRITICAL N/A 97.57% cvelistv5 2022-03-25
cve-2021-42013 httpd: path traversal and remote code execution (incomplete fix of CVE-2021-41773) HIGH 8.1 99.96% cvelistv5 2026-08-04
cve-2021-4191 CVE-2021-4191 MEDIUM 5.3 80.00% cvelistv5
cve-2021-41773 httpd: path traversal and file disclosure vulnerability HIGH 7.5 99.99% cvelistv5 2026-08-04
cve-2021-41653 CVE-2021-41653 HIGH N/A 76.05% cvelistv5
cve-2021-41649 CVE-2021-41649 HIGH N/A 51.77% cvelistv5
cve-2021-41569 SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro. Users can escape the context of the configured user-controllable variable and append additional functions native to the macro but not included as variables within the library. This includes a function that retrieves files from the host OS. HIGH 7.5 7.97% cvelistv5 2026-06-17
cve-2021-41379 Microsoft Windows Installer Privilege Escalation Vulnerability CRITICAL N/A 19.45% cvelistv5 2022-03-03
cve-2021-41357 Microsoft Win32k Privilege Escalation Vulnerability HIGH N/A 1.58% cvelistv5 2022-04-25
cve-2021-41293 CVE-2021-41293 HIGH N/A 19.87% cvelistv5
cve-2021-41277 Metabase GeoJSON API Local File Inclusion Vulnerability CRITICAL 10.0 97.18% cvelistv5 2024-11-12
cve-2021-41266 CVE-2021-41266 HIGH 8.6 48.41% cvelistv5
cve-2021-4102 chromium-browser: Use after free in V8 HIGH 8.8 7.84% cvelistv5 2025-11-21
cve-2021-40875 CVE-2021-40875 HIGH N/A 48.42% cvelistv5
cve-2021-40870 Aviatrix Controller Unrestricted Upload of File CRITICAL 9.8 93.02% cvelistv5 2022-01-18
cve-2021-40822 CVE-2021-40822 HIGH N/A 19.26% cvelistv5
cve-2021-40655 D-Link DIR-605 Router Information Disclosure Vulnerability HIGH 7.5 86.66% cvelistv5 2024-05-16
cve-2021-40539 Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability CRITICAL 9.8 98.96% cvelistv5 2021-11-03
cve-2021-40450 Microsoft Win32k Privilege Escalation Vulnerability HIGH N/A 1.58% cvelistv5 2022-04-25
cve-2021-40449 Microsoft Windows Win32k Privilege Escalation Vulnerability HIGH 7.8 74.13% cvelistv5 2021-11-17
cve-2021-40444 Microsoft MSHTML Remote Code Execution Vulnerability CRITICAL N/A 97.45% cvelistv5 2021-11-03
cve-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:" CRITICAL 9.0 100.00% cvelistv5 2026-08-08
cve-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability CRITICAL 9.1 47.63% cvelistv5 2024-12-18
cve-2021-4034 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability CRITICAL N/A 94.34% cvelistv5 2022-06-27
cve-2021-39935 GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability MEDIUM 6.8 35.65% cvelistv5 2026-02-03