Known Exploited Vulnerabilities (KEV)
ndaal KEV
| ID | Title | Severity | CVSS | EPSS | Source | Updated |
|---|---|---|---|---|---|---|
| cve-2021-39793 | Google Pixel Out-of-Bounds Write Vulnerability | HIGH | N/A | 0.69% | cvelistv5 | 2022-04-11 |
| cve-2021-39509 | CVE-2021-39509 | HIGH | N/A | 5.10% | cvelistv5 | |
| cve-2021-39316 | CVE-2021-39316 | HIGH | 7.5 | 65.76% | cvelistv5 | |
| cve-2021-39312 | CVE-2021-39312 | HIGH | 7.5 | 77.94% | cvelistv5 | |
| cve-2021-39226 | grafana: Snapshot authentication bypass | HIGH | 7.3 | 99.93% | cvelistv5 | 2026-08-14 |
| cve-2021-39211 | CVE-2021-39211 | MEDIUM | 5.3 | 4.70% | cvelistv5 | |
| cve-2021-39144 | xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.* | HIGH | 8.5 | 98.12% | cvelistv5 | 2026-08-08 |
| cve-2021-38649 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | HIGH | N/A | 2.89% | cvelistv5 | 2021-11-03 |
| cve-2021-38648 | Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | HIGH | N/A | 11.42% | cvelistv5 | 2021-11-03 |
| cve-2021-38647 | Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | CRITICAL | N/A | 99.93% | cvelistv5 | 2021-11-03 |
| cve-2021-38646 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | HIGH | 7.8 | 7.99% | cvelistv5 | 2022-03-28 |
| cve-2021-38645 | SUSE CVE CVE-2021-38645 | UNKNOWN | N/A | 2.73% | cvelistv5 | 2025-07-08 |
| cve-2021-38406 | Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | HIGH | 7.8 | 76.43% | cvelistv5 | 2022-08-25 |
| cve-2021-38163 | SAP NetWeaver Unrestricted File Upload Vulnerability | CRITICAL | 9.9 | 36.02% | cvelistv5 | 2022-06-09 |
| cve-2021-38154 | CVE-2021-38154 | HIGH | N/A | 4.00% | cvelistv5 | |
| cve-2021-38003 | Google Chromium V8 Memory Corruption Vulnerability | HIGH | N/A | 38.57% | cvelistv5 | 2021-11-03 |
| cve-2021-38000 | Google Chromium Intents Improper Input Validation Vulnerability | HIGH | N/A | 4.95% | cvelistv5 | 2021-11-03 |
| cve-2021-37976 | chromium-browser: Information leak in core | HIGH | 8.8 | 19.90% | cvelistv5 | 2025-11-21 |
| cve-2021-37975 | Google Chromium V8 Use-After-Free Vulnerability | HIGH | N/A | 34.89% | cvelistv5 | 2021-11-03 |
| cve-2021-37973 | Google Chromium Portals Use-After-Free Vulnerability | HIGH | N/A | 11.73% | cvelistv5 | 2021-11-03 |
| cve-2021-37580 | CVE-2021-37580 | HIGH | N/A | 41.85% | cvelistv5 | |
| cve-2021-37415 | Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability | CRITICAL | 9.8 | 99.83% | cvelistv5 | 2021-12-01 |
| cve-2021-37291 | CVE-2021-37291 | HIGH | N/A | 6.54% | cvelistv5 | |
| cve-2021-3708 | CVE-2021-3708 | HIGH | N/A | 24.56% | cvelistv5 | |
| cve-2021-36955 | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | HIGH | 7.8 | 4.04% | cvelistv5 | 2021-11-03 |
| cve-2021-36948 | Microsoft Windows Update Medic Service Privilege Escalation Vulnerability | HIGH | N/A | 23.27% | cvelistv5 | 2021-11-03 |
| cve-2021-36942 | Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | HIGH | 7.5 | 66.02% | cvelistv5 | 2021-11-03 |
| cve-2021-36934 | Microsoft Windows SAM Local Privilege Escalation Vulnerability | HIGH | 7.8 | 67.25% | cvelistv5 | 2022-02-10 |
| cve-2021-36888 | CVE-2021-36888 | CRITICAL | 9.8 | 6.69% | cvelistv5 | |
| cve-2021-36742 | Trend Micro Multiple Products Improper Input Validation Vulnerability | HIGH | 7.8 | 1.48% | cvelistv5 | 2021-11-03 |