Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2021-11-03
cve-2019-0752 Microsoft Internet Explorer Type Confusion Vulnerability HIGH 7.5 N/A cvelistv5 2022-02-15
cve-2019-0708 Microsoft Remote Desktop Services Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2021-11-03
cve-2019-0703 Microsoft Windows SMB Information Disclosure Vulnerability MEDIUM 6.5 N/A cvelistv5 2022-05-23
cve-2019-0676 Microsoft Internet Explorer Information Disclosure Vulnerability HIGH N/A N/A cvelistv5 2022-05-23
cve-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerability CRITICAL 9.8 N/A cvelistv5 2021-11-03
cve-2019-0543 Microsoft Windows Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-03-15
cve-2019-0541 Microsoft MSHTML Remote Code Execution Vulnerability HIGH 8.8 N/A cvelistv5 2021-11-03
cve-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability CRITICAL 9.8 N/A cvelistv5 2024-09-30
cve-2019-0211 SUSE CVE CVE-2019-0211 HIGH 8.8 N/A cvelistv5 2026-09-03
cve-2019-0193 Apache Solr DataImportHandler Code Injection Vulnerability HIGH N/A N/A cvelistv5 2021-12-10
cve-2018-9995 TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login, which run re-branded versions of the original TBK DVR4104 and DVR4216 series, allow remote attackers to bypass authentication via a "Cookie: uid=admin" header, as demonstrated by a device.rsp?opt=user&cmd=list request that provides credentials within JSON data in a response. CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2018-9866 A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System (GMS) virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier. CRITICAL 9.8 N/A cvelistv5 2026-06-17
cve-2018-9276 PRTG Network Monitor: PRTG Network Monitor OS Command Injection Vulnerability HIGH 7.2 N/A cvelistv5 2025-11-21
cve-2018-9205 Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path. HIGH 7.5 N/A cvelistv5 2026-06-17
cve-2018-8653 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability HIGH N/A N/A cvelistv5 2021-11-03
cve-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability HIGH 8.4 N/A cvelistv5 2025-03-03
cve-2018-8611 Microsoft Windows Kernel Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-05-24
cve-2018-8589 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-05-23
cve-2018-8581 Microsoft Exchange Server Privilege Escalation Vulnerability HIGH 7.4 N/A cvelistv5 2022-03-03
cve-2018-8453 Microsoft Win32k Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-01-21
cve-2018-8440 Microsoft Windows Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-03-28
cve-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability HIGH 8.8 N/A cvelistv5 2022-03-25
cve-2018-8406 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-03-28
cve-2018-8405 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability HIGH 7.8 N/A cvelistv5 2022-03-28
cve-2018-8373 Microsoft Scripting Engine Memory Corruption Vulnerability HIGH 7.5 N/A cvelistv5 2022-03-25
cve-2018-8298 ChakraCore Scripting Engine Type Confusion Vulnerability HIGH N/A N/A cvelistv5 2022-03-03
cve-2018-8174 Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability CRITICAL N/A N/A cvelistv5 2022-02-15
cve-2018-8120 Microsoft Win32k Privilege Escalation Vulnerability CRITICAL N/A N/A cvelistv5 2022-03-15
cve-2018-8006 activemq: Cross-site scripting (XSS) via QueueFilter parameter MEDIUM 6.1 N/A cvelistv5 2025-11-21