| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2021-22506
Micro Focus Access Manager Information Leakage Vulnerability |
Micro Focus · Micro Focus Access Manager | Nov 3, 2021 | Nov 17, 2021 | 25.7% | — |
| CVE-2021-22893 Ransomware
Ivanti Pulse Connect Secure Use-After-Free Vulnerability |
Ivanti · Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | 47.5% | — |
| CVE-2021-22894
Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability |
Ivanti · Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | 41.3% | — |
| CVE-2021-22899
Ivanti Pulse Connect Secure Command Injection Vulnerability |
Ivanti · Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | 22.9% | — |
| CVE-2021-22900
Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability |
Ivanti · Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | 14.1% | — |
| CVE-2021-22986 Ransomware
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution… |
F5 · BIG-IP and BIG-IQ Centralized Management | Nov 3, 2021 | Nov 17, 2021 | 99.9% | — |
| CVE-2021-23874
McAfee Total Protection (MTP) Improper Privilege Management Vulnerability |
McAfee · McAfee Total Protection (MTP) | Nov 3, 2021 | Nov 17, 2021 | 1.1% | — |
| CVE-2021-26084 Ransomware
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (O… |
Atlassian · Confluence Server and Data Center | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-26411 Ransomware
Microsoft Internet Explorer Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Nov 3, 2021 | Nov 17, 2021 | 81.7% | — |
| CVE-2021-26855 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2021-26857 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | May 3, 2022 | 95.8% | — |
| CVE-2021-26858 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | May 3, 2022 | 93.7% | — |
| CVE-2021-27059
Microsoft Office Remote Code Execution Vulnerability |
Microsoft · Office | Nov 3, 2021 | Nov 17, 2021 | 6.1% | — |
| CVE-2021-27065 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2021-27085
Microsoft Internet Explorer Remote Code Execution Vulnerability |
Microsoft · Internet Explorer | Nov 3, 2021 | Nov 17, 2021 | 5.4% | — |
| CVE-2021-27101 Ransomware
Accellion FTA SQL Injection Vulnerability |
Accellion · FTA | Nov 3, 2021 | Nov 17, 2021 | 4.3% | — |
| CVE-2021-27102 Ransomware
Accellion FTA OS Command Injection Vulnerability |
Accellion · FTA | Nov 3, 2021 | Nov 17, 2021 | 2.7% | — |
| CVE-2021-27103 Ransomware
Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability |
Accellion · FTA | Nov 3, 2021 | Nov 17, 2021 | 8.2% | — |
| CVE-2021-27104 Ransomware
Accellion FTA OS Command Injection Vulnerability |
Accellion · FTA | Nov 3, 2021 | Nov 17, 2021 | 46.2% | — |
| CVE-2021-27561
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability |
Yealink · Device Management | Nov 3, 2021 | Nov 17, 2021 | 83.6% | — |
| CVE-2021-27562
Arm Trusted Firmware Out-of-Bounds Write Vulnerability |
Arm · Trusted Firmware | Nov 3, 2021 | Nov 17, 2021 | 3.1% | — |
| CVE-2021-28310
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Nov 3, 2021 | Nov 17, 2021 | 8.4% | — |
| CVE-2021-28550
Adobe Acrobat and Reader Use-After-Free Vulnerability |
Adobe · Acrobat and Reader | Nov 3, 2021 | Nov 17, 2021 | 52.1% | — |
| CVE-2021-28663
Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability |
Arm · Mali Graphics Processing Unit (GPU) | Nov 3, 2021 | Nov 17, 2021 | 12.1% | — |
| CVE-2021-28664
Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability |
Arm · Mali Graphics Processing Unit (GPU) | Nov 3, 2021 | Nov 17, 2021 | 5.5% | — |
| CVE-2021-30116 Ransomware
Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnera… |
Kaseya · Virtual System/Server Administrator (VSA) | Nov 3, 2021 | Nov 17, 2021 | 85.7% | — |
| CVE-2021-30551
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Nov 3, 2021 | Nov 17, 2021 | 64.7% | — |
| CVE-2021-30554
Google Chromium WebGL Use-After-Free Vulnerability |
Google · Chromium WebGL | Nov 3, 2021 | Nov 17, 2021 | 7.4% | — |
| CVE-2021-30563
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Nov 3, 2021 | Nov 17, 2021 | 9.5% | — |
| CVE-2021-30632
Google Chromium V8 Out-of-Bounds Write Vulnerability |
Google · Chromium V8 | Nov 3, 2021 | Nov 17, 2021 | 63.2% | — |
| CVE-2021-30633
Google Chromium Indexed DB API Use-After-Free Vulnerability |
Google · Chromium Indexed DB API | Nov 3, 2021 | Nov 17, 2021 | 33.2% | — |
| CVE-2021-30657
Apple macOS Unspecified Vulnerability |
Apple · macOS | Nov 3, 2021 | Nov 17, 2021 | 68.5% | — |
| CVE-2021-30661
Apple Multiple Products WebKit Storage Use-After-Free Vulnerability |
Apple · Multiple Products | Nov 3, 2021 | Nov 17, 2021 | 4.5% | — |
| CVE-2021-30663
Apple Multiple Products WebKit Integer Overflow Vulnerability |
Apple · Multiple Products | Nov 3, 2021 | Nov 17, 2021 | 3.5% | — |
| CVE-2021-30665
Apple Multiple Products WebKit Memory Corruption Vulnerability |
Apple · Multiple Products | Nov 3, 2021 | Nov 17, 2021 | 3.7% | — |
| CVE-2021-30666
Apple iOS WebKit Buffer Overflow Vulnerability |
Apple · iOS | Nov 3, 2021 | Nov 17, 2021 | 3.0% | — |
| CVE-2021-30713
Apple macOS Unspecified Vulnerability |
Apple · macOS | Nov 3, 2021 | Nov 17, 2021 | 7.0% | — |
| CVE-2021-30761
Apple iOS WebKit Memory Corruption Vulnerability |
Apple · iOS | Nov 3, 2021 | Nov 17, 2021 | 10.5% | — |
| CVE-2021-30762
Apple iOS WebKit Use-After-Free Vulnerability |
Apple · iOS | Nov 3, 2021 | Nov 17, 2021 | 11.0% | — |
| CVE-2021-30807
Apple Multiple Products Memory Corruption Vulnerability |
Apple · Multiple Products | Nov 3, 2021 | Nov 17, 2021 | 28.8% | — |
| CVE-2021-30858
Apple iOS, iPadOS, macOS Use-After-Free Vulnerability |
Apple · iOS, iPadOS, and macOS | Nov 3, 2021 | Nov 17, 2021 | 13.4% | — |
| CVE-2021-30860
Apple Multiple Products Integer Overflow Vulnerability |
Apple · Multiple Products | Nov 3, 2021 | Nov 17, 2021 | 76.0% | — |
| CVE-2021-30869
Apple iOS, iPadOS, and macOS Type Confusion Vulnerability |
Apple · iOS, iPadOS, and macOS | Nov 3, 2021 | Nov 17, 2021 | 4.2% | — |
| CVE-2021-31199
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability |
Microsoft · Enhanced Cryptographic Provider | Nov 3, 2021 | Nov 17, 2021 | 3.0% | — |
| CVE-2021-31201
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability |
Microsoft · Enhanced Cryptographic Provider | Nov 3, 2021 | Nov 17, 2021 | 2.6% | — |
| CVE-2021-31207 Ransomware
Microsoft Exchange Server Security Feature Bypass Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | Nov 17, 2021 | 99.8% | — |
| CVE-2021-31755
Tenda AC11 Router Stack Buffer Overflow Vulnerability |
Tenda · AC11 Router | Nov 3, 2021 | Nov 17, 2021 | 86.5% | — |
| CVE-2021-31955
Microsoft Windows Kernel Information Disclosure Vulnerability |
Microsoft · Windows | Nov 3, 2021 | Nov 17, 2021 | 81.1% | — |
| CVE-2021-31956
Microsoft Windows NTFS Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 3, 2021 | Nov 17, 2021 | 22.3% | — |
| CVE-2021-31979
Microsoft Windows Kernel Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 3, 2021 | Nov 17, 2021 | 4.5% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.