| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2021-33739
Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulner… |
Microsoft · Windows | Nov 3, 2021 | Nov 17, 2021 | 6.6% | — |
| CVE-2021-33742
Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability |
Microsoft · Windows | Nov 3, 2021 | Nov 17, 2021 | 59.4% | — |
| CVE-2021-33771
Microsoft Windows Kernel Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 3, 2021 | Nov 17, 2021 | 10.2% | — |
| CVE-2021-34448
Microsoft Windows Scripting Engine Memory Corruption Vulnerability |
Microsoft · Windows | Nov 3, 2021 | Nov 17, 2021 | 40.1% | — |
| CVE-2021-34473 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-34523 Ransomware
Microsoft Exchange Server Privilege Escalation Vulnerability |
Microsoft · Exchange Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-34527 Ransomware
Microsoft Windows Print Spooler Remote Code Execution Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 99.8% | — |
| CVE-2021-35211 Ransomware
SolarWinds Serv-U Remote Code Execution Vulnerability |
SolarWinds · Serv-U | Nov 3, 2021 | Nov 17, 2021 | 91.2% | — |
| CVE-2021-35395
Realtek AP-Router SDK Buffer Overflow Vulnerability |
Realtek · AP-Router SDK | Nov 3, 2021 | Nov 17, 2021 | 98.1% | — |
| CVE-2021-35464 Ransomware
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability |
ForgeRock · Access Management (AM) | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-36741
Trend Micro Multiple Products Improper Input Validation Vulnerability |
Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security | Nov 3, 2021 | Nov 17, 2021 | 5.0% | — |
| CVE-2021-36742
Trend Micro Multiple Products Improper Input Validation Vulnerability |
Trend Micro · Apex One, Apex One as a Service, and Worry-Free Business Security | Nov 3, 2021 | Nov 17, 2021 | 1.5% | — |
| CVE-2021-36942 Ransomware
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability |
Microsoft · Windows | Nov 3, 2021 | Nov 17, 2021 | 66.0% | — |
| CVE-2021-36948
Microsoft Windows Update Medic Service Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 3, 2021 | Nov 17, 2021 | 23.3% | — |
| CVE-2021-36955 Ransomware
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vul… |
Microsoft · Windows | Nov 3, 2021 | Nov 17, 2021 | 4.1% | — |
| CVE-2021-37973
Google Chromium Portals Use-After-Free Vulnerability |
Google · Chromium Portals | Nov 3, 2021 | Nov 17, 2021 | 11.7% | — |
| CVE-2021-37975
Google Chromium V8 Use-After-Free Vulnerability |
Google · Chromium V8 | Nov 3, 2021 | Nov 17, 2021 | 34.9% | — |
| CVE-2021-37976
Google Chromium Information Disclosure Vulnerability |
Google · Chromium | Nov 3, 2021 | Nov 17, 2021 | 19.9% | — |
| CVE-2021-38000
Google Chromium Intents Improper Input Validation Vulnerability |
Google · Chromium Intents | Nov 3, 2021 | Nov 17, 2021 | 4.9% | — |
| CVE-2021-38003
Google Chromium V8 Memory Corruption Vulnerability |
Google · Chromium V8 | Nov 3, 2021 | Nov 17, 2021 | 38.6% | — |
| CVE-2021-38645
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerabili… |
Microsoft · Open Management Infrastructure (OMI) | Nov 3, 2021 | Nov 17, 2021 | 2.7% | — |
| CVE-2021-38647 Ransomware
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerabil… |
Microsoft · Open Management Infrastructure (OMI) | Nov 3, 2021 | Nov 17, 2021 | 99.9% | — |
| CVE-2021-38648
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerabili… |
Microsoft · Open Management Infrastructure (OMI) | Nov 3, 2021 | Nov 17, 2021 | 11.4% | — |
| CVE-2021-38649
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerabili… |
Microsoft · Open Management Infrastructure (OMI) | Nov 3, 2021 | Nov 17, 2021 | 2.9% | — |
| CVE-2021-40444 Ransomware
Microsoft MSHTML Remote Code Execution Vulnerability |
Microsoft · MSHTML | Nov 3, 2021 | Nov 17, 2021 | 97.8% | — |
| CVE-2021-40539 Ransomware
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability |
Zoho · ManageEngine | Nov 3, 2021 | Nov 17, 2021 | 99.0% | — |
| CVE-2021-41773 Ransomware
Apache HTTP Server Path Traversal Vulnerability |
Apache · HTTP Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-42013 Ransomware
Apache HTTP Server Path Traversal Vulnerability |
Apache · HTTP Server | Nov 3, 2021 | Nov 17, 2021 | 100.0% | — |
| CVE-2021-42258 Ransomware
BQE BillQuick Web Suite SQL Injection Vulnerability |
BQE · BillQuick Web Suite | Nov 3, 2021 | Nov 17, 2021 | 75.2% | — |
| CVE-2014-125110 | not in KEV | — | — | 0.6% | 1 last Oct 15 |
| CVE-2015-1000013 | not in KEV | — | — | 2.1% | 1 last Oct 15 |
| CVE-2016-6210 | not in KEV | — | — | 88.9% | 1 last Nov 9 |
| CVE-2020-1337 | not in KEV | — | — | 14.2% | — |
| CVE-2021-21974 | not in KEV | — | — | — | — |
| CVE-2023-45208 | not in KEV | — | — | 1.7% | 1 last Sep 25 |
| CVE-2024-21626 | not in KEV | — | — | 18.9% | — |
| CVE-2025-23120 | not in KEV | — | — | — | — |
| CVE-2025-53771 | not in KEV | — | — | 99.9% | — |
| CVE-2025-6264 | not in KEV | — | — | 1.0% | — |
| CVE-2025-64393 | not in KEV | — | — | 5.2% | 1 last Oct 12 |
| CVE-2026-0325 | not in KEV | — | — | 0.4% | — |
| CVE-2026-0326 | not in KEV | — | — | 0.4% | — |
| CVE-2026-0327 | not in KEV | — | — | 0.4% | — |
| CVE-2026-0328 | not in KEV | — | — | 0.6% | — |
| CVE-2026-0329 | not in KEV | — | — | 0.4% | — |
| CVE-2026-0330 | not in KEV | — | — | 0.5% | — |
| CVE-2026-0331 | not in KEV | — | — | 0.6% | — |
| CVE-2026-100202 | not in KEV | — | — | 1.1% | — |
| CVE-2026-100209 | not in KEV | — | — | 0.9% | — |
| CVE-2026-100210 | not in KEV | — | — | 0.9% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.