Cybersecurity Alerts

Actively Exploited Vulnerabilities

The vulnerabilities listed below are sourced from the CISA Known Exploited Vulnerabilities catalog and represent security flaws that are actively being exploited in the wild. This list is updated daily. If you are unsure whether your systems are affected, contact us and we will help you assess your exposure.

CVE-2021-36942Active Ransomware Campaign
Microsoft | Windows
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-36742
Trend Micro | Apex One, Apex One as a Service, and Worry-Free Business Security
Trend Micro Multiple Products Improper Input Validation Vulnerability
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-36741
Trend Micro | Apex One, Apex One as a Service, and Worry-Free Business Security
Trend Micro Multiple Products Improper Input Validation Vulnerability
Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows a remote attacker to upload files.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-35464Active Ransomware Campaign
ForgeRock | Access Management (AM)
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the current user (unless ForgeRock AM is running as root user, which the vendor does not recommend).
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-35395
Realtek | AP-Router SDK
Realtek AP-Router SDK Buffer Overflow Vulnerability
Realtek AP-Router SDK HTTP web server boa contains a buffer overflow vulnerability due to unsafe copies of some overly long parameters submitted in the form that lead to denial-of-service (DoS).
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-35211Active Ransomware Campaign
SolarWinds | Serv-U
SolarWinds Serv-U Remote Code Execution Vulnerability
SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-34527Active Ransomware Campaign
Microsoft | Windows
Microsoft Windows Print Spooler Remote Code Execution Vulnerability
Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.
Added 2021-11-03
Remediation Deadline 2022-05-03
CVE-2021-34523Active Ransomware Campaign
Microsoft | Exchange Server
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-34473Active Ransomware Campaign
Microsoft | Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-34448
Microsoft | Windows
Microsoft Windows Scripting Engine Memory Corruption Vulnerability
Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-33771
Microsoft | Windows
Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-33742
Microsoft | Windows
Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-33739
Microsoft | Windows
Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-31979
Microsoft | Windows
Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-31956
Microsoft | Windows
Microsoft Windows NTFS Privilege Escalation Vulnerability
Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-31955
Microsoft | Windows
Microsoft Windows Kernel Information Disclosure Vulnerability
Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-31755
Tenda | AC11 Router
Tenda AC11 Router Stack Buffer Overflow Vulnerability
Tenda AC11 devices contain a stack buffer overflow vulnerability in /goform/setmac which allows attackers to execute code via a crafted post request.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-31207Active Ransomware Campaign
Microsoft | Exchange Server
Microsoft Exchange Server Security Feature Bypass Vulnerability
Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-31201
Microsoft | Enhanced Cryptographic Provider
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-31199
Microsoft | Enhanced Cryptographic Provider
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability
Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-30869
Apple | iOS, iPadOS, and macOS
Apple iOS, iPadOS, and macOS Type Confusion Vulnerability
Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-30860
Apple | Multiple Products
Apple Multiple Products Integer Overflow Vulnerability
Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-30858
Apple | iOS, iPadOS, and macOS
Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-30807
Apple | Multiple Products
Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execute code with kernel privileges.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-30762
Apple | iOS
Apple iOS WebKit Use-After-Free Vulnerability
Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-30761
Apple | iOS
Apple iOS WebKit Memory Corruption Vulnerability
Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-30713
Apple | macOS
Apple macOS Unspecified Vulnerability
Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-30666
Apple | iOS
Apple iOS WebKit Buffer Overflow Vulnerability
Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-30665
Apple | Multiple Products
Apple Multiple Products WebKit Memory Corruption Vulnerability
Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Added 2021-11-03
Remediation Deadline 2021-11-17
CVE-2021-30663
Apple | Multiple Products
Apple Multiple Products WebKit Integer Overflow Vulnerability
Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Added 2021-11-03
Remediation Deadline 2021-11-17