Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalog NVD 48-hour CVEs Kythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 793–816 of 1,769

CISA KEVAdded Jul 26, 2023

CVE-2023-38606: Apple Multiple Products Kernel Unspecified Vulnerability

Apple · Multiple Products

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state.

Federal remediation due Aug 16, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 25, 2023

CVE-2023-35078: Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM)

Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API paths can access personally identifiable information (PII) such as names, phone numbers, and…

Federal remediation due Aug 15, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 20, 2023

CVE-2023-38205: Adobe ColdFusion Improper Access Control Vulnerability

Adobe · ColdFusion

Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.

Federal remediation due Aug 10, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 20, 2023

CVE-2023-29298: Adobe ColdFusion Improper Access Control Vulnerability

Adobe · ColdFusion

Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.

Federal remediation due Aug 10, 2023Ransomware use: Not confirmed by CISA

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 19, 2023

CVE-2023-3519: Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Citrix · NetScaler ADC and NetScaler Gateway

Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.

Federal remediation due Aug 9, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 17, 2023

CVE-2023-36884: Microsoft Windows Search Remote Code Execution Vulnerability

Microsoft · Windows

Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.

Federal remediation due Aug 29, 2023Ransomware use: Known

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 13, 2023

CVE-2023-37450: Apple Multiple Products WebKit Code Execution Vulnerability

Apple · Multiple Products

Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which…

Federal remediation due Aug 3, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 13, 2023

CVE-2022-29303: SolarView Compact Command Injection Vulnerability

SolarView · Compact

SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server.

Federal remediation due Aug 3, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 11, 2023

CVE-2023-36874: Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.

Federal remediation due Aug 1, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 11, 2023

CVE-2023-35311: Microsoft Outlook Security Feature Bypass Vulnerability

Microsoft · Outlook

Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

Federal remediation due Aug 1, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 11, 2023

CVE-2023-32049: Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windows

Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File – Security Warning prompt.

Federal remediation due Aug 1, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 11, 2023

CVE-2023-32046: Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.

Federal remediation due Aug 1, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 11, 2023

CVE-2022-31199: Netwrix Auditor Insecure Object Deserialization Vulnerability

Netwrix · Auditor

Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthenticated, remote attacker to execute code as the NT AUTHORITY\SYSTEM user. Successful exploitation requires that the attacker is able to reach port 9004/TCP, which is commonly…

Federal remediation due Aug 1, 2023Ransomware use: Known

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jul 7, 2023

CVE-2021-29256: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm · Mali Graphics Processing Unit (GPU)

Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that may allow a non-privileged user to gain root privilege and/or disclose information.

Federal remediation due Jul 28, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jun 29, 2023

CVE-2021-25489: Samsung Mobile Devices Improper Input Validation Vulnerability

Samsung · Mobile Devices

Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.

Federal remediation due Jul 20, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

View in the CISA KEV catalog →

CISA KEVAdded Jun 29, 2023

CVE-2021-25487: Samsung Mobile Devices Out-of-Bounds Read Vulnerability

Samsung · Mobile Devices

Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.

Federal remediation due Jul 20, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

View in the CISA KEV catalog →

CISA KEVAdded Jun 29, 2023

CVE-2021-25395: Samsung Mobile Devices Race Condition Vulnerability

Samsung · Mobile Devices

Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.

Federal remediation due Jul 20, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

View in the CISA KEV catalog →

CISA KEVAdded Jun 29, 2023

CVE-2021-25394: Samsung Mobile Devices Race Condition Vulnerability

Samsung · Mobile Devices

Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.

Federal remediation due Jul 20, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

View in the CISA KEV catalog →

CISA KEVAdded Jun 29, 2023

CVE-2021-25372: Samsung Mobile Devices Improper Boundary Check Vulnerability

Samsung · Mobile Devices

Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.

Federal remediation due Jul 20, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

View in the CISA KEV catalog →

CISA KEVAdded Jun 29, 2023

CVE-2021-25371: Samsung Mobile Devices Unspecified Vulnerability

Samsung · Mobile Devices

Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.

Federal remediation due Jul 20, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

View in the CISA KEV catalog →

CISA KEVAdded Jun 29, 2023

CVE-2019-20500: D-Link DWL-2600AP Access Point Command Injection Vulnerability

D-Link · DWL-2600AP Access Point

D-Link DWL-2600AP access point contains an authenticated command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter.

Federal remediation due Jul 20, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jun 29, 2023

CVE-2019-17621: D-Link DIR-859 Router Command Execution Vulnerability

D-Link · DIR-859 Router

D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the…

Federal remediation due Jul 20, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

View in the CISA KEV catalog →

CISA KEVAdded Jun 23, 2023

CVE-2023-32439: Apple Multiple Products WebKit Type Confusion Vulnerability

Apple · Multiple Products

Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products…

Federal remediation due Jul 14, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Jun 23, 2023

CVE-2023-32435: Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple · Multiple Products

Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products…

Federal remediation due Jul 14, 2023Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 6, 2026, 7:44 PM GMT+0000Site snapshot: Nov 8, 2026, 7:55 AM GMT+0000Showing 24 of 1,769Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 937–960 of 1,041