Kythos AI vulnerability intelligence

Zero-Day Exploits / Vulnerabilities

A server-rendered, source-attributed view of confirmed CISA KEV entries and all NVD CVEs published in the rolling 48-hour UTC window.

Important distinction: CISA KEV means exploitation has been observed; it does not mean every entry was a zero-day. An NVD publication in the past 48 hours does not mean exploitation has occurred. Source records describe third-party products and do not identify Kythos AI customers, contracts, affiliations, or work history.

CISA KEV catalog NVD 48-hour CVEs Kythos AI RSS feed

Confirmed exploitation intelligence

Zero-Day Exploits / Vulnerabilities

Complete CISA Known Exploited Vulnerabilities catalog, ordered by the date CISA added each entry. Every result is known to be exploited; entries are not necessarily zero-days.

Current snapshot

Entries 1,273–1,296 of 1,769

CISA KEVAdded Mar 15, 2022

CVE-2019-1069: Microsoft Task Scheduler Privilege Escalation Vulnerability

Microsoft · Task Scheduler

A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.

Federal remediation due Apr 5, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 15, 2022

CVE-2019-1064: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Federal remediation due Apr 5, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 15, 2022

CVE-2019-0841: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Federal remediation due Apr 5, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 15, 2022

CVE-2019-0543: Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Federal remediation due Apr 5, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 15, 2022

CVE-2018-8120: Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

Federal remediation due Apr 5, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 15, 2022

CVE-2017-0101: Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.

Federal remediation due Apr 5, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 15, 2022

CVE-2016-3309: Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

Federal remediation due Apr 5, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 15, 2022

CVE-2015-2546: Microsoft Win32k Memory Corruption Vulnerability

Microsoft · Win32k

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.

Federal remediation due Apr 5, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 7, 2022

CVE-2022-26486: Mozilla Firefox Use-After-Free Vulnerability

Mozilla · Firefox

Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.

Federal remediation due Mar 21, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 7, 2022

CVE-2022-26485: Mozilla Firefox Use-After-Free Vulnerability

Mozilla · Firefox

Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.

Federal remediation due Mar 21, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 7, 2022

CVE-2021-21973: VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

VMware · vCenter Server and Cloud Foundation

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.

Federal remediation due Mar 21, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 7, 2022

CVE-2020-8218: Pulse Connect Secure Code Injection Vulnerability

Pulse Secure · Pulse Connect Secure

A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

Federal remediation due Sep 7, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 7, 2022

CVE-2019-11581: Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

Atlassian · Jira Server and Data Center

Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.

Federal remediation due Sep 7, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 7, 2022

CVE-2017-6077: NETGEAR DGN2200 Remote Code Execution Vulnerability

NETGEAR · Wireless Router DGN2200

NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.

Federal remediation due Sep 7, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 7, 2022

CVE-2016-6277: NETGEAR Multiple Routers Remote Code Execution Vulnerability

NETGEAR · Multiple Routers

NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.

Federal remediation due Sep 7, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 7, 2022

CVE-2013-0631: Adobe ColdFusion Information Disclosure Vulnerability

Adobe · ColdFusion

Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.

Federal remediation due Sep 7, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 7, 2022

CVE-2013-0629: Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusion

Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.

Federal remediation due Sep 7, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 7, 2022

CVE-2013-0625: Adobe ColdFusion Authentication Bypass Vulnerability

Adobe · ColdFusion

Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.

Federal remediation due Sep 7, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 7, 2022

CVE-2009-3960: Adobe BlazeDS Information Disclosure Vulnerability

Adobe · BlazeDS

Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.

Federal remediation due Sep 7, 2022Ransomware use: Known

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2022-20708: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or…

Federal remediation due Mar 17, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2022-20703: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

Federal remediation due Mar 17, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2022-20701: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

Federal remediation due Mar 17, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2022-20700: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

Federal remediation due Mar 17, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

CISA KEVAdded Mar 3, 2022

CVE-2022-20699: Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers

Federal remediation due Mar 17, 2022Ransomware use: Not confirmed by CISA

Required action: Apply updates per vendor instructions.

View in the CISA KEV catalog →

Source: Official CISA KEV JSONCatalog released Nov 6, 2026, 7:44 PM GMT+0000Site snapshot: Nov 8, 2026, 6:53 AM GMT+0000Showing 24 of 1,769Source text normalized: network addresses and restricted context omittedRefresh interval: 30 minutes

Complete fixed-window snapshot

CVEs — Past 48 Hours

All unique CVEs returned by NVD for the displayed UTC publication window. The snapshot is accepted only when its normalized unique-item count exactly equals the API totalResults value.

Current snapshot

Entries 961–984 of 1,041