CVE-2021-36948
Added Nov 3, 2021
Microsoft Windows Update Medic Service Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Unknown
CISA catalog
Known exploited vulnerabilities
Search the catalog CISA maintains for vulnerabilities with evidence of exploitation in the wild. Package links appear only when OSV supplies an exact package mapping.
1,716 catalog entriesReleased Sep 18, 2026
Catalog results
1,716 vulnerabilities
Page 35 of 35
CVE-2021-36955
Added Nov 3, 2021
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Microsoft · Windows
Ransomware: Known
CVE-2021-37973
Added Nov 3, 2021
Google Chromium Portals Use-After-Free Vulnerability
Google · Chromium Portals
Ransomware: Unknown
CVE-2021-37975
Added Nov 3, 2021
Google Chromium V8 Use-After-Free Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2021-37976
Added Nov 3, 2021
Google Chromium Information Disclosure Vulnerability
Google · Chromium
Ransomware: Unknown
CVE-2021-38000
Added Nov 3, 2021
Google Chromium Intents Improper Input Validation Vulnerability
Google · Chromium Intents
Ransomware: Unknown
CVE-2021-38003
Added Nov 3, 2021
Google Chromium V8 Memory Corruption Vulnerability
Google · Chromium V8
Ransomware: Unknown
CVE-2021-38645
Added Nov 3, 2021
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
Microsoft · Open Management Infrastructure (OMI)
Ransomware: Unknown
CVE-2021-38647
Added Nov 3, 2021
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Microsoft · Open Management Infrastructure (OMI)
Ransomware: Known
CVE-2021-38648
Added Nov 3, 2021
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
Microsoft · Open Management Infrastructure (OMI)
Ransomware: Unknown
CVE-2021-38649
Added Nov 3, 2021
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability
Microsoft · Open Management Infrastructure (OMI)
Ransomware: Unknown
CVE-2021-40444
Added Nov 3, 2021
Microsoft MSHTML Remote Code Execution Vulnerability
Microsoft · MSHTML
Ransomware: Known
CVE-2021-40539
Added Nov 3, 2021
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
Zoho · ManageEngine
Ransomware: Known
CVE-2021-41773
Added Nov 3, 2021
Apache HTTP Server Path Traversal Vulnerability
Apache · HTTP Server
Ransomware: Known
CVE-2021-42013
Added Nov 3, 2021
Apache HTTP Server Path Traversal Vulnerability
Apache · HTTP Server
Ransomware: Known
CVE-2021-42258
Added Nov 3, 2021
BQE BillQuick Web Suite SQL Injection Vulnerability
BQE · BillQuick Web Suite
Ransomware: Known
Source: CISA Known Exploited Vulnerabilities Catalog. The due date in each record applies to U.S. federal civilian executive branch agencies under CISA policy.