CISA's list that day
17 November 2021
On CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in Perl Exiftool, Microsoft Windows, Microsoft Office and 1 other product. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2021-22204Remote Code Execution | Perl Exiftool | Patch this weekMetasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2021-40449Win32k Privilege Escalation | Microsoft Windows | Patch this weekRansomware use; Metasploit module; EPSS 0.74 | 0.74 | ||
| CVE-2021-42321Server Remote Code Execution | Microsoft Exchange | Patch this weekRansomware use; Metasploit module; EPSS 0.92 | 0.92 | ||
| CVE-2021-42292Excel Security Feature Bypass | Microsoft Office | Patch soon | 0.43 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.