CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2022-21971 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2022-21971)
Vulnerability in Microsoft Windows (CVE-2022-21971). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-26923 KEV |
[KEV] Vulnerability in Microsoft Active Directory (CVE-2022-26923)
Vulnerability in Microsoft Active Directory (CVE-2022-26923). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-2856 KEV |
[KEV] Vulnerability in Google Chromium Intents (CVE-2022-2856)
Vulnerability in Google Chromium Intents (CVE-2022-2856). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-32893 KEV |
[KEV] Vulnerability in Apple iOS and macOS (CVE-2022-32893)
Vulnerability in Apple iOS and macOS (CVE-2022-32893). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-32894 KEV |
[KEV] Vulnerability in Apple iOS and macOS (CVE-2022-32894)
Vulnerability in Apple iOS and macOS (CVE-2022-32894). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-22536 KEV |
[KEV] Vulnerability in SAP Multiple Products (CVE-2022-22536)
Vulnerability in SAP Multiple Products (CVE-2022-22536). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-37042 KEV |
[KEV] Vulnerability in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2022-37042)
Vulnerability in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2022-37042). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-27925 KEV |
[KEV] Path Traversal in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2022-27925)
Path traversal in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2022-27925). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-30333 KEV |
[KEV] Path Traversal in RARLAB UnRAR (CVE-2022-30333)
Path traversal in RARLAB UnRAR (CVE-2022-30333). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-34713 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2022-34713)
Vulnerability in Microsoft Windows (CVE-2022-34713). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-27924 KEV |
[KEV] Vulnerability in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2022-27924)
Vulnerability in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2022-27924). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-26138 KEV |
[KEV] Vulnerability in Atlassian Confluence (CVE-2022-26138)
Vulnerability in Atlassian Confluence (CVE-2022-26138). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-22047 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2022-22047)
Vulnerability in Microsoft Windows (CVE-2022-22047). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-26925 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2022-26925)
Vulnerability in Microsoft Windows (CVE-2022-26925). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-4344 KEV |
[KEV] Buffer Overflow in Apple Multiple Products (CVE-2018-4344)
Vulnerability in Apple Multiple Products (CVE-2018-4344). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2019-8605 KEV |
[KEV] Use-After-Free in Apple Multiple Products (CVE-2019-8605)
Vulnerability in Apple Multiple Products (CVE-2019-8605). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-9907 KEV |
[KEV] Out-of-Bounds Write in Apple Multiple Products (CVE-2020-9907)
Out-of-bounds write in Apple Multiple Products (CVE-2020-9907). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-3837 KEV |
[KEV] Out-of-Bounds Write in Apple Multiple Products (CVE-2020-3837)
Out-of-bounds write in Apple Multiple Products (CVE-2020-3837). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30983 KEV |
[KEV] Buffer Overflow in Apple iOS and iPadOS (CVE-2021-30983)
Vulnerability in Apple iOS and iPadOS (CVE-2021-30983). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-4034 KEV |
[KEV] Out-of-Bounds Write in Red Hat Polkit (CVE-2021-4034)
Out-of-bounds write in Red Hat Polkit (CVE-2021-4034). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-30533 KEV |
[KEV] Authorization Flaw in Google Chromium PopupBlocker (CVE-2021-30533)
Vulnerability in Google Chromium PopupBlocker (CVE-2021-30533). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-29499 KEV |
[KEV] Vulnerability in Mitel MiVoice Connect (CVE-2022-29499)
Vulnerability in Mitel MiVoice Connect (CVE-2022-29499). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-30190 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2022-30190)
Vulnerability in Microsoft Windows (CVE-2022-30190). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-2388 KEV |
[KEV] Information Disclosure in SAP NetWeaver (CVE-2016-2388)
Vulnerability in SAP NetWeaver (CVE-2016-2388). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-2386 KEV |
[KEV] SQL Injection in SAP NetWeaver (CVE-2016-2386)
SQL injection in SAP NetWeaver (CVE-2016-2386). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-38163 KEV |
[KEV] Vulnerability in SAP NetWeaver (CVE-2021-38163)
Vulnerability in SAP NetWeaver (CVE-2021-38163). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2006-2492 KEV |
[KEV] Vulnerability in Microsoft Word (CVE-2006-2492)
Vulnerability in Microsoft Word (CVE-2006-2492). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2007-5659 KEV |
[KEV] Buffer Overflow in Adobe Acrobat and Reader (CVE-2007-5659)
Vulnerability in Adobe Acrobat and Reader (CVE-2007-5659). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2008-0655 KEV |
[KEV] Vulnerability in Adobe Acrobat and Reader (CVE-2008-0655)
Vulnerability in Adobe Acrobat and Reader (CVE-2008-0655). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-0557 KEV |
[KEV] Code Injection in Microsoft Office (CVE-2009-0557)
Code injection in Microsoft Office (CVE-2009-0557). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-0563 KEV |
[KEV] Buffer Overflow in Microsoft Office (CVE-2009-0563)
Vulnerability in Microsoft Office (CVE-2009-0563). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-1862 KEV |
[KEV] Code Injection in Adobe Acrobat and Reader, Flash Player (CVE-2009-1862)
Code injection in Adobe Acrobat and Reader, Flash Player (CVE-2009-1862). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-3953 KEV |
[KEV] Buffer Overflow in Adobe Acrobat and Reader (CVE-2009-3953)
Vulnerability in Adobe Acrobat and Reader (CVE-2009-3953). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2009-4324 KEV |
[KEV] Vulnerability in Adobe Acrobat and Reader (CVE-2009-4324)
Vulnerability in Adobe Acrobat and Reader (CVE-2009-4324). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-1297 KEV |
[KEV] Out-of-Bounds Write in Adobe Flash Player (CVE-2010-1297)
Out-of-bounds write in Adobe Flash Player (CVE-2010-1297). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-2572 KEV |
[KEV] Buffer Overflow in Microsoft PowerPoint (CVE-2010-2572)
Vulnerability in Microsoft PowerPoint (CVE-2010-2572). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-2883 KEV |
[KEV] Buffer Overflow in Adobe Acrobat and Reader (CVE-2010-2883)
Vulnerability in Adobe Acrobat and Reader (CVE-2010-2883). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2011-0609 KEV |
[KEV] Vulnerability in Adobe Flash Player (CVE-2011-0609)
Vulnerability in Adobe Flash Player (CVE-2011-0609). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2011-2462 KEV |
[KEV] Out-of-Bounds Write in Adobe Reader and Acrobat (CVE-2011-2462)
Out-of-bounds write in Adobe Reader and Acrobat (CVE-2011-2462). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-0151 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2012-0151)
Vulnerability in Microsoft Windows (CVE-2012-0151). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-0754 KEV |
[KEV] Out-of-Bounds Write in Adobe Flash Player (CVE-2012-0754)
Out-of-bounds write in Adobe Flash Player (CVE-2012-0754). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-0767 KEV |
[KEV] Cross-Site Scripting (XSS) in Adobe Flash Player (CVE-2012-0767)
Cross-site scripting in Adobe Flash Player (CVE-2012-0767). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-1889 KEV |
[KEV] Buffer Overflow in Microsoft XML Core Services (CVE-2012-1889)
Vulnerability in Microsoft XML Core Services (CVE-2012-1889). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-4969 KEV |
[KEV] Vulnerability in Microsoft Internet Explorer (CVE-2012-4969)
Vulnerability in Microsoft Internet Explorer (CVE-2012-4969). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2012-5054 KEV |
[KEV] Vulnerability in Adobe Flash Player (CVE-2012-5054)
Vulnerability in Adobe Flash Player (CVE-2012-5054). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-1331 KEV |
[KEV] Buffer Overflow in Microsoft Office (CVE-2013-1331)
Vulnerability in Microsoft Office (CVE-2013-1331). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-1646 KEV |
[KEV] Buffer Overflow in Google Chromium V8 (CVE-2016-1646)
Vulnerability in Google Chromium V8 (CVE-2016-1646). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2016-5198 KEV |
[KEV] Out-of-Bounds Read in Google Chromium V8 (CVE-2016-5198)
Vulnerability in Google Chromium V8 (CVE-2016-5198). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-5030 KEV |
[KEV] Out-of-Bounds Read in Google Chromium V8 (CVE-2017-5030)
Vulnerability in Google Chromium V8 (CVE-2017-5030). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-5070 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2017-5070)
Vulnerability in Google Chromium V8 (CVE-2017-5070). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
