CISA KEV — Known Exploited Vulnerabilities
Vulnerabilities that the US CISA has confirmed as exploited in the wild (Known Exploited Vulnerabilities), newest first, with summaries, CVSS and remediation.
| ID | Image | Title |
|---|---|---|
| CVE-2022-41073 KEV |
[KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2022-41073)
Out-of-bounds write in Microsoft Windows (CVE-2022-41073). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-41091 KEV |
[KEV] Authorization Flaw in Microsoft Windows (CVE-2022-41091)
Vulnerability in Microsoft Windows (CVE-2022-41091). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-3723 KEV |
[KEV] Vulnerability in Google Chromium V8 (CVE-2022-3723)
Vulnerability in Google Chromium V8 (CVE-2022-3723). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-42827 KEV |
[KEV] Vulnerability in Apple iOS and iPadOS (CVE-2022-42827)
Vulnerability in Apple iOS and iPadOS (CVE-2022-42827). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-19320 KEV |
[KEV] Vulnerability in GIGABYTE Multiple Products (CVE-2018-19320)
Vulnerability in GIGABYTE Multiple Products (CVE-2018-19320). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-19321 KEV |
[KEV] Vulnerability in GIGABYTE Multiple Products (CVE-2018-19321)
Vulnerability in GIGABYTE Multiple Products (CVE-2018-19321). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-19322 KEV |
[KEV] Vulnerability in GIGABYTE Multiple Products (CVE-2018-19322)
Vulnerability in GIGABYTE Multiple Products (CVE-2018-19322). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-19323 KEV |
[KEV] Vulnerability in GIGABYTE Multiple Products (CVE-2018-19323)
Vulnerability in GIGABYTE Multiple Products (CVE-2018-19323). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-3153 KEV |
[KEV] Vulnerability in Cisco AnyConnect Secure (CVE-2020-3153)
Vulnerability in Cisco AnyConnect Secure (CVE-2020-3153). Data can be tampered with by attackers. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-3433 KEV |
[KEV] Vulnerability in Cisco AnyConnect Secure (CVE-2020-3433)
Vulnerability in Cisco AnyConnect Secure (CVE-2020-3433). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-3493 KEV |
[KEV] Vulnerability in Linux Kernel (CVE-2021-3493)
Vulnerability in Linux Kernel (CVE-2021-3493). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-41352 KEV |
[KEV] Path Traversal in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2022-41352)
Path traversal in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2022-41352). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-41033 KEV |
[KEV] Vulnerability in Microsoft Windows COM+ Event System Service (CVE-2022-41033)
Vulnerability in Microsoft Windows COM+ Event System Service (CVE-2022-41033). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-40684 KEV |
[KEV] Vulnerability in Fortinet Multiple Products (CVE-2022-40684)
Vulnerability in Fortinet Multiple Products (CVE-2022-40684). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-36804 KEV |
[KEV] OS Command Injection in Atlassian Bitbucket Server and Data Center (CVE-2022-36804)
OS command injection in Atlassian Bitbucket Server and Data Center (CVE-2022-36804). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-41040 KEV |
[KEV] SSRF (Server-Side Request Forgery) in Microsoft Exchange Server (CVE-2022-41040)
SSRF in Microsoft Exchange Server (CVE-2022-41040). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-41082 KEV |
[KEV] Unsafe Deserialization in Microsoft Exchange Server (CVE-2022-41082)
Vulnerability in Microsoft Exchange Server (CVE-2022-41082). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-3236 KEV |
[KEV] Code Injection in Sophos Firewall (CVE-2022-3236)
Code injection in Sophos Firewall (CVE-2022-3236). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-35405 KEV |
[KEV] Unsafe Deserialization in Zoho ManageEngine (CVE-2022-35405)
Vulnerability in Zoho ManageEngine (CVE-2022-35405). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2010-2568 KEV |
[KEV] Vulnerability in Microsoft Windows (CVE-2010-2568)
Vulnerability in Microsoft Windows (CVE-2010-2568). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-2094 KEV |
[KEV] Vulnerability in Linux Kernel (CVE-2013-2094)
Vulnerability in Linux Kernel (CVE-2013-2094). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-2596 KEV |
[KEV] Vulnerability in Linux Kernel (CVE-2013-2596)
Vulnerability in Linux Kernel (CVE-2013-2596). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-2597 KEV |
[KEV] Buffer Overflow in Code Aurora ACDB Audio Driver (CVE-2013-2597)
Vulnerability in Code Aurora ACDB Audio Driver (CVE-2013-2597). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2013-6282 KEV |
[KEV] Vulnerability in Linux Kernel (CVE-2013-6282)
Vulnerability in Linux Kernel (CVE-2013-6282). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-40139 KEV |
[KEV] Vulnerability in Trend Micro Apex One and Apex One as a Service (CVE-2022-40139)
Vulnerability in Trend Micro Apex One and Apex One as a Service (CVE-2022-40139). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-32917 KEV |
[KEV] Vulnerability in Apple iOS, iPadOS, and macOS (CVE-2022-32917)
Vulnerability in Apple iOS, iPadOS, and macOS (CVE-2022-32917). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-37969 KEV |
[KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2022-37969)
Out-of-bounds write in Microsoft Windows (CVE-2022-37969). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2011-1823 KEV |
[KEV] Vulnerability in Android OS (CVE-2011-1823)
Vulnerability in Android OS (CVE-2011-1823). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2011-4723 KEV |
[KEV] Vulnerability in D-Link DIR-300 Router (CVE-2011-4723)
Vulnerability in D-Link DIR-300 Router (CVE-2011-4723). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-5521 KEV |
[KEV] Information Disclosure in NETGEAR Multiple Devices (CVE-2017-5521)
Vulnerability in NETGEAR Multiple Devices (CVE-2017-5521). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-13374 KEV |
[KEV] Vulnerability in Fortinet FortiOS and FortiADC (CVE-2018-13374)
Vulnerability in Fortinet FortiOS and FortiADC (CVE-2018-13374). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-2628 KEV |
[KEV] Unsafe Deserialization in Oracle WebLogic Server (CVE-2018-2628)
Vulnerability in Oracle WebLogic Server (CVE-2018-2628). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-6530 KEV |
[KEV] OS Command Injection in D-Link Multiple Routers (CVE-2018-6530)
OS command injection in D-Link Multiple Routers (CVE-2018-6530). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2018-7445 KEV |
[KEV] Buffer Overflow in MikroTik RouterOS (CVE-2018-7445)
Vulnerability in MikroTik RouterOS (CVE-2018-7445). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-9934 KEV |
[KEV] Vulnerability in Apple iOS, iPadOS, and macOS (CVE-2020-9934)
Vulnerability in Apple iOS, iPadOS, and macOS (CVE-2020-9934). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-26258 KEV |
[KEV] OS Command Injection in D-Link DIR-820L (CVE-2022-26258)
OS command injection in D-Link DIR-820L (CVE-2022-26258). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-27593 KEV |
[KEV] Vulnerability in QNAP Photo Station (CVE-2022-27593)
Vulnerability in QNAP Photo Station (CVE-2022-27593). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-3075 KEV |
[KEV] Vulnerability in Google Chromium Mojo (CVE-2022-3075)
Vulnerability in Google Chromium Mojo (CVE-2022-3075). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-28949 KEV |
[KEV] Vulnerability in Pear Archive Tar (CVE-2020-28949)
Vulnerability in Pear Archive Tar (CVE-2020-28949). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2020-36193 KEV |
[KEV] Path Traversal in PEAR Archive_Tar (CVE-2020-36193)
Path traversal in PEAR Archive_Tar (CVE-2020-36193). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-31010 KEV |
[KEV] Vulnerability in Apple iOS, macOS, watchOS (CVE-2021-31010)
Vulnerability in Apple iOS, macOS, watchOS (CVE-2021-31010). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-38406 KEV |
[KEV] Out-of-Bounds Write in Delta Electronics DOPSoft 2 (CVE-2021-38406)
Out-of-bounds write in Delta Electronics DOPSoft 2 (CVE-2021-38406). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2021-39226 KEV |
[KEV] Authentication Bypass in Grafana labs github.com/grafana/grafana (CVE-2021-39226)
Authentication bypass in Grafana labs github.com/grafana/grafana (CVE-2021-39226). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to 8.1.6 or later.
|
|
| CVE-2022-2294 KEV |
[KEV] Vulnerability in WebRTC (CVE-2022-2294)
Vulnerability in WebRTC (CVE-2022-2294). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-22963 KEV |
[KEV] Code Injection in VMware Tanzu Spring Cloud (CVE-2022-22963)
Code injection in VMware Tanzu Spring Cloud (CVE-2022-22963). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-24112 KEV |
[KEV] Vulnerability in Apache APISIX (CVE-2022-24112)
Vulnerability in Apache APISIX (CVE-2022-24112). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-24706 KEV |
[KEV] Vulnerability in Apache CouchDB (CVE-2022-24706)
Vulnerability in Apache CouchDB (CVE-2022-24706). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-26352 KEV |
[KEV] Path Traversal in dotCMS (CVE-2022-26352)
Path traversal in dotCMS (CVE-2022-26352). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2022-0028 KEV |
[KEV] Vulnerability in Palo Alto Networks PAN-OS (CVE-2022-0028)
Vulnerability in Palo Alto Networks PAN-OS (CVE-2022-0028). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
|
| CVE-2017-15944 KEV |
[KEV] Vulnerability in Palo Alto Networks PAN-OS (CVE-2017-15944)
Vulnerability in Palo Alto Networks PAN-OS (CVE-2017-15944). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
