Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2023-0266 | Linux | Kernel | 7.0 High | Linux Kernel Use-After-Free Vulnerability | 2023-03-30 | 2023-04-20 | Unknown |
| CVE-2022-42948 | Fortra | Cobalt Strike | 9.8 Critical | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | 2023-03-30 | 2023-04-20 | Unknown |
| CVE-2022-39197 | Fortra | Cobalt Strike | 6.1 Medium | Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | 2023-03-30 | 2023-04-20 | Unknown |
| CVE-2022-38181 | Arm | Mali Graphics Processing Unit (GPU) | 8.8 High | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 2023-03-30 | 2023-04-20 | Unknown |
| CVE-2022-3038 | Chromium Network Service | 8.8 High | Google Chromium Network Service Use-After-Free Vulnerability | 2023-03-30 | 2023-04-20 | Unknown | |
| CVE-2022-22706 | Arm | Mali Graphics Processing Unit (GPU) | 7.8 High | Arm Mali GPU Kernel Driver Unspecified Vulnerability | 2023-03-30 | 2023-04-20 | Unknown |
| CVE-2021-30900 | Apple | iOS, iPadOS, and macOS | 7.8 High | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 2023-03-30 | 2023-04-20 | Unknown |
| CVE-2017-7494 | Samba | Samba | 9.8 Critical | Samba Remote Code Execution Vulnerability | 2023-03-30 | 2023-04-20 | Known |
| CVE-2013-3163 | Microsoft | Internet Explorer | 8.8 High | Microsoft Internet Explorer Memory Corruption Vulnerability | 2023-03-30 | 2023-04-20 | Unknown |
| CVE-2023-26360 | Adobe | ColdFusion | 8.6 High | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 2023-03-15 | 2023-04-05 | Unknown |
| CVE-2023-24880 | Microsoft | Windows | 4.4 Medium | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 2023-03-14 | 2023-04-04 | Known |
| CVE-2023-23397 | Microsoft | Office | 9.8 Critical | Microsoft Office Outlook Privilege Escalation Vulnerability | 2023-03-14 | 2023-04-04 | Unknown |
| CVE-2022-41328 | Fortinet | FortiOS | 7.1 High | Fortinet FortiOS Path Traversal Vulnerability | 2023-03-14 | 2023-04-04 | Unknown |
| CVE-2021-39144 | XStream | XStream | 8.5 High | XStream Remote Code Execution Vulnerability | 2023-03-10 | 2023-03-31 | Unknown |
| CVE-2020-5741 | Plex | Media Server | 7.2 High | Plex Media Server Remote Code Execution Vulnerability | 2023-03-10 | 2023-03-31 | Unknown |
| CVE-2022-35914 | Teclib | GLPI | 9.8 Critical | Teclib GLPI Remote Code Execution Vulnerability | 2023-03-07 | 2023-03-28 | Unknown |
| CVE-2022-33891 | Apache | Spark | 8.8 High | Apache Spark Command Injection Vulnerability | 2023-03-07 | 2023-03-28 | Unknown |
| CVE-2022-28810 | Zoho | ManageEngine | 6.8 Medium | Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability | 2023-03-07 | 2023-03-28 | Unknown |
| CVE-2022-36537 | ZK Framework | AuUploader | 7.5 High | ZK Framework AuUploader Unspecified Vulnerability | 2023-02-27 | 2023-03-20 | Known |
| CVE-2022-47986 | IBM | Aspera Faspex | 9.8 Critical | IBM Aspera Faspex Code Execution Vulnerability | 2023-02-21 | 2023-03-14 | Known |
| CVE-2022-41223 | Mitel | MiVoice Connect | 6.8 Medium | Mitel MiVoice Connect Code Injection Vulnerability | 2023-02-21 | 2023-03-14 | Known |
| CVE-2022-40765 | Mitel | MiVoice Connect | 6.8 Medium | Mitel MiVoice Connect Command Injection Vulnerability | 2023-02-21 | 2023-03-14 | Known |
| CVE-2022-46169 | Cacti | Cacti | 9.8 Critical | Cacti Command Injection Vulnerability | 2023-02-16 | 2023-03-09 | Unknown |
| CVE-2023-23529 | Apple | Multiple Products | 8.8 High | Apple Multiple Products WebKit Type Confusion Vulnerability | 2023-02-14 | 2023-03-07 | Unknown |
| CVE-2023-23376 | Microsoft | Windows | 7.8 High | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 2023-02-14 | 2023-03-07 | Known |
| CVE-2023-21823 | Microsoft | Windows | 7.8 High | Microsoft Windows Graphic Component Privilege Escalation Vulnerability | 2023-02-14 | 2023-03-07 | Unknown |
| CVE-2023-21715 | Microsoft | Office | 7.3 High | Microsoft Office Publisher Security Feature Bypass Vulnerability | 2023-02-14 | 2023-03-07 | Unknown |
| CVE-2023-0669 | Fortra | GoAnywhere MFT | 7.2 High | Fortra GoAnywhere MFT Remote Code Execution Vulnerability | 2023-02-10 | 2023-03-03 | Known |
| CVE-2022-24990 | TerraMaster | TerraMaster OS | 7.5 High | TerraMaster OS Remote Command Execution Vulnerability | 2023-02-10 | 2023-03-03 | Known |
| CVE-2015-2291 | Intel | Ethernet Diagnostics Driver for Windows | 7.8 High | Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability | 2023-02-10 | 2023-03-03 | Known |
| CVE-2023-22952 | SugarCRM | Multiple Products | 8.8 High | Multiple SugarCRM Products Remote Code Execution Vulnerability | 2023-02-02 | 2023-02-23 | Unknown |
| CVE-2022-21587 | Oracle | E-Business Suite | 9.8 Critical | Oracle E-Business Suite Unspecified Vulnerability | 2023-02-02 | 2023-02-23 | Known |
| CVE-2017-11357 | Telerik | User Interface (UI) for ASP.NET AJAX | 9.8 Critical | Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability | 2023-01-26 | 2023-02-16 | Known |
| CVE-2022-47966 | Zoho | ManageEngine | 9.8 Critical | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 2023-01-23 | 2023-02-13 | Known |
| CVE-2022-44877 | CWP | Control Web Panel | 9.8 Critical | CWP Control Web Panel OS Command Injection Vulnerability | 2023-01-17 | 2023-02-07 | Unknown |
| CVE-2023-21674 | Microsoft | Windows | 8.8 High | Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability | 2023-01-10 | 2023-01-31 | Unknown |
| CVE-2022-41080 | Microsoft | Exchange Server | 8.8 High | Microsoft Exchange Server Privilege Escalation Vulnerability | 2023-01-10 | 2023-01-31 | Known |
| CVE-2018-5430 | TIBCO | JasperReports | 8.8 High | TIBCO JasperReports Server Information Disclosure Vulnerability | 2022-12-29 | 2023-01-19 | Unknown |
| CVE-2018-18809 | TIBCO | JasperReports | 6.5 Medium | TIBCO JasperReports Library Directory Traversal Vulnerability | 2022-12-29 | 2023-01-19 | Unknown |
| CVE-2022-42856 | Apple | iOS | 8.8 High | Apple iOS Type Confusion Vulnerability | 2022-12-14 | 2023-01-04 | Unknown |
| CVE-2022-44698 | Microsoft | Defender | 5.4 Medium | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | 2022-12-13 | 2023-01-03 | Known |
| CVE-2022-42475 | Fortinet | FortiOS | 9.8 Critical | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 2022-12-13 | 2023-01-03 | Known |
| CVE-2022-27518 | Citrix | Application Delivery Controller (ADC) and Gateway | 9.8 Critical | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | 2022-12-13 | 2023-01-03 | Unknown |
| CVE-2022-26501 | Veeam | Backup & Replication | 9.8 Critical | Veeam Backup & Replication Remote Code Execution Vulnerability | 2022-12-13 | 2023-01-03 | Known |
| CVE-2022-26500 | Veeam | Backup & Replication | 8.8 High | Veeam Backup & Replication Remote Code Execution Vulnerability | 2022-12-13 | 2023-01-03 | Known |
| CVE-2022-4262 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2022-12-05 | 2022-12-26 | Unknown | |
| CVE-2022-4135 | Chromium GPU | 9.6 Critical | Google Chromium GPU Heap Buffer Overflow Vulnerability | 2022-11-28 | 2022-12-19 | Unknown | |
| CVE-2021-35587 | Oracle | Fusion Middleware | 9.8 Critical | Oracle Fusion Middleware Unspecified Vulnerability | 2022-11-28 | 2022-12-19 | Unknown |
| CVE-2022-41049 | Microsoft | Windows | 5.4 Medium | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2022-11-14 | 2022-12-09 | Unknown |
| CVE-2022-41128 | Microsoft | Windows | 8.8 High | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | 2022-11-08 | 2022-12-09 | Unknown |