Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2022-41125 | Microsoft | Windows | 7.8 High | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 2022-11-08 | 2022-12-09 | Unknown |
| CVE-2022-41091 | Microsoft | Windows | 5.4 Medium | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 2022-11-08 | 2022-12-09 | Known |
| CVE-2022-41073 | Microsoft | Windows | 7.8 High | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2022-11-08 | 2022-12-09 | Known |
| CVE-2021-25370 | Samsung | Mobile Devices | 4.4 Medium | Samsung Mobile Devices Memory Corruption Vulnerability | 2022-11-08 | 2022-11-29 | Unknown |
| CVE-2021-25369 | Samsung | Mobile Devices | 5.5 Medium | Samsung Mobile Devices Improper Access Control Vulnerability | 2022-11-08 | 2022-11-29 | Unknown |
| CVE-2021-25337 | Samsung | Mobile Devices | 7.1 High | Samsung Mobile Devices Improper Access Control Vulnerability | 2022-11-08 | 2022-11-29 | Unknown |
| CVE-2022-3723 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2022-10-28 | 2022-11-18 | Unknown | |
| CVE-2022-42827 | Apple | iOS and iPadOS | 7.8 High | Apple iOS and iPadOS Out-of-Bounds Write Vulnerability | 2022-10-25 | 2022-11-15 | Unknown |
| CVE-2020-3433 | Cisco | AnyConnect Secure | 7.8 High | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2020-3153 | Cisco | AnyConnect Secure | 6.5 Medium | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2018-19323 | GIGABYTE | Multiple Products | 9.8 Critical | GIGABYTE Multiple Products Privilege Escalation Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2018-19322 | GIGABYTE | Multiple Products | 7.8 High | GIGABYTE Multiple Products Code Execution Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2018-19321 | GIGABYTE | Multiple Products | 7.8 High | GIGABYTE Multiple Products Privilege Escalation Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2018-19320 | GIGABYTE | Multiple Products | 7.8 High | GIGABYTE Multiple Products Unspecified Vulnerability | 2022-10-24 | 2022-11-14 | Known |
| CVE-2022-41352 | Synacor | Zimbra Collaboration Suite (ZCS) | 9.8 Critical | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 2022-10-20 | 2022-11-10 | Unknown |
| CVE-2021-3493 | Linux | Kernel | 7.8 High | Linux Kernel Privilege Escalation Vulnerability | 2022-10-20 | 2022-11-10 | Unknown |
| CVE-2022-41033 | Microsoft | Windows COM+ Event System Service | 7.8 High | Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability | 2022-10-11 | 2022-11-01 | Unknown |
| CVE-2022-40684 | Fortinet | Multiple Products | 9.8 Critical | Fortinet Multiple Products Authentication Bypass Vulnerability | 2022-10-11 | 2022-11-01 | Known |
| CVE-2022-41082 | Microsoft | Exchange Server | 8.0 High | Microsoft Exchange Server Remote Code Execution Vulnerability | 2022-09-30 | 2022-10-21 | Known |
| CVE-2022-41040 | Microsoft | Exchange Server | 8.8 High | Microsoft Exchange Server Server-Side Request Forgery Vulnerability | 2022-09-30 | 2022-10-21 | Known |
| CVE-2022-36804 | Atlassian | Bitbucket Server and Data Center | 8.8 High | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | 2022-09-30 | 2022-10-21 | Unknown |
| CVE-2022-3236 | Sophos | Firewall | 9.8 Critical | Sophos Firewall Code Injection Vulnerability | 2022-09-23 | 2022-10-14 | Unknown |
| CVE-2022-35405 | Zoho | ManageEngine | 9.8 Critical | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 2022-09-22 | 2022-10-13 | Unknown |
| CVE-2022-40139 | Trend Micro | Apex One and Apex One as a Service | 7.2 High | Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2013-6282 | Linux | Kernel | 8.8 High | Linux Kernel Improper Input Validation Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2013-2597 | Code Aurora | ACDB Audio Driver | 8.4 High | Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2013-2596 | Linux | Kernel | 7.8 High | Linux Kernel Integer Overflow Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2013-2094 | Linux | Kernel | 8.4 High | Linux Kernel Privilege Escalation Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2010-2568 | Microsoft | Windows | 7.8 High | Microsoft Windows Remote Code Execution Vulnerability | 2022-09-15 | 2022-10-06 | Unknown |
| CVE-2022-37969 | Microsoft | Windows | 7.8 High | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 2022-09-14 | 2022-10-05 | Unknown |
| CVE-2022-32917 | Apple | iOS, iPadOS, and macOS | 7.8 High | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | 2022-09-14 | 2022-10-05 | Unknown |
| CVE-2022-3075 | Chromium Mojo | 9.6 Critical | Google Chromium Mojo Insufficient Data Validation Vulnerability | 2022-09-08 | 2022-09-29 | Unknown | |
| CVE-2022-27593 | QNAP | Photo Station | 9.1 Critical | QNAP Photo Station Externally Controlled Reference Vulnerability | 2022-09-08 | 2022-09-29 | Known |
| CVE-2022-26258 | D-Link | DIR-820L | 9.8 Critical | D-Link DIR-820L Remote Code Execution Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2020-9934 | Apple | iOS, iPadOS, and macOS | 5.5 Medium | Apple iOS, iPadOS, and macOS Input Validation Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2018-7445 | MikroTik | RouterOS | 9.8 Critical | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2018-6530 | D-Link | Multiple Routers | 9.8 Critical | D-Link Multiple Routers OS Command Injection Vulnerability | 2022-09-08 | 2022-09-29 | Known |
| CVE-2018-2628 | Oracle | WebLogic Server | 9.8 Critical | Oracle WebLogic Server Unspecified Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2018-13374 | Fortinet | FortiOS and FortiADC | 4.3 Medium | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 2022-09-08 | 2022-09-29 | Known |
| CVE-2017-5521 | NETGEAR | Multiple Devices | 8.1 High | NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2011-4723 | D-Link | DIR-300 Router | 5.7 Medium | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2011-1823 | Android | Android OS | 7.8 High | Android OS Privilege Escalation Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2022-26352 | dotCMS | dotCMS | 9.8 Critical | dotCMS Unrestricted Upload of File Vulnerability | 2022-08-25 | 2022-09-15 | Known |
| CVE-2022-24706 | Apache | CouchDB | 9.8 Critical | Apache CouchDB Insecure Default Initialization of Resource Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2022-24112 | Apache | APISIX | 9.8 Critical | Apache APISIX Authentication Bypass Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2022-22963 | VMware Tanzu | Spring Cloud | 9.8 Critical | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2022-2294 | WebRTC | WebRTC | 8.8 High | WebRTC Heap Buffer Overflow Vulnerability | 2022-08-25 | 2022-09-15 | Known |
| CVE-2021-39226 | Grafana Labs | Grafana | 7.3 High | Grafana Authentication Bypass Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2021-38406 | Delta Electronics | DOPSoft 2 | 7.8 High | Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2021-31010 | Apple | iOS, macOS, watchOS | 7.5 High | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |