Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2022-32917 | Apple | iOS, iPadOS, and macOS | 7.8 High | Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability | 2022-09-14 | 2022-10-05 | Unknown |
| CVE-2022-3075 | Chromium Mojo | 9.6 Critical | Google Chromium Mojo Insufficient Data Validation Vulnerability | 2022-09-08 | 2022-09-29 | Unknown | |
| CVE-2022-27593 | QNAP | Photo Station | 9.1 Critical | QNAP Photo Station Externally Controlled Reference Vulnerability | 2022-09-08 | 2022-09-29 | Known |
| CVE-2022-26258 | D-Link | DIR-820L | 9.8 Critical | D-Link DIR-820L Remote Code Execution Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2020-9934 | Apple | iOS, iPadOS, and macOS | 5.5 Medium | Apple iOS, iPadOS, and macOS Input Validation Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2018-7445 | MikroTik | RouterOS | 9.8 Critical | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2018-6530 | D-Link | Multiple Routers | 9.8 Critical | D-Link Multiple Routers OS Command Injection Vulnerability | 2022-09-08 | 2022-09-29 | Known |
| CVE-2018-2628 | Oracle | WebLogic Server | 9.8 Critical | Oracle WebLogic Server Unspecified Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2018-13374 | Fortinet | FortiOS and FortiADC | 4.3 Medium | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 2022-09-08 | 2022-09-29 | Known |
| CVE-2017-5521 | NETGEAR | Multiple Devices | 8.1 High | NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2011-4723 | D-Link | DIR-300 Router | 5.7 Medium | D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2011-1823 | Android | Android OS | 7.8 High | Android OS Privilege Escalation Vulnerability | 2022-09-08 | 2022-09-29 | Unknown |
| CVE-2022-26352 | dotCMS | dotCMS | 9.8 Critical | dotCMS Unrestricted Upload of File Vulnerability | 2022-08-25 | 2022-09-15 | Known |
| CVE-2022-24706 | Apache | CouchDB | 9.8 Critical | Apache CouchDB Insecure Default Initialization of Resource Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2022-24112 | Apache | APISIX | 9.8 Critical | Apache APISIX Authentication Bypass Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2022-22963 | VMware Tanzu | Spring Cloud | 9.8 Critical | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2022-2294 | WebRTC | WebRTC | 8.8 High | WebRTC Heap Buffer Overflow Vulnerability | 2022-08-25 | 2022-09-15 | Known |
| CVE-2021-39226 | Grafana Labs | Grafana | 7.3 High | Grafana Authentication Bypass Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2021-38406 | Delta Electronics | DOPSoft 2 | 7.8 High | Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2021-31010 | Apple | iOS, macOS, watchOS | 7.5 High | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2020-36193 | PEAR | Archive_Tar | 7.5 High | PEAR Archive_Tar Improper Link Resolution Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2020-28949 | PEAR | Archive_Tar | 7.8 High | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | 2022-08-25 | 2022-09-15 | Unknown |
| CVE-2022-0028 | Palo Alto Networks | PAN-OS | 8.6 High | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | 2022-08-22 | 2022-09-12 | Unknown |
| CVE-2022-32894 | Apple | iOS and macOS | 7.8 High | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2022-32893 | Apple | iOS and macOS | 8.8 High | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2022-2856 | Chromium Intents | 6.5 Medium | Google Chromium Intents Insufficient Input Validation Vulnerability | 2022-08-18 | 2022-09-08 | Unknown | |
| CVE-2022-26923 | Microsoft | Active Directory | 8.8 High | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2022-22536 | SAP | Multiple Products | 10.0 Critical | SAP Multiple Products HTTP Request Smuggling Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2022-21971 | Microsoft | Windows | 7.8 High | Microsoft Windows Runtime Remote Code Execution Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2017-15944 | Palo Alto Networks | PAN-OS | 9.8 Critical | Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 2022-08-18 | 2022-09-08 | Unknown |
| CVE-2022-37042 | Synacor | Zimbra Collaboration Suite (ZCS) | 9.8 Critical | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | 2022-08-11 | 2022-09-01 | Known |
| CVE-2022-27925 | Synacor | Zimbra Collaboration Suite (ZCS) | 7.2 High | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 2022-08-11 | 2022-09-01 | Known |
| CVE-2022-34713 | Microsoft | Windows | 7.8 High | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 2022-08-09 | 2022-08-30 | Unknown |
| CVE-2022-30333 | RARLAB | UnRAR | 7.5 High | RARLAB UnRAR Directory Traversal Vulnerability | 2022-08-09 | 2022-08-30 | Known |
| CVE-2022-27924 | Synacor | Zimbra Collaboration Suite (ZCS) | 7.5 High | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability | 2022-08-04 | 2022-08-25 | Known |
| CVE-2022-26138 | Atlassian | Confluence | 9.8 Critical | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | 2022-07-29 | 2022-08-19 | Unknown |
| CVE-2022-22047 | Microsoft | Windows | 7.8 High | Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability | 2022-07-12 | 2022-08-02 | Unknown |
| CVE-2022-26925 | Microsoft | Windows | 5.9 Medium | Microsoft Windows LSA Spoofing Vulnerability | 2022-07-01 | 2022-07-22 | Unknown |
| CVE-2022-29499 | Mitel | MiVoice Connect | 9.8 Critical | Mitel MiVoice Connect Data Validation Vulnerability | 2022-06-27 | 2022-07-18 | Known |
| CVE-2021-4034 | Red Hat | Polkit | 7.8 High | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | 2022-06-27 | 2022-07-18 | Known |
| CVE-2021-30983 | Apple | iOS and iPadOS | 7.8 High | Apple iOS and iPadOS Buffer Overflow Vulnerability | 2022-06-27 | 2022-07-18 | Unknown |
| CVE-2021-30533 | Chromium PopupBlocker | 6.5 Medium | Google Chromium PopupBlocker Security Bypass Vulnerability | 2022-06-27 | 2022-07-18 | Unknown | |
| CVE-2020-9907 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Memory Corruption Vulnerability | 2022-06-27 | 2022-07-18 | Unknown |
| CVE-2020-3837 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Memory Corruption Vulnerability | 2022-06-27 | 2022-07-18 | Unknown |
| CVE-2019-8605 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Use-After-Free Vulnerability | 2022-06-27 | 2022-07-18 | Unknown |
| CVE-2018-4344 | Apple | Multiple Products | 7.8 High | Apple Multiple Products Memory Corruption Vulnerability | 2022-06-27 | 2022-07-18 | Unknown |
| CVE-2022-30190 | Microsoft | Windows | 7.8 High | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 2022-06-14 | 2022-07-05 | Known |
| CVE-2021-38163 | SAP | NetWeaver | 8.8 High | SAP NetWeaver Unrestricted File Upload Vulnerability | 2022-06-09 | 2022-06-30 | Unknown |
| CVE-2016-2388 | SAP | NetWeaver | 5.3 Medium | SAP NetWeaver Information Disclosure Vulnerability | 2022-06-09 | 2022-06-30 | Unknown |
| CVE-2016-2386 | SAP | NetWeaver | 9.8 Critical | SAP NetWeaver SQL Injection Vulnerability | 2022-06-09 | 2022-06-30 | Unknown |