Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2022-26904 | Microsoft | Windows | 7.0 High | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2022-21919 | Microsoft | Windows | 7.0 High | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2022-0847 | Linux | Kernel | 7.8 High | Linux Kernel Privilege Escalation Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2021-41357 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2021-40450 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2019-1003029 | Jenkins | Script Security Plugin | 9.9 Critical | Jenkins Script Security Plugin Sandbox Bypass Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2022-22718 | Microsoft | Windows | 7.8 High | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2022-04-19 | 2022-05-10 | Unknown |
| CVE-2019-3568 | Meta Platforms | 9.8 Critical | WhatsApp VOIP Stack Buffer Overflow Vulnerability | 2022-04-19 | 2022-05-10 | Unknown | |
| CVE-2018-6882 | Synacor | Zimbra Collaboration Suite (ZCS) | 6.1 Medium | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 2022-04-19 | 2022-05-10 | Known |
| CVE-2022-22960 | VMware | Multiple Products | 7.8 High | VMware Multiple Products Privilege Escalation Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2022-1364 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2022-04-15 | 2022-05-06 | Unknown | |
| CVE-2019-3929 | Crestron | Multiple Products | 9.8 Critical | Crestron Multiple Products Command Injection Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2019-16057 | D-Link | DNS-320 Storage Device | 9.8 Critical | D-Link DNS-320 Remote Code Execution Vulnerability | 2022-04-15 | 2022-05-06 | Known |
| CVE-2018-7841 | Schneider Electric | U.motion Builder | 9.8 Critical | Schneider Electric U.motion Builder SQL Injection Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2016-4523 | Trihedral | VTScada (formerly VTS) | 7.5 High | Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2014-0780 | InduSoft | Web Studio | 9.8 Critical | InduSoft Web Studio NTWebServer Directory Traversal Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2010-5330 | Ubiquiti | AirOS | 9.8 Critical | Ubiquiti AirOS Command Injection Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2007-3010 | Alcatel | OmniPCX Enterprise | 9.8 Critical | Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2022-22954 | VMware | Workspace ONE Access and Identity Manager | 9.8 Critical | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | 2022-04-14 | 2022-05-05 | Known |
| CVE-2022-24521 | Microsoft | Windows | 7.8 High | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability | 2022-04-13 | 2022-05-04 | Known |
| CVE-2018-7602 | Drupal | Core | 9.8 Critical | Drupal Core Remote Code Execution Vulnerability | 2022-04-13 | 2022-05-04 | Known |
| CVE-2018-20753 | Kaseya | Virtual System/Server Administrator (VSA) | 9.8 Critical | Kaseya VSA Remote Code Execution Vulnerability | 2022-04-13 | 2022-05-04 | Known |
| CVE-2015-5123 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Use-After-Free Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2015-5122 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Use-After-Free Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2015-3113 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2015-2502 | Microsoft | Internet Explorer | 8.8 High | Microsoft Internet Explorer Memory Corruption Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2015-0313 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Use-After-Free Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2015-0311 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Remote Code Execution Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2014-9163 | Adobe | Flash Player | 7.8 High | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2022-23176 | WatchGuard | Firebox and XTM | 8.8 High | WatchGuard Firebox and XTM Privilege Escalation Vulnerability | 2022-04-11 | 2022-05-02 | Unknown |
| CVE-2021-42287 | Microsoft | Active Directory | 7.5 High | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 2022-04-11 | 2022-05-02 | Known |
| CVE-2021-42278 | Microsoft | Active Directory | 7.5 High | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 2022-04-11 | 2022-05-02 | Known |
| CVE-2021-39793 | Pixel | 7.8 High | Google Pixel Out-of-Bounds Write Vulnerability | 2022-04-11 | 2022-05-02 | Unknown | |
| CVE-2021-27852 | Checkbox | Checkbox Survey | 9.8 Critical | Checkbox Survey Deserialization of Untrusted Data Vulnerability | 2022-04-11 | 2022-05-02 | Unknown |
| CVE-2021-22600 | Linux | Kernel | 7.0 High | Linux Kernel Privilege Escalation Vulnerability | 2022-04-11 | 2022-05-02 | Unknown |
| CVE-2020-2509 | QNAP | QNAP Network-Attached Storage (NAS) | 9.8 Critical | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability | 2022-04-11 | 2022-05-02 | Unknown |
| CVE-2017-11317 | Telerik | User Interface (UI) for ASP.NET AJAX | 9.8 Critical | Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability | 2022-04-11 | 2022-05-02 | Unknown |
| CVE-2021-3156 | Sudo | Sudo | 7.8 High | Sudo Heap-Based Buffer Overflow Vulnerability | 2022-04-06 | 2022-04-27 | Unknown |
| CVE-2021-31166 | Microsoft | HTTP Protocol Stack | 9.8 Critical | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability | 2022-04-06 | 2022-04-27 | Unknown |
| CVE-2017-0148 | Microsoft | SMBv1 server | 8.1 High | Microsoft SMBv1 Server Remote Code Execution Vulnerability | 2022-04-06 | 2022-04-27 | Known |
| CVE-2022-22965 | VMware | Spring Framework | 9.8 Critical | Spring Framework JDK 9+ Remote Code Execution Vulnerability | 2022-04-04 | 2022-04-25 | Unknown |
| CVE-2022-22675 | Apple | macOS | 7.8 High | Apple macOS Out-of-Bounds Write Vulnerability | 2022-04-04 | 2022-04-25 | Unknown |
| CVE-2022-22674 | Apple | macOS | 5.5 Medium | Apple macOS Out-of-Bounds Read Vulnerability | 2022-04-04 | 2022-04-25 | Unknown |
| CVE-2021-45382 | D-Link | Multiple Routers | 9.8 Critical | D-Link Multiple Routers Remote Code Execution Vulnerability | 2022-04-04 | 2022-04-25 | Unknown |
| CVE-2022-26871 | Trend Micro | Apex Central | 9.8 Critical | Trend Micro Apex Central Arbitrary File Upload Vulnerability | 2022-03-31 | 2022-04-21 | Unknown |
| CVE-2022-1040 | Sophos | Firewall | 9.8 Critical | Sophos Firewall Authentication Bypass Vulnerability | 2022-03-31 | 2022-04-21 | Unknown |
| CVE-2021-34484 | Microsoft | Windows | 7.8 High | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 2022-03-31 | 2022-04-21 | Unknown |
| CVE-2021-28799 | QNAP | Network Attached Storage (NAS) | 9.8 Critical | QNAP NAS Improper Authorization Vulnerability | 2022-03-31 | 2022-04-21 | Known |
| CVE-2021-21551 | Dell | dbutil Driver | 7.8 High | Dell dbutil Driver Insufficient Access Control Vulnerability | 2022-03-31 | 2022-04-21 | Unknown |
| CVE-2018-10562 | Dasan | Gigabit Passive Optical Network (GPON) Routers | 9.8 Critical | Dasan GPON Routers Command Injection Vulnerability | 2022-03-31 | 2022-04-21 | Known |