Browse
CISA KEV catalog
Search and filter the complete official catalog.
My watchlist
| CVE | Vendor | Product | CVSS | Vulnerability | Added | Due | Ransomware |
|---|---|---|---|---|---|---|---|
| CVE-2019-18426 | Meta Platforms | 8.2 High | WhatsApp Cross-Site Scripting Vulnerability | 2022-05-23 | 2022-06-13 | Unknown | |
| CVE-2019-1385 | Microsoft | Windows | 7.8 High | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability | 2022-05-23 | 2022-06-13 | Known |
| CVE-2019-13720 | Chrome WebAudio | 8.8 High | Google Chrome WebAudio Use-After-Free Vulnerability | 2022-05-23 | 2022-06-13 | Unknown | |
| CVE-2019-11708 | Mozilla | Firefox and Thunderbird | 10.0 Critical | Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability | 2022-05-23 | 2022-06-13 | Unknown |
| CVE-2019-11707 | Mozilla | Firefox and Thunderbird | 8.8 High | Mozilla Firefox and Thunderbird Type Confusion Vulnerability | 2022-05-23 | 2022-06-13 | Unknown |
| CVE-2019-1130 | Microsoft | Windows | 7.8 High | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability | 2022-05-23 | 2022-06-13 | Known |
| CVE-2019-0880 | Microsoft | Windows | 7.8 High | Microsoft Windows Privilege Escalation Vulnerability | 2022-05-23 | 2022-06-13 | Unknown |
| CVE-2019-0703 | Microsoft | Windows | 6.5 Medium | Microsoft Windows SMB Information Disclosure Vulnerability | 2022-05-23 | 2022-06-13 | Unknown |
| CVE-2019-0676 | Microsoft | Internet Explorer | 6.5 Medium | Microsoft Internet Explorer Information Disclosure Vulnerability | 2022-05-23 | 2022-06-13 | Unknown |
| CVE-2018-8589 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2022-05-23 | 2022-06-13 | Unknown |
| CVE-2018-5002 | Adobe | Flash Player | 7.8 High | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | 2022-05-23 | 2022-06-13 | Unknown |
| CVE-2022-30525 | Zyxel | Multiple Firewalls | 9.8 Critical | Zyxel Multiple Firewalls OS Command Injection Vulnerability | 2022-05-16 | 2022-06-06 | Unknown |
| CVE-2022-22947 | VMware | Spring Cloud Gateway | 10.0 Critical | VMware Spring Cloud Gateway Code Injection Vulnerability | 2022-05-16 | 2022-06-06 | Unknown |
| CVE-2022-1388 | F5 | BIG-IP | 9.8 Critical | F5 BIG-IP Missing Authentication Vulnerability | 2022-05-10 | 2022-05-31 | Known |
| CVE-2021-1789 | Apple | Multiple Products | 8.8 High | Apple Multiple Products Type Confusion Vulnerability | 2022-05-04 | 2022-05-25 | Unknown |
| CVE-2019-8506 | Apple | Multiple Products | 8.8 High | Apple Multiple Products Type Confusion Vulnerability | 2022-05-04 | 2022-05-25 | Unknown |
| CVE-2014-4113 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2022-05-04 | 2022-05-25 | Unknown |
| CVE-2014-0322 | Microsoft | Internet Explorer | 8.8 High | Microsoft Internet Explorer Use-After-Free Vulnerability | 2022-05-04 | 2022-05-25 | Unknown |
| CVE-2014-0160 | OpenSSL | OpenSSL | 7.5 High | OpenSSL Information Disclosure Vulnerability | 2022-05-04 | 2022-05-25 | Unknown |
| CVE-2022-29464 | WSO2 | Multiple Products | 9.8 Critical | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | 2022-04-25 | 2022-05-16 | Known |
| CVE-2022-26904 | Microsoft | Windows | 7.0 High | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2022-21919 | Microsoft | Windows | 7.0 High | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2022-0847 | Linux | Kernel | 7.8 High | Linux Kernel Privilege Escalation Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2021-41357 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2021-40450 | Microsoft | Win32k | 7.8 High | Microsoft Win32k Privilege Escalation Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2019-1003029 | Jenkins | Script Security Plugin | 9.9 Critical | Jenkins Script Security Plugin Sandbox Bypass Vulnerability | 2022-04-25 | 2022-05-16 | Unknown |
| CVE-2022-22718 | Microsoft | Windows | 7.8 High | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 2022-04-19 | 2022-05-10 | Unknown |
| CVE-2019-3568 | Meta Platforms | 9.8 Critical | WhatsApp VOIP Stack Buffer Overflow Vulnerability | 2022-04-19 | 2022-05-10 | Unknown | |
| CVE-2018-6882 | Synacor | Zimbra Collaboration Suite (ZCS) | 6.1 Medium | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 2022-04-19 | 2022-05-10 | Known |
| CVE-2022-22960 | VMware | Multiple Products | 7.8 High | VMware Multiple Products Privilege Escalation Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2022-1364 | Chromium V8 | 8.8 High | Google Chromium V8 Type Confusion Vulnerability | 2022-04-15 | 2022-05-06 | Unknown | |
| CVE-2019-3929 | Crestron | Multiple Products | 9.8 Critical | Crestron Multiple Products Command Injection Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2019-16057 | D-Link | DNS-320 Storage Device | 9.8 Critical | D-Link DNS-320 Remote Code Execution Vulnerability | 2022-04-15 | 2022-05-06 | Known |
| CVE-2018-7841 | Schneider Electric | U.motion Builder | 9.8 Critical | Schneider Electric U.motion Builder SQL Injection Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2016-4523 | Trihedral | VTScada (formerly VTS) | 7.5 High | Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2014-0780 | InduSoft | Web Studio | 9.8 Critical | InduSoft Web Studio NTWebServer Directory Traversal Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2010-5330 | Ubiquiti | AirOS | 9.8 Critical | Ubiquiti AirOS Command Injection Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2007-3010 | Alcatel | OmniPCX Enterprise | 9.8 Critical | Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability | 2022-04-15 | 2022-05-06 | Unknown |
| CVE-2022-22954 | VMware | Workspace ONE Access and Identity Manager | 9.8 Critical | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | 2022-04-14 | 2022-05-05 | Known |
| CVE-2022-24521 | Microsoft | Windows | 7.8 High | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability | 2022-04-13 | 2022-05-04 | Known |
| CVE-2018-7602 | Drupal | Core | 9.8 Critical | Drupal Core Remote Code Execution Vulnerability | 2022-04-13 | 2022-05-04 | Known |
| CVE-2018-20753 | Kaseya | Virtual System/Server Administrator (VSA) | 9.8 Critical | Kaseya VSA Remote Code Execution Vulnerability | 2022-04-13 | 2022-05-04 | Known |
| CVE-2015-5123 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Use-After-Free Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2015-5122 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Use-After-Free Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2015-3113 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2015-2502 | Microsoft | Internet Explorer | 8.8 High | Microsoft Internet Explorer Memory Corruption Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2015-0313 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Use-After-Free Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2015-0311 | Adobe | Flash Player | 9.8 Critical | Adobe Flash Player Remote Code Execution Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2014-9163 | Adobe | Flash Player | 7.8 High | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability | 2022-04-13 | 2022-05-04 | Unknown |
| CVE-2022-23176 | WatchGuard | Firebox and XTM | 8.8 High | WatchGuard Firebox and XTM Privilege Escalation Vulnerability | 2022-04-11 | 2022-05-02 | Unknown |