CISA Known Exploited Vulnerabilities

1,118 results · Clear filters · Feed

• High 7.8
  CVE-2019-7286 Exploited Public exploit EPSS 16%

  A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave…

  Apple macOS iOS macOS iOS
  Dec 18, 2019

  KEV May 23, 2022
• Critical 10.0
  CVE-2019-11708 Exploited Public exploit EPSS 56%

  Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

  KEV May 23, 2022
• High 8.8
  CVE-2019-11707 Exploited Public exploit EPSS 38%

  A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allo…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  Jul 23, 2019

  KEV May 23, 2022
• High 8.8
  CVE-2019-13720 Exploited Public exploit EPSS 49%

  Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  Nov 25, 2019

  KEV May 23, 2022
• Medium 6.5
  CVE-2019-5786 Exploited Public exploit EPSS 61%

  Use-After-Free in puppeteer

  Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine npm
  Jun 27, 2019

  KEV May 23, 2022
• Critical 9.8
  CVE-2022-30525 Exploited Public exploit Scanner template EPSS 100%

  A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pa…

  Zyxel ATP series firmware VPN series Firmware USG FLEX 50(W) firmware Network devices
  May 12, 2022

  KEV May 16, 2022
• Critical 10.0
  CVE-2022-22947 Exploited Public exploit Scanner template EPSS 98%

  Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured

  In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could al…

  org.springframework.cloud:spring-cloud-gateway Maven
  Mar 3, 2022

  KEV May 16, 2022
• Critical 9.8
  CVE-2022-1388 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 1…

  F5 BIG-IP Network devices
  May 5, 2022

  KEV May 10, 2022
• High 7.5
  CVE-2014-0160 Exploited Public exploit EPSS 100%

  The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension pack…

  openssl Debian
  Apr 7, 2014

  KEV May 4, 2022
• High 8.8
  CVE-2014-0322 Exploited Public exploit EPSS 85%

  Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code …

  Feb 14, 2014

  KEV May 4, 2022
• High 7.8
  CVE-2014-4113 Exploited Public exploit EPSS 87%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

  Oct 15, 2014

  KEV May 4, 2022
• High 8.8
  CVE-2019-8506 Exploited Public exploit EPSS 16%

  A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS…

  Apple watchOS tvOS Safari Windows iOS Browsers Debian Ubuntu Alpine
  Dec 18, 2019

  KEV May 4, 2022
• High 7.8
  CVE-2022-0847 Exploited Public exploit EPSS 93%

  A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Mar 7, 2022

  KEV Apr 25, 2022
• Critical 9.8
  CVE-2022-29464 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fil…

  Apr 18, 2022

  KEV Apr 25, 2022
• High 7.0
  CVE-2022-26904 Exploited Public exploit EPSS 17%

  Windows User Profile Service Elevation of Privilege Vulnerability

  Windows User Profile Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022

  KEV Apr 25, 2022
• Critical 9.9
  CVE-2019-1003029 Exploited Public exploit EPSS 74%

  Sandbox bypass in Script Security Plugin

  A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScr…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  Mar 8, 2019

  KEV Apr 25, 2022
• High 7.8
  CVE-2022-22718 Exploited Public exploit EPSS 18%

  Windows Print Spooler Elevation of Privilege Vulnerability

  Windows Print Spooler Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022

  KEV Apr 19, 2022
• Critical 9.8
  CVE-2018-7841 Exploited Public exploit Scanner template EPSS 72%

  A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted cod…

  U.motion U.motion Builder software version 1.3.4
  May 22, 2019

  KEV Apr 15, 2022
• High 8.8
  CVE-2022-1364 Exploited Public exploit EPSS 14%

  Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Jul 26, 2022

  KEV Apr 15, 2022
• High 7.8
  CVE-2022-22960 Exploited Public exploit EPSS 36%

  VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due …

  Apr 13, 2022

  KEV Apr 15, 2022
• Critical 9.8
  CVE-2014-0780 Exploited Public exploit EPSS 75%

  InduSoft Web Studio Path Traversal

  Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.

  InduSoft Web Studio
  Apr 25, 2014

  KEV Apr 15, 2022
• Critical 9.8
  CVE-2019-3929 Exploited Public exploit Scanner template EPSS 99%

  The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, B…

  Crestron Crestron AirMedia, Barco WePresent, Extron ShareLink, Teq AV IT WIPS710, SHARP PN-L703WA, Optoma WPS-Pro, Blackbox HD WPS, InFocus LiteShow3, and InFocus LiteShow4.
  Apr 30, 2019

  KEV Apr 15, 2022
• Critical 9.8
  CVE-2007-3010 Exploited Public exploit Scanner template EPSS 97%

  masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows re…

  Sep 18, 2007

  KEV Apr 15, 2022
• Critical 9.8
  CVE-2022-22954 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templ…

  Apr 11, 2022

  KEV Apr 14, 2022
• High 7.8
  CVE-2015-0311 Exploited Public exploit EPSS 86%

  Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windo…

  flashplugin-nonfree Ubuntu
  Jan 23, 2015

  KEV Apr 13, 2022
• High 7.8
  CVE-2015-0313 Exploited Public exploit EPSS 95%

  Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows…

  flashplugin-nonfree Ubuntu
  Feb 2, 2015

  KEV Apr 13, 2022
• High 7.8
  CVE-2015-3113 Exploited Public exploit EPSS 100%

  Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows a…

  flashplugin-nonfree Ubuntu
  Jun 23, 2015

  KEV Apr 13, 2022
• High 7.8
  CVE-2015-5122 Exploited Public exploit EPSS 87%

  Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Playe…

  flashplugin-nonfree Ubuntu
  Jul 14, 2015

  KEV Apr 13, 2022
• High 8.1
  CVE-2018-7602 Exploited · Ransomware Public exploit Scanner template EPSS 99%

  Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

  A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is relat…

  Drupal Core drupal/core drupal/drupal Ubuntu Alpine Packagist
  Jul 19, 2018

  KEV Apr 13, 2022
• High 7.8
  CVE-2022-24521 Exploited · Ransomware Public exploit

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022

  KEV Apr 13, 2022
• Critical 9.8
  CVE-2020-2509 Exploited Public exploit EPSS 34%

  Command Injection Vulnerability in QTS and QuTS hero

  A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: …

  QNAP Systems QTS QuTS hero
  Apr 17, 2021

  KEV Apr 11, 2022
• Critical 9.8
  CVE-2017-11317 Exploited Public exploit EPSS 84%

  Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUploa…

  Aug 23, 2017

  KEV Apr 11, 2022
• High 7.5
  CVE-2021-42278 Exploited · Ransomware Public exploit EPSS 73%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Nov 10, 2021

  KEV Apr 11, 2022
• High 7.5
  CVE-2021-42287 Exploited · Ransomware Public exploit EPSS 77%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Nov 10, 2021

  KEV Apr 11, 2022
• Medium 6.6
  CVE-2021-22600 Exploited Public exploit

  Double Free in net/packet/af_packet.c leading to priviledge escalation

  A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1…

  Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu Azure Linux
  Jan 26, 2022

  KEV Apr 11, 2022
• High 8.1
  CVE-2017-0148 Exploited · Ransomware Public exploit EPSS 99%

  The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

  Microsoft Windows SMB Windows
  Mar 17, 2017

  KEV Apr 6, 2022
• Critical 9.8
  CVE-2021-31166 Exploited Public exploit EPSS 100%

  HTTP Protocol Stack Remote Code Execution Vulnerability

  HTTP Protocol Stack Remote Code Execution Vulnerability

  Microsoft Windows 10 Version 20H2 Windows Server version 20H2 Windows 10 Version 2004 Windows
  May 11, 2021

  KEV Apr 6, 2022
• High 7.8
  CVE-2021-3156 Exploited Public exploit EPSS 100%

  Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

  sudo sudo sudo Debian Ubuntu Alpine
  Jan 26, 2021

  KEV Apr 6, 2022
• Critical 9.8
  CVE-2022-22965 Exploited Public exploit Scanner template EPSS 100%

  Remote Code Execution in Spring Framework

  A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot…

  libspring-java libspring-java org.springframework:spring-webmvc org.springframework:spring-webflux Debian Ubuntu Maven
  Apr 1, 2022

  KEV Apr 4, 2022
• Critical 9.8
  CVE-2018-10562 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_a…

  May 4, 2018

  KEV Mar 31, 2022