Skip to content
OpenAdvisories

Source

CISA Known Exploited Vulnerabilities

Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

All Critical High Medium Low Public exploit

928 results · Clear filters · Feed

  • High 8.4
    CVE-2013-2597 Exploited Public exploit

    Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.…

    KEV Sep 15, 2022
  • High 8.4
    CVE-2013-2094 Exploited Public exploit EPSS 48%

    The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data …

    linux kernel Debian Azure Linux
    KEV Sep 15, 2022
  • High 7.2
    CVE-2022-40139 Exploited

    Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One …

    Trend Micro Trend Micro Apex One
    KEV Sep 15, 2022
  • High 7.8
    CVE-2010-2568 Exploited Public exploit EPSS 90%

    Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 al…

    KEV Sep 15, 2022
  • High 7.8
    CVE-2022-32917 Exploited

    The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15…

    Apple macOS iOS macOS iOS
    KEV Sep 14, 2022
  • High 7.8
    CVE-2022-37969 Exploited · Ransomware Public exploit EPSS 28%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Sep 14, 2022
  • High 7.8
    CVE-2011-1823 Exploited EPSS 41%

    The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK …

    KEV Sep 8, 2022
  • High 8.1
    CVE-2017-5521 Exploited Public exploit Scanner template EPSS 89%

    An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, …

    KEV Sep 8, 2022
  • High 7.8
    CVE-2020-28949 Exploited Public exploit EPSS 85%

    Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrappe…

    drupal7 drupal7 php-pear php-pear Debian Ubuntu Alpine
    KEV Aug 25, 2022
  • High 7.5
    CVE-2020-36193 Exploited EPSS 71%

    Directory Traversal in Archive_Tar

    Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

    drupal7 php-pear php-pear pear/archive_tar Debian Ubuntu Alpine Packagist
    KEV Aug 25, 2022
  • High 8.8
    CVE-2022-2294 Exploited · Ransomware EPSS 71%

    Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploi…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Aug 25, 2022
  • High 7.8
    CVE-2021-38406 Exploited EPSS 76%

    Delta Electronics DOPSoft 2 Out-of-Bounds Write

    Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute cod…

    Delta Electronics DOPSoft 2 ICS / OT
    KEV Aug 25, 2022
  • High 7.5
    CVE-2021-31010 Exploited

    A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Cata…

    Apple macOS watchOS macOS
    KEV Aug 25, 2022
  • High 8.6
    CVE-2022-0028 Exploited

    PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering

    A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series (hardware), VM-Series (vi…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
    KEV Aug 22, 2022
  • High 8.8
    CVE-2022-32893 Exploited EPSS 10%

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS …

    Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
    KEV Aug 18, 2022
  • High 7.8
    CVE-2022-32894 Exploited

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS …

    Apple macOS iOS and iPadOS macOS iOS
    KEV Aug 18, 2022
  • High 7.8
    CVE-2022-21971 Exploited Public exploit EPSS 54%

    Windows Runtime Remote Code Execution Vulnerability

    Windows Runtime Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Aug 18, 2022
  • High 8.8
    CVE-2022-26923 Exploited Public exploit EPSS 84%

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Active Directory Domain Services Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Aug 18, 2022
  • High 7.2
    CVE-2022-27925 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fil…

    KEV Aug 11, 2022
  • High 7.8
    CVE-2022-34713 Exploited EPSS 68%

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Aug 9, 2022
  • High 7.8
    CVE-2022-22047 Exploited EPSS 18%

    Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

    Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jul 12, 2022
  • High 8.1
    CVE-2022-26925 Exploited EPSS 10%

    Windows LSA Spoofing Vulnerability

    Windows LSA Spoofing Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jul 1, 2022
  • High 7.8
    CVE-2020-3837 Exploited Public exploit EPSS 15%

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

    Apple macOS watchOS tvOS macOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2020-9907 Exploited

    A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.…

    Apple tvOS iOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2018-4344 Exploited

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, ma…

    macOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2021-4034 Exploited · Ransomware Public exploit EPSS 95%

    A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…

    policykit-1 policykit-1 polkit polkit Debian Ubuntu Azure Linux Alpine
    KEV Jun 27, 2022
  • High 7.8
    CVE-2021-30983 Exploited

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. A…

    Apple iOS and iPadOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2019-8605 Exploited Public exploit EPSS 18%

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.…

    Apple macOS watchOS tvOS macOS iOS
    KEV Jun 27, 2022
  • High 7.8
    CVE-2022-30190 Exploited · Ransomware Public exploit EPSS 98%

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

    A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. Th…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jun 14, 2022
  • High 7.8
    CVE-2011-0609 Exploited Public exploit EPSS 64%

    Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2011-2462 Exploited Public exploit EPSS 89%

    Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, …

    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-4990 Exploited Public exploit EPSS 36%

    Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlie…

    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-17480 Exploited EPSS 36%

    Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Ch…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-17463 Exploited Public exploit EPSS 85%

    Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbi…

    Google Chrome chromium-browser oxide-qt Browsers Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2018-6065 Exploited Public exploit EPSS 60%

    Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google C…

    Google Chrome chromium-browser oxide-qt Browsers Ubuntu
    KEV Jun 8, 2022
  • High 7.8
    CVE-2013-1331 Exploited EPSS 80%

    Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code …

    KEV Jun 8, 2022
  • High 7.8
    CVE-2012-0754 Exploited Public exploit EPSS 91%

    Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2012-0151 Exploited EPSS 88%

    The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows …

    KEV Jun 8, 2022
  • High 8.8
    CVE-2012-1889 Exploited Public exploit EPSS 84%

    Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacke…

    KEV Jun 8, 2022
  • High 8.1
    CVE-2012-4969 Exploited Public exploit EPSS 80%

    Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 a…

    KEV Jun 8, 2022