Week 7, 2022
14–20 February 2022
Newly exploited 9
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
- Critical 9.8 EPSS 100%
-
Critical 9.8
CVE-2022-24086 KEV Feb 15, 2022 Adobe Commerce checkout improper input validation leads to remote code executionEPSS 99%
- High 8.8 EPSS 23%
-
High 7.8
CVE-2018-20250 KEV Feb 15, 2022 · ransomware In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When…EPSS 96%
-
High 7.8
CVE-2014-1761 KEV Feb 15, 2022 Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Servic…EPSS 78%
-
High 7.8
CVE-2013-3906 KEV Feb 15, 2022 GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 At…EPSS 85%
-
High 7.8
CVE-2018-15982 KEV Feb 15, 2022 · ransomware Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary c…EPSS 90%
-
High 7.5
CVE-2018-8174 KEV Feb 15, 2022 · ransomware A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution …EPSS 88%
Microsoft · Windows Server 2016 · Windows Server 2012 R2 · Windows Server 2012
-
High 7.5
CVE-2019-0752 KEV Feb 15, 2022 · ransomware A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory …EPSS 82%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 10.0
CVE-2022-0543 It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could resul…EPSS 99%
- Critical 9.8 EPSS 99%
-
Critical 9.8
CVE-2021-45382 A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via th…EPSS 98%
- Critical 9.8 EPSS 53%
-
Critical 9.8
CVE-2022-25236 xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.EPSS 35%
-
Critical 9.8
CVE-2022-24049 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 bui…EPSS 7.2%
- Critical 9.4 EPSS 6.9%
-
Critical 9.8
CVE-2022-25235 xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain con…EPSS 5%
- Critical 9.8 EPSS 4.8%
-
Critical 9.8
CVE-2022-24046 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 1…EPSS 4.1%
- Critical 9.8 EPSS 3.7%
-
Critical 10.0
CVE-2022-21196 Airspan Networks Mimosa Improper AuthorizationEPSS 3.7%
Airspan Networks · MMP · PTMP C-series and A5x · PTP C-series
-
Critical 10.0
CVE-2022-21141 Airspan Networks Mimosa Incorrect AuthorizationEPSS 3.2%
Airspan Networks · MMP · PTMP C-series and A5x · PTP C-series
- Critical 9.1 EPSS 2.7%
- Critical 9.9 EPSS 2.6%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2021-3781 A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This …EPSS 84%
- High 8.8 EPSS 74%
-
High 7.6
CVE-2022-0666 CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweberEPSS 44%
-
Unscored
CVE-2022-22916 O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.EPSS 39%
-
Unscored
CVE-2021-35380 A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to …EPSS 37%
-
Unscored
CVE-2021-46314 A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR8…EPSS 33%
-
Unscored
CVE-2022-23389 PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.EPSS 22%
-
High 7.8
CVE-2021-3560 It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. …EPSS 22%
Advisories
- SUSE / openSUSE Security Updates 726 critical
- BSI CERT-Bund (WID) 202 critical
- Debian Security (DSA / DLA) 175 critical
- Ubuntu Security Notices (USN) 101 critical
- Oracle Linux Security Advisories (ELSA) 8
- Rocky Linux Security Advisories 4
- Amazon Linux Security Center (ALAS) 4
- AlmaLinux Security Advisories 4
- CISA ICS & IT advisories 21 critical
- SICK PSIRT 11 critical
- Siemens ProductCERT 1
- SUSE-SU-2022:0182-2 Security update for webkit2gtk3 43 CVEs
- USN-5284-1 firefox vulnerabilities 9 CVEs
- ICSA-22-046-01 Schneider Electric IGSS 8 CVEs
- DLA-2921-1 thunderbird - security update 7 CVEs
- openSUSE-SU-2022:0038-1 Security update for kafka 4 CVEs
- DLA-2927-1 twisted - security update 3 CVEs
- SUSE-SU-2022:0441-1 Security update for glibc 3 CVEs
- WID-SEC-2023-1091 Zyxel Firewall Produkte: Mehrere Schwachstellen 3 CVEs
- SUSE-SU-2022:0498-1 Security update for expat 2 CVEs
- openSUSE-SU-2022:0498-1 Security update for expat 2 CVEs