Week 8, 2022
21–27 February 2022
Newly exploited 6
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
High 8.8
CVE-2017-0222 KEV Feb 25, 2022 A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerabili…EPSS 30%
-
High 7.8
CVE-2017-8570 KEV Feb 25, 2022 Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vul…EPSS 90%
Microsoft · Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016.
-
High 7.8
CVE-2014-6352 KEV Feb 25, 2022 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold an…EPSS 77%
-
Medium 6.1
CVE-2022-24682 KEV Feb 25, 2022 · ransomware An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in Dec…EPSS 31%
-
Critical 9.1
CVE-2022-23131 KEV Feb 22, 2022 Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAMLEPSS 96%
-
Low 3.7
CVE-2022-23134 KEV Feb 22, 2022 Possible view of the setup pages by unauthenticated users if config file already existsEPSS 95%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
- Critical 9.8 EPSS 81%
- Critical 9.8 EPSS 77%
- Critical 9.8 EPSS 32%
- Critical 9.8 EPSS 23%
- Critical 10.0 EPSS 3.1%
-
Critical 9.8
CVE-2021-35689 A potential vulnerability in the Oracle Talent Acquisition Cloud - Taleo Enterprise Edition. This high severity potential vulnerability allows attackers to per…EPSS 2.1%
Oracle · Oracle Talent Acquisition Cloud - Taleo Enterprise Edition
- Critical 9.1 EPSS 1.3%
- Critical 9.8 EPSS 1.3%
- Critical 9.1
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
- High 7.2 EPSS 79%
- High 8.8 EPSS 78%
-
High 8.8
CVE-2021-44142 The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a N…EPSS 74%
-
Unscored
CVE-2022-25061 TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.EPSS 59%
-
Unscored
CVE-2022-25075 TOTOLink A3000RU V5.9c.2280_B20180512 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers t…EPSS 56%
-
Unscored
CVE-2022-25060 TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.EPSS 40%
-
Unscored
CVE-2022-25359 On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.EPSS 37%
-
Unscored
CVE-2022-25064 TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr.EPSS 36%
Advisories
- SUSE / openSUSE Security Updates 298 critical
- Ubuntu Security Notices (USN) 141 critical
- BSI CERT-Bund (WID) 13
- Oracle Linux Security Advisories (ELSA) 8
- CISA ICS & IT advisories 6
- Debian Security (DSA / DLA) 51 critical
- Rocky Linux Security Advisories 3
- AlmaLinux Security Advisories 3
- Siemens ProductCERT 1
- SICK PSIRT 1
- USN-5288-1 expat vulnerabilities 12 CVEs
- openSUSE-SU-2022:0559-1 Security update for MozillaThunderbird 9 CVEs
- SUSE-SU-2022:0559-1 Security update for MozillaThunderbird 9 CVEs
- SUSE-SU-2022:0565-1 Security update for MozillaFirefox 8 CVEs
- SUSE-SU-2022:14896-1 Security update for MozillaFirefox 8 CVEs
- SUSE-SU-2022:0570-1 Security update for nodejs10 6 CVEs
- SUSE-SU-2022:0569-1 Security update for nodejs14 5 CVEs
- SUSE-SU-2022:0563-1 Security update for nodejs8 5 CVEs
- DSA-5085-1 expat - security update 5 CVEs
- SUSE-SU-2022:0531-1 Security update for nodejs12 5 CVEs