Week 9, 2022
28 February – 6 March 2022
Newly exploited 60
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
- Critical 10.0 EPSS 15%
- Critical 10.0 EPSS 9.7%
- Critical 10.0 EPSS 5.7%
- Critical 10.0 EPSS 72%
- Critical 10.0 EPSS 9.2%
-
Critical 9.8
CVE-2011-3544 KEV Mar 3, 2022 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java We…EPSS 97%
- Critical 9.8 EPSS 99%
-
Critical 9.8
CVE-2012-4681 KEV Mar 3, 2022 · ransomware Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary c…EPSS 99%
-
Critical 9.8
CVE-2013-0632 KEV Mar 3, 2022 administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging…EPSS 93%
-
Critical 9.8
CVE-2015-2590 KEV Mar 3, 2022 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integri…EPSS 25%
-
Critical 9.8
CVE-2018-0151 KEV Mar 3, 2022 A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to ca…EPSS 14%
-
Critical 9.8
CVE-2011-1889 KEV Mar 3, 2022 The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code v…EPSS 49%
-
Critical 9.8
CVE-2012-0507 KEV Mar 3, 2022 · ransomware Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 …EPSS 98%
-
Critical 9.8
CVE-2019-16928 KEV Mar 3, 2022 Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat i…EPSS 42%
-
Critical 9.8
CVE-2017-12240 KEV Mar 3, 2022 The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker…EPSS 14%
-
Critical 9.8
CVE-2012-1723 KEV Mar 3, 2022 · ransomware Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and ea…EPSS 94%
-
High 8.8
CVE-2013-3897 KEV Mar 3, 2022 Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrar…EPSS 77%
-
High 8.8
CVE-2017-6744 KEV Mar 3, 2022 The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r…EPSS 7.3%
-
High 8.8
CVE-2017-6739 KEV Mar 3, 2022 A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute cod…EPSS 11%
-
High 8.8
CVE-2017-6743 KEV Mar 3, 2022 The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r…EPSS 11%
-
High 8.8
CVE-2017-6740 KEV Mar 3, 2022 The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r…EPSS 11%
-
High 8.8
CVE-2017-6736 KEV Mar 3, 2022 The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r…EPSS 70%
-
High 8.8
CVE-2011-0611 KEV Mar 3, 2022 Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay…EPSS 99%
-
High 8.8
CVE-2017-6738 KEV Mar 3, 2022 The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, r…EPSS 11%
-
High 8.8
CVE-2013-1347 KEV Mar 3, 2022 Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (…EPSS 78%
-
High 8.8
CVE-2012-1856 KEV Mar 3, 2022 The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Offi…EPSS 72%
-
High 8.8
CVE-2015-2424 KEV Mar 3, 2022 Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote a…EPSS 40%
-
High 8.8
CVE-2017-11292 KEV Mar 3, 2022 Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculati…EPSS 11%
-
High 8.8
CVE-2019-1297 KEV Mar 3, 2022 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem…EPSS 22%
Microsoft · Microsoft Office · Office 365 ProPlus · Microsoft Excel
-
High 8.8
CVE-2017-6737 KEV Mar 3, 2022 A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute cod…EPSS 45%
-
High 8.8
CVE-2016-7855 KEV Mar 3, 2022 Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute ar…EPSS 25%
-
High 8.8
CVE-2014-0496 KEV Mar 3, 2022 Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitra…EPSS 40%
-
High 8.8
CVE-2018-0167 KEV Mar 3, 2022 Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR S…EPSS 3.4%
-
High 8.8
CVE-2008-3431 KEV Mar 3, 2022 The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not prop…EPSS 6.9%
-
High 8.8
CVE-2013-3346 KEV Mar 3, 2022 Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (…EPSS 79%
-
High 8.6
CVE-2018-0155 KEV Mar 3, 2022 A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series …EPSS 7.7%
-
High 8.6
CVE-2018-0173 KEV Mar 3, 2022 A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packet…EPSS 7.6%
-
High 8.6
CVE-2018-0174 KEV Mar 3, 2022 A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attack…EPSS 7.6%
-
High 8.6
CVE-2018-0172 KEV Mar 3, 2022 A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attack…EPSS 7.8%
-
High 8.6
CVE-2018-0158 KEV Mar 3, 2022 A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote at…EPSS 7.2%
-
High 8.0
CVE-2018-0175 KEV Mar 3, 2022 Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could…EPSS 3.5%
-
High 7.8
CVE-2016-7262 KEV Mar 3, 2022 Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted re…EPSS 59%
-
High 7.8
CVE-2013-5065 KEV Mar 3, 2022 NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited…EPSS 35%
-
High 7.8
CVE-2010-0188 KEV Mar 3, 2022 · ransomware Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) o…EPSS 88%
-
High 7.8
CVE-2012-1535 KEV Mar 3, 2022 Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute…EPSS 70%
-
High 7.8
CVE-2009-3129 KEV Mar 3, 2022 Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003…EPSS 84%
-
High 7.8
CVE-2017-8540 KEV Mar 3, 2022 The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, W…EPSS 72%
-
High 7.8
CVE-2004-0210 KEV Mar 3, 2022 The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message…EPSS 7.2%
-
High 7.8
CVE-2017-0261 KEV Mar 3, 2022 Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in m…EPSS 78%
-
High 7.8
CVE-2015-2387 KEV Mar 3, 2022 ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Win…EPSS 35%
-
High 7.8
CVE-2015-1701 KEV Mar 3, 2022 · ransomware Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted …EPSS 56%
-
High 7.8
CVE-2016-0099 KEV Mar 3, 2022 · ransomware The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Wi…EPSS 37%
-
High 7.8
CVE-2015-5119 KEV Mar 3, 2022 Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 1…EPSS 99%
-
High 7.8
CVE-2016-4117 KEV Mar 3, 2022 · ransomware Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.EPSS 94%
-
High 7.8
CVE-2002-0367 KEV Mar 3, 2022 smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to…EPSS 4.9%
-
High 7.8
CVE-2017-0001 KEV Mar 3, 2022 The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an…EPSS 3.1%
-
High 7.8
CVE-2015-1642 KEV Mar 3, 2022 Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corrup…EPSS 53%
-
High 7.8
CVE-2015-2545 KEV Mar 3, 2022 Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office…EPSS 86%
-
High 7.8
CVE-2015-7645 KEV Mar 3, 2022 · ransomware Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to ex…EPSS 65%
-
High 7.8
CVE-2009-1123 KEV Mar 3, 2022 The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to …EPSS 4.9%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 10.0
CVE-2022-22947 Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecuredEPSS 98%
-
Critical 9.8
CVE-2022-26318 On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7…EPSS 78%
-
Critical 9.8
CVE-2021-4039 A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device.EPSS 71%
- Critical 10.0 EPSS 35%
- Critical 9.8 EPSS 22%
- Critical 9.8 EPSS 7.7%
-
Critical 9.1
CVE-2022-25312 An XML external entity (XXE) injection vulnerability exists in the Apache Any23 RDFa XSLTStylesheet extractorEPSS 2.9%
- Critical 9.8 EPSS 2.8%
- Critical 9.8 EPSS 2.7%
- Critical 9.8 EPSS 2.5%
- Critical 9.8 EPSS 2.2%
- Critical 9.8 EPSS 1.9%
- Critical 9.1 EPSS 1.5%
-
Critical 9.8
CVE-2021-36166 An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication…EPSS 1.5%
- Critical 9.8 EPSS 1.3%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
- High 8.3 EPSS 97%
-
Unscored
CVE-2021-41282 diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data about the routes set in the firewall. The …EPSS 87%
-
Unscored
CVE-2022-0412 TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL InjectionEPSS 74%
templateinvaders · TI WooCommerce Wishlist · TI WooCommerce Wishlist Pro
- Medium 4.6 EPSS 67%
-
Unscored
CVE-2021-46381 Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd] and [/etc/shadow].EPSS 59%
-
Unscored
CVE-2021-44827 There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the X_TP_ExternalIPv6Address HT…EPSS 54%
-
Unscored
CVE-2022-22909 HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via an attacker inserting a crafted payload into the…EPSS 45%
- High 7.2 EPSS 43%
Advisories
- SUSE / openSUSE Security Updates 8014 critical
- Ubuntu Security Notices (USN) 112 critical
- BSI CERT-Bund (WID) 7
- Debian Security (DSA / DLA) 71 critical
- Oracle Linux Security Advisories (ELSA) 6
- CISA ICS & IT advisories 41 critical
- Amazon Linux Security Center (ALAS) 3
- CERT@VDE 1
- openSUSE-SU-2022:0070-1 Security update for nodejs-electron 18 CVEs
- USN-5310-1 glibc vulnerabilities 12 CVEs
- SUSE-SU-2022:0696-1 Security update for MozillaFirefox 8 CVEs
- SUSE-SU-2022:0676-1 Security update for MozillaFirefox 8 CVEs
- SUSE-SU-2022:0715-1 Security update for nodejs14 5 CVEs
- openSUSE-SU-2022:0715-1 Security update for nodejs14 5 CVEs
- SUSE-SU-2022:14903-1 Security update for expat 5 CVEs
- SUSE-SU-2022:0713-1 Security update for expat 5 CVEs
- openSUSE-SU-2022:0713-1 Security update for expat 5 CVEs
- SUSE-SU-2022:0704-1 Security update for nodejs8 5 CVEs