Week 13, 2022

28 March – 3 April 2022

New CVEs: 527
Critical: 43
High: 99
Newly exploited: 39
Advisories: 135
Malicious pkgs: 0

Newly exploited 39

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 10.0
CVE-2021-28799 KEV Mar 31, 2022 · ransomware Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)
QNAP Systems · HBS 3 · HBS 1.3 · HBS 2

EPSS 78%
Critical 9.8
CVE-2018-10561 KEV Mar 31, 2022 An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that require…
EPSS 93%
Critical 9.8
CVE-2022-26871 KEV Mar 31, 2022 An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead …
Trend Micro · Trend Micro Apex Central

EPSS 19%
Critical 9.8
CVE-2022-1040 KEV Mar 31, 2022 An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.
Sophos · Sophos Firewall

EPSS 100%
Critical 9.8
CVE-2018-10562 KEV Mar 31, 2022 · ransomware An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Fo…
EPSS 100%
High 8.8
CVE-2021-21551 KEV Mar 31, 2022 Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information …
Dell · dbutil

EPSS 80%
High 7.8
CVE-2021-34484 KEV Mar 31, 2022 Windows User Profile Service Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 22%
Critical 10.0
CVE-2022-0543 KEV Mar 28, 2022 It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could resul…
Debian · redis

EPSS 99%
Critical 9.8
CVE-2021-20028 KEV Mar 28, 2022 · ransomware Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA…
SonicWall · SonicWall SRA/SMA100

EPSS 30%
Critical 9.8
CVE-2013-2465 KEV Mar 28, 2022 · ransomware Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45…
EPSS 99%
Critical 9.8
CVE-2012-5076 KEV Mar 28, 2022 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidenti…
EPSS 91%
High 8.8
CVE-2015-2426 KEV Mar 28, 2022 Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wind…
EPSS 87%
High 8.8
CVE-2013-1690 KEV Mar 28, 2022 Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadyst…
EPSS 69%
High 8.8
CVE-2015-2419 KEV Mar 28, 2022 JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cra…
EPSS 53%
High 8.8
CVE-2013-2729 KEV Mar 28, 2022 Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspe…
EPSS 67%
High 8.8
CVE-2016-7201 KEV Mar 28, 2022 ChakraCore RCE Vulnerability
EPSS 80%
High 8.8
CVE-2022-1096 KEV Mar 28, 2022 Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Google · Chrome

EPSS 25%
High 8.8
CVE-2015-1770 KEV Mar 28, 2022 Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized …
EPSS 35%
High 8.8
CVE-2016-7200 KEV Mar 28, 2022 ChakraCore RCE Vulnerability
EPSS 83%
High 8.8
CVE-2013-2551 KEV Mar 28, 2022 · ransomware Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers…
EPSS 74%
High 8.1
CVE-2017-0037 KEV Mar 28, 2022 Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningEle…
Microsoft · Internet Browser

EPSS 80%
High 7.8
CVE-2011-2005 KEV Mar 28, 2022 afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mo…
EPSS 32%
High 7.8
CVE-2016-0151 KEV Mar 28, 2022 · ransomware The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages…
EPSS 63%
High 7.8
CVE-2010-4398 KEV Mar 28, 2022 Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP…
EPSS 8.7%
High 7.8
CVE-2016-0040 KEV Mar 28, 2022 The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted applicatio…
EPSS 24%
High 7.8
CVE-2021-34486 KEV Mar 28, 2022 Windows Event Tracing Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 9.3%
High 7.8
CVE-2013-3660 KEV Mar 28, 2022 The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, …
EPSS 39%
High 7.8
CVE-2012-2539 KEV Mar 28, 2022 Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attacker…
EPSS 53%
High 7.8
CVE-2018-8405 KEV Mar 28, 2022 · ransomware An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Ke…
Microsoft · Windows Server 2016 · Windows Server 2012 R2 · Windows 8.1

EPSS 3.4%
High 7.8
CVE-2018-8440 KEV Mar 28, 2022 · ransomware An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Pr…
Microsoft · Windows Server 2016 · Windows Server 2012 R2 · Windows Server 2012

EPSS 19%
High 7.8
CVE-2018-8406 KEV Mar 28, 2022 · ransomware An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Ke…
Microsoft · Windows Server 2016 · Windows 10 · Windows 10 Servers

EPSS 3.4%
High 7.8
CVE-2021-38646 KEV Mar 28, 2022 · ransomware Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Microsoft · Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office 2016

EPSS 8%
High 7.5
CVE-2019-7483 KEV Mar 28, 2022 In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on th…
SonicWall · SMA100

EPSS 4%
High 7.5
CVE-2016-0189 KEV Mar 28, 2022 · ransomware The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to exe…
EPSS 94%
High 7.5
CVE-2012-2034 KEV Mar 28, 2022 Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11…
EPSS 7.7%
High 7.3
CVE-2017-0213 KEV Mar 28, 2022 · ransomware Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, W…
Microsoft · Windows COM

EPSS 84%
Medium 5.3
CVE-2021-26085 KEV Mar 28, 2022 · ransomware Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability …
Atlassian · Confluence Server · Confluence Data Center

EPSS 100%
Medium 4.7
CVE-2012-0518 KEV Mar 28, 2022 Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect in…
EPSS 4.7%
Medium 4.3
CVE-2017-0059 KEV Mar 28, 2022 Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explo…
Microsoft · Internet Explorer

EPSS 62%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2022-22963 Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression
EPSS 100%
Critical 9.8
CVE-2022-22965 Remote Code Execution in Spring Framework
EPSS 100%
Critical 9.8
CVE-2022-0342 An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.5…
Zyxel · USG FLEX series firmware · ATP series firmware · VPN series Firmware

EPSS 95%
Critical 9.8
CVE-2022-28368 Remote code injection in dompdf/dompdf
EPSS 84%
Critical 9.1
CVE-2022-25017 Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field.
EPSS 29%
Critical 9.8
CVE-2021-26599 SQL Injection in ImpressCMS
EPSS 21%
Critical 9.8
CVE-2022-26871 An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead …
Trend Micro · Trend Micro Apex Central

EPSS 19%
Critical 10.0
CVE-2022-0735 An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versi…
GitLab · GitLab

EPSS 13%
Critical 9.8
CVE-2022-25347 Delta Electronics DIAEnergie Path Traversal
Delta Electronics · DIAEnergie

EPSS 11%
Critical 9.8
CVE-2022-26013 Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashx
Delta Electronics · DIAEnergie

EPSS 9.1%
Critical 9.8
CVE-2022-26887 Delta Electronics DIAEnergie SQL Injection in DIAE_HandlerTag_KID.ashx
Delta Electronics · DIAEnergie

EPSS 9%
Critical 9.8
CVE-2021-26600 Type Confusion in ImpressCMS
EPSS 5.6%
Critical 10.0
CVE-2022-24796 Remote Command Injection in RaspberryMatic
jens-maus · RaspberryMatic

EPSS 3.7%
Critical 9.1
CVE-2021-22795 A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution…
Schneider Electric · StruxureWare Data Center Expert

EPSS 3.1%
Critical 9.8
CVE-2021-32976 Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow
Moxa · NPort IAW5000A-I/O series firmware

EPSS 2.8%

All 43 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Medium 5.3
CVE-2021-4191 An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted si…
GitLab · GitLab

EPSS 80%
Medium 4.6
CVE-2022-1179 Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr
Open-Emr · openemr/openemr

EPSS 77%
Medium 6.8
CVE-2022-28379 jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion.
EPSS 71%
Unscored
CVE-2022-28381 Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 88…
EPSS 70%
High 7.3
CVE-2022-1178 Stored Cross Site Scripting in openemr/openemr
Open-Emr · openemr/openemr

EPSS 52%
High 8.0
CVE-2022-1181 Stored Cross Site Scripting in openemr/openemr
Open-Emr · openemr/openemr

EPSS 51%
Unscored
CVE-2022-0679 Narnoo Distributor <= 2.5.1 - Unauthenticated LFI to Arbitrary File Read / RCE
EPSS 48%
Unscored
CVE-2022-0479 Popup Builder < 4.1.1 - SQL Injection to Reflected Cross-Site Scripting
EPSS 44%

Advisories

USN-5362-1 linux-intel-5.13 vulnerabilities 16 CVEs
VDE-2022-005 PHOENIX CONTACT: Vulnerabilities in XML parser library Expat (libexpat) 15 CVEs
DLA-2962-1 pjproject - security update 15 CVEs
ICSA-22-090-06 General Electric Renewable Energy MDS Radios 6 CVEs
USN-5348-1 smarty3 vulnerabilities 6 CVEs
USN-5348-2 smarty3 vulnerabilities 4 CVEs
SUSE-SU-2022:14934-1 Security update for expat 1 CVEs
ICSA-22-090-05 Rockwell Automation Logix Controllers 1 CVEs
WID-SEC-2022-0033 VMware Tanzu Spring Framework: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode 1 CVEs
SUSE-SU-2022:1029-1 Security update for openvpn 1 CVEs