Week 21, 2022

23–29 May 2022

New CVEs: 412
Critical: 23
High: 61
Newly exploited: 60
Advisories: 115
Malicious pkgs: 2

Newly exploited 60

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2010-0840 KEV May 25, 2022 Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows rem…
EPSS 96%
Critical 9.8
CVE-2013-0422 KEV May 25, 2022 · ransomware Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method…
EPSS 97%
Critical 9.8
CVE-2012-1710 KEV May 25, 2022 · ransomware Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidenti…
EPSS 7.8%
High 8.8
CVE-2014-2817 KEV May 25, 2022 Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulne…
EPSS 26%
High 8.8
CVE-2014-4123 KEV May 25, 2022 Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulne…
EPSS 47%
High 8.8
CVE-2015-2425 KEV May 25, 2022 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "…
EPSS 45%
High 8.8
CVE-2015-4495 KEV May 25, 2022 The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Po…
EPSS 69%
High 8.8
CVE-2014-4148 KEV May 25, 2022 win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wi…
EPSS 60%
High 8.8
CVE-2014-0546 KEV May 25, 2022 Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently exec…
EPSS 22%
High 8.8
CVE-2016-0984 KEV May 25, 2022 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, …
EPSS 55%
High 8.8
CVE-2016-1010 KEV May 25, 2022 Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AI…
EPSS 19%
High 8.8
CVE-2016-0034 KEV May 25, 2022 · ransomware Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a deni…
EPSS 69%
High 8.8
CVE-2019-3010 KEV May 25, 2022 Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulne…
Oracle · Solaris Operating System

EPSS 14%
High 8.8
CVE-2015-2360 KEV May 25, 2022 win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi…
EPSS 15%
High 8.8
CVE-2014-8439 KEV May 25, 2022 Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Ado…
EPSS 20%
High 8.8
CVE-2015-8651 KEV May 25, 2022 Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR be…
EPSS 68%
High 8.8
CVE-2016-7256 KEV May 25, 2022 atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold …
EPSS 65%
High 7.8
CVE-2013-0074 KEV May 25, 2022 · ransomware Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote atta…
EPSS 79%
High 7.8
CVE-2014-3153 KEV May 25, 2022 The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows loc…
EPSS 37%
High 7.8
CVE-2015-6175 KEV May 25, 2022 The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vuln…
EPSS 5.3%
High 7.8
CVE-2015-1671 KEV May 25, 2022 The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting …
EPSS 49%
High 7.8
CVE-2015-0310 KEV May 25, 2022 Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict di…
EPSS 15%
High 7.8
CVE-2016-3393 KEV May 25, 2022 Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012…
EPSS 68%
High 7.8
CVE-2014-4077 KEV May 25, 2022 Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Jap…
EPSS 55%
High 7.8
CVE-2015-0016 KEV May 25, 2022 Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Window…
EPSS 76%
Medium 6.6
CVE-2015-1769 KEV May 25, 2022 Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windo…
EPSS 4.1%
Medium 6.5
CVE-2015-0071 KEV May 25, 2022 Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR By…
EPSS 34%
Medium 6.5
CVE-2013-3993 KEV May 25, 2022 · ransomware IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or cod…
EPSS 4.8%
Medium 6.5
CVE-2013-7331 KEV May 25, 2022 The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share path…
EPSS 50%
Medium 5.9
CVE-2010-1428 KEV May 25, 2022 · ransomware The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3…
EPSS 53%
Medium 5.5
CVE-2013-3896 KEV May 25, 2022 Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain s…
EPSS 67%
Low 3.7
CVE-2013-0431 KEV May 25, 2022 · ransomware Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote att…
EPSS 90%
Low 3.7
CVE-2013-2423 KEV May 25, 2022 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to …
EPSS 85%
Low 3.7
CVE-2010-0738 KEV May 25, 2022 · ransomware The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0…
EPSS 74%
Critical 9.8
CVE-2017-18362 KEV May 24, 2022 · ransomware ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya …
EPSS 87%
Critical 9.8
CVE-2017-8543 KEV May 24, 2022 Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1…
Microsoft · Microsoft Windows

EPSS 74%
Critical 9.8
CVE-2018-19949 KEV May 24, 2022 · ransomware If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QT…
QNAP Systems · QTS

EPSS 30%
High 8.8
CVE-2016-4657 KEV May 24, 2022 WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
EPSS 67%
High 8.8
CVE-2017-0149 KEV May 24, 2022 Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web si…
Microsoft · Internet Explorer

EPSS 28%
High 8.8
CVE-2017-0210 KEV May 24, 2022 An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access …
Microsoft · Internet Explorer

EPSS 22%
High 8.8
CVE-2016-6366 KEV May 24, 2022 Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 93…
EPSS 88%
High 8.0
CVE-2018-19943 KEV May 24, 2022 · ransomware If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the followi…
QNAP Systems · QTS

EPSS 23%
High 7.8
CVE-2016-4656 KEV May 24, 2022 The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a …
EPSS 24%
High 7.8
CVE-2017-8291 KEV May 24, 2022 Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring …
EPSS 97%
High 7.8
CVE-2017-0005 KEV May 24, 2022 The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an…
Microsoft · Windows GDI+

EPSS 11%
High 7.8
CVE-2018-8611 KEV May 24, 2022 An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege V…
Microsoft · Windows Server 2019 · Windows Server 2016 · Windows Server 2012 R2

EPSS 4.2%
High 7.8
CVE-2016-6367 KEV May 24, 2022 Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid…
EPSS 23%
High 7.5
CVE-2017-0147 KEV May 24, 2022 · ransomware The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…
Microsoft · Windows SMB

EPSS 100%
Medium 6.5
CVE-2017-0022 KEV May 24, 2022 Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows…
Microsoft · XML Core Services

EPSS 18%
Medium 6.5
CVE-2016-3298 KEV May 24, 2022 Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remot…
EPSS 33%
Medium 6.5
CVE-2016-3351 KEV May 24, 2022 · ransomware Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Brows…
EPSS 26%
Medium 6.1
CVE-2018-19953 KEV May 24, 2022 · ransomware If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following …
QNAP Systems · QTS

EPSS 31%
Medium 5.5
CVE-2016-4655 KEV May 24, 2022 The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
EPSS 33%
Medium 4.3
CVE-2016-0162 KEV May 24, 2022 Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Inform…
EPSS 22%
Critical 10.0
CVE-2019-11708 KEV May 23, 2022 Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process op…
Mozilla · Firefox · Thunderbird · Firefox ESR

EPSS 56%
High 8.8
CVE-2019-11707 KEV May 23, 2022 A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware…
Mozilla · Firefox · Thunderbird · Firefox ESR

EPSS 38%
High 8.8
CVE-2019-8720 KEV May 23, 2022 A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved …
EPSS 1.6%
High 8.8
CVE-2019-13720 KEV May 23, 2022 Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Google · Chrome

EPSS 49%
High 8.2
CVE-2019-18426 KEV May 23, 2022 A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and l…
Facebook · WhatsApp Desktop

EPSS 68%
High 7.8
CVE-2019-0880 KEV May 23, 2022 A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
Microsoft · Windows 10 Version 1903 for x64-based Systems · Windows Server, version 1903 (Server Core installation) · Windows 10 Version 1903 for ARM64-based Systems

EPSS 2.3%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.6
CVE-2022-24422 Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may pote…
Dell · Integrated Dell Remote Access Controller 9

EPSS 59%
Critical 9.4
CVE-2022-26833 An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series …
Open Automation Software · OAS Platform

EPSS 38%
Critical 9.1
CVE-2022-26082 A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted…
Open Automation Software · OAS Platform

EPSS 20%
Critical 9.4
CVE-2021-32941 Annke Network Video Recorder - Stack-based Buffer Overflow
Annke · N48PBB (NVR)

EPSS 15%
Critical 9.6
CVE-2022-1883 SQL Injection in camptocamp/terraboard
camptocamp · camptocamp/terraboard

EPSS 6.8%
Critical 9.8
CVE-2022-29599 Commandline class shell injection vulnerabilities
Apache Software Foundation · Apache Maven

EPSS 4.4%
Critical 9.8
CVE-2022-21831 Possible code injection vulnerability in Rails / Active Storage
EPSS 3.1%
Critical 9.8
CVE-2022-30506 Code injection in MCMS
EPSS 2.7%
Critical 9.3
CVE-2021-32989 LCDS LAquis SCADA - Cross-site Scripting
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME · LAquis SCADA

EPSS 2.5%
Critical 9.8
CVE-2022-29246 Potential buffer overflow in function DFU upload in Azure RTOS USBX
azure-rtos · usbx

EPSS 2.4%
Critical 9.8
CVE-2022-26776 This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected ap…
Apple · macOS

EPSS 2.2%
Critical 9.8
CVE-2022-31799 Denial of service in bottle
EPSS 2.1%
Critical 9.8
CVE-2022-26775 An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker ma…
Apple · macOS · Security Update - Catalina

EPSS 2.1%
Critical 9.8
CVE-2022-30324 Privilege escalation in Hashicorp Nomad
EPSS 1.4%
Critical 9.6
CVE-2022-30584 Archer Platform 6.3 before 6.11 (6.11.0.0) contains an Improper Access Control Vulnerability within SSO ADFS functionality that could potentially be exploited …
EPSS 1.1%

All 23 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

USN-5435-1 thunderbird vulnerabilities 10 CVEs
DLA-3020-1 thunderbird - security update 8 CVEs
DSA-5146-1 puma - security update 3 CVEs
RLSA-2022:4776 Critical: firefox security update 2 CVEs
ALSA-2022:4776 Critical: firefox security update 2 CVEs
RLSA-2022:4769 Critical: thunderbird security update 2 CVEs
ALSA-2022:4769 Critical: thunderbird security update 2 CVEs
USN-5402-2 openssl vulnerabilities 2 CVEs
ICSA-22-146-01 Keysight N6854A Geolocation server and N6841A RF Sensor software 2 CVEs
ELSA-2022-4729 Critical: firefox security update (Oracle Linux 7) 2 CVEs