Week 37, 2022
12–18 September 2022
Newly exploited 8
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
-
High 8.8
CVE-2013-6282 KEV Sep 15, 2022 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allow…EPSS 40%
-
High 8.4
CVE-2013-2597 KEV Sep 15, 2022 Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovat…EPSS 1.5%
-
High 8.4
CVE-2013-2094 KEV Sep 15, 2022 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain p…EPSS 48%
-
High 7.8
CVE-2010-2568 KEV Sep 15, 2022 Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to …EPSS 90%
-
High 7.8
CVE-2013-2596 KEV Sep 15, 2022 Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and ot…EPSS 3.2%
-
High 7.2
CVE-2022-40139 KEV Sep 15, 2022 Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex …EPSS 3.4%
-
High 7.8
CVE-2022-37969 KEV Sep 14, 2022 · ransomware Windows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 28%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
High 7.8
CVE-2022-32917 KEV Sep 14, 2022 The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An appli…EPSS 5.6%
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2022-34721 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityEPSS 77%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
Critical 9.8
CVE-2022-34718 Windows TCP/IP Remote Code Execution VulnerabilityEPSS 57%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
- Critical 9.8 EPSS 22%
-
Critical 9.8
CVE-2021-42949 The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authe…EPSS 7.4%
-
Critical 9.8
CVE-2022-34722 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityEPSS 3%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
- Critical 9.0 EPSS 2.5%
- Critical 9.9 EPSS 2.2%
- Critical 9.8 EPSS 2.1%
- Critical 9.8 EPSS 2.1%
- Critical 9.9 EPSS 1.6%
- Critical 9.8 EPSS 1.6%
- Critical 9.8 EPSS 1.6%
- Critical 9.8 EPSS 1.5%
- Critical 9.8 EPSS 1.4%
- Critical 9.8 EPSS 1.4%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2022-40300 Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multi…EPSS 99%
-
High 8.1
CVE-2022-37958 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution VulnerabilityEPSS 86%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
-
Unscored
CVE-2022-37860 The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability.EPSS 80%
-
High 8.8
CVE-2022-35823 Microsoft SharePoint Remote Code Execution VulnerabilityEPSS 55%
Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition
-
High 8.8
CVE-2022-37961 Microsoft SharePoint Server Remote Code Execution VulnerabilityEPSS 52%
Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition
-
Unscored
CVE-2022-36534 Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain multiple remote code execution (RCE) vulnerabilities via…EPSS 50%
-
Unscored
CVE-2022-37190 CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both parameters (action and function) from "/api/index.php.EPSS 46%
-
High 7.8
CVE-2022-37954 DirectX Graphics Kernel Elevation of Privilege VulnerabilityEPSS 46%
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809
Advisories
- Microsoft Security Response Center 657 critical
- SUSE / openSUSE Security Updates 459 critical
- BSI CERT-Bund (WID) 18
- Debian Security (DSA / DLA) 162 critical
- Ubuntu Security Notices (USN) 151 critical
- Oracle Linux Security Advisories (ELSA) 14
- AlmaLinux Security Advisories 14
- Rocky Linux Security Advisories 13
- CISA ICS & IT advisories 81 critical
- Amazon Linux Security Center (ALAS) 5
- Siemens ProductCERT 5
- Schneider Electric CPCERT 1
- SUSE-SU-2022:3273-1 Security update for MozillaFirefox 28 CVEs
- SUSE-SU-2022:3272-1 Security update for MozillaFirefox 28 CVEs
- SUSE-SU-2022:3281-1 Security update for MozillaThunderbird 23 CVEs
- openSUSE-SU-2022:10120-1 Security update for chromium 23 CVEs
- openSUSE-SU-2022:10119-1 Security update for chromium 23 CVEs
- DSA-5231-1 connman - security update 5 CVEs
- USN-5615-1 sqlite3 vulnerabilities 3 CVEs
- openSUSE-SU-2022:10121-1 Security update for opera 1 CVEs
- MSRC-CVE-2022-41040 Microsoft Exchange Server Elevation of Privilege Vulnerability 1 CVEs
- MSRC-CVE-2022-37958 SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability 1 CVEs