Week 13, 2023

27 March – 2 April 2023

New CVEs: 718
Critical: 67
High: 306
Newly exploited: 9
Advisories: 212
Malicious pkgs: 41

Newly exploited 9

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2022-42948 KEV Mar 30, 2023 Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely …
EPSS 2.7%
Critical 9.8
CVE-2017-7494 KEV Mar 30, 2023 · ransomware Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a sha…
Samba · Samba

EPSS 99%
High 8.8
CVE-2022-38181 KEV Mar 30, 2023 The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through…
EPSS 18%
High 8.8
CVE-2013-3163 KEV Mar 30, 2023 Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web s…
EPSS 71%
High 8.8
CVE-2022-3038 KEV Mar 30, 2023 Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…
Google · Chrome

EPSS 25%
High 7.9
CVE-2023-0266 KEV Mar 30, 2023 Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel
Linux · linux_kernel

EPSS 2.6%
High 7.8
CVE-2021-30900 KEV Mar 30, 2023 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A mali…
Apple · iOS and iPadOS

EPSS 5.2%
High 7.8
CVE-2022-22706 KEV Mar 30, 2023 Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0…
EPSS 1.1%
Medium 6.1
CVE-2022-39197 KEV Mar 30, 2023 An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Str…
EPSS 44%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2022-36974 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is requi…
ivanti · Avalanche

EPSS 84%
Critical 9.4
CVE-2022-36980 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is requir…
ivanti · Avalanche

EPSS 82%
Critical 9.8
CVE-2023-25076 A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345cc9eba55df7…
SNIProxy · SNIProxy

EPSS 66%
Critical 9.8
CVE-2023-28503 Authentication bypass in UniRPC's udadmin service
Rocket Software · UniData · UniVerse

EPSS 61%
Critical 9.8
CVE-2023-28502 Stack buffer overflow in UniRPC's udadmin_server service
Rocket Software · UniData · UniVerse

EPSS 60%
Critical 9.8
CVE-2023-1133 CVE-2023-1133
Delta Electronics · InfraSuite Device Master

EPSS 50%
Critical 9.8
CVE-2022-43634 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vuln…
Netatalk · Netatalk

EPSS 19%
Critical 9.8
CVE-2023-27394 CVE-2023-27394
ProPump and Controls · Osprey Pump Controller

EPSS 18%
Critical 9.8
CVE-2022-36971 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is requi…
ivanti · Avalanche

EPSS 15%
Critical 9.8
CVE-2022-23121 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vuln…
Netatalk · Netatalk

EPSS 8.5%
Critical 9.8
CVE-2022-36978 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is requi…
ivanti · Avalanche

EPSS 7.3%
Critical 9.8
CVE-2022-36977 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is requi…
ivanti · Avalanche

EPSS 6.7%
Critical 9.1
CVE-2022-36975 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. The specific flaw exists within t…
ivanti · Avalanche

EPSS 6.5%
Critical 9.1
CVE-2022-36976 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. The specific flaw exists within t…
ivanti · Avalanche

EPSS 6.5%
Critical 9.1
CVE-2022-36972 This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. The specific flaw exists within t…
ivanti · Avalanche

EPSS 6.5%

All 67 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

ICSA-23-068-01 Akuvox E11 13 CVEs
ICSA-23-080-02 Delta Electronics InfraSuite Device Master 13 CVEs
USN-5973-1 node-url-parse vulnerabilities 8 CVEs
openSUSE-SU-2023:0082-1 Security update for chromium 7 CVEs
SUSE-SU-2023:1711-1 Security update for curl 6 CVEs
DLA-3370-1 xrdp - security update 6 CVEs
SUSE-SU-2023:1582-1 Security update for curl 5 CVEs
ICSA-23-080-06 Rockwell Automation ThinManager 3 CVEs
DLA-3375-1 xrdp - security update 3 CVEs
USN-5964-2 curl vulnerabilities 3 CVEs