| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2023-35081
Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability |
Ivanti · Endpoint Manager Mobile (EPMM) | Jul 31, 2023 | Aug 21, 2023 | 63.6% | — |
| CVE-2023-37580
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerabili… |
Synacor · Zimbra Collaboration Suite (ZCS) | Jul 27, 2023 | Aug 17, 2023 | 49.1% | — |
| CVE-2023-38606
Apple Multiple Products Kernel Unspecified Vulnerability |
Apple · Multiple Products | Jul 26, 2023 | Aug 16, 2023 | 2.9% | — |
| CVE-2023-35078 Ransomware
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability |
Ivanti · Endpoint Manager Mobile (EPMM) | Jul 25, 2023 | Aug 15, 2023 | 100.0% | — |
| CVE-2023-29298
Adobe ColdFusion Improper Access Control Vulnerability |
Adobe · ColdFusion | Jul 20, 2023 | Aug 10, 2023 | 99.8% | — |
| CVE-2023-38205
Adobe ColdFusion Improper Access Control Vulnerability |
Adobe · ColdFusion | Jul 20, 2023 | Aug 10, 2023 | 99.8% | — |
| CVE-2023-3519 Ransomware
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability |
Citrix · NetScaler ADC and NetScaler Gateway | Jul 19, 2023 | Aug 9, 2023 | 99.7% | — |
| CVE-2023-36884 Ransomware
Microsoft Windows Search Remote Code Execution Vulnerability |
Microsoft · Windows | Jul 17, 2023 | Aug 29, 2023 | 99.4% | — |
| CVE-2022-29303
SolarView Compact Command Injection Vulnerability |
SolarView · Compact | Jul 13, 2023 | Aug 3, 2023 | 98.0% | — |
| CVE-2023-37450
Apple Multiple Products WebKit Code Execution Vulnerability |
Apple · Multiple Products | Jul 13, 2023 | Aug 3, 2023 | 18.9% | — |
| CVE-2022-31199 Ransomware
Netwrix Auditor Insecure Object Deserialization Vulnerability |
Netwrix · Auditor | Jul 11, 2023 | Aug 1, 2023 | 36.0% | — |
| CVE-2023-32046
Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability |
Microsoft · Windows | Jul 11, 2023 | Aug 1, 2023 | 10.0% | — |
| CVE-2023-32049
Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability |
Microsoft · Windows | Jul 11, 2023 | Aug 1, 2023 | 4.2% | — |
| CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability |
Microsoft · Outlook | Jul 11, 2023 | Aug 1, 2023 | 15.5% | — |
| CVE-2023-36874
Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability |
Microsoft · Windows | Jul 11, 2023 | Aug 1, 2023 | 44.4% | — |
| CVE-2021-29256
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability |
Arm · Mali Graphics Processing Unit (GPU) | Jul 7, 2023 | Jul 28, 2023 | 3.0% | — |
| CVE-2019-17621
D-Link DIR-859 Router Command Execution Vulnerability |
D-Link · DIR-859 Router | Jun 29, 2023 | Jul 20, 2023 | 90.6% | — |
| CVE-2019-20500
D-Link DWL-2600AP Access Point Command Injection Vulnerability |
D-Link · DWL-2600AP Access Point | Jun 29, 2023 | Jul 20, 2023 | 96.7% | — |
| CVE-2021-25371
Samsung Mobile Devices Unspecified Vulnerability |
Samsung · Mobile Devices | Jun 29, 2023 | Jul 20, 2023 | 0.8% | — |
| CVE-2021-25372
Samsung Mobile Devices Improper Boundary Check Vulnerability |
Samsung · Mobile Devices | Jun 29, 2023 | Jul 20, 2023 | 0.8% | — |
| CVE-2021-25394
Samsung Mobile Devices Race Condition Vulnerability |
Samsung · Mobile Devices | Jun 29, 2023 | Jul 20, 2023 | 0.4% | — |
| CVE-2021-25395
Samsung Mobile Devices Race Condition Vulnerability |
Samsung · Mobile Devices | Jun 29, 2023 | Jul 20, 2023 | 0.4% | — |
| CVE-2021-25487
Samsung Mobile Devices Out-of-Bounds Read Vulnerability |
Samsung · Mobile Devices | Jun 29, 2023 | Jul 20, 2023 | 0.6% | — |
| CVE-2021-25489
Samsung Mobile Devices Improper Input Validation Vulnerability |
Samsung · Mobile Devices | Jun 29, 2023 | Jul 20, 2023 | 0.5% | — |
| CVE-2023-20867
VMware Tools Authentication Bypass Vulnerability |
VMware · Tools | Jun 23, 2023 | Jul 14, 2023 | 13.6% | — |
| CVE-2023-27992
Zyxel Multiple NAS Devices Command Injection Vulnerability |
Zyxel · Multiple Network-Attached Storage (NAS) Devices | Jun 23, 2023 | Jul 14, 2023 | 82.3% | — |
| CVE-2023-32434
Apple Multiple Products Integer Overflow Vulnerability |
Apple · Multiple Products | Jun 23, 2023 | Jul 14, 2023 | 58.2% | — |
| CVE-2023-32435
Apple Multiple Products WebKit Memory Corruption Vulnerability |
Apple · Multiple Products | Jun 23, 2023 | Jul 14, 2023 | 23.0% | — |
| CVE-2023-32439
Apple Multiple Products WebKit Type Confusion Vulnerability |
Apple · Multiple Products | Jun 23, 2023 | Jul 14, 2023 | 24.0% | — |
| CVE-2016-0165
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Jun 22, 2023 | Jul 13, 2023 | 13.7% | — |
| CVE-2016-9079
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability |
Mozilla · Firefox, Firefox ESR, and Thunderbird | Jun 22, 2023 | Jul 13, 2023 | 87.4% | — |
| CVE-2020-12641
Roundcube Webmail Remote Code Execution Vulnerability |
Roundcube · Roundcube Webmail | Jun 22, 2023 | Jul 13, 2023 | 84.4% | — |
| CVE-2020-35730
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability |
Roundcube · Roundcube Webmail | Jun 22, 2023 | Jul 13, 2023 | 32.9% | — |
| CVE-2021-44026
Roundcube Webmail SQL Injection Vulnerability |
Roundcube · Roundcube Webmail | Jun 22, 2023 | Jul 13, 2023 | 69.9% | — |
| CVE-2023-20887
Vmware Aria Operations for Networks Command Injection Vulnerability |
VMware · Aria Operations for Networks | Jun 22, 2023 | Jul 13, 2023 | 98.3% | — |
| CVE-2023-27997 Ransomware
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability |
Fortinet · FortiOS and FortiProxy SSL-VPN | Jun 13, 2023 | Jul 4, 2023 | 86.8% | — |
| CVE-2023-3079
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Jun 7, 2023 | Jun 28, 2023 | 37.9% | — |
| CVE-2023-33009
Zyxel Multiple Firewalls Buffer Overflow Vulnerability |
Zyxel · Multiple Firewalls | Jun 5, 2023 | Jun 26, 2023 | 28.1% | — |
| CVE-2023-33010
Zyxel Multiple Firewalls Buffer Overflow Vulnerability |
Zyxel · Multiple Firewalls | Jun 5, 2023 | Jun 26, 2023 | 29.0% | — |
| CVE-2023-34362 Ransomware
Progress MOVEit Transfer SQL Injection Vulnerability |
Progress · MOVEit Transfer | Jun 2, 2023 | Jun 23, 2023 | 99.9% | — |
| CVE-2023-28771
Zyxel Multiple Firewalls OS Command Injection Vulnerability |
Zyxel · Multiple Firewalls | May 31, 2023 | Jun 21, 2023 | 99.3% | — |
| CVE-2023-2868
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability |
Barracuda Networks · Email Security Gateway (ESG) Appliance | May 26, 2023 | Jun 16, 2023 | 86.8% | — |
| CVE-2023-28204
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability |
Apple · Multiple Products | May 22, 2023 | Jun 12, 2023 | 14.3% | — |
| CVE-2023-32373
Apple Multiple Products WebKit Use-After-Free Vulnerability |
Apple · Multiple Products | May 22, 2023 | Jun 12, 2023 | 12.2% | — |
| CVE-2023-32409
Apple Multiple Products WebKit Sandbox Escape Vulnerability |
Apple · Multiple Products | May 22, 2023 | Jun 12, 2023 | 16.5% | — |
| CVE-2004-1464
Cisco IOS Denial-of-Service Vulnerability |
Cisco · IOS | May 19, 2023 | Jun 9, 2023 | 4.8% | — |
| CVE-2016-6415
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability |
Cisco · IOS, IOS XR, and IOS XE | May 19, 2023 | Jun 9, 2023 | 87.7% | — |
| CVE-2023-21492
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnera… |
Samsung · Mobile Devices | May 19, 2023 | Jun 9, 2023 | 2.6% | — |
| CVE-2010-3904
Linux Kernel Improper Input Validation Vulnerability |
Linux · Kernel | May 12, 2023 | Jun 2, 2023 | 15.9% | — |
| CVE-2014-0196
Linux Kernel Race Condition Vulnerability |
Linux · Kernel | May 12, 2023 | Jun 2, 2023 | 20.3% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.