| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2015-5317
Jenkins User Interface (UI) Information Disclosure Vulnerability |
Jenkins · Jenkins User Interface (UI) | May 12, 2023 | Jun 2, 2023 | 23.0% | — |
| CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability |
Oracle · Java SE and JRockit | May 12, 2023 | Jun 2, 2023 | 92.3% | — |
| CVE-2016-8735
Apache Tomcat Remote Code Execution Vulnerability |
Apache · Tomcat | May 12, 2023 | Jun 2, 2023 | 90.3% | — |
| CVE-2021-3560
Red Hat Polkit Incorrect Authorization Vulnerability |
Red Hat · Polkit | May 12, 2023 | Jun 2, 2023 | 21.8% | — |
| CVE-2023-25717
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability |
Ruckus Wireless · Multiple Products | May 12, 2023 | Jun 2, 2023 | 98.1% | — |
| CVE-2023-29336
Microsoft Win32K Privilege Escalation Vulnerability |
Microsoft · Win32k | May 9, 2023 | May 30, 2023 | 41.2% | — |
| CVE-2021-45046 Ransomware
Apache Log4j2 Deserialization of Untrusted Data Vulnerability |
Apache · Log4j2 | May 1, 2023 | May 22, 2023 | 100.0% | — |
| CVE-2023-1389
TP-Link Archer AX-21 Command Injection Vulnerability |
TP-Link · Archer AX21 | May 1, 2023 | May 22, 2023 | 100.0% | — |
| CVE-2023-21839
Oracle WebLogic Server Unspecified Vulnerability |
Oracle · WebLogic Server | May 1, 2023 | May 22, 2023 | 99.9% | — |
| CVE-2023-2136
Google Chrome Skia Integer Overflow Vulnerability |
Google · Chromium Skia | Apr 21, 2023 | May 12, 2023 | 5.8% | — |
| CVE-2023-27350 Ransomware
PaperCut MF/NG Improper Access Control Vulnerability |
PaperCut · MF/NG | Apr 21, 2023 | May 12, 2023 | 100.0% | — |
| CVE-2023-28432
MinIO Information Disclosure Vulnerability |
MinIO · MinIO | Apr 21, 2023 | May 12, 2023 | 84.0% | — |
| CVE-2017-6742
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability |
Cisco · IOS and IOS XE Software | Apr 19, 2023 | May 10, 2023 | 21.3% | — |
| CVE-2019-8526
Apple macOS Use-After-Free Vulnerability |
Apple · macOS | Apr 17, 2023 | May 8, 2023 | 0.7% | — |
| CVE-2023-2033
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Apr 17, 2023 | May 8, 2023 | 40.6% | — |
| CVE-2023-20963
Android Framework Privilege Escalation Vulnerability |
Android · Framework | Apr 13, 2023 | May 4, 2023 | 1.5% | — |
| CVE-2023-29492
Novi Survey Insecure Deserialization Vulnerability |
Novi Survey · Novi Survey | Apr 13, 2023 | May 4, 2023 | 2.7% | — |
| CVE-2023-28252 Ransomware
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vul… |
Microsoft · Windows | Apr 11, 2023 | May 2, 2023 | 48.9% | — |
| CVE-2023-28205
Apple Multiple Products WebKit Use-After-Free Vulnerability |
Apple · Multiple Products | Apr 10, 2023 | May 1, 2023 | 27.1% | — |
| CVE-2023-28206
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerabi… |
Apple · iOS, iPadOS, and macOS | Apr 10, 2023 | May 1, 2023 | 23.2% | — |
| CVE-2019-1388 Ransomware
Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability |
Microsoft · Windows | Apr 7, 2023 | Apr 28, 2023 | 8.6% | — |
| CVE-2021-27876 Ransomware
Veritas Backup Exec Agent File Access Vulnerability |
Veritas · Backup Exec Agent | Apr 7, 2023 | Apr 28, 2023 | 13.5% | — |
| CVE-2021-27877 Ransomware
Veritas Backup Exec Agent Improper Authentication Vulnerability |
Veritas · Backup Exec Agent | Apr 7, 2023 | Apr 28, 2023 | 64.9% | — |
| CVE-2021-27878 Ransomware
Veritas Backup Exec Agent Command Execution Vulnerability |
Veritas · Backup Exec Agent | Apr 7, 2023 | Apr 28, 2023 | 24.0% | — |
| CVE-2023-26083
Arm Mali GPU Kernel Driver Information Disclosure Vulnerability |
Arm · Mali Graphics Processing Unit (GPU) | Apr 7, 2023 | Apr 28, 2023 | 1.2% | — |
| CVE-2022-27926
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerabili… |
Synacor · Zimbra Collaboration Suite (ZCS) | Apr 3, 2023 | Apr 24, 2023 | 17.6% | — |
| CVE-2013-3163
Microsoft Internet Explorer Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Mar 30, 2023 | Apr 20, 2023 | 70.7% | — |
| CVE-2017-7494 Ransomware
Samba Remote Code Execution Vulnerability |
Samba · Samba | Mar 30, 2023 | Apr 20, 2023 | 99.4% | — |
| CVE-2021-30900
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability |
Apple · iOS, iPadOS, and macOS | Mar 30, 2023 | Apr 20, 2023 | 5.2% | — |
| CVE-2022-22706
Arm Mali GPU Kernel Driver Unspecified Vulnerability |
Arm · Mali Graphics Processing Unit (GPU) | Mar 30, 2023 | Apr 20, 2023 | 1.1% | — |
| CVE-2022-3038
Google Chromium Network Service Use-After-Free Vulnerability |
Google · Chromium Network Service | Mar 30, 2023 | Apr 20, 2023 | 24.9% | — |
| CVE-2022-38181
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability |
Arm · Mali Graphics Processing Unit (GPU) | Mar 30, 2023 | Apr 20, 2023 | 18.5% | — |
| CVE-2022-39197
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability |
Fortra · Cobalt Strike | Mar 30, 2023 | Apr 20, 2023 | 44.1% | — |
| CVE-2022-42948
Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability |
Fortra · Cobalt Strike | Mar 30, 2023 | Apr 20, 2023 | 2.7% | — |
| CVE-2023-0266
Linux Kernel Use-After-Free Vulnerability |
Linux · Kernel | Mar 30, 2023 | Apr 20, 2023 | 2.6% | — |
| CVE-2023-26360
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
Adobe · ColdFusion | Mar 15, 2023 | Apr 5, 2023 | 97.3% | — |
| CVE-2022-41328
Fortinet FortiOS Path Traversal Vulnerability |
Fortinet · FortiOS | Mar 14, 2023 | Apr 4, 2023 | 10.7% | — |
| CVE-2023-23397
Microsoft Office Outlook Privilege Escalation Vulnerability |
Microsoft · Office | Mar 14, 2023 | Apr 4, 2023 | 97.2% | — |
| CVE-2023-24880 Ransomware
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability |
Microsoft · Windows | Mar 14, 2023 | Apr 4, 2023 | 78.2% | — |
| CVE-2020-5741
Plex Media Server Remote Code Execution Vulnerability |
Plex · Media Server | Mar 10, 2023 | Mar 31, 2023 | 72.9% | — |
| CVE-2021-39144
XStream Remote Code Execution Vulnerability |
XStream · XStream | Mar 10, 2023 | Mar 31, 2023 | 98.1% | — |
| CVE-2022-28810
Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability |
Zoho · ManageEngine | Mar 7, 2023 | Mar 28, 2023 | 71.0% | — |
| CVE-2022-33891
Apache Spark Command Injection Vulnerability |
Apache · Spark | Mar 7, 2023 | Mar 28, 2023 | 93.2% | — |
| CVE-2022-35914
Teclib GLPI Remote Code Execution Vulnerability |
Teclib · GLPI | Mar 7, 2023 | Mar 28, 2023 | 99.9% | — |
| CVE-2022-36537 Ransomware
ZK Framework AuUploader Unspecified Vulnerability |
ZK Framework · AuUploader | Feb 27, 2023 | Mar 20, 2023 | 95.8% | — |
| CVE-2022-40765 Ransomware
Mitel MiVoice Connect Command Injection Vulnerability |
Mitel · MiVoice Connect | Feb 21, 2023 | Mar 14, 2023 | 10.6% | — |
| CVE-2022-41223 Ransomware
Mitel MiVoice Connect Code Injection Vulnerability |
Mitel · MiVoice Connect | Feb 21, 2023 | Mar 14, 2023 | 10.7% | — |
| CVE-2022-47986 Ransomware
IBM Aspera Faspex Code Execution Vulnerability |
IBM · Aspera Faspex | Feb 21, 2023 | Mar 14, 2023 | 100.0% | — |
| CVE-2022-46169
Cacti Command Injection Vulnerability |
Cacti · Cacti | Feb 16, 2023 | Mar 9, 2023 | 99.8% | — |
| CVE-2023-21715
Microsoft Office Publisher Security Feature Bypass Vulnerability |
Microsoft · Office | Feb 14, 2023 | Mar 7, 2023 | 12.0% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.