| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability |
Linux · Kernel | Sep 15, 2022 | Oct 6, 2022 | 47.7% | — |
| CVE-2013-2596
Linux Kernel Integer Overflow Vulnerability |
Linux · Kernel | Sep 15, 2022 | Oct 6, 2022 | 3.2% | — |
| CVE-2013-2597
Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability |
Code Aurora · ACDB Audio Driver | Sep 15, 2022 | Oct 6, 2022 | 1.5% | — |
| CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability |
Linux · Kernel | Sep 15, 2022 | Oct 6, 2022 | 39.7% | — |
| CVE-2022-40139
Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability |
Trend Micro · Apex One and Apex One as a Service | Sep 15, 2022 | Oct 6, 2022 | 3.4% | — |
| CVE-2022-32917
Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability |
Apple · iOS, iPadOS, and macOS | Sep 14, 2022 | Oct 5, 2022 | 5.6% | — |
| CVE-2022-37969 Ransomware
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vul… |
Microsoft · Windows | Sep 14, 2022 | Oct 5, 2022 | 28.5% | — |
| CVE-2011-1823
Android OS Privilege Escalation Vulnerability |
Android · Android OS | Sep 8, 2022 | Sep 29, 2022 | 41.4% | — |
| CVE-2011-4723
D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability |
D-Link · DIR-300 Router | Sep 8, 2022 | Sep 29, 2022 | 3.1% | — |
| CVE-2017-5521
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability |
NETGEAR · Multiple Devices | Sep 8, 2022 | Sep 29, 2022 | 89.4% | — |
| CVE-2018-13374 Ransomware
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability |
Fortinet · FortiOS and FortiADC | Sep 8, 2022 | Sep 29, 2022 | 38.1% | — |
| CVE-2018-2628
Oracle WebLogic Server Unspecified Vulnerability |
Oracle · WebLogic Server | Sep 8, 2022 | Sep 29, 2022 | 100.0% | — |
| CVE-2018-6530 Ransomware
D-Link Multiple Routers OS Command Injection Vulnerability |
D-Link · Multiple Routers | Sep 8, 2022 | Sep 29, 2022 | 96.7% | — |
| CVE-2018-7445
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability |
MikroTik · RouterOS | Sep 8, 2022 | Sep 29, 2022 | 65.8% | — |
| CVE-2020-9934
Apple iOS, iPadOS, and macOS Input Validation Vulnerability |
Apple · iOS, iPadOS, and macOS | Sep 8, 2022 | Sep 29, 2022 | 3.2% | — |
| CVE-2022-26258
D-Link DIR-820L Remote Code Execution Vulnerability |
D-Link · DIR-820L | Sep 8, 2022 | Sep 29, 2022 | 91.6% | — |
| CVE-2022-27593 Ransomware
QNAP Photo Station Externally Controlled Reference Vulnerability |
QNAP · Photo Station | Sep 8, 2022 | Sep 29, 2022 | 87.9% | — |
| CVE-2022-3075
Google Chromium Mojo Insufficient Data Validation Vulnerability |
Google · Chromium Mojo | Sep 8, 2022 | Sep 29, 2022 | 5.8% | — |
| CVE-2020-28949
PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability |
PEAR · Archive_Tar | Aug 25, 2022 | Sep 15, 2022 | 84.6% | — |
| CVE-2020-36193
PEAR Archive_Tar Improper Link Resolution Vulnerability |
PEAR · Archive_Tar | Aug 25, 2022 | Sep 15, 2022 | 70.6% | — |
| CVE-2021-31010
Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability |
Apple · iOS, macOS, watchOS | Aug 25, 2022 | Sep 15, 2022 | 3.7% | — |
| CVE-2021-38406
Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability |
Delta Electronics · DOPSoft 2 | Aug 25, 2022 | Sep 15, 2022 | 76.4% | — |
| CVE-2021-39226
Grafana Authentication Bypass Vulnerability |
Grafana Labs · Grafana | Aug 25, 2022 | Sep 15, 2022 | 99.9% | — |
| CVE-2022-2294 Ransomware
WebRTC Heap Buffer Overflow Vulnerability |
WebRTC · WebRTC | Aug 25, 2022 | Sep 15, 2022 | 70.8% | — |
| CVE-2022-22963
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability |
VMware Tanzu · Spring Cloud | Aug 25, 2022 | Sep 15, 2022 | 99.9% | — |
| CVE-2022-24112
Apache APISIX Authentication Bypass Vulnerability |
Apache · APISIX | Aug 25, 2022 | Sep 15, 2022 | 96.1% | — |
| CVE-2022-24706
Apache CouchDB Insecure Default Initialization of Resource Vulnerability |
Apache · CouchDB | Aug 25, 2022 | Sep 15, 2022 | 92.5% | — |
| CVE-2022-26352 Ransomware
dotCMS Unrestricted Upload of File Vulnerability |
dotCMS · dotCMS | Aug 25, 2022 | Sep 15, 2022 | 91.2% | — |
| CVE-2022-0028
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerabili… |
Palo Alto Networks · PAN-OS | Aug 22, 2022 | Sep 12, 2022 | 2.7% | — |
| CVE-2017-15944
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability |
Palo Alto Networks · PAN-OS | Aug 18, 2022 | Sep 8, 2022 | 98.3% | — |
| CVE-2022-21971
Microsoft Windows Runtime Remote Code Execution Vulnerability |
Microsoft · Windows | Aug 18, 2022 | Sep 8, 2022 | 53.9% | — |
| CVE-2022-22536
SAP Multiple Products HTTP Request Smuggling Vulnerability |
SAP · Multiple Products | Aug 18, 2022 | Sep 8, 2022 | 97.9% | — |
| CVE-2022-26923
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability |
Microsoft · Active Directory | Aug 18, 2022 | Sep 8, 2022 | 83.5% | — |
| CVE-2022-2856
Google Chromium Intents Insufficient Input Validation Vulnerability |
Google · Chromium Intents | Aug 18, 2022 | Sep 8, 2022 | 4.6% | — |
| CVE-2022-32893
Apple iOS and macOS Out-of-Bounds Write Vulnerability |
Apple · iOS and macOS | Aug 18, 2022 | Sep 8, 2022 | 10.5% | — |
| CVE-2022-32894
Apple iOS and macOS Out-of-Bounds Write Vulnerability |
Apple · iOS and macOS | Aug 18, 2022 | Sep 8, 2022 | 3.3% | — |
| CVE-2022-27925 Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Aug 11, 2022 | Sep 1, 2022 | 98.7% | — |
| CVE-2022-37042 Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Aug 11, 2022 | Sep 1, 2022 | 92.1% | — |
| CVE-2022-30333 Ransomware
RARLAB UnRAR Directory Traversal Vulnerability |
RARLAB · UnRAR | Aug 9, 2022 | Aug 30, 2022 | 99.2% | — |
| CVE-2022-34713
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerab… |
Microsoft · Windows | Aug 9, 2022 | Aug 30, 2022 | 67.8% | — |
| CVE-2022-27924 Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Aug 4, 2022 | Aug 25, 2022 | 93.9% | — |
| CVE-2022-26138
Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability |
Atlassian · Confluence | Jul 29, 2022 | Aug 19, 2022 | 98.2% | — |
| CVE-2022-22047
Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation … |
Microsoft · Windows | Jul 12, 2022 | Aug 2, 2022 | 18.3% | — |
| CVE-2022-26925
Microsoft Windows LSA Spoofing Vulnerability |
Microsoft · Windows | Jul 1, 2022 | Jul 22, 2022 | 10.5% | — |
| CVE-2018-4344
Apple Multiple Products Memory Corruption Vulnerability |
Apple · Multiple Products | Jun 27, 2022 | Jul 18, 2022 | 2.4% | — |
| CVE-2019-8605
Apple Multiple Products Use-After-Free Vulnerability |
Apple · Multiple Products | Jun 27, 2022 | Jul 18, 2022 | 17.6% | — |
| CVE-2020-3837
Apple Multiple Products Memory Corruption Vulnerability |
Apple · Multiple Products | Jun 27, 2022 | Jul 18, 2022 | 14.8% | — |
| CVE-2020-9907
Apple Multiple Products Memory Corruption Vulnerability |
Apple · Multiple Products | Jun 27, 2022 | Jul 18, 2022 | 3.2% | — |
| CVE-2021-30533
Google Chromium PopupBlocker Security Bypass Vulnerability |
Google · Chromium PopupBlocker | Jun 27, 2022 | Jul 18, 2022 | 16.7% | — |
| CVE-2021-30983
Apple iOS and iPadOS Buffer Overflow Vulnerability |
Apple · iOS and iPadOS | Jun 27, 2022 | Jul 18, 2022 | 2.9% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.