Exploited Vulnerabilities

What to patch first · CISA Known Exploited Vulnerabilities with FIRST EPSS scores (Nov 12) and mentions in Asia-Pacific coverage
1779
Known exploited
38
Added · 30d
361
Used by ransomware
70
In APAC news · 90d
2165 CVEs
CVEVendor · productAdded to KEVDue EPSSAPAC news
CVE-2021-4034 Ransomware
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
Red Hat · Polkit Jun 27, 2022 Jul 18, 2022 94.9% —
CVE-2022-29499 Ransomware
Mitel MiVoice Connect Data Validation Vulnerability
Mitel · MiVoice Connect Jun 27, 2022 Jul 18, 2022 55.2% —
CVE-2022-30190 Ransomware
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerab…
Microsoft · Windows Jun 14, 2022 Jul 5, 2022 98.5% —
CVE-2016-2386
SAP NetWeaver SQL Injection Vulnerability
SAP · NetWeaver Jun 9, 2022 Jun 30, 2022 71.5% —
CVE-2016-2388
SAP NetWeaver Information Disclosure Vulnerability
SAP · NetWeaver Jun 9, 2022 Jun 30, 2022 52.2% —
CVE-2021-38163
SAP NetWeaver Unrestricted File Upload Vulnerability
SAP · NetWeaver Jun 9, 2022 Jun 30, 2022 36.9% —
CVE-2006-2492
Microsoft Word Malformed Object Pointer Vulnerability
Microsoft · Word Jun 8, 2022 Jun 22, 2022 48.1% —
CVE-2007-5659
Adobe Acrobat and Reader Buffer Overflow Vulnerability
Adobe · Acrobat and Reader Jun 8, 2022 Jun 22, 2022 87.3% —
CVE-2008-0655
Adobe Acrobat and Reader Unspecified Vulnerability
Adobe · Acrobat and Reader Jun 8, 2022 Jun 22, 2022 37.9% —
CVE-2009-0557
Microsoft Office Object Record Corruption Vulnerability
Microsoft · Office Jun 8, 2022 Jun 22, 2022 52.8% —
CVE-2009-0563
Microsoft Office Buffer Overflow Vulnerability
Microsoft · Office Jun 8, 2022 Jun 22, 2022 59.6% —
CVE-2009-1862
Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
Adobe · Acrobat and Reader, Flash Player Jun 8, 2022 Jun 22, 2022 21.2% —
CVE-2009-3953
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
Adobe · Acrobat and Reader Jun 8, 2022 Jun 22, 2022 83.2% —
CVE-2009-4324
Adobe Acrobat and Reader Use-After-Free Vulnerability
Adobe · Acrobat and Reader Jun 8, 2022 Jun 22, 2022 81.9% —
CVE-2010-1297
Adobe Flash Player Memory Corruption Vulnerability
Adobe · Flash Player Jun 8, 2022 Jun 22, 2022 82.5% —
CVE-2010-2572
Microsoft PowerPoint Buffer Overflow Vulnerability
Microsoft · PowerPoint Jun 8, 2022 Jun 22, 2022 58.6% —
CVE-2010-2883
Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
Adobe · Acrobat and Reader Jun 8, 2022 Jun 22, 2022 81.4% —
CVE-2011-0609
Adobe Flash Player Unspecified Vulnerability
Adobe · Flash Player Jun 8, 2022 Jun 22, 2022 63.5% —
CVE-2011-2462
Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
Adobe · Reader and Acrobat Jun 8, 2022 Jun 22, 2022 88.6% —
CVE-2012-0151
Microsoft Windows Authenticode Signature Verification Remote Code Execution Vul…
Microsoft · Windows Jun 8, 2022 Jun 22, 2022 87.7% —
CVE-2012-0754
Adobe Flash Player Memory Corruption Vulnerability
Adobe · Flash Player Jun 8, 2022 Jun 22, 2022 91.2% —
CVE-2012-0767
Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability
Adobe · Flash Player Jun 8, 2022 Jun 22, 2022 6.2% —
CVE-2012-1889
Microsoft XML Core Services Memory Corruption Vulnerability
Microsoft · XML Core Services Jun 8, 2022 Jun 22, 2022 83.5% —
CVE-2012-4969
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft · Internet Explorer Jun 8, 2022 Jun 22, 2022 80.2% —
CVE-2012-5054
Adobe Flash Player Integer Overflow Vulnerability
Adobe · Flash Player Jun 8, 2022 Jun 22, 2022 21.2% —
CVE-2013-1331
Microsoft Office Buffer Overflow Vulnerability
Microsoft · Office Jun 8, 2022 Jun 22, 2022 79.8% —
CVE-2016-1646
Google Chromium V8 Out-of-Bounds Read Vulnerability
Google · Chromium V8 Jun 8, 2022 Jun 22, 2022 48.1% —
CVE-2016-5198
Google Chromium V8 Out-of-Bounds Memory Vulnerability
Google · Chromium V8 Jun 8, 2022 Jun 22, 2022 34.2% —
CVE-2017-5030
Google Chromium V8 Memory Corruption Vulnerability
Google · Chromium V8 Jun 8, 2022 Jun 22, 2022 40.6% —
CVE-2017-5070
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8 Jun 8, 2022 Jun 22, 2022 32.1% —
CVE-2017-6862
NETGEAR Multiple Devices Buffer Overflow Vulnerability
NETGEAR · Multiple Devices Jun 8, 2022 Jun 22, 2022 45.7% —
CVE-2018-17463
Google Chromium V8 Remote Code Execution Vulnerability
Google · Chromium V8 Jun 8, 2022 Jun 22, 2022 84.6% —
CVE-2018-17480
Google Chromium V8 Out-of-Bounds Write Vulnerability
Google · Chromium V8 Jun 8, 2022 Jun 22, 2022 35.6% —
CVE-2018-4990
Adobe Acrobat and Reader Double Free Vulnerability
Adobe · Acrobat and Reader Jun 8, 2022 Jun 22, 2022 35.8% —
CVE-2018-6065
Google Chromium V8 Integer Overflow Vulnerability
Google · Chromium V8 Jun 8, 2022 Jun 22, 2022 60.3% —
CVE-2019-15271
Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability
Cisco · RV Series Routers Jun 8, 2022 Jun 22, 2022 5.5% —
CVE-2019-5825
Google Chromium V8 Out-of-Bounds Write Vulnerability
Google · Chromium V8 Jun 8, 2022 Jun 22, 2022 55.9% —
CVE-2019-7192 Ransomware
QNAP Photo Station Improper Access Control Vulnerability
QNAP · Photo Station Jun 8, 2022 Jun 22, 2022 88.1% —
CVE-2019-7193 Ransomware
QNAP QTS Improper Input Validation Vulnerability
QNAP · QTS Jun 8, 2022 Jun 22, 2022 14.4% —
CVE-2019-7194 Ransomware
QNAP Photo Station Path Traversal Vulnerability
QNAP · Photo Station Jun 8, 2022 Jun 22, 2022 82.7% —
CVE-2019-7195 Ransomware
QNAP Photo Station Path Traversal Vulnerability
QNAP · Photo Station Jun 8, 2022 Jun 22, 2022 89.3% —
CVE-2022-26134 Ransomware
Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
Atlassian · Confluence Server/Data Center Jun 2, 2022 Jun 6, 2022 100.0% —
CVE-2010-0738 Ransomware
Red Hat JBoss Authentication Bypass Vulnerability
Red Hat · JBoss May 25, 2022 Jun 15, 2022 73.8% —
CVE-2010-0840
Oracle JRE Unspecified Vulnerability
Oracle · Java Runtime Environment (JRE) May 25, 2022 Jun 15, 2022 96.3% —
CVE-2010-1428 Ransomware
Red Hat JBoss Information Disclosure Vulnerability
Red Hat · JBoss May 25, 2022 Jun 15, 2022 52.7% —
CVE-2012-1710 Ransomware
Oracle Fusion Middleware Unspecified Vulnerability
Oracle · Fusion Middleware May 25, 2022 Jun 15, 2022 7.8% —
CVE-2013-0074 Ransomware
Microsoft Silverlight Double Dereference Vulnerability
Microsoft · Silverlight May 25, 2022 Jun 15, 2022 78.9% —
CVE-2013-0422 Ransomware
Oracle JRE Remote Code Execution Vulnerability
Oracle · Java Runtime Environment (JRE) May 25, 2022 Jun 15, 2022 97.1% —
CVE-2013-0431 Ransomware
Oracle JRE Sandbox Bypass Vulnerability
Oracle · Java Runtime Environment (JRE) May 25, 2022 Jun 15, 2022 90.1% —
CVE-2013-2423
Oracle JRE Unspecified Vulnerability
Oracle · Java Runtime Environment (JRE) May 25, 2022 Jun 15, 2022 85.2% —
← Prev 21 / 44 Next →

Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.