Exploited Vulnerabilities

What to patch first · CISA Known Exploited Vulnerabilities with FIRST EPSS scores (Nov 12) and mentions in Asia-Pacific coverage
1779
Known exploited
38
Added · 30d
361
Used by ransomware
70
In APAC news · 90d
2165 CVEs
CVEVendor · productAdded to KEVDue EPSSAPAC news
CVE-2022-26486
Mozilla Firefox Use-After-Free Vulnerability
Mozilla · Firefox Mar 7, 2022 Mar 21, 2022 2.4% —
CVE-2002-0367
Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows Mar 3, 2022 Mar 24, 2022 4.9% —
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows Mar 3, 2022 Mar 24, 2022 7.2% —
CVE-2008-2992 Ransomware
Adobe Reader and Acrobat Input Validation Vulnerability
Adobe · Acrobat and Reader Mar 3, 2022 Mar 24, 2022 99.8% —
CVE-2008-3431
Oracle VirtualBox Insufficient Input Validation Vulnerability
Oracle · VirtualBox Mar 3, 2022 Mar 24, 2022 6.9% —
CVE-2009-1123
Microsoft Windows Improper Input Validation Vulnerability
Microsoft · Windows Mar 3, 2022 Mar 24, 2022 4.9% —
CVE-2009-3129
Microsoft Excel Featheader Record Memory Corruption Vulnerability
Microsoft · Excel Mar 3, 2022 Mar 24, 2022 84.0% —
CVE-2010-0188 Ransomware
Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
Adobe · Reader and Acrobat Mar 3, 2022 Mar 24, 2022 88.1% —
CVE-2010-0232
Microsoft Windows Kernel Exception Handler Vulnerability
Microsoft · Windows Mar 3, 2022 Mar 24, 2022 28.7% —
CVE-2010-3333
Microsoft Office Stack-based Buffer Overflow Vulnerability
Microsoft · Office Mar 3, 2022 Mar 24, 2022 89.4% —
CVE-2011-0611
Adobe Flash Player Remote Code Execution Vulnerability
Adobe · Flash Player Mar 3, 2022 Mar 24, 2022 99.4% —
CVE-2011-1889
Microsoft Forefront TMG Remote Code Execution Vulnerability
Microsoft · Forefront Threat Management Gateway (TMG) Mar 3, 2022 Mar 24, 2022 49.0% —
CVE-2011-3544
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle · Java SE JDK and JRE Mar 3, 2022 Mar 24, 2022 96.7% —
CVE-2012-0507 Ransomware
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle · Java SE Mar 3, 2022 Mar 24, 2022 98.2% —
CVE-2012-1535
Adobe Flash Player Arbitrary Code Execution Vulnerability
Adobe · Flash Player Mar 3, 2022 Mar 24, 2022 70.4% —
CVE-2012-1723 Ransomware
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle · Java SE Mar 3, 2022 Mar 24, 2022 93.6% —
CVE-2012-1856
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
Microsoft · Office Mar 3, 2022 Mar 24, 2022 72.0% —
CVE-2012-4681 Ransomware
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle · Java SE Mar 3, 2022 Mar 24, 2022 98.5% —
CVE-2013-0632
Adobe ColdFusion Authentication Bypass Vulnerability
Adobe · ColdFusion Mar 3, 2022 Mar 24, 2022 93.1% —
CVE-2013-0640
Adobe Reader and Acrobat Memory Corruption Vulnerability
Adobe · Reader and Acrobat Mar 3, 2022 Mar 24, 2022 86.9% —
CVE-2013-0641
Adobe Reader Buffer Overflow Vulnerability
Adobe · Reader Mar 3, 2022 Mar 24, 2022 32.3% —
CVE-2013-1347
Microsoft Internet Explorer Remote Code Execution Vulnerability
Microsoft · Internet Explorer Mar 3, 2022 Mar 24, 2022 77.7% —
CVE-2013-1675
Mozilla Firefox Information Disclosure Vulnerability
Mozilla · Firefox Mar 3, 2022 Mar 24, 2022 6.7% —
CVE-2013-3346
Adobe Reader and Acrobat Memory Corruption Vulnerability
Adobe · Reader and Acrobat Mar 3, 2022 Mar 24, 2022 78.9% —
CVE-2013-3897
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft · Internet Explorer Mar 3, 2022 Mar 24, 2022 77.3% —
CVE-2013-5065
Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft · Windows Mar 3, 2022 Mar 24, 2022 34.7% —
CVE-2014-0496
Adobe Reader and Acrobat Use-After-Free Vulnerability
Adobe · Reader and Acrobat Mar 3, 2022 Mar 24, 2022 40.0% —
CVE-2014-4114
Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulner…
Microsoft · Windows Mar 3, 2022 Mar 24, 2022 81.6% —
CVE-2015-1642
Microsoft Office Memory Corruption Vulnerability
Microsoft · Office Mar 3, 2022 Mar 24, 2022 53.1% —
CVE-2015-1701 Ransomware
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k Mar 3, 2022 Mar 24, 2022 56.2% —
CVE-2015-2387
Microsoft ATM Font Driver Privilege Escalation Vulnerability
Microsoft · ATM Font Driver Mar 3, 2022 Mar 24, 2022 34.9% —
CVE-2015-2424
Microsoft PowerPoint Memory Corruption Vulnerability
Microsoft · PowerPoint Mar 3, 2022 Mar 24, 2022 40.1% —
CVE-2015-2545
Microsoft Office Malformed EPS File Vulnerability
Microsoft · Office Mar 3, 2022 Mar 24, 2022 85.9% —
CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
Oracle · Java SE Mar 3, 2022 Mar 24, 2022 25.5% —
CVE-2015-3043
Adobe Flash Player Memory Corruption Vulnerability
Adobe · Flash Player Mar 3, 2022 Mar 24, 2022 73.9% —
CVE-2015-4902
Oracle Java SE Integrity Check Vulnerability
Oracle · Java SE Mar 3, 2022 Mar 24, 2022 13.6% —
CVE-2015-5119
Adobe Flash Player Use-After-Free Vulnerability
Adobe · Flash Player Mar 3, 2022 Mar 24, 2022 98.6% —
CVE-2015-7645 Ransomware
Adobe Flash Player Arbitrary Code Execution Vulnerability
Adobe · Flash Player Mar 3, 2022 Mar 24, 2022 65.3% —
CVE-2016-0099 Ransomware
Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
Microsoft · Windows Mar 3, 2022 Mar 24, 2022 37.0% —
CVE-2016-1019 Ransomware
Adobe Flash Player Arbitrary Code Execution Vulnerability
Adobe · Flash Player Mar 3, 2022 Mar 24, 2022 22.3% —
CVE-2016-4117 Ransomware
Adobe Flash Player Arbitrary Code Execution Vulnerability
Adobe · Flash Player Mar 3, 2022 Mar 24, 2022 94.3% —
CVE-2016-5195
Linux Kernel Race Condition Vulnerability
Linux · Kernel Mar 3, 2022 Mar 24, 2022 83.5% —
CVE-2016-7193
Microsoft Office Memory Corruption Vulnerability
Microsoft · Office Mar 3, 2022 Mar 24, 2022 57.6% —
CVE-2016-7262
Microsoft Office Security Feature Bypass Vulnerability
Microsoft · Excel Mar 3, 2022 Mar 24, 2022 58.8% —
CVE-2016-7855
Adobe Flash Player Use-After-Free Vulnerability
Adobe · Flash Player Mar 3, 2022 Mar 24, 2022 25.2% —
CVE-2016-8562
Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability
Siemens · SIMATIC CP Mar 3, 2022 Mar 24, 2022 3.6% —
CVE-2017-0001
Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
Microsoft · Graphics Device Interface (GDI) Mar 3, 2022 Mar 24, 2022 3.1% —
CVE-2017-0261
Microsoft Office Use-After-Free Vulnerability
Microsoft · Office Mar 3, 2022 Mar 24, 2022 78.1% —
CVE-2017-11292
Adobe Flash Player Type Confusion Vulnerability
Adobe · Flash Player Mar 3, 2022 Mar 24, 2022 11.2% —
CVE-2017-11826
Microsoft Office Remote Code Execution Vulnerability
Microsoft · Office Mar 3, 2022 Mar 24, 2022 82.2% —
← Prev 27 / 44 Next →

Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.