| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2022-23131
Zabbix Frontend Authentication Bypass Vulnerability |
Zabbix · Frontend | Feb 22, 2022 | Mar 8, 2022 | 95.7% | — |
| CVE-2022-23134
Zabbix Frontend Improper Access Control Vulnerability |
Zabbix · Frontend | Feb 22, 2022 | Mar 8, 2022 | 95.3% | — |
| CVE-2013-3906
Microsoft Graphics Component Memory Corruption Vulnerability |
Microsoft · Graphics Component | Feb 15, 2022 | Aug 15, 2022 | 84.9% | — |
| CVE-2014-1761
Microsoft Word Memory Corruption Vulnerability |
Microsoft · Word | Feb 15, 2022 | Aug 15, 2022 | 77.7% | — |
| CVE-2017-9841
PHPUnit Command Injection Vulnerability |
PHPUnit · PHPUnit | Feb 15, 2022 | Aug 15, 2022 | 100.0% | — |
| CVE-2018-15982 Ransomware
Adobe Flash Player Use-After-Free Vulnerability |
Adobe · Flash Player | Feb 15, 2022 | Aug 15, 2022 | 89.6% | — |
| CVE-2018-20250 Ransomware
WinRAR Absolute Path Traversal Vulnerability |
RARLAB · WinRAR | Feb 15, 2022 | Aug 15, 2022 | 96.0% | — |
| CVE-2018-8174 Ransomware
Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability |
Microsoft · Windows | Feb 15, 2022 | Aug 15, 2022 | 88.2% | — |
| CVE-2019-0752 Ransomware
Microsoft Internet Explorer Type Confusion Vulnerability |
Microsoft · Internet Explorer | Feb 15, 2022 | Aug 15, 2022 | 81.7% | — |
| CVE-2022-0609
Google Chromium Animation Use-After-Free Vulnerability |
Google · Chromium Animation | Feb 15, 2022 | Mar 1, 2022 | 22.9% | — |
| CVE-2022-24086
Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability |
Adobe · Commerce and Magento Open Source | Feb 15, 2022 | Mar 1, 2022 | 99.2% | — |
| CVE-2022-22620
Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability |
Apple · iOS, iPadOS, and macOS | Feb 11, 2022 | Feb 25, 2022 | 16.3% | — |
| CVE-2014-4404
Apple OS X Heap-Based Buffer Overflow Vulnerability |
Apple · OS X | Feb 10, 2022 | Aug 10, 2022 | 48.9% | — |
| CVE-2015-1130
Apple OS X Authentication Bypass Vulnerability |
Apple · OS X | Feb 10, 2022 | Aug 10, 2022 | 9.9% | — |
| CVE-2015-1635
Microsoft HTTP.sys Remote Code Execution Vulnerability |
Microsoft · HTTP.sys | Feb 10, 2022 | Aug 10, 2022 | 100.0% | — |
| CVE-2015-2051
D-Link DIR-645 Router Remote Code Execution Vulnerability |
D-Link · DIR-645 Router | Feb 10, 2022 | Aug 10, 2022 | 97.1% | — |
| CVE-2016-3088
Apache ActiveMQ Improper Input Validation Vulnerability |
Apache · ActiveMQ | Feb 10, 2022 | Aug 10, 2022 | 98.4% | — |
| CVE-2017-0144 Ransomware
Microsoft SMBv1 Remote Code Execution Vulnerability |
Microsoft · SMBv1 | Feb 10, 2022 | Aug 10, 2022 | 99.2% | — |
| CVE-2017-0145 Ransomware
Microsoft SMBv1 Remote Code Execution Vulnerability |
Microsoft · SMBv1 | Feb 10, 2022 | Aug 10, 2022 | 89.8% | — |
| CVE-2017-0262
Microsoft Office Remote Code Execution Vulnerability |
Microsoft · Office | Feb 10, 2022 | Aug 10, 2022 | 81.0% | — |
| CVE-2017-0263
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Feb 10, 2022 | Aug 10, 2022 | 10.0% | — |
| CVE-2017-10271 Ransomware
Oracle Corporation WebLogic Server Remote Code Execution Vulnerability |
Oracle · WebLogic Server | Feb 10, 2022 | Aug 10, 2022 | 100.0% | — |
| CVE-2017-8464
Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability |
Microsoft · Windows | Feb 10, 2022 | Aug 10, 2022 | 90.0% | — |
| CVE-2017-9791
Apache Struts 1 Improper Input Validation Vulnerability |
Apache · Struts 1 | Feb 10, 2022 | Aug 10, 2022 | 98.9% | — |
| CVE-2018-1000861
Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability |
Jenkins · Jenkins Stapler Web Framework | Feb 10, 2022 | Aug 10, 2022 | 98.3% | — |
| CVE-2020-0796 Ransomware
Microsoft SMBv3 Remote Code Execution Vulnerability |
Microsoft · SMBv3 | Feb 10, 2022 | Aug 10, 2022 | 99.8% | — |
| CVE-2021-36934
Microsoft Windows SAM Local Privilege Escalation Vulnerability |
Microsoft · Windows | Feb 10, 2022 | Feb 24, 2022 | 67.3% | — |
| CVE-2022-21882 Ransomware
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Feb 4, 2022 | Feb 18, 2022 | 59.2% | — |
| CVE-2014-1776
Microsoft Internet Explorer Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Jan 28, 2022 | Jul 28, 2022 | 82.7% | — |
| CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability |
GNU · Bourne-Again Shell (Bash) | Jan 28, 2022 | Jul 28, 2022 | 100.0% | — |
| CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability |
GNU · Bourne-Again Shell (Bash) | Jan 28, 2022 | Jul 28, 2022 | 99.9% | — |
| CVE-2017-5689
Intel Active Management Technology (AMT), Small Business Technology (SBT), and … |
Intel · Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | Jan 28, 2022 | Jul 28, 2022 | 92.2% | — |
| CVE-2020-0787 Ransomware
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privi… |
Microsoft · Windows | Jan 28, 2022 | Jul 28, 2022 | 42.5% | — |
| CVE-2020-5722
Grandstream Networks UCM6200 Series SQL Injection Vulnerability |
Grandstream · UCM6200 | Jan 28, 2022 | Jul 28, 2022 | 84.3% | — |
| CVE-2021-20038 Ransomware
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability |
SonicWall · SMA 100 Appliances | Jan 28, 2022 | Feb 11, 2022 | 99.9% | — |
| CVE-2022-22587
Apple Memory Corruption Vulnerability |
Apple · iOS and macOS | Jan 28, 2022 | Feb 11, 2022 | 11.6% | — |
| CVE-2006-1547
Apache Struts 1 ActionForm Denial-of-Service Vulnerability |
Apache · Struts 1 | Jan 21, 2022 | Jul 21, 2022 | 54.6% | — |
| CVE-2012-0391
Apache Struts 2 Improper Input Validation Vulnerability |
Apache · Struts 2 | Jan 21, 2022 | Jul 21, 2022 | 75.6% | — |
| CVE-2018-8453 Ransomware
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Jan 21, 2022 | Jul 21, 2022 | 70.0% | — |
| CVE-2021-35247
SolarWinds Serv-U Improper Input Validation Vulnerability |
SolarWinds · Serv-U | Jan 21, 2022 | Feb 4, 2022 | 3.6% | — |
| CVE-2020-11978
Apache Airflow Command Injection |
Apache · Airflow | Jan 18, 2022 | Jul 18, 2022 | 99.2% | — |
| CVE-2020-13671
Drupal core Un-restricted Upload of File |
Drupal · Drupal core | Jan 18, 2022 | Jul 18, 2022 | 30.9% | — |
| CVE-2020-13927
Apache Airflow's Experimental API Authentication Bypass |
Apache · Airflow's Experimental API | Jan 18, 2022 | Jul 18, 2022 | 99.8% | — |
| CVE-2020-14864
Oracle Business Intelligence Enterprise Edition Path Transversal |
Oracle · Intelligence Enterprise Edition | Jan 18, 2022 | Jul 18, 2022 | 97.2% | — |
| CVE-2021-21315
System Information Library for Node.JS Command Injection |
Npm package · System Information Library for Node.JS | Jan 18, 2022 | Feb 1, 2022 | 90.7% | — |
| CVE-2021-21975 Ransomware
VMware Server Side Request Forgery in vRealize Operations Manager API |
VMware · vRealize Operations Manager API | Jan 18, 2022 | Feb 1, 2022 | 78.0% | — |
| CVE-2021-22991
F5 BIG-IP Traffic Management Microkernel Buffer Overflow |
F5 · BIG-IP Traffic Management Microkernel | Jan 18, 2022 | Feb 1, 2022 | 62.4% | — |
| CVE-2021-25296
Nagios XI OS Command Injection |
Nagios · Nagios XI | Jan 18, 2022 | Feb 1, 2022 | 71.9% | — |
| CVE-2021-25297
Nagios XI OS Command Injection |
Nagios · Nagios XI | Jan 18, 2022 | Feb 1, 2022 | 56.7% | — |
| CVE-2021-25298
Nagios XI OS Command Injection |
Nagios · Nagios XI | Jan 18, 2022 | Feb 1, 2022 | 73.6% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.