| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2021-32648
October CMS Improper Authentication |
October CMS · October CMS | Jan 18, 2022 | Feb 1, 2022 | 91.2% | — |
| CVE-2021-33766
Microsoft Exchange Server Information Disclosure |
Microsoft · Exchange Server | Jan 18, 2022 | Feb 1, 2022 | 98.2% | — |
| CVE-2021-40870
Aviatrix Controller Unrestricted Upload of File |
Aviatrix · Aviatrix Controller | Jan 18, 2022 | Feb 1, 2022 | 93.0% | — |
| CVE-2013-3900
Microsoft WinVerifyTrust function Remote Code Execution |
Microsoft · WinVerifyTrust function | Jan 10, 2022 | Jul 10, 2022 | 44.6% | — |
| CVE-2015-7450
IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. |
IBM · WebSphere Application Server and Server Hypervisor Edition | Jan 10, 2022 | Jul 10, 2022 | 97.8% | — |
| CVE-2017-1000486
Primetek Primefaces Remote Code Execution Vulnerability |
Primetek · Primefaces Application | Jan 10, 2022 | Jul 10, 2022 | 94.1% | — |
| CVE-2018-13382 Ransomware
Fortinet FortiOS and FortiProxy Improper Authorization |
Fortinet · FortiOS and FortiProxy | Jan 10, 2022 | Jul 10, 2022 | 81.7% | — |
| CVE-2018-13383 Ransomware
Fortinet FortiOS and FortiProxy Out-of-bounds Write |
Fortinet · FortiOS and FortiProxy | Jan 10, 2022 | Jul 10, 2022 | 30.7% | — |
| CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation |
Exim · Mail Transfer Agent (MTA) | Jan 10, 2022 | Jul 10, 2022 | 100.0% | — |
| CVE-2019-1458 Ransomware
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Jan 10, 2022 | Jul 10, 2022 | 74.4% | — |
| CVE-2019-1579 Ransomware
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability |
Palo Alto Networks · PAN-OS | Jan 10, 2022 | Jul 10, 2022 | 44.2% | — |
| CVE-2019-2725 Ransomware
Oracle WebLogic Server, Injection |
Oracle · WebLogic Server | Jan 10, 2022 | Jul 10, 2022 | 100.0% | — |
| CVE-2019-7609
Kibana Arbitrary Code Execution |
Elastic · Kibana | Jan 10, 2022 | Jul 10, 2022 | 95.3% | — |
| CVE-2019-9670
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External E… |
Synacor · Zimbra Collaboration Suite (ZCS) | Jan 10, 2022 | Jul 10, 2022 | 100.0% | — |
| CVE-2020-6572
Google Chrome Media Use-After-Free Vulnerability |
Google · Chrome Media | Jan 10, 2022 | Jul 10, 2022 | 10.6% | — |
| CVE-2021-22017
VMware vCenter Server Improper Access Control |
VMware · vCenter Server | Jan 10, 2022 | Jan 24, 2022 | 49.2% | — |
| CVE-2021-27860
FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit |
FatPipe · WARP, IPVPN, and MPVPN software | Jan 10, 2022 | Jan 24, 2022 | 39.7% | — |
| CVE-2021-36260
Hikvision Improper Input Validation |
Hikvision · Security cameras web server | Jan 10, 2022 | Jan 24, 2022 | 99.9% | — |
| CVE-2021-4102
Google Chromium V8 Use-After-Free Vulnerability |
Google · Chromium V8 | Dec 15, 2021 | Dec 29, 2021 | 7.8% | — |
| CVE-2021-43890 Ransomware
Microsoft Windows AppX Installer Spoofing Vulnerability |
Microsoft · Windows | Dec 15, 2021 | Dec 29, 2021 | 11.3% | — |
| CVE-2010-1871
Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability |
Red Hat · JBoss Seam 2 | Dec 10, 2021 | Jun 10, 2022 | 83.4% | — |
| CVE-2017-12149 Ransomware
Red Hat JBoss Application Server Remote Code Execution Vulnerability |
Red Hat · JBoss Application Server | Dec 10, 2021 | Jun 10, 2022 | 90.7% | — |
| CVE-2017-17562
Embedthis GoAhead Remote Code Execution Vulnerability |
Embedthis · GoAhead | Dec 10, 2021 | Jun 10, 2022 | 97.1% | — |
| CVE-2019-0193
Apache Solr DataImportHandler Code Injection Vulnerability |
Apache · Solr | Dec 10, 2021 | Jun 10, 2022 | 83.5% | — |
| CVE-2019-10758
MongoDB mongo-express Remote Code Execution Vulnerability |
MongoDB · mongo-express | Dec 10, 2021 | Jun 10, 2022 | 84.7% | — |
| CVE-2019-13272
Linux Kernel Improper Privilege Management Vulnerability |
Linux · Kernel | Dec 10, 2021 | Jun 10, 2022 | 52.2% | — |
| CVE-2019-7238
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability |
Sonatype · Nexus Repository Manager | Dec 10, 2021 | Jun 10, 2022 | 76.6% | — |
| CVE-2020-17463
Fuel CMS SQL Injection Vulnerability |
Fuel CMS · Fuel CMS | Dec 10, 2021 | Jun 10, 2022 | 89.7% | — |
| CVE-2020-8816
Pi-Hole AdminLTE Remote Code Execution Vulnerability |
Pi-hole · AdminLTE | Dec 10, 2021 | Jun 10, 2022 | 78.3% | — |
| CVE-2021-35394
Realtek Jungle SDK Remote Code Execution Vulnerability |
Realtek · Jungle Software Development Kit (SDK) | Dec 10, 2021 | Dec 24, 2021 | 99.9% | — |
| CVE-2021-44168
Fortinet FortiOS Arbitrary File Download |
Fortinet · FortiOS | Dec 10, 2021 | Dec 24, 2021 | 0.9% | — |
| CVE-2021-44228 Ransomware
Apache Log4j2 Remote Code Execution Vulnerability |
Apache · Log4j2 | Dec 10, 2021 | Dec 24, 2021 | 100.0% | — |
| CVE-2021-44515
Zoho Desktop Central Authentication Bypass Vulnerability |
Zoho · Desktop Central | Dec 10, 2021 | Dec 24, 2021 | 99.9% | — |
| CVE-2018-14847
MikroTik Router OS Directory Traversal Vulnerability |
MikroTik · RouterOS | Dec 1, 2021 | Jun 1, 2022 | 96.0% | — |
| CVE-2020-11261
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability |
Qualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | Dec 1, 2021 | Jun 1, 2022 | 1.5% | — |
| CVE-2021-37415
Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability |
Zoho · ManageEngine ServiceDesk Plus (SDP) | Dec 1, 2021 | Dec 15, 2021 | 99.8% | — |
| CVE-2021-40438 Ransomware
Apache HTTP Server-Side Request Forgery (SSRF) |
Apache · Apache | Dec 1, 2021 | Dec 15, 2021 | 100.0% | — |
| CVE-2021-44077
Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability |
Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus | Dec 1, 2021 | Dec 15, 2021 | 93.5% | — |
| CVE-2021-22204
ExifTool Remote Code Execution Vulnerability |
Perl · Exiftool | Nov 17, 2021 | Dec 1, 2021 | 100.0% | — |
| CVE-2021-40449 Ransomware
Microsoft Windows Win32k Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 17, 2021 | Dec 1, 2021 | 81.9% | — |
| CVE-2021-42292
Microsoft Excel Security Feature Bypass |
Microsoft · Office | Nov 17, 2021 | Dec 1, 2021 | 43.0% | — |
| CVE-2021-42321 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange | Nov 17, 2021 | Dec 1, 2021 | 91.7% | — |
| CVE-2010-5326
SAP NetWeaver Remote Code Execution Vulnerability |
SAP · NetWeaver | Nov 3, 2021 | May 3, 2022 | 17.8% | — |
| CVE-2012-0158 Ransomware
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability |
Microsoft · MSCOMCTL.OCX | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2012-3152
Oracle Fusion Middleware Unspecified Vulnerability |
Oracle · Fusion Middleware | Nov 3, 2021 | May 3, 2022 | 98.8% | — |
| CVE-2014-1812 Ransomware
Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulner… |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 65.1% | — |
| CVE-2015-1641
Microsoft Office Memory Corruption Vulnerability |
Microsoft · Office | Nov 3, 2021 | May 3, 2022 | 97.2% | — |
| CVE-2015-4852
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability |
Oracle · WebLogic Server | Nov 3, 2021 | May 3, 2022 | 95.0% | — |
| CVE-2016-0167 Ransomware
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Nov 3, 2021 | May 3, 2022 | 5.7% | — |
| CVE-2016-0185
Microsoft Windows Media Center Remote Code Execution Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 69.8% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.