| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2016-3235
Microsoft Office OLE DLL Side Loading Vulnerability |
Microsoft · Office | Nov 3, 2021 | May 3, 2022 | 43.3% | — |
| CVE-2016-3643
SolarWinds Virtualization Manager Privilege Escalation Vulnerability |
SolarWinds · Virtualization Manager | Nov 3, 2021 | May 3, 2022 | 3.7% | — |
| CVE-2016-3715
ImageMagick Arbitrary File Deletion Vulnerability |
ImageMagick · ImageMagick | Nov 3, 2021 | May 3, 2022 | 75.3% | — |
| CVE-2016-3718
ImageMagick Server-Side Request Forgery (SSRF) Vulnerability |
ImageMagick · ImageMagick | Nov 3, 2021 | May 3, 2022 | 75.6% | — |
| CVE-2016-3976
SAP NetWeaver Directory Traversal Vulnerability |
SAP · NetWeaver | Nov 3, 2021 | May 3, 2022 | 47.3% | — |
| CVE-2016-4437
Apache Shiro Code Execution Vulnerability |
Apache · Shiro | Nov 3, 2021 | May 3, 2022 | 93.0% | — |
| CVE-2016-7255 Ransomware
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Nov 3, 2021 | May 3, 2022 | 81.0% | — |
| CVE-2016-9563
SAP NetWeaver XML External Entity (XXE) Vulnerability |
SAP · NetWeaver | Nov 3, 2021 | May 3, 2022 | 24.2% | — |
| CVE-2017-0143 Ransomware
Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerabil… |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 93.3% | — |
| CVE-2017-0199 Ransomware
Microsoft Office and WordPad Remote Code Execution Vulnerability |
Microsoft · Office and WordPad | Nov 3, 2021 | May 3, 2022 | 99.5% | — |
| CVE-2017-11774
Microsoft Office Outlook Security Feature Bypass Vulnerability |
Microsoft · Office | Nov 3, 2021 | May 3, 2022 | 59.6% | — |
| CVE-2017-11882 Ransomware
Microsoft Office Memory Corruption Vulnerability |
Microsoft · Office | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2017-16651
Roundcube Webmail File Disclosure Vulnerability |
Roundcube · Roundcube Webmail | Nov 3, 2021 | May 3, 2022 | 45.7% | — |
| CVE-2017-5638 Ransomware
Apache Struts Remote Code Execution Vulnerability |
Apache · Struts | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2017-6327
Symantec Messaging Gateway Remote Code Execution Vulnerability |
Symantec · Symantec Messaging Gateway | Nov 3, 2021 | May 3, 2022 | 35.9% | — |
| CVE-2017-7269
Microsoft Windows Server Buffer Overflow Vulnerability |
Microsoft · Internet Information Services (IIS) | Nov 3, 2021 | May 3, 2022 | 99.8% | — |
| CVE-2017-8759
Microsoft .NET Framework Remote Code Execution Vulnerability |
Microsoft · .NET Framework | Nov 3, 2021 | May 3, 2022 | 88.7% | — |
| CVE-2017-9248
Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vuln… |
Progress · ASP.NET AJAX and Sitefinity | Nov 3, 2021 | May 3, 2022 | 75.1% | — |
| CVE-2017-9805
Apache Struts Deserialization of Untrusted Data Vulnerability |
Apache · Struts | Nov 3, 2021 | May 3, 2022 | 99.4% | — |
| CVE-2017-9822 Ransomware
DotNetNuke (DNN) Remote Code Execution Vulnerability |
DotNetNuke (DNN) · DotNetNuke (DNN) | Nov 3, 2021 | May 3, 2022 | 94.8% | — |
| CVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability |
Cisco · IOS and IOS XE | Nov 3, 2021 | May 3, 2022 | 99.5% | — |
| CVE-2018-0296
Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability |
Cisco · Adaptive Security Appliance (ASA) | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2018-0798
Microsoft Office Memory Corruption Vulnerability |
Microsoft · Office | Nov 3, 2021 | May 3, 2022 | 95.1% | — |
| CVE-2018-0802 Ransomware
Microsoft Office Memory Corruption Vulnerability |
Microsoft · Office | Nov 3, 2021 | May 3, 2022 | 93.3% | — |
| CVE-2018-11776
Apache Struts Remote Code Execution Vulnerability |
Apache · Struts | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2018-13379 Ransomware
Fortinet FortiOS SSL VPN Path Traversal Vulnerability |
Fortinet · FortiOS | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2018-14558
Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability |
Tenda · AC7, AC9, and AC10 Routers | Nov 3, 2021 | May 3, 2022 | 8.5% | — |
| CVE-2018-15811
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability |
DotNetNuke (DNN) · DotNetNuke (DNN) | Nov 3, 2021 | May 3, 2022 | 76.3% | — |
| CVE-2018-15961
Adobe ColdFusion Unrestricted File Upload Vulnerability |
Adobe · ColdFusion | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2018-18325
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability |
DotNetNuke (DNN) · DotNetNuke (DNN) | Nov 3, 2021 | May 3, 2022 | 74.0% | — |
| CVE-2018-20062
ThinkPHP "noneCms" Remote Code Execution Vulnerability |
ThinkPHP · noneCms | Nov 3, 2021 | May 3, 2022 | 99.5% | — |
| CVE-2018-2380 Ransomware
SAP Customer Relationship Management (CRM) Path Traversal Vulnerability |
SAP · Customer Relationship Management (CRM) | Nov 3, 2021 | May 3, 2022 | 28.9% | — |
| CVE-2018-4878 Ransomware
Adobe Flash Player Use-After-Free Vulnerability |
Adobe · Flash Player | Nov 3, 2021 | May 3, 2022 | 90.3% | — |
| CVE-2018-4939
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
Adobe · ColdFusion | Nov 3, 2021 | May 3, 2022 | 61.8% | — |
| CVE-2018-6789 Ransomware
Exim Buffer Overflow Vulnerability |
Exim · Exim | Nov 3, 2021 | May 3, 2022 | 82.1% | — |
| CVE-2018-7600 Ransomware
Drupal Core Remote Code Execution Vulnerability |
Drupal · Drupal Core | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2018-8653
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Nov 3, 2021 | May 3, 2022 | 29.6% | — |
| CVE-2019-0211
Apache HTTP Server Privilege Escalation Vulnerability |
Apache · HTTP Server | Nov 3, 2021 | May 3, 2022 | 65.0% | — |
| CVE-2019-0541
Microsoft MSHTML Remote Code Execution Vulnerability |
Microsoft · MSHTML | Nov 3, 2021 | May 3, 2022 | 53.2% | — |
| CVE-2019-0604 Ransomware
Microsoft SharePoint Remote Code Execution Vulnerability |
Microsoft · SharePoint | Nov 3, 2021 | May 3, 2022 | 99.9% | — |
| CVE-2019-0708 Ransomware
Microsoft Remote Desktop Services Remote Code Execution Vulnerability |
Microsoft · Remote Desktop Services | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2019-0797
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Nov 3, 2021 | May 3, 2022 | 1.9% | — |
| CVE-2019-0803 Ransomware
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Nov 3, 2021 | May 3, 2022 | 45.2% | — |
| CVE-2019-0808
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Nov 3, 2021 | May 3, 2022 | 53.3% | — |
| CVE-2019-0859 Ransomware
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Nov 3, 2021 | May 3, 2022 | 4.2% | — |
| CVE-2019-0863
Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 3, 2021 | May 3, 2022 | 5.2% | — |
| CVE-2019-11510 Ransomware
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability |
Ivanti · Pulse Connect Secure | Nov 3, 2021 | May 3, 2022 | 100.0% | — |
| CVE-2019-11539 Ransomware
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability |
Ivanti · Pulse Connect Secure and Pulse Policy Secure | Nov 3, 2021 | May 3, 2022 | 98.5% | — |
| CVE-2019-11580 Ransomware
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability |
Atlassian · Crowd and Crowd Data Center | Nov 3, 2021 | May 3, 2022 | 95.4% | — |
| CVE-2019-11634 Ransomware
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vul… |
Citrix · Workspace Application and Receiver for Windows | Nov 3, 2021 | May 3, 2022 | 8.1% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.