Known Exploited Vulnerabilities
A KEV is a CVE that CISA has confirmed is being actively exploited in the wild. Search the full catalog below, or check a specific package on the lookup page.
| CVE ID | Description | Vendor / Product | Added | Ransomware | Details |
|---|---|---|---|---|---|
| CVE-2022-2294 | WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that… | WebRTC / WebRTC | Aug 25, 2022 | Ransomware | View → |
| CVE-2022-22963 | When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as… | VMware Tanzu / Spring Cloud | Aug 25, 2022 | — | View → |
| CVE-2022-24112 | Apache APISIX contains an authentication bypass vulnerability that allows for remote code execution. | Apache / APISIX | Aug 25, 2022 | — | View → |
| CVE-2022-24706 | Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to… | Apache / CouchDB | Aug 25, 2022 | — | View → |
| CVE-2022-26352 | dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory… | dotCMS / dotCMS | Aug 25, 2022 | Ransomware | View → |
| CVE-2022-0028 | A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified… | Palo Alto Networks / PAN-OS | Aug 22, 2022 | — | View → |
| CVE-2017-15944 | Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained. | Palo Alto Networks / PAN-OS | Aug 18, 2022 | — | View → |
| CVE-2022-21971 | Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution. | Microsoft / Windows | Aug 18, 2022 | — | View → |
| CVE-2022-22536 | SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher… | SAP / Multiple Products | Aug 18, 2022 | — | View → |
| CVE-2022-26923 | An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory… | Microsoft / Active Directory | Aug 18, 2022 | — | View → |
| CVE-2022-2856 | Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a… | Google / Chromium Intents | Aug 18, 2022 | — | View → |
| CVE-2022-32893 | Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious… | Apple / iOS and macOS | Aug 18, 2022 | — | View → |
| CVE-2022-32894 | Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges. | Apple / iOS and macOS | Aug 18, 2022 | — | View → |
| CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload… | Synacor / Zimbra Collaboration Suite (ZCS) | Aug 11, 2022 | Ransomware | View → |
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was… | Synacor / Zimbra Collaboration Suite (ZCS) | Aug 11, 2022 | Ransomware | View → |
| CVE-2022-30333 | RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract… | RARLAB / UnRAR | Aug 9, 2022 | Ransomware | View → |
| CVE-2022-34713 | A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application. | Microsoft / Windows | Aug 9, 2022 | — | View → |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite… | Synacor / Zimbra Collaboration Suite (ZCS) | Aug 4, 2022 | Ransomware | View → |
| CVE-2022-26138 | Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote… | Atlassian / Confluence | Jul 29, 2022 | — | View → |
| CVE-2022-22047 | Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges. | Microsoft / Windows | Jul 12, 2022 | — | View → |