The CISA KEV Catalogue, Searchable
Every flaw attackers are known to be using: what it is, how bad, and what fixes it.
- Flaws on the list
- 1,779
- Added in 30 days
- 40
- Used in ransomware
- 361
- In web & server software
- 181
31 Jul 2023 Ivanti Endpoint Manager Mobile (EPMM) Path traversal
A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- ivanti endpoint manager mobile 11.10.0.3, ivanti endpoint manager mobile 11.9.1.2, ivanti endpoint manager mobile 11.8.1.2
- CISA due date
- 21 Aug 2023
- Weakness
- CWE-22
27 Jul 2023 Synacor Zimbra Collaboration Suite (ZCS) Cross-site scripting
Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- synacor zimbra collaboration suite 8.8.15
- CISA due date
- 17 Aug 2023
- Weakness
- CWE-79
26 Jul 2023 Apple Multiple Products Security flaw
This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to modify sensitive kernel state. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- apple ipados 16.6, apple iphone os 16.6, apple tvos 16.6, apple ipados 15.7.8, apple iphone os 15.7.8 and 4 older
- CISA due date
- 16 Aug 2023
25 Jul 2023 Ivanti Endpoint Manager Mobile (EPMM) Authentication bypass
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- ivanti endpoint manager mobile 11.10.0.2, ivanti endpoint manager mobile 11.9.1.1, ivanti endpoint manager mobile 11.8.1.1
- CISA due date
- 15 Aug 2023
- Weakness
- CWE-287
20 Jul 2023 Adobe ColdFusion Access control flaw
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 10 Aug 2023
- Weakness
- CWE-284
20 Jul 2023 Adobe ColdFusion Access control flaw
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 10 Aug 2023
- Weakness
- CWE-284
19 Jul 2023 Citrix NetScaler ADC and NetScaler Gateway Remote code execution
Unauthenticated remote code execution
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- citrix netscaler application delivery controller 13.1-49.13, citrix netscaler gateway 13.1-49.13, citrix netscaler application delivery controller 13.1-37.159, citrix netscaler application delivery controller 13.0-91.13, citrix netscaler gateway 13.0-91.13 and 1 older
- CISA due date
- 9 Aug 2023
- Weakness
- CWE-94
17 Jul 2023 Microsoft Windows Race condition
Windows Search Remote Code Execution Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1903, microsoft windows server 2019 10.0.17763.4737, microsoft windows server 2016 10.0.14393.6167, microsoft windows 11 22h2 10.0.22621.2134, microsoft windows 11 21h2 10.0.22000.2295 and 5 older
- CISA due date
- 29 Aug 2023
- Weakness
- CWE-362
13 Jul 2023 Apple Multiple Products Security flaw
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- Fixed in (NVD)
- apple ipados 16.6, apple iphone os 16.6, apple tvos 16.6, apple safari 16.5.2, apple macos 13.5 and 2 older
- CISA due date
- 3 Aug 2023
13 Jul 2023 SolarView Compact Command injection
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- CISA due date
- 3 Aug 2023
- Weakness
- CWE-78
11 Jul 2023 Microsoft Windows Path traversal
Windows Error Reporting Service Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1850, microsoft windows server 2019 10.0.17763.4645, microsoft windows server 2016 10.0.14393.6085, microsoft windows 11 22h2 10.0.22621.1992, microsoft windows 11 21h2 10.0.22000.2176 and 5 older
- CISA due date
- 1 Aug 2023
- Weakness
- CWE-59
11 Jul 2023 Microsoft Outlook Race condition
Microsoft Outlook Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- CISA due date
- 1 Aug 2023
- Weakness
- CWE-367
11 Jul 2023 Microsoft Windows Security flaw
Windows SmartScreen Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- Fixed in (NVD)
- microsoft windows 11 22h2 10.0.22621.1992, microsoft windows 11 21h2 10.0.22000.2176, microsoft windows 10 1809 10.0.17763.4645, microsoft windows 10 1607 10.0.14393.6085, microsoft windows 10 22h2 10.0.19045.3208 and 1 older
- CISA due date
- 1 Aug 2023
11 Jul 2023 Microsoft Windows Security flaw
Windows MSHTML Platform Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- Fixed in (NVD)
- microsoft windows 11 22h2 10.0.22621.1992, microsoft windows 11 21h2 10.0.22000.2176, microsoft windows 10 1809 10.0.17763.4645, microsoft windows 10 1607 10.0.14393.6085, microsoft windows 10 1507 10.0.10240.20048 and 2 older
- CISA due date
- 1 Aug 2023
11 Jul 2023 Netwrix Auditor Remote code execution
Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and potentially allow an unauthenticated remote attacker to execute arbitrary code as the NT AUTHORITY\SYSTEM user on affected systems, including on systems Netwrix Auditor monitors.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- Fixed in (NVD)
- netwrix auditor 10.5
- CISA due date
- 1 Aug 2023
- Weakness
- CWE-502, CWE-122
7 Jul 2023 Arm Mali Graphics Processing Unit (GPU) Memory corruption
. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifrost r16p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r28p0 through r30p0.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- Fixed in (NVD)
- arm midgard gpu kernel driver r31p0, arm bifrost gpu kernel driver r30p0, arm valhall gpu kernel driver r30p0
- CISA due date
- 28 Jul 2023
- Weakness
- CWE-416
29 Jun 2023 Samsung Mobile Devices Memory corruption
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CISA due date
- 20 Jul 2023
- Weakness
- CWE-20
29 Jun 2023 Samsung Mobile Devices Memory corruption
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CISA due date
- 20 Jul 2023
- Weakness
- CWE-125
29 Jun 2023 Samsung Mobile Devices Race condition
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CISA due date
- 20 Jul 2023
- Weakness
- CWE-362
29 Jun 2023 Samsung Mobile Devices Memory corruption
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CISA due date
- 20 Jul 2023
- Weakness
- CWE-416
29 Jun 2023 Samsung Mobile Devices Memory corruption
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CISA due date
- 20 Jul 2023
- Weakness
- CWE-787
29 Jun 2023 Samsung Mobile Devices Security flaw
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
- CISA due date
- 20 Jul 2023
- Weakness
- CWE-912
29 Jun 2023 D-Link DWL-2600AP Access Point Command injection
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- CISA due date
- 20 Jul 2023
- Weakness
- CWE-78
29 Jun 2023 D-Link DIR-859 Router Command injection
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
- What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- CISA due date
- 20 Jul 2023
- Weakness
- CWE-78
23 Jun 2023 Apple Multiple Products Memory corruption
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple safari 16.5.1, apple ipados 16.5.1, apple iphone os 16.5.1, apple ipados 15.7.7, apple iphone os 15.7.7 and 2 older
- CISA due date
- 14 Jul 2023
- Weakness
- CWE-843
23 Jun 2023 Apple Multiple Products Memory corruption
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple safari 16.4, apple ipados 16.4, apple iphone os 16.4, apple ipados 15.7.7, apple iphone os 15.7.7 and 1 older
- CISA due date
- 14 Jul 2023
- Weakness
- CWE-787
23 Jun 2023 Apple Multiple Products Memory corruption
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple ipados 16.5.1, apple iphone os 16.5.1, apple ipados 15.7.7, apple iphone os 15.7.7, apple macos 13.4.1 and 4 older
- CISA due date
- 14 Jul 2023
- Weakness
- CWE-190
23 Jun 2023 Zyxel Multiple Network-Attached Storage (NAS) Devices Command injection
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware versions prior to V5.21(ABAG.11)C0 could allow an unauthenticated attacker to execute some operating system (OS) commands remotely by sending a crafted HTTP request.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- zyxel nas542 firmware 5.21\(abag.11\)c0, zyxel nas540 firmware 5.21\(aatb.11\)c0, zyxel nas326 firmware 5.21\(aazf.14\)c0
- CISA due date
- 14 Jul 2023
- Weakness
- CWE-78
23 Jun 2023 VMware Tools Authentication bypass
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- vmware tools 12.2.5
- CISA due date
- 14 Jul 2023
- Weakness
- CWE-287
22 Jun 2023 VMware Aria Operations for Networks Command injection
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 13 Jul 2023
- Weakness
- CWE-77
22 Jun 2023 Roundcube Webmail SQL injection
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- roundcube webmail 1.4.12, roundcube webmail 1.3.17
- CISA due date
- 13 Jul 2023
- Weakness
- CWE-89
22 Jun 2023 Roundcube Webmail Cross-site scripting
An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- roundcube webmail 1.4.10, roundcube webmail 1.3.16, roundcube webmail 1.2.13
- CISA due date
- 13 Jul 2023
- Weakness
- CWE-79
22 Jun 2023 Roundcube Webmail Command injection
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- roundcube webmail 1.4.4, roundcube webmail 1.3.11, roundcube webmail 1.2.10
- CISA due date
- 13 Jul 2023
- Weakness
- CWE-78
22 Jun 2023 Mozilla Firefox, Firefox ESR, and Thunderbird Memory corruption
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- mozilla firefox 50.0.2, mozilla thunderbird 45.5.1, mozilla firefox 45.5.1
- CISA due date
- 13 Jul 2023
- Weakness
- CWE-416
22 Jun 2023 Microsoft Win32k Security flaw
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0143 and CVE-2016-0167.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 13 Jul 2023
- Weakness
- CWE-264
13 Jun 2023 Fortinet FortiOS and FortiProxy SSL-VPN Memory corruption
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below, version 1.2 all versions, version 1.1 all versions SSL-VPN may allow a remote attacker to execute arbitrary code or commands via specifically crafted requests.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 4 Jul 2023
- Weakness
- CWE-122
7 Jun 2023 Google Chromium V8 Memory corruption
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 114.0.5735.110, couchbase server 7.1.5
- CISA due date
- 28 Jun 2023
- Weakness
- CWE-843
5 Jun 2023 Zyxel Multiple Firewalls Memory corruption
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- zyxel atp800 firmware 5.36, zyxel atp700 firmware 5.36, zyxel usg flex 700 firmware 5.36, zyxel atp500 firmware 5.36, zyxel usg flex 500 firmware 5.36 and 7 older
- CISA due date
- 26 Jun 2023
- Weakness
- CWE-120
5 Jun 2023 Zyxel Multiple Firewalls Memory corruption
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.60 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- zyxel atp800 firmware 5.36, zyxel atp700 firmware 5.36, zyxel usg flex 700 firmware 5.36, zyxel atp500 firmware 5.36, zyxel usg flex 500 firmware 5.36 and 7 older
- CISA due date
- 26 Jun 2023
- Weakness
- CWE-120
2 Jun 2023 Progress MOVEit Transfer SQL injection
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database, and execute SQL statements that alter or delete database elements. NOTE: this is exploited in the wild in May and June 2023; exploitation of unpatched systems can occur via HTTP or HTTPS. All versions (e.g., 2020.0 and 2019x) before the five explicitly mentioned versions are affected, including older unsupported versions.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- progress moveit transfer 2023.0.2, progress moveit transfer 2022.1.6, progress moveit transfer 2022.0.5, progress moveit transfer 2021.1.5, progress moveit transfer 2021.0.7 and 3 older
- CISA due date
- 23 Jun 2023
- Weakness
- CWE-89
31 May 2023 Zyxel Multiple Firewalls Command injection
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- zyxel atp800 firmware 5.36, zyxel atp700 firmware 5.36, zyxel atp500 firmware 5.36, zyxel usg flex 500 firmware 5.36, zyxel atp200 firmware 5.36 and 7 older
- CISA due date
- 21 Jun 2023
- Weakness
- CWE-78
26 May 2023 Barracuda Networks Email Security Gateway (ESG) Appliance Command injection
A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file (tape archives). The vulnerability stems from incomplete input validation of a user-supplied .tar file as it pertains to the names of the files contained within the archive. As a consequence, a remote attacker can specifically format these file names in a particular manner that will result in remotely executing a system command through Perl's qx operator with the privileges of the Email Security Gateway product. This issue was fixed as part of BNSF-36456 patch. This patch was automatically applied to all customer appliances.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 16 Jun 2023
- Weakness
- CWE-20
22 May 2023 Apple Multiple Products Security flaw
The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple safari 16.5, apple ipados 16.5, apple iphone os 16.5, apple tvos 16.5, apple ipados 15.7.8 and 3 older
- CISA due date
- 12 Jun 2023
22 May 2023 Apple Multiple Products Memory corruption
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple safari 16.5, apple ipados 16.5, apple iphone os 16.5, apple tvos 16.5, apple ipados 15.7.6 and 4 older
- CISA due date
- 12 Jun 2023
- Weakness
- CWE-416
22 May 2023 Apple Multiple Products Memory corruption
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple safari 16.5, apple ipados 16.5, apple iphone os 16.5, apple tvos 16.5, apple ipados 15.7.6 and 4 older
- CISA due date
- 12 Jun 2023
- Weakness
- CWE-125
19 May 2023 Samsung Mobile Devices Information disclosure
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 9 Jun 2023
- Weakness
- CWE-532
19 May 2023 Cisco IOS, IOS XR, and IOS XE Information disclosure
The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- cisco ios xr 5.3.0
- CISA due date
- 9 Jun 2023
- Weakness
- CWE-200
19 May 2023 Cisco IOS Denial of service
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 9 Jun 2023
- Weakness
- CWE-400
12 May 2023 Ruckus Wireless Multiple Products Remote code execution
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
- What to do
- Apply updates per vendor instructions or disconnect product if it is end-of-life.
- Fixed in (NVD)
- ruckuswireless smartzone ap 6.1.1.0.1274, ruckuswireless smartzone ap 6.1.0.0.9240, ruckuswireless smartzone ap 5.2.2.0.2064, commscope ruckus smartzone firmware 5.2.1.3.1695, commscope ruckus smartzone firmware 5.2.1.3 and 1 older
- CISA due date
- 2 Jun 2023
- Weakness
- CWE-94
12 May 2023 Red Hat Polkit Access control flaw
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- polkit project polkit 0.119
- CISA due date
- 2 Jun 2023
- Weakness
- CWE-863
Know when it's your software
Get an email within half an hour when a flaw in your software is added. Free.
About the KEV Catalogue
What is the CISA KEV catalogue?
CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.
Why does it matter more than the CVSS score?
Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.
What is the due date?
The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.
Does it apply outside the US?
The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.
What does "used in ransomware" mean?
CISA knows ransomware groups have used the flaw.
How often is it updated?
CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.