The CISA KEV Catalogue, Searchable
Every flaw attackers are known to be using: what it is, how bad, and what fixes it.
- Flaws on the list
- 1,779
- Added in 30 days
- 40
- Used in ransomware
- 361
- In web & server software
- 181
14 Feb 2023 Microsoft Windows Memory corruption
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1540, microsoft windows server 2019 10.0.17763.4010, microsoft windows server 2016 10.0.14393.5717, microsoft windows 11 22h2 10.0.22621.1265, microsoft windows 11 21h2 10.0.22000.1574 and 6 older
- CISA due date
- 7 Mar 2023
- Weakness
- CWE-122
14 Feb 2023 Microsoft Windows Memory corruption
Windows Graphics Component Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows 11 22h2 10.0.22621.1265, microsoft windows 11 21h2 10.0.22000.1574, microsoft windows 10 1809 10.0.17763.4010, microsoft windows 10 1607 10.0.14393.5717, microsoft windows 10 1507 10.0.10240.19747 and 3 older
- CISA due date
- 7 Mar 2023
- Weakness
- CWE-190
14 Feb 2023 Microsoft Office Access control flaw
Microsoft Publisher Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 7 Mar 2023
- Weakness
- CWE-863
10 Feb 2023 Fortra GoAnywhere MFT Remote code execution
Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- fortra goanywhere managed file transfer 7.1.2
- CISA due date
- 3 Mar 2023
- Weakness
- CWE-502
10 Feb 2023 TerraMaster OS Authentication bypass
TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- terra-master terramaster operating system 4.2.31
- CISA due date
- 3 Mar 2023
- Weakness
- CWE-306
10 Feb 2023 Intel Ethernet Diagnostics Driver for Windows Input validation flaw
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 3 Mar 2023
- Weakness
- CWE-20
2 Feb 2023 SugarCRM Multiple Products Remote code execution
In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- sugarcrm 12.0.2, sugarcrm 11.0.5
- CISA due date
- 23 Feb 2023
- Weakness
- CWE-20
2 Feb 2023 Oracle E-Business Suite Authentication bypass
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 23 Feb 2023
- Weakness
- CWE-306
26 Jan 2023 Telerik User Interface (UI) for ASP.NET AJAX Malicious file upload
Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- progress telerik ui for asp.net ajax 2020.1.114
- CISA due date
- 16 Feb 2023
- Weakness
- CWE-20
23 Jan 2023 Zoho ManageEngine Input validation flaw
Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections. This affects Access Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelfService Plus before 6211, Analytics Plus before 5150, Application Control Plus before 10.1.2220.18, Asset Explorer before 6983, Browser Security Plus before 11.1.2238.6, Device Control Plus before 10.1.2220.18, Endpoint Central before 10.1.2228.11, Endpoint Central MSP before 10.1.2228.11, Endpoint DLP before 10.1.2137.6, Key Manager Plus before 6401, OS Deployer before 1.1.2243.1, PAM 360 before 5713, Password Manager Pro before 12124, Patch Manager Plus before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. ServiceDesk Plus before 14004, ServiceDesk Plus MSP before 13001, SupportCenter Plus before 11026, and Vulnerability Manager Plus before 10.1.2220.18. Exploitation is only possible if SAML SSO has ever been configured for a product (for some products, exploitation requires that SAML SSO is currently active).
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- zohocorp manageengine pam360 5.7, zohocorp manageengine ad360 4.3, zohocorp manageengine servicedesk plus 14.0, zohocorp manageengine servicedesk plus msp 13.0, zohocorp manageengine password manager pro 12.1 and 7 older
- CISA due date
- 13 Feb 2023
- Weakness
- CWE-20
17 Jan 2023 CWP Control Web Panel Command injection
login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- control-webpanel webpanel 0.9.8.1147
- CISA due date
- 7 Feb 2023
- Weakness
- CWE-78
10 Jan 2023 Microsoft Windows Memory corruption
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1487, microsoft windows server 2019 10.0.17763.3887, microsoft windows server 2016 10.0.14393.5648, microsoft windows 11 22h2 10.0.22621.1105, microsoft windows 11 21h2 10.0.22000.1455 and 6 older
- CISA due date
- 31 Jan 2023
- Weakness
- CWE-416
10 Jan 2023 Microsoft Exchange Server Security flaw
Microsoft Exchange Server Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 31 Jan 2023
29 Dec 2022 TIBCO JasperReports Path traversal
The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files. Affected releases include TIBCO Software Inc.'s TIBCO JasperReports Server: versions up to and including 6.2.4; 6.3.0; 6.3.2; 6.3.3;6.4.0; 6.4.2, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.2, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.2, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 6.4.2, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 6.4.2.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 19 Jan 2023
- Weakness
- CWE-22
29 Dec 2022 TIBCO JasperReports Path traversal
The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a directory-traversal vulnerability that may theoretically allow web server users to access contents of the host system. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Library: versions up to and including 6.3.4; 6.4.1; 6.4.2; 6.4.21; 7.1.0; 7.2.0, TIBCO JasperReports Library Community Edition: versions up to and including 6.7.0, TIBCO JasperReports Library for ActiveMatrix BPM: versions up to and including 6.4.21, TIBCO JasperReports Server: versions up to and including 6.3.4; 6.4.0; 6.4.1; 6.4.2; 6.4.3; 7.1.0, TIBCO JasperReports Server Community Edition: versions up to and including 6.4.3; 7.1.0, TIBCO JasperReports Server for ActiveMatrix BPM: versions up to and including 6.4.3, TIBCO Jaspersoft for AWS with Multi-Tenancy: versions up to and including 7.1.0, TIBCO Jaspersoft Reporting and Analytics for AWS: versions up to and including 7.1.0.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 19 Jan 2023
- Weakness
- CWE-22
14 Dec 2022 Apple iOS Memory corruption
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple safari 16.2, apple tvos 16.2, apple iphone os 16.1.2, apple ipados 15.7.2, apple iphone os 15.7.2 and 1 older
- CISA due date
- 4 Jan 2023
- Weakness
- CWE-843
13 Dec 2022 Microsoft Defender Security flaw
Windows SmartScreen Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1366, microsoft windows server 2019 10.0.17763.3770, microsoft windows server 2016 10.0.14393.5582, microsoft windows 11 21h2 10.0.22000.1335, microsoft windows 10 1809 10.0.17763.3770 and 5 older
- CISA due date
- 3 Jan 2023
- Weakness
- CWE-755
13 Dec 2022 Fortinet FortiOS Memory corruption
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- fortinet fortios 7.2.3, fortinet fortiproxy 7.2.2, fortinet fortios 7.0.9, fortinet fortiproxy 7.0.8, fortinet fortios 7.0.8 and 6 older
- CISA due date
- 3 Jan 2023
- Weakness
- CWE-197
13 Dec 2022 Citrix Application Delivery Controller (ADC) and Gateway Security flaw
Unauthenticated remote arbitrary code execution
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- citrix application delivery controller firmware 13.0-58.32, citrix gateway firmware 13.0-58.32, citrix application delivery controller firmware 12.1-65.25, citrix gateway firmware 12.1-65.25, citrix application delivery controller firmware 12.1-55.291
- CISA due date
- 3 Jan 2023
- Weakness
- CWE-664
13 Dec 2022 Veeam Backup & Replication Authentication bypass
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- veeam backup & replication 11.0.1.1261, veeam backup & replication 10.0.1.4854
- CISA due date
- 3 Jan 2023
- Weakness
- CWE-306
13 Dec 2022 Veeam Backup & Replication Path traversal
Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- veeam backup & replication 11.0.1.1261, veeam backup & replication 10.0.1.4854
- CISA due date
- 3 Jan 2023
- Weakness
- CWE-22
5 Dec 2022 Google Chromium V8 Memory corruption
Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 108.0.5359.94
- CISA due date
- 26 Dec 2022
- Weakness
- CWE-122, CWE-843
28 Nov 2022 Google Chromium GPU Memory corruption
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft edge chromium 107.0.5304.150, google chrome 107.0.5304.121, microsoft edge 107.0.1418.62
- CISA due date
- 19 Dec 2022
- Weakness
- CWE-787
28 Nov 2022 Oracle Fusion Middleware Authentication bypass
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 19 Dec 2022
- Weakness
- CWE-502, CWE-790
14 Nov 2022 Microsoft Windows Privilege escalation
Windows Mark of the Web Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-274
8 Nov 2022 Microsoft Windows Memory corruption
Windows Scripting Languages Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-787
8 Nov 2022 Microsoft Windows Memory corruption
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-787
8 Nov 2022 Microsoft Windows Access control flaw
Windows Mark of the Web Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-863
8 Nov 2022 Microsoft Windows Memory corruption
Windows Print Spooler Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-787
8 Nov 2022 Samsung Mobile Devices Memory corruption
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 29 Nov 2022
- Weakness
- CWE-416
8 Nov 2022 Samsung Mobile Devices Information disclosure
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 29 Nov 2022
- Weakness
- CWE-200
8 Nov 2022 Samsung Mobile Devices Privilege escalation
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 29 Nov 2022
- Weakness
- CWE-269
28 Oct 2022 Google Chromium V8 Memory corruption
Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 107.0.5304.87
- CISA due date
- 18 Nov 2022
- Weakness
- CWE-122, CWE-843
25 Oct 2022 Apple iOS and iPadOS Memory corruption
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple iphone os 16.1, apple ipados 15.7.1, apple iphone os 15.7.1
- CISA due date
- 15 Nov 2022
- Weakness
- CWE-20, CWE-787
24 Oct 2022 Cisco AnyConnect Secure Security flaw
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by sending a crafted IPC message to the AnyConnect process. A successful exploit could allow the attacker to execute arbitrary code on the affected machine with SYSTEM privileges. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- cisco anyconnect secure mobility client 4.9.00086
- CISA due date
- 14 Nov 2022
- Weakness
- CWE-427
24 Oct 2022 Cisco AnyConnect Secure Security flaw
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. To exploit this vulnerability, the attacker needs valid credentials on the Windows system.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- cisco anyconnect secure mobility client 4.8.02042
- CISA due date
- 14 Nov 2022
- Weakness
- CWE-427
24 Oct 2022 GIGABYTE Multiple Products Security flaw
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- gigabyte aorus graphics engine 1.57, gigabyte xtreme gaming engine 1.26
- CISA due date
- 14 Nov 2022
24 Oct 2022 GIGABYTE Multiple Products Security flaw
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- gigabyte aorus graphics engine 1.57, gigabyte xtreme gaming engine 1.26
- CISA due date
- 14 Nov 2022
- Weakness
- CWE-749
24 Oct 2022 GIGABYTE Multiple Products Security flaw
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- gigabyte app center 19.0422.1, gigabyte aorus graphics engine 1.57, gigabyte xtreme gaming engine 1.26
- CISA due date
- 14 Nov 2022
24 Oct 2022 GIGABYTE Multiple Products Security flaw
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- gigabyte app center 19.0422.1, gigabyte aorus graphics engine 1.57, gigabyte xtreme gaming engine 1.26
- CISA due date
- 14 Nov 2022
20 Oct 2022 Synacor Zimbra Collaboration Suite (ZCS) Path traversal
An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to /opt/zimbra/jetty/webapps/zimbra/public) that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also, pax is in the prerequisites of Zimbra on Ubuntu; however, pax is no longer part of a default Red Hat installation after RHEL 6 (or CentOS 6). Once pax is installed, amavis automatically prefers it over cpio.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 10 Nov 2022
- Weakness
- CWE-22
20 Oct 2022 Linux Kernel Access control flaw
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- canonical ubuntu linux 20.10, canonical ubuntu linux 20.04, canonical ubuntu linux 18.04
- CISA due date
- 10 Nov 2022
- Weakness
- CWE-862
11 Oct 2022 Microsoft Windows COM+ Event System Service Memory corruption
Windows COM+ Event System Service Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1129, microsoft windows server 2019 10.0.17763.3532, microsoft windows server 2016 10.0.14393.5427, microsoft windows 11 22h2 10.0.22621.674, microsoft windows 11 21h2 10.0.22000.1098 and 6 older
- CISA due date
- 1 Nov 2022
- Weakness
- CWE-843
11 Oct 2022 Fortinet Multiple Products Authentication bypass
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- fortinet fortios 7.2.2, fortinet fortiproxy 7.0.7, fortinet fortios 7.0.7
- CISA due date
- 1 Nov 2022
- Weakness
- CWE-288
30 Sep 2022 Microsoft Exchange Server Remote code execution
Microsoft Exchange Server Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 21 Oct 2022
- Weakness
- CWE-502
30 Sep 2022 Microsoft Exchange Server Server-side request forgery
Microsoft Exchange Server Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 21 Oct 2022
- Weakness
- CWE-918
30 Sep 2022 Atlassian Bitbucket Server and Data Center Command injection
Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before version 8.2.2, and from version 8.3.0 before 8.3.1 allows remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request. This vulnerability was reported via our Bug Bounty Program by TheGrandPew.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- atlassian bitbucket 8.2.2, atlassian bitbucket 8.1.3, atlassian bitbucket 8.0.3, atlassian bitbucket 7.21.4, atlassian bitbucket 7.17.10 and 1 older
- CISA due date
- 21 Oct 2022
- Weakness
- CWE-78, CWE-88, CWE-158
23 Sep 2022 Sophos Firewall Remote code execution
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 14 Oct 2022
- Weakness
- CWE-94
22 Sep 2022 Zoho ManageEngine Remote code execution
Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- zohocorp manageengine pam360 5.5, zohocorp manageengine password manager pro 12.1, zohocorp manageengine access manager plus 4.3
- CISA due date
- 13 Oct 2022
- Weakness
- CWE-502
15 Sep 2022 Trend Micro Apex One and Apex One as a Service Security flaw
Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administrator to instruct affected clients to download an unverified rollback package, which could lead to remote code execution. Please note: an attacker must first obtain Apex One server administration console access in order to exploit this vulnerability.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 6 Oct 2022
- Weakness
- CWE-353, CWE-641
Know when it's your software
Get an email within half an hour when a flaw in your software is added. Free.
About the KEV Catalogue
What is the CISA KEV catalogue?
CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.
Why does it matter more than the CVSS score?
Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.
What is the due date?
The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.
Does it apply outside the US?
The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.
What does "used in ransomware" mean?
CISA knows ransomware groups have used the flaw.
How often is it updated?
CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.