The CISA KEV Catalogue, Searchable
Every flaw attackers are known to be using: what it is, how bad, and what fixes it.
- Flaws on the list
- 1,779
- Added in 30 days
- 40
- Used in ransomware
- 361
- In web & server software
- 181
2 Jan 2024 Google Chromium WebRTC Memory corruption
Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- google chrome 120.0.6099.129
- CISA due date
- 23 Jan 2024
- Weakness
- CWE-787
4 Dec 2023 Apple Multiple Products Memory corruption
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.
- What to do
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- Fixed in (NVD)
- apple safari 17.1.2, apple ipados 17.1.2, apple iphone os 17.1.2, apple ipados 16.7.3, apple iphone os 16.7.3 and 4 older
- CISA due date
- 25 Dec 2023
- Weakness
- CWE-787
4 Dec 2023 Apple Multiple Products Memory corruption
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.
- What to do
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- Fixed in (NVD)
- apple safari 17.1.2, apple ipados 17.1.2, apple iphone os 17.1.2, apple ipados 16.7.3, apple iphone os 16.7.3 and 4 older
- CISA due date
- 25 Dec 2023
- Weakness
- CWE-125
30 Nov 2023 Google Chromium Skia Memory corruption
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- google chrome 119.0.6045.199, microsoft edge chromium 119.0.2151.97
- CISA due date
- 21 Dec 2023
- Weakness
- CWE-190
8 Nov 2023 IETF Service Location Protocol (SLP) Security flaw
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
- What to do
- Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.
- Fixed in (NVD)
- vmware esxi 7.0
- CISA due date
- 29 Nov 2023
On Hacker News
Reflective DoS amplification attack via SLP 1 comment2 Nov 2023 Apache ActiveMQ Remote code execution
The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath. Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- apache activemq 5.18.3, apache activemq legacy openwire module 5.18.3, apache activemq 5.17.6, apache activemq legacy openwire module 5.17.6, apache activemq 5.16.7 and 3 older
- CISA due date
- 23 Nov 2023
- Weakness
- CWE-502
26 Oct 2023 Roundcube Webmail Cross-site scripting
Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary JavaScript code.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- roundcube webmail 1.6.4, roundcube webmail 1.5.5, roundcube webmail 1.4.15
- CISA due date
- 16 Nov 2023
- Weakness
- CWE-79
28 Sep 2023 Red Hat JBoss RichFaces Framework Remote code execution
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 19 Oct 2023
- Weakness
- CWE-94
25 Sep 2023 Apple Multiple Products Security flaw
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- apple ipados 17.0.1, apple iphone os 17.0.1, apple macos 14.0, webkitgtk+ 2.42.2
- CISA due date
- 16 Oct 2023
- Weakness
- CWE-754
13 Sep 2023 Google Chromium WebP Memory corruption
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- bentley seequent leapfrog 2023.2, mozilla firefox 117.0.1, google chrome 116.0.5845.187, microsoft edge chromium 116.0.1938.81, mozilla thunderbird 115.2.2 and 7 older
- CISA due date
- 4 Oct 2023
- Weakness
- CWE-787
23 Jun 2023 VMware Tools Authentication bypass
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- vmware tools 12.2.5
- CISA due date
- 14 Jul 2023
- Weakness
- CWE-287
22 Jun 2023 Roundcube Webmail SQL injection
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- roundcube webmail 1.4.12, roundcube webmail 1.3.17
- CISA due date
- 13 Jul 2023
- Weakness
- CWE-89
22 Jun 2023 Roundcube Webmail Cross-site scripting
An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- roundcube webmail 1.4.10, roundcube webmail 1.3.16, roundcube webmail 1.2.13
- CISA due date
- 13 Jul 2023
- Weakness
- CWE-79
22 Jun 2023 Mozilla Firefox, Firefox ESR, and Thunderbird Memory corruption
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox < 50.0.2, Firefox ESR < 45.5.1, and Thunderbird < 45.5.1.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- mozilla firefox 50.0.2, mozilla thunderbird 45.5.1, mozilla firefox 45.5.1
- CISA due date
- 13 Jul 2023
- Weakness
- CWE-416
7 Jun 2023 Google Chromium V8 Memory corruption
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 114.0.5735.110, couchbase server 7.1.5
- CISA due date
- 28 Jun 2023
- Weakness
- CWE-843
12 May 2023 Red Hat Polkit Access control flaw
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- polkit project polkit 0.119
- CISA due date
- 2 Jun 2023
- Weakness
- CWE-863
12 May 2023 Apache Tomcat Access control flaw
Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apache tomcat 8.5.7, apache tomcat 8.0.39, apache tomcat 7.0.73, apache tomcat 6.0.48
- CISA due date
- 2 Jun 2023
- Weakness
- CWE-284
12 May 2023 Oracle Java SE and JRockit Access control flaw
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apache cassandra 3.11.8, apache cassandra 3.0.22, apache cassandra 2.2.18, apache cassandra 2.1.22
- CISA due date
- 2 Jun 2023
- Weakness
- CWE-284
12 May 2023 Linux Kernel Race condition
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- linux kernel 3.14.4, linux kernel 3.12.20, linux kernel 3.10.40, linux kernel 3.4.91, linux kernel 3.2.59
- CISA due date
- 2 Jun 2023
- Weakness
- CWE-362
12 May 2023 Linux Kernel Input validation flaw
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- linux kernel 2.6.36
- CISA due date
- 2 Jun 2023
- Weakness
- CWE-20
21 Apr 2023 Google Chromium Skia Memory corruption
Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 112.0.5615.137
- CISA due date
- 12 May 2023
- Weakness
- CWE-190
On Hacker News
Google Chrome Zero-Day 1 comment17 Apr 2023 Google Chromium V8 Memory corruption
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 112.0.5615.121, couchbase server 7.1.5
- CISA due date
- 8 May 2023
- Weakness
- CWE-843
30 Mar 2023 Linux Kernel Memory corruption
A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- linux kernel 6.1.6, linux kernel 5.15.88, linux kernel 5.10.163, linux kernel 5.4.229, linux kernel 4.19.270 and 1 older
- CISA due date
- 20 Apr 2023
- Weakness
- CWE-416
30 Mar 2023 Samba Remote code execution
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- samba 4.6.4, samba 4.5.10, samba 4.4.14, samba 4.4.0
- CISA due date
- 20 Apr 2023
- Weakness
- CWE-94
10 Mar 2023 XStream Remote code execution
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- xstream 1.4.18
- CISA due date
- 31 Mar 2023
- Weakness
- CWE-94, CWE-502
20 Oct 2022 Linux Kernel Access control flaw
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- canonical ubuntu linux 20.10, canonical ubuntu linux 20.04, canonical ubuntu linux 18.04
- CISA due date
- 10 Nov 2022
- Weakness
- CWE-862
15 Sep 2022 Linux Kernel Input validation flaw
The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against Android devices in October and November 2013.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- linux kernel 3.5.5, linux kernel 3.4.12, linux kernel 3.2.54
- CISA due date
- 6 Oct 2022
- Weakness
- CWE-20
15 Sep 2022 Linux Kernel Memory corruption
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- linux kernel 3.8.9, linux kernel 3.4.42, linux kernel 3.2.45, linux kernel 3.0.75
- CISA due date
- 6 Oct 2022
- Weakness
- CWE-189
15 Sep 2022 Linux Kernel Security flaw
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges via a crafted perf_event_open system call.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- linux kernel 3.8.9, linux kernel 3.4.42, linux kernel 3.2.45, linux kernel 3.0.75
- CISA due date
- 6 Oct 2022
- Weakness
- CWE-189
25 Aug 2022 WebRTC Memory corruption
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 103.0.5060.114, apple ipados 15.6, apple iphone os 15.6, apple tvos 15.6, apple macos 12.5 and 5 older
- CISA due date
- 15 Sep 2022
- Weakness
- CWE-122
25 Aug 2022 PEAR Archive_Tar Path traversal
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- drupal 9.1.3, drupal 9.0.11, drupal 8.9.13, drupal 7.78
- CISA due date
- 15 Sep 2022
- Weakness
- CWE-22, CWE-59
25 Aug 2022 PEAR Archive_Tar Input validation flaw
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- drupal 9.0.9, drupal 8.9.10, drupal 8.8.12, drupal 7.75, php archive tar 1.4.12
- CISA due date
- 15 Sep 2022
- Weakness
- CWE-74
18 Aug 2022 Apple iOS and macOS Memory corruption
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple safari 15.6.1, apple ipados 15.6.1, apple iphone os 15.6.1, apple macos 12.5.1, webkitgtk 2.36.7 and 1 older
- CISA due date
- 8 Sep 2022
- Weakness
- CWE-20, CWE-787
9 Aug 2022 RARLAB UnRAR Path traversal
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- rarlab unrar 6.12
- CISA due date
- 30 Aug 2022
- Weakness
- CWE-22, CWE-59
27 Jun 2022 Red Hat Polkit Memory corruption
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- siemens scalance lpe9403 firmware 2.0, polkit project polkit 121, siemens sinumerik edge 3.3.0
- CISA due date
- 18 Jul 2022
- Weakness
- CWE-787
8 Jun 2022 Google Chromium V8 Memory corruption
Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 65.0.3325.146
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-190, CWE-787
8 Jun 2022 Google Chromium V8 Memory corruption
Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 71.0.3578.80
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-787
8 Jun 2022 Google Chromium V8 Security flaw
Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 70.0.3538.67
- CISA due date
- 22 Jun 2022
8 Jun 2022 Google Chromium V8 Memory corruption
Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 59.0.3071.92, google chrome 59.0.3071.86
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-843
8 Jun 2022 Google Chromium V8 Memory corruption
Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 57.0.2987.108, google chrome 57.0.2987.98
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-125
8 Jun 2022 Google Chromium V8 Memory corruption
V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 54.0.2840.90, google chrome 54.0.2840.87, google chrome 54.0.2840.85
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-125, CWE-787
8 Jun 2022 Google Chromium V8 Memory corruption
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 49.0.2623.108
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-119
8 Jun 2022 Adobe Flash Player Security flaw
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- google chrome 10.0.648.134
- CISA due date
- 22 Jun 2022
8 Jun 2022 Adobe Flash Player Memory corruption
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- adobe flash player 10.1.53.64, adobe acrobat 9.3.3, adobe flash player 9.0.277.0, adobe acrobat 8.2.3, adobe air 2.0.2.12610
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-787
8 Jun 2022 Adobe Acrobat and Reader Memory corruption
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- adobe acrobat 9.3, adobe acrobat reader 9.3, adobe acrobat 8.2, adobe acrobat reader 8.2
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-399
8 Jun 2022 Adobe Acrobat and Reader Memory corruption
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- adobe acrobat 9.3, adobe acrobat 8.2, adobe acrobat 7.1.4
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-119
25 May 2022 Adobe Flash Player Memory corruption
Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- adobe flash player 20.0.0.267, adobe air sdk 20.0.0.233, adobe air sdk & compiler 20.0.0.233, adobe air 20.0.0.233, adobe flash player 18.0.0.324 and 6 older
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-189
25 May 2022 Mozilla Firefox Information disclosure
The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- mozilla firefox 39.0.3, mozilla firefox 38.1.1, mozilla firefox os 2.2
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-200
25 May 2022 Linux Kernel Privilege escalation
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- linux kernel 3.14.6, linux kernel 3.12.22, linux kernel 3.10.42, linux kernel 3.4.92, linux kernel 3.2.60
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-269
25 May 2022 Oracle Java Runtime Environment (JRE) Access control flaw
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-284
Know when it's your software
Get an email within half an hour when a flaw in your software is added. Free.
About the KEV Catalogue
What is the CISA KEV catalogue?
CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.
Why does it matter more than the CVSS score?
Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.
What is the due date?
The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.
Does it apply outside the US?
The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.
What does "used in ransomware" mean?
CISA knows ransomware groups have used the flaw.
How often is it updated?
CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.