The CISA KEV Catalogue, Searchable
Every flaw attackers are known to be using: what it is, how bad, and what fixes it.
- Flaws on the list
- 1,779
- Added in 30 days
- 40
- Used in ransomware
- 361
- In web & server software
- 181
13 Apr 2022 Adobe Flash Player Memory corruption
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- adobe flash player 18.0.0.194, adobe flash player 13.0.0.296, adobe flash player 11.2.202.468, hp insight orchestration 7.5.0, hp system management homepage 7.5.0 and 4 older
- CISA due date
- 4 May 2022
- Weakness
- CWE-119
13 Apr 2022 Microsoft Internet Explorer Memory corruption
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 4 May 2022
- Weakness
- CWE-119
13 Apr 2022 Adobe Flash Player Memory corruption
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- adobe flash player 16.0.0.305, adobe flash player 13.0.0.269, adobe flash player 11.2.202.442
- CISA due date
- 4 May 2022
- Weakness
- CWE-416
13 Apr 2022 Adobe Flash Player Security flaw
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- adobe flash player 16.0.0.287
- CISA due date
- 4 May 2022
13 Apr 2022 Adobe Flash Player Memory corruption
Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- adobe flash player 15.0.0.246, adobe flash player 13.0.0.259, adobe flash player 11.2.202.425
- CISA due date
- 4 May 2022
- Weakness
- CWE-121
11 Apr 2022 WatchGuard Firebox and XTM Security flaw
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- watchguard fireware 12.5.7, watchguard fireware 12.1.3
- CISA due date
- 2 May 2022
11 Apr 2022 Microsoft Active Directory Privilege escalation
Active Directory Domain Services Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.350, microsoft windows server 2019 10.0.17763.2300, microsoft windows server 2016 10.0.14393.4770, microsoft windows server 2004 10.0.19041.1348, microsoft windows server 20h2 10.0.19042.1348
- CISA due date
- 2 May 2022
- Weakness
- CWE-269
11 Apr 2022 Microsoft Active Directory Input validation flaw
Active Directory Domain Services Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.350, microsoft windows server 2019 10.0.17763.2300, microsoft windows server 2016 10.0.14393.4770, microsoft windows server 2004 10.0.19041.1348, microsoft windows server 20h2 10.0.19042.1348
- CISA due date
- 2 May 2022
- Weakness
- CWE-20
11 Apr 2022 Google Pixel Memory corruption
In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-210470189References: N/A
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 2 May 2022
- Weakness
- CWE-787
11 Apr 2022 Checkbox Survey Remote code execution
Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. This issue affects: Checkbox Survey versions prior to 7.
- What to do
- Versions 6 and earlier for this product are end-of-life and must be removed from agency networks. Versions 7 and later are not considered vulnerable.
- Fixed in (NVD)
- checkbox survey 7.0
- CISA due date
- 2 May 2022
- Weakness
- CWE-502
11 Apr 2022 Linux Kernel Memory corruption
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- linux kernel 5.15.11, linux kernel 5.10.88, linux kernel 5.4.168, linux kernel 4.19.222, linux kernel 4.14.259
- CISA due date
- 2 May 2022
- Weakness
- CWE-415
11 Apr 2022 QNAP Network-Attached Storage (NAS) Command injection
A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and later QTS 4.5.1.1495 Build 20201123 and later QTS 4.3.6.1620 Build 20210322 and later QTS 4.3.4.1632 Build 20210324 and later QTS 4.3.3.1624 Build 20210416 and later QTS 4.2.6 Build 20210327 and later QuTS hero h4.5.1.1491 build 20201119 and later
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- qnap qts 4.5.1, qnap quts hero h4.5.1, qnap qts 4.3.6, qnap qts 4.2.6
- CISA due date
- 2 May 2022
- Weakness
- CWE-77, CWE-78
11 Apr 2022 Telerik User Interface (UI) for ASP.NET AJAX Weak cryptography
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 2 May 2022
- Weakness
- CWE-326
6 Apr 2022 Sudo Memory corruption
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- beyondtrust privilege management for mac 21.1.1, beyondtrust privilege management for unix/linux 10.3.2-10, sudo project sudo 1.9.5, sudo project sudo 1.8.32
- CISA due date
- 27 Apr 2022
- Weakness
- CWE-122, CWE-193
6 Apr 2022 Microsoft HTTP Protocol Stack Memory corruption
HTTP Protocol Stack Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2004 10.0.19041.982, microsoft windows server 20h2 10.0.19042.982, microsoft windows 10 2004 10.0.19041.982, microsoft windows 10 20h2 10.0.19042.982
- CISA due date
- 27 Apr 2022
- Weakness
- CWE-416
6 Apr 2022 Microsoft SMBv1 server Input validation flaw
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- siemens acuson sc2000 firmware 4.0e
- CISA due date
- 27 Apr 2022
- Weakness
- CWE-20
4 Apr 2022 VMware Spring Framework Remote code execution
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- oracle mysql enterprise monitor 8.0.29, vmware spring framework 5.3.18, vmware spring framework 5.2.20, cisco cx cloud agent 2.1.0, siemens operation scheduler 2.0.4 and 2 older
- CISA due date
- 25 Apr 2022
- Weakness
- CWE-94
4 Apr 2022 Apple macOS Memory corruption
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple tvos 15.5, apple ipados 15.4.1, apple iphone os 15.4.1, apple macos 12.3.1, apple macos 11.6.6 and 1 older
- CISA due date
- 25 Apr 2022
- Weakness
- CWE-20, CWE-125
4 Apr 2022 Apple macOS Memory corruption
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- apple macos 12.3.1, apple macos 11.6.6, apple mac os x 10.15.7
- CISA due date
- 25 Apr 2022
- Weakness
- CWE-20, CWE-125
4 Apr 2022 D-Link Multiple Routers Command injection
A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- CISA due date
- 25 Apr 2022
- Weakness
- CWE-78
31 Mar 2022 Trend Micro Apex Central Security flaw
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 21 Apr 2022
- Weakness
- CWE-184
31 Mar 2022 Sophos Firewall Security flaw
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 21 Apr 2022
- Weakness
- CWE-158
31 Mar 2022 Microsoft Windows Privilege escalation
Windows User Profile Service Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2019 10.0.17763.2114, microsoft windows server 2016 10.0.14393.4583, microsoft windows server 2004 10.0.19041.1165, microsoft windows server 20h2 10.0.19042.1165, microsoft windows 10 2004 10.0.19041.1165 and 6 older
- CISA due date
- 21 Apr 2022
- Weakness
- CWE-269
31 Mar 2022 QNAP Network Attached Storage (NAS) Access control flaw
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to v3.0.210412 on QTS 4.3.6; versions prior to v3.0.210411 on QTS 4.3.4; versions prior to v3.0.210411 on QTS 4.3.3; versions prior to v16.0.0419 on QuTS hero h4.5.1; versions prior to v16.0.0419 on QuTScloud c4.5.1~c4.5.4. This issue does not affect: QNAP Systems Inc. HBS 2 . QNAP Systems Inc. HBS 1.3 .
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- qnap hybrid backup sync 16.0.0419, qnap hybrid backup sync 16.0.0415, qnap hybrid backup sync 3.0.210412, qnap hybrid backup sync 3.0.210411
- CISA due date
- 21 Apr 2022
- Weakness
- CWE-285
31 Mar 2022 Dell dbutil Driver Security flaw
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 21 Apr 2022
- Weakness
- CWE-782
31 Mar 2022 Dasan Gigabit Passive Optical Network (GPON) Routers Command injection
An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_action=ping request to a GponForm/diag_Form URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to execute commands and retrieve their output.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- CISA due date
- 21 Apr 2022
- Weakness
- CWE-78
31 Mar 2022 Dasan Gigabit Passive Optical Network (GPON) Routers Authentication bypass
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images" to any URL of the device that requires authentication, as demonstrated by the /menu.html?images/ or /GponForm/diag_FORM?images/ URI. One can then manage the device.
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- CISA due date
- 21 Apr 2022
- Weakness
- CWE-287
28 Mar 2022 Google Chromium V8 Memory corruption
Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- google chrome 99.0.4844.84
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-843
28 Mar 2022 Redis Debian-specific Redis Servers Access control flaw
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-862
28 Mar 2022 Microsoft Office Security flaw
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
28 Mar 2022 Microsoft Windows Memory corruption
Windows Event Tracing Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2019 10.0.17763.2114, microsoft windows server 2004 10.0.19041.1165, microsoft windows server 20h2 10.0.19042.1165, microsoft windows 10 2004 10.0.19041.1165, microsoft windows 10 1909 10.0.18363.1734 and 3 older
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-416
28 Mar 2022 Atlassian Confluence Server Access control flaw
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- atlassian confluence data center 7.12.3, atlassian confluence server 7.12.3, atlassian confluence data center 7.4.10, atlassian confluence server 7.4.10
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-425
28 Mar 2022 SonicWall Secure Remote Access (SRA) SQL injection
Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- sonicwall sra 4600 firmware 9.0.0.10-28sv, sonicwall sra 1600 firmware 9.0.0.10-28sv, sonicwall sma 500v firmware 9.0.0.10-28sv, sonicwall sma 410 firmware 9.0.0.10-28sv, sonicwall sma 210 firmware 9.0.0.10-28sv and 1 older
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-89
28 Mar 2022 SonicWall SMA100 Path traversal
In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- sonicwall sma 100 firmware 9.0.0.4
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-22
28 Mar 2022 Microsoft Windows Security flaw
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
28 Mar 2022 Microsoft DirectX Graphics Kernel (DXGKRNL) Denial of service
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-404
28 Mar 2022 Microsoft DirectX Graphics Kernel (DXGKRNL) Denial of service
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-404
28 Mar 2022 Microsoft Windows Security flaw
Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
28 Mar 2022 Microsoft Internet Explorer Information disclosure
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-200
28 Mar 2022 Microsoft Edge and Internet Explorer Memory corruption
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-704
28 Mar 2022 Microsoft Edge Memory corruption
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-119
28 Mar 2022 Microsoft Edge Memory corruption
The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, and CVE-2016-7243.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-119
28 Mar 2022 Microsoft Internet Explorer Memory corruption
The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0187.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-119
28 Mar 2022 Microsoft Client-Server Run-time Subsystem (CSRSS) Privilege escalation
The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, which allows local users to gain privileges via a crafted application, aka "Windows CSRSS Security Feature Bypass Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-264
28 Mar 2022 Microsoft Windows Security flaw
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-264
On Hacker News
CVE-2016-0040 Story of uninitialized pointer28 Mar 2022 Microsoft Windows Memory corruption
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType Font Driver Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-119
28 Mar 2022 Microsoft Internet Explorer Memory corruption
JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "JScript9 Memory Corruption Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-119
28 Mar 2022 Microsoft Office Memory corruption
Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-19
28 Mar 2022 Microsoft Win32k Memory corruption
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next object in a certain list, which allows local users to obtain write access to the PATHRECORD chain, and consequently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPath function calls, aka "Win32k Read AV Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-119
28 Mar 2022 Adobe Reader and Acrobat Memory corruption
Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- adobe acrobat 11.0.03, adobe acrobat reader 11.0.03, adobe acrobat 10.1.7, adobe acrobat reader 10.1.7, adobe acrobat 9.5.5 and 1 older
- CISA due date
- 18 Apr 2022
- Weakness
- CWE-189
Know when it's your software
Get an email within half an hour when a flaw in your software is added. Free.
About the KEV Catalogue
What is the CISA KEV catalogue?
CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.
Why does it matter more than the CVSS score?
Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.
What is the due date?
The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.
Does it apply outside the US?
The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.
What does "used in ransomware" mean?
CISA knows ransomware groups have used the flaw.
How often is it updated?
CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.