The CISA KEV Catalogue, Searchable
Every flaw attackers are known to be using: what it is, how bad, and what fixes it.
- Flaws on the list
- 1,779
- Added in 30 days
- 40
- Used in ransomware
- 361
- In web & server software
- 181
10 Jan 2023 Microsoft Windows Memory corruption
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1487, microsoft windows server 2019 10.0.17763.3887, microsoft windows server 2016 10.0.14393.5648, microsoft windows 11 22h2 10.0.22621.1105, microsoft windows 11 21h2 10.0.22000.1455 and 6 older
- CISA due date
- 31 Jan 2023
- Weakness
- CWE-416
10 Jan 2023 Microsoft Exchange Server Security flaw
Microsoft Exchange Server Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 31 Jan 2023
13 Dec 2022 Microsoft Defender Security flaw
Windows SmartScreen Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1366, microsoft windows server 2019 10.0.17763.3770, microsoft windows server 2016 10.0.14393.5582, microsoft windows 11 21h2 10.0.22000.1335, microsoft windows 10 1809 10.0.17763.3770 and 5 older
- CISA due date
- 3 Jan 2023
- Weakness
- CWE-755
28 Nov 2022 Google Chromium GPU Memory corruption
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft edge chromium 107.0.5304.150, google chrome 107.0.5304.121, microsoft edge 107.0.1418.62
- CISA due date
- 19 Dec 2022
- Weakness
- CWE-787
14 Nov 2022 Microsoft Windows Privilege escalation
Windows Mark of the Web Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-274
8 Nov 2022 Microsoft Windows Memory corruption
Windows Scripting Languages Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-787
8 Nov 2022 Microsoft Windows Memory corruption
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-787
8 Nov 2022 Microsoft Windows Access control flaw
Windows Mark of the Web Security Feature Bypass Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-863
8 Nov 2022 Microsoft Windows Memory corruption
Windows Print Spooler Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1249, microsoft windows server 2019 10.0.17763.3650, microsoft windows server 2016 10.0.14393.5501, microsoft windows 11 22h2 10.0.22621.819, microsoft windows 11 21h2 10.0.22000.1219 and 7 older
- CISA due date
- 9 Dec 2022
- Weakness
- CWE-787
11 Oct 2022 Microsoft Windows COM+ Event System Service Memory corruption
Windows COM+ Event System Service Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1129, microsoft windows server 2019 10.0.17763.3532, microsoft windows server 2016 10.0.14393.5427, microsoft windows 11 22h2 10.0.22621.674, microsoft windows 11 21h2 10.0.22000.1098 and 6 older
- CISA due date
- 1 Nov 2022
- Weakness
- CWE-843
30 Sep 2022 Microsoft Exchange Server Remote code execution
Microsoft Exchange Server Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 21 Oct 2022
- Weakness
- CWE-502
30 Sep 2022 Microsoft Exchange Server Server-side request forgery
Microsoft Exchange Server Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 21 Oct 2022
- Weakness
- CWE-918
15 Sep 2022 Microsoft Windows Input validation flaw
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 6 Oct 2022
- Weakness
- CWE-20
14 Sep 2022 Microsoft Windows Memory corruption
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1006, microsoft windows server 2019 10.0.17763.3406, microsoft windows server 2016 10.0.14393.5356, microsoft windows 11 21h2 10.0.22000.978, microsoft windows 10 1809 10.0.17763.3406 and 5 older
- CISA due date
- 5 Oct 2022
- Weakness
- CWE-20, CWE-787
18 Aug 2022 Microsoft Active Directory Weak cryptography
Active Directory Domain Services Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.1668, microsoft windows server 2019 10.0.17763.4252, microsoft windows server 2016 10.0.14393.5850, microsoft windows 11 21h2 10.0.22000.1817, microsoft windows 10 1909 10.0.18363.2274 and 6 older
- CISA due date
- 8 Sep 2022
- Weakness
- CWE-295
18 Aug 2022 Microsoft Windows Memory corruption
Windows Runtime Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.524, microsoft windows server 2019 10.0.17763.2565, microsoft windows server 20h2 10.0.19042.1526, microsoft windows 11 21h2 10.0.22000.493, microsoft windows 10 1909 10.0.18363.2094 and 4 older
- CISA due date
- 8 Sep 2022
- Weakness
- CWE-824
9 Aug 2022 Microsoft Windows Security flaw
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.887, microsoft windows server 2019 10.0.17763.3287, microsoft windows server 2016 10.0.14393.5291, microsoft windows server 20h2 10.0.19042.1889, microsoft windows 11 21h2 10.0.22000.856 and 6 older
- CISA due date
- 30 Aug 2022
12 Jul 2022 Microsoft Windows Security flaw
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.825, microsoft windows server 2019 10.0.17763.3165, microsoft windows server 2016 10.0.14393.5246, microsoft windows server 20h2 10.0.19042.1826, microsoft windows 11 21h2 10.0.22000.795 and 6 older
- CISA due date
- 2 Aug 2022
- Weakness
- CWE-426
1 Jul 2022 Microsoft Windows Authentication bypass
Windows LSA Spoofing Vulnerability
- What to do
- Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.707, microsoft windows server 2019 10.0.17763.2928, microsoft windows server 2016 10.0.14393.5125, microsoft windows server 20h2 10.0.19042.1706, microsoft windows 11 21h2 10.0.22000.675 and 7 older
- CISA due date
- 22 Jul 2022
- Weakness
- CWE-306
14 Jun 2022 Microsoft Windows Security flaw
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.770, microsoft windows server 2019 10.0.17763.3046, microsoft windows server 2016 10.0.14393.5192, microsoft windows server 20h2 10.0.19042.1766, microsoft windows 11 21h2 10.0.22000.739 and 6 older
- CISA due date
- 5 Jul 2022
- Weakness
- CWE-610
8 Jun 2022 Microsoft Office Memory corruption
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-119
8 Jun 2022 Microsoft Internet Explorer Memory corruption
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-416
8 Jun 2022 Microsoft XML Core Services Memory corruption
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-119
8 Jun 2022 Microsoft Windows Input validation flaw
The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the digest of a signed portable executable (PE) file, which allows user-assisted remote attackers to execute arbitrary code via a modified file with additional content, aka "WinVerifyTrust Signature Validation Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-20
8 Jun 2022 Microsoft PowerPoint Memory corruption
Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-119
8 Jun 2022 Microsoft Office Memory corruption
Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a crafted tag containing an invalid length field, aka "Word Buffer Overflow Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-119
8 Jun 2022 Microsoft Office Remote code execution
Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Object Record Corruption Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-94
8 Jun 2022 Microsoft Word Memory corruption
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 22 Jun 2022
- Weakness
- CWE-120
25 May 2022 Microsoft Windows Access control flaw
atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Open Type Font Remote Code Execution Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-284
25 May 2022 Microsoft Windows Access control flaw
Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Component RCE Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-284
25 May 2022 Microsoft Silverlight Input validation flaw
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."
- What to do
- The impacted products are end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- microsoft silverlight 5.1.41212.0
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-20
25 May 2022 Microsoft Windows Security flaw
The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-264
25 May 2022 Microsoft Internet Explorer Memory corruption
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-119
25 May 2022 Microsoft Win32k Memory corruption
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-119
25 May 2022 Microsoft Windows Security flaw
Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Mount Manager Elevation of Privilege Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-264
25 May 2022 Microsoft Windows Security flaw
The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-19
25 May 2022 Microsoft Internet Explorer Security flaw
Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-264
25 May 2022 Microsoft Windows Path traversal
Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted pathname in an executable file, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Directory Traversal Elevation of Privilege Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-22
25 May 2022 Microsoft Windows Remote code execution
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted TrueType font, as exploited in the wild in October 2014, aka "TrueType Font Parsing Remote Code Execution Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-94
25 May 2022 Microsoft Internet Explorer Security flaw
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-264
25 May 2022 Microsoft Input Method Editor (IME) Japanese Security flaw
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote attackers to bypass a sandbox protection mechanism via a crafted PDF document, aka "Microsoft IME (Japanese) Elevation of Privilege Vulnerability," as exploited in the wild in 2014.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-264
25 May 2022 Microsoft Internet Explorer Security flaw
Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-264
25 May 2022 Microsoft Internet Explorer Information disclosure
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in February 2014.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-200
25 May 2022 Microsoft Silverlight Input validation flaw
Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- microsoft silverlight 5.1.20913.0
- CISA due date
- 15 Jun 2022
- Weakness
- CWE-20
25 May 2022 Microsoft Silverlight Security flaw
Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."
- What to do
- The impacted product is end-of-life and should be disconnected if still in use.
- Fixed in (NVD)
- microsoft silverlight 5.1.20125.0
- CISA due date
- 15 Jun 2022
24 May 2022 Microsoft Windows Denial of service
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 14 Jun 2022
- Weakness
- CWE-404
24 May 2022 Microsoft Windows Security flaw
Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to take control of the affected system when Windows Search fails to handle objects in memory, aka "Windows Search Remote Code Execution Vulnerability".
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 14 Jun 2022
- Weakness
- CWE-281
24 May 2022 Microsoft Internet Explorer Security flaw
An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 14 Jun 2022
24 May 2022 Microsoft Internet Explorer Memory corruption
Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0018 and CVE-2017-0037.
- What to do
- Apply updates per vendor instructions.
- CISA due date
- 14 Jun 2022
- Weakness
- CWE-119
24 May 2022 Microsoft SMBv1 server Information disclosure
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka "Windows SMB Information Disclosure Vulnerability."
- What to do
- Apply updates per vendor instructions.
- Fixed in (NVD)
- siemens acuson sc2000 firmware 4.0e, siemens syngo sc2000 firmware 4.0e
- CISA due date
- 14 Jun 2022
- Weakness
- CWE-200
Know when it's your software
Get an email within half an hour when a flaw in your software is added. Free.
About the KEV Catalogue
What is the CISA KEV catalogue?
CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.
Why does it matter more than the CVSS score?
Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.
What is the due date?
The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.
Does it apply outside the US?
The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.
What does "used in ransomware" mean?
CISA knows ransomware groups have used the flaw.
How often is it updated?
CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.