1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 22 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2018-8611Microsoft / WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability2022-05-24
4.2%
CVE-2018-5002Adobe / Flash PlayerAdobe Flash Player Stack-based Buffer Overflow Vulnerability2022-05-23
25.1%
CVE-2018-8589Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2022-05-23
3.0%
CVE-2019-0676Microsoft / Internet ExplorerMicrosoft Internet Explorer Information Disclosure Vulnerability2022-05-23
8.1%
CVE-2019-0703Microsoft / WindowsMicrosoft Windows SMB Information Disclosure Vulnerability2022-05-23
9.6%
CVE-2019-0880Microsoft / WindowsMicrosoft Windows Privilege Escalation Vulnerability2022-05-23
2.3%
CVE-2019-1130Microsoft / WindowsMicrosoft Windows AppX Deployment Service Privilege Escalation Vulnerability2022-05-23
1.7%
CVE-2019-11707Mozilla / Firefox and ThunderbirdMozilla Firefox and Thunderbird Type Confusion Vulnerability2022-05-23
37.7%
CVE-2019-11708Mozilla / Firefox and ThunderbirdMozilla Firefox and Thunderbird Sandbox Escape Vulnerability2022-05-23
55.9%
CVE-2019-13720Google / Chrome WebAudioGoogle Chrome WebAudio Use-After-Free Vulnerability2022-05-23
49.1%
CVE-2019-1385Microsoft / WindowsMicrosoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability2022-05-23
3.6%
CVE-2019-18426Meta Platforms / WhatsAppWhatsApp Cross-Site Scripting Vulnerability2022-05-23
67.9%
CVE-2019-5786Google / Chrome BlinkGoogle Chrome Blink Use-After-Free Vulnerability2022-05-23
61.1%
CVE-2019-7286Apple / Multiple ProductsApple Multiple Products Memory Corruption Vulnerability2022-05-23
15.9%
CVE-2019-7287Apple / iOSApple iOS Memory Corruption Vulnerability2022-05-23
4.6%
CVE-2019-8720webkitgtk / webkitgtkCVE-2019-87202022-05-23
1.6%
CVE-2020-0638Microsoft / Update Notification ManagerMicrosoft Update Notification Manager Privilege Escalation Vulnerability2022-05-23
2.4%
CVE-2020-1027Microsoft / WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability2022-05-23
4.5%
CVE-2021-0920Android / KernelAndroid Kernel Race Condition Vulnerability2022-05-23
0.8%
CVE-2021-1048Android / KernelAndroid Kernel Use-After-Free Vulnerability2022-05-23
1.0%
CVE-2021-30883Apple / Multiple ProductsApple Multiple Products Memory Corruption Vulnerability2022-05-23
14.7%
CVE-2022-20821Cisco / IOS XRCisco IOS XR Open Port Vulnerability2022-05-23
11.5%
CVE-2022-22947VMware / Spring Cloud GatewayVMware Spring Cloud Gateway Code Injection Vulnerability2022-05-16
98.3%
CVE-2022-30525Zyxel / Multiple FirewallsZyxel Multiple Firewalls OS Command Injection Vulnerability2022-05-16
99.9%
CVE-2022-1388F5 / BIG-IPF5 BIG-IP Missing Authentication Vulnerability2022-05-10
100.0%
CVE-2014-0160OpenSSL / OpenSSLOpenSSL Information Disclosure Vulnerability2022-05-04
100.0%
CVE-2014-0322Microsoft / Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability2022-05-04
85.1%
CVE-2014-4113Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2022-05-04
86.9%
CVE-2019-8506Apple / Multiple ProductsApple Multiple Products Type Confusion Vulnerability2022-05-04
16.2%
CVE-2021-1789Apple / Multiple ProductsApple Multiple Products Type Confusion Vulnerability2022-05-04
14.0%
CVE-2019-1003029Jenkins / Script Security PluginJenkins Script Security Plugin Sandbox Bypass Vulnerability2022-04-25
74.4%
CVE-2021-40450Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2022-04-25
1.6%
CVE-2021-41357Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2022-04-25
1.6%
CVE-2022-0847Linux / KernelLinux Kernel Privilege Escalation Vulnerability2022-04-25
92.8%
CVE-2022-21919Microsoft / WindowsMicrosoft Windows User Profile Service Privilege Escalation Vulnerability2022-04-25
2.4%
CVE-2022-26904Microsoft / WindowsMicrosoft Windows User Profile Service Privilege Escalation Vulnerability2022-04-25
16.9%
CVE-2022-29464WSO2 / Multiple ProductsWSO2 Multiple Products Unrestrictive Upload of File Vulnerability2022-04-25
100.0%
CVE-2018-6882Synacor / Zimbra Collaboration Suite (ZCS)Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerabi…2022-04-19
29.8%
CVE-2019-3568Meta Platforms / WhatsAppWhatsApp VOIP Stack Buffer Overflow Vulnerability2022-04-19
30.1%
CVE-2022-22718Microsoft / WindowsMicrosoft Windows Print Spooler Privilege Escalation Vulnerability2022-04-19
18.5%
CVE-2007-3010Alcatel / OmniPCX EnterpriseAlcatel OmniPCX Enterprise Remote Code Execution Vulnerability2022-04-15
97.4%
CVE-2010-5330Ubiquiti / AirOSUbiquiti AirOS Command Injection Vulnerability2022-04-15
39.4%
CVE-2014-0780InduSoft / Web StudioInduSoft Web Studio NTWebServer Directory Traversal Vulnerability2022-04-15
74.7%
CVE-2016-4523Trihedral / VTScada (formerly VTS)Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability2022-04-15
31.2%
CVE-2018-7841Schneider Electric / U.motion BuilderSchneider Electric U.motion Builder SQL Injection Vulnerability2022-04-15
72.7%
CVE-2019-16057D-Link / DNS-320 Storage DeviceD-Link DNS-320 Remote Code Execution Vulnerability2022-04-15
86.5%
CVE-2019-3929Crestron / Multiple ProductsCrestron Multiple Products Command Injection Vulnerability2022-04-15
99.0%
CVE-2022-1364Google / Chromium V8Google Chromium V8 Type Confusion Vulnerability2022-04-15
13.7%
CVE-2022-22960VMware / Multiple ProductsVMware Multiple Products Privilege Escalation Vulnerability2022-04-15
35.5%
CVE-2022-22954VMware / Workspace ONE Access and Identity ManagerVMware Workspace ONE Access and Identity Manager Server-Side Template Injecti…2022-04-14
100.0%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.