1,734 totalEPSS avg 50.3%

KEVKnown Exploited Vulnerabilities

CISA’s actively-exploited catalogue · refreshed weekly · authored by Adam Lundqvist

Showing 1,734 of 1,734 · page 23 of 35

CVEVendor / ProductTitleKEV addedEPSS
CVE-2014-9163Adobe / Flash PlayerAdobe Flash Player Stack-Based Buffer Overflow Vulnerability2022-04-13
20.7%
CVE-2015-0311Adobe / Flash PlayerAdobe Flash Player Remote Code Execution Vulnerability2022-04-13
85.6%
CVE-2015-0313Adobe / Flash PlayerAdobe Flash Player Use-After-Free Vulnerability2022-04-13
95.3%
CVE-2015-2502Microsoft / Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability2022-04-13
51.0%
CVE-2015-3113Adobe / Flash PlayerAdobe Flash Player Heap-Based Buffer Overflow Vulnerability2022-04-13
99.8%
CVE-2015-5122Adobe / Flash PlayerAdobe Flash Player Use-After-Free Vulnerability2022-04-13
94.0%
CVE-2015-5123Adobe / Flash PlayerAdobe Flash Player Use-After-Free Vulnerability2022-04-13
18.8%
CVE-2018-20753Kaseya / Virtual System/Server Administrator (VSA)Kaseya VSA Remote Code Execution Vulnerability2022-04-13
29.6%
CVE-2018-7602Drupal / CoreDrupal Core Remote Code Execution Vulnerability2022-04-13
99.2%
CVE-2022-24521Microsoft / WindowsMicrosoft Windows CLFS Driver Privilege Escalation Vulnerability2022-04-13
7.1%
CVE-2017-11317Telerik / User Interface (UI) for ASP.NET AJAXTelerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability2022-04-11
84.2%
CVE-2020-2509QNAP / QNAP Network-Attached Storage (NAS)QNAP Network-Attached Storage (NAS) Command Injection Vulnerability2022-04-11
34.0%
CVE-2021-22600Linux / KernelLinux Kernel Privilege Escalation Vulnerability2022-04-11
6.6%
CVE-2021-27852Checkbox / Checkbox SurveyCheckbox Survey Deserialization of Untrusted Data Vulnerability2022-04-11
30.3%
CVE-2021-39793Google / PixelGoogle Pixel Out-of-Bounds Write Vulnerability2022-04-11
0.7%
CVE-2021-42278Microsoft / Active DirectoryMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability2022-04-11
73.3%
CVE-2021-42287Microsoft / Active DirectoryMicrosoft Active Directory Domain Services Privilege Escalation Vulnerability2022-04-11
77.2%
CVE-2022-23176WatchGuard / Firebox and XTMWatchGuard Firebox and XTM Privilege Escalation Vulnerability2022-04-11
10.8%
CVE-2017-0148Microsoft / SMBv1 serverMicrosoft SMBv1 Server Remote Code Execution Vulnerability2022-04-06
99.4%
CVE-2021-31166Microsoft / HTTP Protocol StackMicrosoft HTTP Protocol Stack Remote Code Execution Vulnerability2022-04-06
99.9%
CVE-2021-3156Sudo / SudoSudo Heap-Based Buffer Overflow Vulnerability2022-04-06
100.0%
CVE-2021-45382D-Link / Multiple RoutersD-Link Multiple Routers Remote Code Execution Vulnerability2022-04-04
97.8%
CVE-2022-22674Apple / macOSApple macOS Out-of-Bounds Read Vulnerability2022-04-04
1.1%
CVE-2022-22675Apple / macOSApple macOS Out-of-Bounds Write Vulnerability2022-04-04
12.5%
CVE-2022-22965VMware / Spring FrameworkSpring Framework JDK 9+ Remote Code Execution Vulnerability2022-04-04
99.6%
CVE-2018-10561Dasan / Gigabit Passive Optical Network (GPON) RoutersDasan GPON Routers Authentication Bypass Vulnerability2022-03-31
92.9%
CVE-2018-10562Dasan / Gigabit Passive Optical Network (GPON) RoutersDasan GPON Routers Command Injection Vulnerability2022-03-31
99.9%
CVE-2021-21551Dell / dbutil DriverDell dbutil Driver Insufficient Access Control Vulnerability2022-03-31
79.2%
CVE-2021-28799QNAP / Network Attached Storage (NAS)QNAP NAS Improper Authorization Vulnerability2022-03-31
78.3%
CVE-2021-34484Microsoft / WindowsMicrosoft Windows User Profile Service Privilege Escalation Vulnerability2022-03-31
21.8%
CVE-2022-1040Sophos / FirewallSophos Firewall Authentication Bypass Vulnerability2022-03-31
99.8%
CVE-2022-26871Trend Micro / Apex CentralTrend Micro Apex Central Arbitrary File Upload Vulnerability2022-03-31
19.5%
CVE-2010-4398Microsoft / WindowsMicrosoft Windows Kernel Stack-Based Buffer Overflow Vulnerability2022-03-28
8.7%
CVE-2011-2005Microsoft / Ancillary Function Driver (afd.sys)Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulne…2022-03-28
31.8%
CVE-2012-0518Oracle / Fusion MiddlewareOracle Fusion Middleware Unspecified Vulnerability2022-03-28
4.7%
CVE-2012-2034Adobe / Flash PlayerAdobe Flash Player Memory Corruption Vulnerability2022-03-28
7.8%
CVE-2012-2539Microsoft / WordMicrosoft Word Remote Code Execution Vulnerability2022-03-28
53.0%
CVE-2012-5076Oracle / Java SEOracle Java SE Sandbox Bypass Vulnerability2022-03-28
91.3%
CVE-2013-1690Mozilla / Firefox and ThunderbirdMozilla Firefox and Thunderbird Denial-of-Service Vulnerability2022-03-28
69.0%
CVE-2013-2465Oracle / Java SEOracle Java SE Unspecified Vulnerability2022-03-28
98.8%
CVE-2013-2551Microsoft / Internet ExplorerMicrosoft Internet Explorer Use-After-Free Vulnerability2022-03-28
73.9%
CVE-2013-2729Adobe / Reader and AcrobatAdobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability2022-03-28
66.6%
CVE-2013-3660Microsoft / Win32kMicrosoft Win32k Privilege Escalation Vulnerability2022-03-28
39.3%
CVE-2015-1770Microsoft / OfficeMicrosoft Office Uninitialized Memory Use Vulnerability2022-03-28
35.0%
CVE-2015-2419Microsoft / Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability2022-03-28
53.1%
CVE-2015-2426Microsoft / WindowsMicrosoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability2022-03-28
86.6%
CVE-2016-0040Microsoft / WindowsMicrosoft Windows Kernel Privilege Escalation Vulnerability2022-03-28
24.5%
CVE-2016-0151Microsoft / Client-Server Run-time Subsystem (CSRSS)Microsoft Windows CSRSS Security Feature Bypass Vulnerability2022-03-28
62.9%
CVE-2016-0189Microsoft / Internet ExplorerMicrosoft Internet Explorer Memory Corruption Vulnerability2022-03-28
94.1%
CVE-2016-7200Microsoft / EdgeMicrosoft Edge Memory Corruption Vulnerability2022-03-28
82.8%
Sourced from CISA Known Exploited Vulnerabilities — current weekly refresh. EPSS scores from FIRST.org via epss.cyentia.com. Curated by Adam Lundqvist, Founder at SQUR.
KEV explorer — Known Exploited Vulnerabilities | SQUR Knowledge Base