CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 1h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2023-5631

Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

Roundcube · Webmailremediation: past CISA due date

ATT&CKT1041secondary impact T1059.007primary impact T1204.001exploitation

P2added 2023-10-26due 2023-11-16

⋮

CVECVE-2023-20273

Cisco IOS XE Web UI Command Injection Vulnerability

Cisco · Cisco IOS XE Web UIremediation: past CISA due date

ATT&CKT1059secondary impact T1078exploitation T1068primary impact

P2added 2023-10-23due 2023-10-27

⋮

CVECVE-2023-4966

Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

Citrix · NetScaler ADC and NetScaler Gatewayremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1134.001secondary impact T1005primary impact T1574exploitation

P1added 2023-10-18due 2023-11-08

⋮

CVECVE-2023-20198

Cisco IOS XE Web UI Privilege Escalation Vulnerability

Cisco · IOS XE Web UIremediation: past CISA due date

ATT&CKT1190exploitation T1136primary impact

P2added 2023-10-16due 2023-10-20

⋮

CVECVE-2023-20109

Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

Cisco · IOS and IOS XEremediation: past CISA due date

ATT&CKT1059primary impact T1078exploitation T1499primary impact

P2added 2023-10-10due 2023-10-31

⋮

CVECVE-2023-21608

Adobe Acrobat and Reader Use-After-Free Vulnerability

Adobe · Acrobat and Readerremediation: past CISA due date

ATT&CKT1204.002exploitation T1203primary impact

P2added 2023-10-10due 2023-10-31

⋮

CVECVE-2023-36563

Microsoft WordPad Information Disclosure Vulnerability

Microsoft · WordPadremediation: past CISA due date

P2added 2023-10-10due 2023-10-31

⋮

CVECVE-2023-41763

Microsoft Skype for Business Privilege Escalation Vulnerability

Microsoft · Skype for Businessremediation: past CISA due date

P2added 2023-10-10due 2023-10-31

⋮

CVECVE-2023-44487

HTTP/2 Rapid Reset Attack Vulnerability

IETF · HTTP/2remediation: past CISA due date

ATT&CKT1190exploitation T1499primary impact

P2added 2023-10-10due 2023-10-31

⋮

CVECVE-2023-22515

Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

Atlassian · Confluence Data Center and Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1078secondary impact T1059secondary impact T1059.007primary impact T1136primary impact

P1added 2023-10-05due 2023-10-13

⋮

CVECVE-2023-40044

Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

Progress · WS_FTP Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1202secondary impact T1059exploitation T1071.002primary impact

P1added 2023-10-05due 2023-10-26

⋮

CVECVE-2023-42824

Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

Apple · iOS and iPadOSremediation: past CISA due date

P2added 2023-10-05due 2023-10-26

⋮

CVECVE-2023-28229

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Microsoft · Windows CNG Key Isolation Serviceremediation: past CISA due date

ATT&CKT1078exploitation T1068primary impact

P2added 2023-10-04due 2023-10-25

⋮

CVECVE-2023-42793

JetBrains TeamCity Authentication Bypass Vulnerability

JetBrains · TeamCityremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059.003primary impact

P1added 2023-10-04due 2023-10-25

⋮

CVECVE-2023-4211

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm · Mali GPU Kernel Driverremediation: past CISA due date

P2added 2023-10-03due 2023-10-24

⋮

CVECVE-2023-5217

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Google · Chromium libvpxremediation: past CISA due date

ATT&CKT1574primary impact T1204.001exploitation

P2added 2023-10-02due 2023-10-23

⋮

CVECVE-2018-14667

Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

Red Hat · JBoss RichFaces Frameworkremediation: past CISA due date

P2added 2023-09-28due 2023-10-19

⋮

CVECVE-2023-41991

Apple Multiple Products Improper Certificate Validation Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-09-25due 2023-10-16

⋮

CVECVE-2023-41992

Apple Multiple Products Kernel Privilege Escalation Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-09-25due 2023-10-16

⋮

CVECVE-2023-41993

Apple Multiple Products WebKit Code Execution Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-09-25due 2023-10-16

⋮

CVECVE-2023-41179

Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

Trend Micro · Apex One and Worry-Free Business Securityremediation: past CISA due date

ATT&CKT1059primary impact T1078exploitation

P2added 2023-09-21due 2023-10-12

⋮

CVECVE-2023-28434

MinIO Security Feature Bypass Vulnerability

MinIO · MinIOremediation: past CISA due date

P2added 2023-09-19due 2023-10-10

⋮

CVECVE-2014-8361

Realtek SDK Improper Input Validation Vulnerability

Realtek · SDKremediation: past CISA due date

P2added 2023-09-18due 2023-10-09

⋮

CVECVE-2017-6884

Zyxel EMG2926 Routers Command Injection Vulnerability

Zyxel · EMG2926 Routersremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-09-18due 2023-10-09

⋮

CVECVE-2021-3129

Laravel Ignition File Upload Vulnerability

Laravel · Ignitionremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact

P1added 2023-09-18due 2023-10-09

⋮

CVECVE-2022-22265

Samsung Mobile Devices Use-After-Free Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2023-09-18due 2023-10-09

⋮

CVECVE-2023-26369

Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

Adobe · Acrobat and Readerremediation: past CISA due date

ATT&CKT1204.002exploitation T1203primary impact

P2added 2023-09-14due 2023-10-05

⋮

CVECVE-2023-20269

Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

Cisco · Adaptive Security Appliance and Firepower Threat Defenseremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1078primary impact T1133exploitation

P1added 2023-09-13due 2023-10-04

⋮

CVECVE-2023-35674

Android Framework Privilege Escalation Vulnerability

Android · Frameworkremediation: past CISA due date

P2added 2023-09-13due 2023-10-04

⋮

CVECVE-2023-4863

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Google · Chromium WebPremediation: past CISA due date

P2added 2023-09-13due 2023-10-04

⋮

CVECVE-2023-36761

Microsoft Word Information Disclosure Vulnerability

Microsoft · Wordremediation: past CISA due date

P2added 2023-09-12due 2023-10-03

⋮

CVECVE-2023-36802

Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

Microsoft · Streaming Service Proxyremediation: past CISA due date

P2added 2023-09-12due 2023-10-03

⋮

CVECVE-2023-41061

Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

Apple · iOS, iPadOS, and watchOSremediation: past CISA due date

P2added 2023-09-11due 2023-10-02

⋮

CVECVE-2023-41064

Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

Apple · iOS, iPadOS, and macOSremediation: past CISA due date

P2added 2023-09-11due 2023-10-02

⋮

CVECVE-2023-33246

Apache RocketMQ Command Execution Vulnerability

Apache · RocketMQremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact T1608.001secondary impact

P2added 2023-09-06due 2023-09-27

⋮

CVECVE-2023-32315

Ignite Realtime Openfire Path Traversal Vulnerability

Ignite Realtime · Openfireremediation: past CISA due date

ATT&CKT1087.002secondary impact T1202exploitation T1496secondary impact T1505.003primary impact

P2added 2023-08-24due 2023-09-14

⋮

CVECVE-2023-38831

RARLAB WinRAR Code Execution Vulnerability

RARLAB · WinRARremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1204exploitation T1041secondary impact T1112secondary impact T1053secondary impact T1486secondary impact T1005secondary impact T1105secondary impact T1059.004primary impact

P1added 2023-08-24due 2023-09-14

⋮

CVECVE-2023-27532

Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

Veeam · Backup & Replicationremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1486secondary impact T1087secondary impact T1555secondary impact T1087.001secondary impact T1059.003primary impact T1133exploitation

P1added 2023-08-22due 2023-09-12

⋮

CVECVE-2023-38035

Ivanti Sentry Authentication Bypass Vulnerability

Ivanti · Sentryremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1496secondary impact T1059primary impact T1571secondary impact T1105secondary impact T1071.001secondary impact T1018secondary impact T1046secondary impact T1557.001secondary impact

P1added 2023-08-22due 2023-09-12

CVECVE-2023-26359

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe · ColdFusionremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2023-08-21due 2023-09-11

⋮

CVECVE-2023-24489

Citrix Content Collaboration ShareFile Improper Access Control Vulnerability

Citrix · Content Collaborationremediation: past CISA due date

P2added 2023-08-16due 2023-09-06

⋮

CVECVE-2023-38180

Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

Microsoft · .NET Core and Visual Studioremediation: past CISA due date

P2added 2023-08-09due 2023-08-30

⋮

CVECVE-2017-18368

Zyxel P660HN-T1A Routers Command Injection Vulnerability

Zyxel · P660HN-T1A Routersremediation: past CISA due date

P2added 2023-08-07due 2023-08-28

⋮

CVECVE-2023-35081

Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM)remediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2023-07-31due 2023-08-21

⋮

CVECVE-2023-37580

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: past CISA due date

P2added 2023-07-27due 2023-08-17

⋮

CVECVE-2023-38606

Apple Multiple Products Kernel Unspecified Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-07-26due 2023-08-16

⋮

CVECVE-2023-35078

Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1213primary impact T1136primary impact

P1added 2023-07-25due 2023-08-15

⋮

CVECVE-2023-29298

Adobe ColdFusion Improper Access Control Vulnerability

Adobe · ColdFusionremediation: past CISA due date

ATT&CKT1190exploitation

P2added 2023-07-20due 2023-08-10

⋮

CVECVE-2023-38205

Adobe ColdFusion Improper Access Control Vulnerability

Adobe · ColdFusionremediation: past CISA due date

ATT&CKT1190exploitation

P2added 2023-07-20due 2023-08-10

⋮

CVECVE-2023-3519

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Citrix · NetScaler ADC and NetScaler Gatewayremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1087.002secondary impact T1190exploitation T1105primary impact T1574exploitation

P1added 2023-07-19due 2023-08-09

⋮

701–750 of ~1,722

← Prev Next →

⋮