CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 2h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2023-36884

Microsoft Windows Search Remote Code Execution Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1204.002primary impact T1489secondary impact T1490secondary impact T1566exploitation T1005secondary impact T1486secondary impact T1070.001secondary impact T1553.005secondary impact

P1added 2023-07-17due 2023-08-29

⋮

CVECVE-2022-29303

SolarView Compact Command Injection Vulnerability

SolarView · Compactremediation: past CISA due date

ATT&CKT1496secondary impact T1059primary impact T1505exploitation

P2added 2023-07-13due 2023-08-03

⋮

CVECVE-2023-37450

Apple Multiple Products WebKit Code Execution Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-07-13due 2023-08-03

⋮

CVECVE-2022-31199

Netwrix Auditor Insecure Object Deserialization Vulnerability

Netwrix · Auditorremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-07-11due 2023-08-01

⋮

CVECVE-2023-32046

Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2023-07-11due 2023-08-01

⋮

CVECVE-2023-32049

Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2023-07-11due 2023-08-01

⋮

CVECVE-2023-35311

Microsoft Outlook Security Feature Bypass Vulnerability

Microsoft · Outlookremediation: past CISA due date

P2added 2023-07-11due 2023-08-01

⋮

CVECVE-2023-36874

Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2023-07-11due 2023-08-01

⋮

CVECVE-2021-29256

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm · Mali Graphics Processing Unit (GPU)remediation: past CISA due date

ATT&CKT1203exploitation T1005secondary impact T1068primary impact

P2added 2023-07-07due 2023-07-28

⋮

CVECVE-2019-17621

D-Link DIR-859 Router Command Execution Vulnerability

D-Link · DIR-859 Routerremediation: past CISA due date

P2added 2023-06-29due 2023-07-20

⋮

CVECVE-2019-20500

D-Link DWL-2600AP Access Point Command Injection Vulnerability

D-Link · DWL-2600AP Access Pointremediation: past CISA due date

P2added 2023-06-29due 2023-07-20

⋮

CVECVE-2021-25371

Samsung Mobile Devices Unspecified Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2023-06-29due 2023-07-20

⋮

CVECVE-2021-25372

Samsung Mobile Devices Improper Boundary Check Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2023-06-29due 2023-07-20

⋮

CVECVE-2021-25394

Samsung Mobile Devices Race Condition Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2023-06-29due 2023-07-20

⋮

CVECVE-2021-25395

Samsung Mobile Devices Race Condition Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2023-06-29due 2023-07-20

⋮

CVECVE-2021-25487

Samsung Mobile Devices Out-of-Bounds Read Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2023-06-29due 2023-07-20

⋮

CVECVE-2021-25489

Samsung Mobile Devices Improper Input Validation Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2023-06-29due 2023-07-20

⋮

CVECVE-2023-20867

VMware Tools Authentication Bypass Vulnerability

VMware · Toolsremediation: past CISA due date

ATT&CKT1059primary impact T1078exploitation T1105secondary impact

P2added 2023-06-23due 2023-07-14

⋮

CVECVE-2023-27992

Zyxel Multiple NAS Devices Command Injection Vulnerability

Zyxel · Multiple Network-Attached Storage (NAS) Devicesremediation: past CISA due date

P2added 2023-06-23due 2023-07-14

⋮

CVECVE-2023-32434

Apple Multiple Products Integer Overflow Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-06-23due 2023-07-14

⋮

CVECVE-2023-32435

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-06-23due 2023-07-14

⋮

CVECVE-2023-32439

Apple Multiple Products WebKit Type Confusion Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-06-23due 2023-07-14

⋮

CVECVE-2016-0165

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2023-06-22due 2023-07-13

⋮

CVECVE-2016-9079

Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

Mozilla · Firefox, Firefox ESR, and Thunderbirdremediation: past CISA due date

P2added 2023-06-22due 2023-07-13

⋮

CVECVE-2020-12641

Roundcube Webmail Remote Code Execution Vulnerability

Roundcube · Roundcube Webmailremediation: past CISA due date

P2added 2023-06-22due 2023-07-13

⋮

CVECVE-2020-35730

Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

Roundcube · Roundcube Webmailremediation: past CISA due date

P2added 2023-06-22due 2023-07-13

⋮

CVECVE-2021-44026

Roundcube Webmail SQL Injection Vulnerability

Roundcube · Roundcube Webmailremediation: past CISA due date

P2added 2023-06-22due 2023-07-13

⋮

CVECVE-2023-20887

Vmware Aria Operations for Networks Command Injection Vulnerability

VMware · Aria Operations for Networksremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2023-06-22due 2023-07-13

⋮

CVECVE-2023-27997

Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

Fortinet · FortiOS and FortiProxy SSL-VPNremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1136primary impact T1574exploitation

P1added 2023-06-13due 2023-07-04

⋮

CVECVE-2023-3079

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2023-06-07due 2023-06-28

⋮

CVECVE-2023-33009

Zyxel Multiple Firewalls Buffer Overflow Vulnerability

Zyxel · Multiple Firewallsremediation: past CISA due date

P2added 2023-06-05due 2023-06-26

⋮

CVECVE-2023-33010

Zyxel Multiple Firewalls Buffer Overflow Vulnerability

Zyxel · Multiple Firewallsremediation: past CISA due date

P2added 2023-06-05due 2023-06-26

⋮

CVECVE-2023-34362

Progress MOVEit Transfer SQL Injection Vulnerability

Progress · MOVEit Transferremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact T1531secondary impact T1136secondary impact T1005secondary impact T1082secondary impact T1105secondary impact

P1added 2023-06-02due 2023-06-23

⋮

CVECVE-2023-28771

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Zyxel · Multiple Firewallsremediation: past CISA due date

P2added 2023-05-31due 2023-06-21

⋮

CVECVE-2023-2868

Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

Barracuda Networks · Email Security Gateway (ESG) Applianceremediation: past CISA due date

ATT&CKT1059primary impact T1566.001exploitation T1041secondary impact T1105secondary impact

P2added 2023-05-26due 2023-06-16

⋮

CVECVE-2023-28204

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-05-22due 2023-06-12

⋮

CVECVE-2023-32373

Apple Multiple Products WebKit Use-After-Free Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-05-22due 2023-06-12

⋮

CVECVE-2023-32409

Apple Multiple Products WebKit Sandbox Escape Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-05-22due 2023-06-12

⋮

CVECVE-2004-1464

Cisco IOS Denial-of-Service Vulnerability

Cisco · IOSremediation: past CISA due date

P2added 2023-05-19due 2023-06-09

⋮

CVECVE-2016-6415

Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

Cisco · IOS, IOS XR, and IOS XEremediation: past CISA due date

P2added 2023-05-19due 2023-06-09

⋮

CVECVE-2023-21492

Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2023-05-19due 2023-06-09

⋮

CVECVE-2010-3904

Linux Kernel Improper Input Validation Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2023-05-12due 2023-06-02

⋮

CVECVE-2014-0196

Linux Kernel Race Condition Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2023-05-12due 2023-06-02

⋮

CVECVE-2015-5317

Jenkins User Interface (UI) Information Disclosure Vulnerability

Jenkins · Jenkins User Interface (UI)remediation: past CISA due date

P2added 2023-05-12due 2023-06-02

⋮

CVECVE-2016-3427

Oracle Java SE and JRockit Unspecified Vulnerability

Oracle · Java SE and JRockitremediation: past CISA due date

P2added 2023-05-12due 2023-06-02

⋮

CVECVE-2016-8735

Apache Tomcat Remote Code Execution Vulnerability

Apache · Tomcatremediation: past CISA due date

P2added 2023-05-12due 2023-06-02

⋮

CVECVE-2021-3560

Red Hat Polkit Incorrect Authorization Vulnerability

Red Hat · Polkitremediation: past CISA due date

P2added 2023-05-12due 2023-06-02

⋮

CVECVE-2023-25717

Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

Ruckus Wireless · Multiple Productsremediation: past CISA due date

P2added 2023-05-12due 2023-06-02

⋮

CVECVE-2023-29336

Microsoft Win32K Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2023-05-09due 2023-05-30

⋮

CVECVE-2021-45046

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

Apache · Log4j2remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059primary impact T1486secondary impact

P1added 2023-05-01due 2023-05-22

⋮

751–800 of ~1,722

← Prev Next →