CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 2h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2023-1389

TP-Link Archer AX-21 Command Injection Vulnerability

TP-Link · Archer AX21remediation: past CISA due date

ATT&CKT1496primary impact T1041secondary impact T1070secondary impact T1498secondary impact T1106exploitation

P2added 2023-05-01due 2023-05-22

⋮

CVECVE-2023-21839

Oracle WebLogic Server Unspecified Vulnerability

Oracle · WebLogic Serverremediation: past CISA due date

P2added 2023-05-01due 2023-05-22

⋮

CVECVE-2023-2136

Google Chrome Skia Integer Overflow Vulnerability

Google · Chromium Skiaremediation: past CISA due date

ATT&CKT1204.001exploitation

P2added 2023-04-21due 2023-05-12

⋮

CVECVE-2023-27350

PaperCut MF/NG Improper Access Control Vulnerability

PaperCut · MF/NGremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1059primary impact T1105secondary impact

P1added 2023-04-21due 2023-05-12

⋮

CVECVE-2023-28432

MinIO Information Disclosure Vulnerability

MinIO · MinIOremediation: past CISA due date

P2added 2023-04-21due 2023-05-12

⋮

CVECVE-2017-6742

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

ATT&CKT1059primary impact T1542.005secondary impact T1574exploitation T1048secondary impact

P2added 2023-04-19due 2023-05-10

⋮

CVECVE-2019-8526

Apple macOS Use-After-Free Vulnerability

Apple · macOSremediation: past CISA due date

P2added 2023-04-17due 2023-05-08

⋮

CVECVE-2023-2033

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2023-04-17due 2023-05-08

⋮

CVECVE-2023-20963

Android Framework Privilege Escalation Vulnerability

Android · Frameworkremediation: past CISA due date

P2added 2023-04-13due 2023-05-04

⋮

CVECVE-2023-29492

Novi Survey Insecure Deserialization Vulnerability

Novi Survey · Novi Surveyremediation: past CISA due date

ATT&CKT1190exploitation

P2added 2023-04-13due 2023-05-04

⋮

CVECVE-2023-28252

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059secondary impact T1078exploitation T1486secondary impact T1021secondary impact T1003secondary impact T1136secondary impact T1068primary impact

P1added 2023-04-11due 2023-05-02

⋮

CVECVE-2023-28205

Apple Multiple Products WebKit Use-After-Free Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-04-10due 2023-05-01

⋮

CVECVE-2023-28206

Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

Apple · iOS, iPadOS, and macOSremediation: past CISA due date

P2added 2023-04-10due 2023-05-01

⋮

CVECVE-2019-1388

Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-04-07due 2023-04-28

⋮

CVECVE-2021-27876

Veritas Backup Exec Agent File Access Vulnerability

Veritas · Backup Exec Agentremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-04-07due 2023-04-28

⋮

CVECVE-2021-27877

Veritas Backup Exec Agent Improper Authentication Vulnerability

Veritas · Backup Exec Agentremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-04-07due 2023-04-28

⋮

CVECVE-2021-27878

Veritas Backup Exec Agent Command Execution Vulnerability

Veritas · Backup Exec Agentremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-04-07due 2023-04-28

⋮

CVECVE-2023-26083

Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

Arm · Mali Graphics Processing Unit (GPU)remediation: past CISA due date

P2added 2023-04-07due 2023-04-28

⋮

CVECVE-2022-27926

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: past CISA due date

P2added 2023-04-03due 2023-04-24

⋮

CVECVE-2013-3163

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2023-03-30due 2023-04-20

⋮

CVECVE-2017-7494

Samba Remote Code Execution Vulnerability

Samba · Sambaremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-03-30due 2023-04-20

⋮

CVECVE-2021-30900

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Apple · iOS, iPadOS, and macOSremediation: past CISA due date

P2added 2023-03-30due 2023-04-20

⋮

CVECVE-2022-22706

Arm Mali GPU Kernel Driver Unspecified Vulnerability

Arm · Mali Graphics Processing Unit (GPU)remediation: past CISA due date

P2added 2023-03-30due 2023-04-20

⋮

CVECVE-2022-3038

Google Chromium Network Service Use-After-Free Vulnerability

Google · Chromium Network Serviceremediation: past CISA due date

ATT&CKT1574primary impact T1204.001exploitation

P2added 2023-03-30due 2023-04-20

⋮

CVECVE-2022-38181

Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Arm · Mali Graphics Processing Unit (GPU)remediation: past CISA due date

P2added 2023-03-30due 2023-04-20

⋮

CVECVE-2022-39197

Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

Fortra · Cobalt Strikeremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2023-03-30due 2023-04-20

⋮

CVECVE-2022-42948

Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

Fortra · Cobalt Strikeremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2023-03-30due 2023-04-20

⋮

CVECVE-2023-0266

Linux Kernel Use-After-Free Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2023-03-30due 2023-04-20

⋮

CVECVE-2023-26360

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe · ColdFusionremediation: past CISA due date

ATT&CKT1190exploitation T1071.001secondary impact T1105secondary impact T1046secondary impact T1003.001secondary impact T1036.005secondary impact T1484.001secondary impact T1505.003secondary impact T1059.007primary impact

P2added 2023-03-15due 2023-04-05

⋮

CVECVE-2022-41328

Fortinet FortiOS Path Traversal Vulnerability

Fortinet · FortiOSremediation: past CISA due date

ATT&CKT1049secondary impact T1565.001secondary impact T1037primary impact T1574exploitation

P2added 2023-03-14due 2023-04-04

⋮

CVECVE-2023-23397

Microsoft Office Outlook Privilege Escalation Vulnerability

Microsoft · Officeremediation: past CISA due date

ATT&CKT1078secondary impact T1203exploitation T1550.002primary impact

P2added 2023-03-14due 2023-04-04

⋮

CVECVE-2023-24880

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-03-14due 2023-04-04

⋮

CVECVE-2020-5741

Plex Media Server Remote Code Execution Vulnerability

Plex · Media Serverremediation: past CISA due date

P2added 2023-03-10due 2023-03-31

⋮

CVECVE-2021-39144

XStream Remote Code Execution Vulnerability

XStream · XStreamremediation: past CISA due date

ATT&CKT1190exploitation T1203primary impact

P2added 2023-03-10due 2023-03-31

⋮

CVECVE-2022-28810

Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

Zoho · ManageEngineremediation: past CISA due date

ATT&CKT1190exploitation

P2added 2023-03-07due 2023-03-28

⋮

CVECVE-2022-33891

Apache Spark Command Injection Vulnerability

Apache · Sparkremediation: past CISA due date

P2added 2023-03-07due 2023-03-28

⋮

CVECVE-2022-35914

Teclib GLPI Remote Code Execution Vulnerability

Teclib · GLPIremediation: past CISA due date

ATT&CKT1190exploitation T1059exploitation

P2added 2023-03-07due 2023-03-28

⋮

CVECVE-2022-36537

ZK Framework AuUploader Unspecified Vulnerability

ZK Framework · AuUploaderremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-02-27due 2023-03-20

⋮

CVECVE-2022-40765

Mitel MiVoice Connect Command Injection Vulnerability

Mitel · MiVoice Connectremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-02-21due 2023-03-14

⋮

CVECVE-2022-41223

Mitel MiVoice Connect Code Injection Vulnerability

Mitel · MiVoice Connectremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-02-21due 2023-03-14

⋮

CVECVE-2022-47986

IBM Aspera Faspex Code Execution Vulnerability

IBM · Aspera Faspexremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-02-21due 2023-03-14

⋮

CVECVE-2022-46169

Cacti Command Injection Vulnerability

Cacti · Cactiremediation: past CISA due date

P2added 2023-02-16due 2023-03-09

⋮

CVECVE-2023-21715

Microsoft Office Publisher Security Feature Bypass Vulnerability

Microsoft · Officeremediation: past CISA due date

ATT&CKT1204.002exploitation

P2added 2023-02-14due 2023-03-07

⋮

CVECVE-2023-21823

Microsoft Windows Graphic Component Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2023-02-14due 2023-03-07

⋮

CVECVE-2023-23376

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-02-14due 2023-03-07

⋮

CVECVE-2023-23529

Apple Multiple Products WebKit Type Confusion Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2023-02-14due 2023-03-07

⋮

CVECVE-2015-2291

Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

Intel · Ethernet Diagnostics Driver for Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-02-10due 2023-03-03

⋮

CVECVE-2022-24990

TerraMaster OS Remote Command Execution Vulnerability

TerraMaster · TerraMaster OSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-02-10due 2023-03-03

⋮

CVECVE-2023-0669

Fortra GoAnywhere MFT Remote Code Execution Vulnerability

Fortra · GoAnywhere MFTremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1486secondary impact T1210primary impact

P1added 2023-02-10due 2023-03-03

⋮

CVECVE-2022-21587

Oracle E-Business Suite Unspecified Vulnerability

Oracle · E-Business Suiteremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-02-02due 2023-02-23

⋮

801–850 of ~1,722

← Prev Next →