CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 3h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2023-22952

Multiple SugarCRM Products Remote Code Execution Vulnerability

SugarCRM · Multiple Productsremediation: past CISA due date

ATT&CKT1190exploitation T1530secondary impact T1078secondary impact T1059primary impact T1021.001secondary impact T1482secondary impact T1083secondary impact T1562.001secondary impact T1070.004secondary impact T1505.003secondary impact

P2added 2023-02-02due 2023-02-23

⋮

CVECVE-2017-11357

Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

Telerik · User Interface (UI) for ASP.NET AJAXremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-01-26due 2023-02-16

⋮

CVECVE-2022-47966

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

Zoho · ManageEngineremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1136.001primary impact T1068primary impact

P1added 2023-01-23due 2023-02-13

⋮

CVECVE-2022-44877

CWP Control Web Panel OS Command Injection Vulnerability

CWP · Control Web Panelremediation: past CISA due date

P2added 2023-01-17due 2023-02-07

⋮

CVECVE-2022-41080

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2023-01-10due 2023-01-31

⋮

CVECVE-2023-21674

Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

ATT&CKT1078exploitation T1068primary impact

P2added 2023-01-10due 2023-01-31

⋮

CVECVE-2018-18809

TIBCO JasperReports Library Directory Traversal Vulnerability

TIBCO · JasperReportsremediation: past CISA due date

P2added 2022-12-29due 2023-01-19

⋮

CVECVE-2018-5430

TIBCO JasperReports Server Information Disclosure Vulnerability

TIBCO · JasperReportsremediation: past CISA due date

P2added 2022-12-29due 2023-01-19

⋮

CVECVE-2022-42856

Apple iOS Type Confusion Vulnerability

Apple · iOSremediation: past CISA due date

P2added 2022-12-14due 2023-01-04

⋮

CVECVE-2022-26500

Veeam Backup & Replication Remote Code Execution Vulnerability

Veeam · Backup & Replicationremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1036secondary impact T1059primary impact T1078exploitation T1048secondary impact

P1added 2022-12-13due 2023-01-03

⋮

CVECVE-2022-26501

Veeam Backup & Replication Remote Code Execution Vulnerability

Veeam · Backup & Replicationremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1036secondary impact T1059primary impact T1048secondary impact

P1added 2022-12-13due 2023-01-03

⋮

CVECVE-2022-27518

Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

Citrix · Application Delivery Controller (ADC) and Gatewayremediation: past CISA due date

P2added 2022-12-13due 2023-01-03

⋮

CVECVE-2022-42475

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

Fortinet · FortiOSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1071.001secondary impact T1622secondary impact T1574primary impact

P1added 2022-12-13due 2023-01-03

⋮

CVECVE-2022-44698

Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

Microsoft · Defenderremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-12-13due 2023-01-03

⋮

CVECVE-2022-4262

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-12-05due 2022-12-26

⋮

CVECVE-2021-35587

Oracle Fusion Middleware Unspecified Vulnerability

Oracle · Fusion Middlewareremediation: past CISA due date

P2added 2022-11-28due 2022-12-19

⋮

CVECVE-2022-4135

Google Chromium GPU Heap Buffer Overflow Vulnerability

Google · Chromium GPUremediation: past CISA due date

P2added 2022-11-28due 2022-12-19

⋮

CVECVE-2022-41049

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-11-14due 2022-12-09

⋮

CVECVE-2021-25337

Samsung Mobile Devices Improper Access Control Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2022-11-08due 2022-11-29

⋮

CVECVE-2021-25369

Samsung Mobile Devices Improper Access Control Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2022-11-08due 2022-11-29

⋮

CVECVE-2021-25370

Samsung Mobile Devices Memory Corruption Vulnerability

Samsung · Mobile Devicesremediation: past CISA due date

P2added 2022-11-08due 2022-11-29

⋮

CVECVE-2022-41073

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1078exploitation T1574secondary impact T1068primary impact

P1added 2022-11-08due 2022-12-09

⋮

CVECVE-2022-41091

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-11-08due 2022-12-09

⋮

CVECVE-2022-41125

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

ATT&CKT1059secondary impact T1078exploitation T1068primary impact

P2added 2022-11-08due 2022-12-09

⋮

CVECVE-2022-41128

Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

ATT&CKT1566exploitation T1203primary impact T1070secondary impact

P2added 2022-11-08due 2022-12-09

⋮

CVECVE-2022-3723

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-10-28due 2022-11-18

⋮

CVECVE-2022-42827

Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

Apple · iOS and iPadOSremediation: past CISA due date

P2added 2022-10-25due 2022-11-15

⋮

CVECVE-2018-19320

GIGABYTE Multiple Products Unspecified Vulnerability

GIGABYTE · Multiple Productsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-10-24due 2022-11-14

⋮

CVECVE-2018-19321

GIGABYTE Multiple Products Privilege Escalation Vulnerability

GIGABYTE · Multiple Productsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-10-24due 2022-11-14

⋮

CVECVE-2018-19322

GIGABYTE Multiple Products Code Execution Vulnerability

GIGABYTE · Multiple Productsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-10-24due 2022-11-14

⋮

CVECVE-2018-19323

GIGABYTE Multiple Products Privilege Escalation Vulnerability

GIGABYTE · Multiple Productsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-10-24due 2022-11-14

⋮

CVECVE-2020-3153

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

Cisco · AnyConnect Secureremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-10-24due 2022-11-14

⋮

CVECVE-2020-3433

Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

Cisco · AnyConnect Secureremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-10-24due 2022-11-14

⋮

CVECVE-2021-3493

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2022-10-20due 2022-11-10

⋮

CVECVE-2022-41352

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-10-20due 2022-11-10

⋮

CVECVE-2022-40684

Fortinet Multiple Products Authentication Bypass Vulnerability

Fortinet · Multiple Productsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1098.004primary impact

P1added 2022-10-11due 2022-11-01

⋮

CVECVE-2022-41033

Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

Microsoft · Windows COM+ Event System Serviceremediation: past CISA due date

ATT&CKT1566.001exploitation T1068primary impact

P2added 2022-10-11due 2022-11-01

⋮

CVECVE-2022-36804

Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

Atlassian · Bitbucket Server and Data Centerremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact

P2added 2022-09-30due 2022-10-21

⋮

CVECVE-2022-41040

Microsoft Exchange Server Server-Side Request Forgery Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-09-30due 2022-10-21

⋮

CVECVE-2022-41082

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1078exploitation T1567secondary impact T1482secondary impact T1087secondary impact T1505.003secondary impact T1059.001primary impact T1059.001exploitation

P1added 2022-09-30due 2022-10-21

⋮

CVECVE-2022-3236

Sophos Firewall Code Injection Vulnerability

Sophos · Firewallremediation: past CISA due date

P2added 2022-09-23due 2022-10-14

⋮

CVECVE-2022-35405

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

Zoho · ManageEngineremediation: past CISA due date

ATT&CKT1059exploitation

P2added 2022-09-22due 2022-10-13

⋮

CVECVE-2010-2568

Microsoft Windows Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-09-15due 2022-10-06

⋮

CVECVE-2013-2094

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2022-09-15due 2022-10-06

⋮

CVECVE-2013-2596

Linux Kernel Integer Overflow Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2022-09-15due 2022-10-06

⋮

CVECVE-2013-2597

Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability

Code Aurora · ACDB Audio Driverremediation: past CISA due date

P2added 2022-09-15due 2022-10-06

⋮

CVECVE-2013-6282

Linux Kernel Improper Input Validation Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2022-09-15due 2022-10-06

⋮

CVECVE-2022-40139

Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

Trend Micro · Apex One and Apex One as a Serviceremediation: past CISA due date

P2added 2022-09-15due 2022-10-06

⋮

CVECVE-2022-32917

Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

Apple · iOS, iPadOS, and macOSremediation: past CISA due date

P2added 2022-09-14due 2022-10-05

⋮

CVECVE-2022-37969

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059secondary impact T1078exploitation T1068primary impact

P1added 2022-09-14due 2022-10-05

⋮

851–900 of ~1,722

← Prev Next →