CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 4h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2007-5659

Adobe Acrobat and Reader Buffer Overflow Vulnerability

Adobe · Acrobat and Readerremediation: past CISA due date

ATT&CKT1204.002exploitation

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2008-0655

Adobe Acrobat and Reader Unspecified Vulnerability

Adobe · Acrobat and Readerremediation: past CISA due date

ATT&CKT1204.002exploitation

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2009-0557

Microsoft Office Object Record Corruption Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2009-0563

Microsoft Office Buffer Overflow Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2009-1862

Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability

Adobe · Acrobat and Reader, Flash Playerremediation: past CISA due date

ATT&CKT1204.002exploitation

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2009-3953

Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

Adobe · Acrobat and Readerremediation: past CISA due date

ATT&CKT1204.002exploitation

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2009-4324

Adobe Acrobat and Reader Use-After-Free Vulnerability

Adobe · Acrobat and Readerremediation: past CISA due date

ATT&CKT1204.002exploitation T1071.001primary impact

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2010-1297

Adobe Flash Player Memory Corruption Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1204.002exploitation T1105primary impact T1189exploitation

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2010-2572

Microsoft PowerPoint Buffer Overflow Vulnerability

Microsoft · PowerPointremediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2010-2883

Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability

Adobe · Acrobat and Readerremediation: past CISA due date

ATT&CKT1204.002exploitation T1059secondary impact T1027primary impact

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2011-0609

Adobe Flash Player Unspecified Vulnerability

Adobe · Flash Playerremediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2011-2462

Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability

Adobe · Reader and Acrobatremediation: past CISA due date

ATT&CKT1204.002exploitation

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2012-0151

Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2012-0754

Adobe Flash Player Memory Corruption Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1204.002exploitation T1105primary impact

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2012-0767

Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1114.002secondary impact T1098secondary impact T1185primary impact T1204.001exploitation

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2012-1889

Microsoft XML Core Services Memory Corruption Vulnerability

Microsoft · XML Core Servicesremediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2012-4969

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2012-5054

Adobe Flash Player Integer Overflow Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1189exploitation

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2013-1331

Microsoft Office Buffer Overflow Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2016-1646

Google Chromium V8 Out-of-Bounds Read Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2016-5198

Google Chromium V8 Out-of-Bounds Memory Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2017-5030

Google Chromium V8 Memory Corruption Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2017-5070

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2017-6862

NETGEAR Multiple Devices Buffer Overflow Vulnerability

NETGEAR · Multiple Devicesremediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2018-17463

Google Chromium V8 Remote Code Execution Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2018-17480

Google Chromium V8 Out-of-Bounds Write Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2018-4990

Adobe Acrobat and Reader Double Free Vulnerability

Adobe · Acrobat and Readerremediation: past CISA due date

ATT&CKT1204.002exploitation T1059.007exploitation

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2018-6065

Google Chromium V8 Integer Overflow Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2019-15271

Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

Cisco · RV Series Routersremediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2019-5825

Google Chromium V8 Out-of-Bounds Write Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

CVECVE-2019-7192

QNAP Photo Station Improper Access Control Vulnerability

QNAP · Photo Stationremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-06-08due 2022-06-22

⋮

CVECVE-2019-7193

QNAP QTS Improper Input Validation Vulnerability

QNAP · QTSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-06-08due 2022-06-22

⋮

CVECVE-2019-7194

QNAP Photo Station Path Traversal Vulnerability

QNAP · Photo Stationremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-06-08due 2022-06-22

⋮

CVECVE-2019-7195

QNAP Photo Station Path Traversal Vulnerability

QNAP · Photo Stationremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-06-08due 2022-06-22

⋮

CVECVE-2022-26134

Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

Atlassian · Confluence Server/Data Centerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation

P1added 2022-06-02due 2022-06-06

⋮

CVECVE-2010-0738

Red Hat JBoss Authentication Bypass Vulnerability

Red Hat · JBossremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-25due 2022-06-15

⋮

CVECVE-2010-0840

Oracle JRE Unspecified Vulnerability

Oracle · Java Runtime Environment (JRE)remediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2010-1428

Red Hat JBoss Information Disclosure Vulnerability

Red Hat · JBossremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-25due 2022-06-15

⋮

CVECVE-2012-1710

Oracle Fusion Middleware Unspecified Vulnerability

Oracle · Fusion Middlewareremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-25due 2022-06-15

⋮

CVECVE-2013-0074

Microsoft Silverlight Double Dereference Vulnerability

Microsoft · Silverlightremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-25due 2022-06-15

⋮

CVECVE-2013-0422

Oracle JRE Remote Code Execution Vulnerability

Oracle · Java Runtime Environment (JRE)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-25due 2022-06-15

⋮

CVECVE-2013-0431

Oracle JRE Sandbox Bypass Vulnerability

Oracle · Java Runtime Environment (JRE)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-25due 2022-06-15

⋮

CVECVE-2013-2423

Oracle JRE Unspecified Vulnerability

Oracle · Java Runtime Environment (JRE)remediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2013-3896

Microsoft Silverlight Information Disclosure Vulnerability

Microsoft · Silverlightremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2013-3993

IBM InfoSphere BigInsights Invalid Input Vulnerability

IBM · InfoSphere BigInsightsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-25due 2022-06-15

⋮

CVECVE-2013-7331

Microsoft Internet Explorer Information Disclosure Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2014-0546

Adobe Reader and Acrobat Sandbox Bypass Vulnerability

Adobe · Reader and Acrobatremediation: past CISA due date

ATT&CKT1068primary impact T1497primary impact

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2014-2817

Microsoft Internet Explorer Privilege Escalation Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2014-3153

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

CVECVE-2014-4077

Microsoft IME Japanese Privilege Escalation Vulnerability

Microsoft · Input Method Editor (IME) Japaneseremediation: past CISA due date

P2added 2022-05-25due 2022-06-15

⋮

951–1,000 of ~1,722

← Prev Next →