CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 2h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2017-12240

Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-12319

Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability

Cisco · IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-6627

Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-6663

Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-6736

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-6737

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-6738

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-6739

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-6740

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-6743

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-6744

Cisco IOS Software SNMP Remote Code Execution Vulnerability

Cisco · IOS softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2017-8540

Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

Microsoft · Malware Protection Engineremediation: past CISA due date

P2added 2022-03-03due 2022-03-24

⋮

CVECVE-2018-0151

Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0154

Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability

Cisco · IOS Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0155

Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability

Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switchesremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0156

Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability

Cisco · IOS Software and Cisco IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0158

Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability

Cisco · IOS Software and Cisco IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0159

Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability

Cisco · IOS Software and Cisco IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0161

Cisco IOS Software Resource Management Errors Vulnerability

Cisco · IOS Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0167

Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

Cisco · IOS, XR, and XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0172

Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0173

Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

Cisco · IOS and IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0174

Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability

Cisco · IOS XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0175

Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

Cisco · IOS, XR, and XE Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0179

Cisco IOS Software Denial-of-Service Vulnerability

Cisco · IOS Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-0180

Cisco IOS Software Denial-of-Service Vulnerability

Cisco · IOS Softwareremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-8298

ChakraCore Scripting Engine Type Confusion Vulnerability

ChakraCore · ChakraCore scripting engineremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2018-8581

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Serverremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-03-03due 2022-03-17

⋮

CVECVE-2019-1297

Microsoft Excel Remote Code Execution Vulnerability

Microsoft · Excelremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2019-1652

Cisco Small Business Routers Improper Input Validation Vulnerability

Cisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN Routersremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2019-16928

Exim Out-of-bounds Write Vulnerability

Exim · Exim Internet Mailerremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2020-11899

Treck TCP/IP stack Out-of-Bounds Read Vulnerability

Treck TCP/IP stack · IPv6remediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2020-1938

Apache Tomcat Improper Privilege Management Vulnerability

Apache · Tomcatremediation: past CISA due date

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2021-41379

Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1078exploitation T1068primary impact

P1added 2022-03-03due 2022-03-17

⋮

CVECVE-2022-20699

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routersremediation: past CISA due date

ATT&CKT1059.004primary impact T1133exploitation

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2022-20700

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routersremediation: past CISA due date

ATT&CKT1190exploitation T1059.004primary impact

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2022-20701

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routersremediation: past CISA due date

ATT&CKT1203primary impact T1078exploitation

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2022-20703

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routersremediation: past CISA due date

ATT&CKT1203exploitation

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2022-20708

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routersremediation: past CISA due date

ATT&CKT1190exploitation T1068primary impact

P2added 2022-03-03due 2022-03-17

⋮

CVECVE-2014-6352

Microsoft Windows Code Injection Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-02-25due 2022-08-25

⋮

CVECVE-2017-0222

Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-02-25due 2022-08-25

⋮

CVECVE-2017-8570

Microsoft Office Remote Code Execution Vulnerability

Microsoft · Officeremediation: past CISA due date

P2added 2022-02-25due 2022-08-25

⋮

CVECVE-2022-24682

Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor · Zimbra Collaborate Suite (ZCS)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1185secondary impact T1059.007primary impact T1204.001exploitation

P1added 2022-02-25due 2022-03-11

⋮

CVECVE-2022-23131

Zabbix Frontend Authentication Bypass Vulnerability

Zabbix · Frontendremediation: past CISA due date

ATT&CKT1190exploitation T1078secondary impact T1059secondary impact T1548primary impact

P2added 2022-02-22due 2022-03-08

⋮

CVECVE-2022-23134

Zabbix Frontend Improper Access Control Vulnerability

Zabbix · Frontendremediation: past CISA due date

P2added 2022-02-22due 2022-03-08

⋮

CVECVE-2013-3906

Microsoft Graphics Component Memory Corruption Vulnerability

Microsoft · Graphics Componentremediation: past CISA due date

P2added 2022-02-15due 2022-08-15

⋮

CVECVE-2014-1761

Microsoft Word Memory Corruption Vulnerability

Microsoft · Wordremediation: past CISA due date

P2added 2022-02-15due 2022-08-15

⋮

CVECVE-2017-9841

PHPUnit Command Injection Vulnerability

PHPUnit · PHPUnitremediation: past CISA due date

P2added 2022-02-15due 2022-08-15

⋮

CVECVE-2018-15982

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Playerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1204.002exploitation T1105primary impact

P1added 2022-02-15due 2022-08-15

⋮

CVECVE-2018-20250

WinRAR Absolute Path Traversal Vulnerability

RARLAB · WinRARremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-02-15due 2022-08-15

⋮

1,301–1,350 of ~1,722

← Prev Next →