CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 3h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2011-1823

Android OS Privilege Escalation Vulnerability

Android · Android OSremediation: past CISA due date

P2added 2022-09-08due 2022-09-29

⋮

CVECVE-2011-4723

D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability

D-Link · DIR-300 Routerremediation: past CISA due date

P2added 2022-09-08due 2022-09-29

⋮

CVECVE-2017-5521

NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability

NETGEAR · Multiple Devicesremediation: past CISA due date

P2added 2022-09-08due 2022-09-29

⋮

CVECVE-2018-13374

Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

Fortinet · FortiOS and FortiADCremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-09-08due 2022-09-29

⋮

CVECVE-2018-2628

Oracle WebLogic Server Unspecified Vulnerability

Oracle · WebLogic Serverremediation: past CISA due date

P2added 2022-09-08due 2022-09-29

⋮

CVECVE-2018-6530

D-Link Multiple Routers OS Command Injection Vulnerability

D-Link · Multiple Routersremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-09-08due 2022-09-29

⋮

CVECVE-2018-7445

MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

MikroTik · RouterOSremediation: past CISA due date

P2added 2022-09-08due 2022-09-29

⋮

CVECVE-2020-9934

Apple iOS, iPadOS, and macOS Input Validation Vulnerability

Apple · iOS, iPadOS, and macOSremediation: past CISA due date

P2added 2022-09-08due 2022-09-29

⋮

CVECVE-2022-26258

D-Link DIR-820L Remote Code Execution Vulnerability

D-Link · DIR-820Lremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact T1499.002secondary impact

P2added 2022-09-08due 2022-09-29

⋮

CVECVE-2022-27593

QNAP Photo Station Externally Controlled Reference Vulnerability

QNAP · Photo Stationremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-09-08due 2022-09-29

⋮

CVECVE-2022-3075

Google Chromium Mojo Insufficient Data Validation Vulnerability

Google · Chromium Mojoremediation: past CISA due date

ATT&CKT1204.001exploitation

P2added 2022-09-08due 2022-09-29

⋮

CVECVE-2020-28949

PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

PEAR · Archive_Tarremediation: past CISA due date

P2added 2022-08-25due 2022-09-15

⋮

CVECVE-2020-36193

PEAR Archive_Tar Improper Link Resolution Vulnerability

PEAR · Archive_Tarremediation: past CISA due date

P2added 2022-08-25due 2022-09-15

⋮

CVECVE-2021-31010

Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

Apple · iOS, macOS, watchOSremediation: past CISA due date

P2added 2022-08-25due 2022-09-15

⋮

CVECVE-2021-38406

Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability

Delta Electronics · DOPSoft 2remediation: past CISA due date

P2added 2022-08-25due 2022-09-15

⋮

CVECVE-2021-39226

Grafana Authentication Bypass Vulnerability

Grafana Labs · Grafanaremediation: past CISA due date

ATT&CKT1190exploitation T1485primary impact

P2added 2022-08-25due 2022-09-15

⋮

CVECVE-2022-2294

WebRTC Heap Buffer Overflow Vulnerability

WebRTC · WebRTCremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-08-25due 2022-09-15

⋮

CVECVE-2022-22963

VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

VMware Tanzu · Spring Cloudremediation: past CISA due date

ATT&CKT1190exploitation T1505.003secondary impact T1059.007primary impact

P2added 2022-08-25due 2022-09-15

⋮

CVECVE-2022-24112

Apache APISIX Authentication Bypass Vulnerability

Apache · APISIXremediation: past CISA due date

P2added 2022-08-25due 2022-09-15

⋮

CVECVE-2022-24706

Apache CouchDB Insecure Default Initialization of Resource Vulnerability

Apache · CouchDBremediation: past CISA due date

P2added 2022-08-25due 2022-09-15

⋮

CVECVE-2022-26352

dotCMS Unrestricted Upload of File Vulnerability

dotCMS · dotCMSremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-08-25due 2022-09-15

⋮

CVECVE-2022-0028

Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

Palo Alto Networks · PAN-OSremediation: past CISA due date

ATT&CKT1190exploitation T1498primary impact

P2added 2022-08-22due 2022-09-12

⋮

CVECVE-2017-15944

Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

Palo Alto Networks · PAN-OSremediation: past CISA due date

P2added 2022-08-18due 2022-09-08

⋮

CVECVE-2022-21971

Microsoft Windows Runtime Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

ATT&CKT1059primary impact T1204.001exploitation

P2added 2022-08-18due 2022-09-08

⋮

CVECVE-2022-22536

SAP Multiple Products HTTP Request Smuggling Vulnerability

SAP · Multiple Productsremediation: past CISA due date

P2added 2022-08-18due 2022-09-08

⋮

CVECVE-2022-26923

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directoryremediation: past CISA due date

P2added 2022-08-18due 2022-09-08

⋮

CVECVE-2022-2856

Google Chromium Intents Insufficient Input Validation Vulnerability

Google · Chromium Intentsremediation: past CISA due date

P2added 2022-08-18due 2022-09-08

⋮

CVECVE-2022-32893

Apple iOS and macOS Out-of-Bounds Write Vulnerability

Apple · iOS and macOSremediation: past CISA due date

P2added 2022-08-18due 2022-09-08

⋮

CVECVE-2022-32894

Apple iOS and macOS Out-of-Bounds Write Vulnerability

Apple · iOS and macOSremediation: past CISA due date

P2added 2022-08-18due 2022-09-08

⋮

CVECVE-2022-27925

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-08-11due 2022-09-01

⋮

CVECVE-2022-37042

Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-08-11due 2022-09-01

⋮

CVECVE-2022-30333

RARLAB UnRAR Directory Traversal Vulnerability

RARLAB · UnRARremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-08-09due 2022-08-30

⋮

CVECVE-2022-34713

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Microsoft · Windowsremediation: past CISA due date

ATT&CKT1204.002primary impact T1566exploitation T1059secondary impact

P2added 2022-08-09due 2022-08-30

⋮

CVECVE-2022-27924

Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-08-04due 2022-08-25

⋮

CVECVE-2022-26138

Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

Atlassian · Confluenceremediation: past CISA due date

ATT&CKT1552.001exploitation

P2added 2022-07-29due 2022-08-19

⋮

CVECVE-2022-22047

Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

ATT&CKT1059secondary impact T1078exploitation T1547.001secondary impact T1068primary impact

P2added 2022-07-12due 2022-08-02

⋮

CVECVE-2022-26925

Microsoft Windows LSA Spoofing Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-07-01due 2022-07-22

⋮

CVECVE-2018-4344

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2022-06-27due 2022-07-18

⋮

CVECVE-2019-8605

Apple Multiple Products Use-After-Free Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2022-06-27due 2022-07-18

⋮

CVECVE-2020-3837

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2022-06-27due 2022-07-18

⋮

CVECVE-2020-9907

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2022-06-27due 2022-07-18

⋮

CVECVE-2021-30533

Google Chromium PopupBlocker Security Bypass Vulnerability

Google · Chromium PopupBlockerremediation: past CISA due date

P2added 2022-06-27due 2022-07-18

⋮

CVECVE-2021-30983

Apple iOS and iPadOS Buffer Overflow Vulnerability

Apple · iOS and iPadOSremediation: past CISA due date

P2added 2022-06-27due 2022-07-18

⋮

CVECVE-2021-4034

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Red Hat · Polkitremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1068exploitation

P1added 2022-06-27due 2022-07-18

⋮

CVECVE-2022-29499

Mitel MiVoice Connect Data Validation Vulnerability

Mitel · MiVoice Connectremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-06-27due 2022-07-18

⋮

CVECVE-2022-30190

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1204.002exploitation T1105primary impact

P1added 2022-06-14due 2022-07-05

⋮

CVECVE-2016-2386

SAP NetWeaver SQL Injection Vulnerability

SAP · NetWeaverremediation: past CISA due date

P2added 2022-06-09due 2022-06-30

⋮

CVECVE-2016-2388

SAP NetWeaver Information Disclosure Vulnerability

SAP · NetWeaverremediation: past CISA due date

P2added 2022-06-09due 2022-06-30

⋮

CVECVE-2021-38163

SAP NetWeaver Unrestricted File Upload Vulnerability

SAP · NetWeaverremediation: past CISA due date

P2added 2022-06-09due 2022-06-30

⋮

CVECVE-2006-2492

Microsoft Word Malformed Object Pointer Vulnerability

Microsoft · Wordremediation: past CISA due date

P2added 2022-06-08due 2022-06-22

⋮

901–950 of ~1,722

← Prev Next →