CISA KEV · exploited vulnerabilities

InformationCISA KEV · updated 4h ago

Known Exploited Vulnerabilities from CISA, cross-referenced against ingested MENA cases. “MENA-relevant” means a CVE surfaced in a tracked case — not the full undifferentiated catalog. Each carries a remediation priority (P1–P3) so it's clear which to patch first, and why. For direct SIEM/SOAR ingestion, the same data is available as a machine-readable JSON feed →.

Sort

MENA-RELEVANT FULL CATALOG

50 of ~1,722

Comfortable Compact

CVECVE-2019-5786

Google Chrome Blink Use-After-Free Vulnerability

Google · Chrome Blinkremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-7286

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-7287

Apple iOS Memory Corruption Vulnerability

Apple · iOSremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2019-8720

WebKitGTK Memory Corruption Vulnerability

WebKitGTK · WebKitGTKremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2020-0638

Microsoft Update Notification Manager Privilege Escalation Vulnerability

Microsoft · Update Notification Managerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-05-23due 2022-06-13

⋮

CVECVE-2020-1027

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2021-0920

Android Kernel Race Condition Vulnerability

Android · Kernelremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2021-1048

Android Kernel Use-After-Free Vulnerability

Android · Kernelremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2021-30883

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2022-20821

Cisco IOS XR Open Port Vulnerability

Cisco · IOS XRremediation: past CISA due date

ATT&CKT1190exploitation

P2added 2022-05-23due 2022-06-13

⋮

CVECVE-2022-22947

VMware Spring Cloud Gateway Code Injection Vulnerability

VMware · Spring Cloud Gatewayremediation: past CISA due date

ATT&CKT1190exploitation T1059primary impact T1486secondary impact

P2added 2022-05-16due 2022-06-06

⋮

CVECVE-2022-30525

Zyxel Multiple Firewalls OS Command Injection Vulnerability

Zyxel · Multiple Firewallsremediation: past CISA due date

P2added 2022-05-16due 2022-06-06

⋮

CVECVE-2022-1388

F5 BIG-IP Missing Authentication Vulnerability

F5 · BIG-IPremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1548exploitation

P1added 2022-05-10due 2022-05-31

⋮

CVECVE-2014-0160

OpenSSL Information Disclosure Vulnerability

OpenSSL · OpenSSLremediation: past CISA due date

P2added 2022-05-04due 2022-05-25

⋮

CVECVE-2014-0322

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-05-04due 2022-05-25

⋮

CVECVE-2014-4113

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2022-05-04due 2022-05-25

⋮

CVECVE-2019-8506

Apple Multiple Products Type Confusion Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2022-05-04due 2022-05-25

⋮

CVECVE-2021-1789

Apple Multiple Products Type Confusion Vulnerability

Apple · Multiple Productsremediation: past CISA due date

P2added 2022-05-04due 2022-05-25

⋮

CVECVE-2019-1003029

Jenkins Script Security Plugin Sandbox Bypass Vulnerability

Jenkins · Script Security Pluginremediation: past CISA due date

P2added 2022-04-25due 2022-05-16

⋮

CVECVE-2021-40450

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2022-04-25due 2022-05-16

⋮

CVECVE-2021-41357

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32kremediation: past CISA due date

P2added 2022-04-25due 2022-05-16

⋮

CVECVE-2022-0847

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernelremediation: past CISA due date

P2added 2022-04-25due 2022-05-16

⋮

CVECVE-2022-21919

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

ATT&CKT1078exploitation T1068primary impact

P2added 2022-04-25due 2022-05-16

⋮

CVECVE-2022-26904

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

ATT&CKT1078exploitation T1068primary impact

P2added 2022-04-25due 2022-05-16

⋮

CVECVE-2022-29464

WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

WSO2 · Multiple Productsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1190exploitation T1202primary impact T1496secondary impact

P1added 2022-04-25due 2022-05-16

⋮

CVECVE-2018-6882

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-04-19due 2022-05-10

⋮

CVECVE-2019-3568

WhatsApp VOIP Stack Buffer Overflow Vulnerability

Meta Platforms · WhatsAppremediation: past CISA due date

P2added 2022-04-19due 2022-05-10

⋮

CVECVE-2022-22718

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft · Windowsremediation: past CISA due date

ATT&CKT1078exploitation T1068primary impact

P2added 2022-04-19due 2022-05-10

⋮

CVECVE-2007-3010

Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

Alcatel · OmniPCX Enterpriseremediation: past CISA due date

P2added 2022-04-15due 2022-05-06

⋮

CVECVE-2010-5330

Ubiquiti AirOS Command Injection Vulnerability

Ubiquiti · AirOSremediation: past CISA due date

P2added 2022-04-15due 2022-05-06

⋮

CVECVE-2014-0780

InduSoft Web Studio NTWebServer Directory Traversal Vulnerability

InduSoft · Web Studioremediation: past CISA due date

P2added 2022-04-15due 2022-05-06

⋮

CVECVE-2016-4523

Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability

Trihedral · VTScada (formerly VTS)remediation: past CISA due date

P2added 2022-04-15due 2022-05-06

⋮

CVECVE-2018-7841

Schneider Electric U.motion Builder SQL Injection Vulnerability

Schneider Electric · U.motion Builderremediation: past CISA due date

P2added 2022-04-15due 2022-05-06

⋮

CVECVE-2019-16057

D-Link DNS-320 Remote Code Execution Vulnerability

D-Link · DNS-320 Storage Deviceremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-04-15due 2022-05-06

⋮

CVECVE-2019-3929

Crestron Multiple Products Command Injection Vulnerability

Crestron · Multiple Productsremediation: past CISA due date

P2added 2022-04-15due 2022-05-06

⋮

CVECVE-2022-1364

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8remediation: past CISA due date

P2added 2022-04-15due 2022-05-06

⋮

CVECVE-2022-22960

VMware Multiple Products Privilege Escalation Vulnerability

VMware · Multiple Productsremediation: past CISA due date

ATT&CKT1222exploitation

P2added 2022-04-15due 2022-05-06

⋮

CVECVE-2022-22954

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

VMware · Workspace ONE Access and Identity Managerremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1505.003primary impact T1221exploitation

P1added 2022-04-14due 2022-05-05

⋮

CVECVE-2014-9163

Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

Adobe · Flash Playerremediation: past CISA due date

P2added 2022-04-13due 2022-05-04

⋮

CVECVE-2015-0311

Adobe Flash Player Remote Code Execution Vulnerability

Adobe · Flash Playerremediation: past CISA due date

P2added 2022-04-13due 2022-05-04

⋮

CVECVE-2015-0313

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1189exploitation

P2added 2022-04-13due 2022-05-04

⋮

CVECVE-2015-2502

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorerremediation: past CISA due date

P2added 2022-04-13due 2022-05-04

⋮

CVECVE-2015-3113

Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

Adobe · Flash Playerremediation: past CISA due date

ATT&CKT1204.002exploitation T1622secondary impact T1497secondary impact T1071.001primary impact

P2added 2022-04-13due 2022-05-04

⋮

CVECVE-2015-5122

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Playerremediation: past CISA due date

P2added 2022-04-13due 2022-05-04

⋮

CVECVE-2015-5123

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Playerremediation: past CISA due date

P2added 2022-04-13due 2022-05-04

⋮

CVECVE-2018-20753

Kaseya VSA Remote Code Execution Vulnerability

Kaseya · Virtual System/Server Administrator (VSA)remediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-04-13due 2022-05-04

⋮

CVECVE-2018-7602

Drupal Core Remote Code Execution Vulnerability

Drupal · Coreremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

P1added 2022-04-13due 2022-05-04

⋮

CVECVE-2022-24521

Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

Microsoft · Windowsremediation: known ransomware use · past CISA due date⬤ KNOWN RANSOMWARE USE

ATT&CKT1059secondary impact T1078exploitation T1068primary impact

P1added 2022-04-13due 2022-05-04

⋮

CVECVE-2017-11317

Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability

Telerik · User Interface (UI) for ASP.NET AJAXremediation: past CISA due date

P2added 2022-04-11due 2022-05-02

⋮

CVECVE-2020-2509

QNAP Network-Attached Storage (NAS) Command Injection Vulnerability

QNAP · QNAP Network-Attached Storage (NAS)remediation: past CISA due date

P2added 2022-04-11due 2022-05-02

⋮

1,051–1,100 of ~1,722

← Prev Next →