The KEV catalog lists vulnerabilities that are known to be actively exploited in the wild. Federal agencies are required to remediate these on defined deadlines.
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2022-3236 | UNKNOWN | — | A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution. | Sep 23, 2022 |
| CVE-2022-35405 | UNKNOWN | — | Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution. | Sep 22, 2022 |
| CVE-2013-6282 | UNKNOWN | — | The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation. | Sep 15, 2022 |
| CVE-2013-2094 | UNKNOWN | — | Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation. | Sep 15, 2022 |
| CVE-2013-2597 | UNKNOWN | — | The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android. | Sep 15, 2022 |
| CVE-2010-2568 | UNKNOWN | — | Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user. | Sep 15, 2022 |
| CVE-2022-40139 | UNKNOWN | — | Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution. | Sep 15, 2022 |
| CVE-2013-2596 | UNKNOWN | — | Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation. | Sep 15, 2022 |
| CVE-2022-37969 | UNKNOWN | — | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. | Sep 14, 2022 |
| CVE-2022-32917 | UNKNOWN | — | Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges. | Sep 14, 2022 |
| CVE-2018-6530 | UNKNOWN | — | Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands. | Sep 8, 2022 |
| CVE-2018-7445 | UNKNOWN | — | In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. | Sep 8, 2022 |
| CVE-2022-27593 | UNKNOWN | — | Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign. | Sep 8, 2022 |
| CVE-2020-9934 | UNKNOWN | — | Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information. | Sep 8, 2022 |
| CVE-2011-4723 | UNKNOWN | — | The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information. | Sep 8, 2022 |
| CVE-2011-1823 | UNKNOWN | — | The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor. | Sep 8, 2022 |
| CVE-2017-5521 | UNKNOWN | — | Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server. | Sep 8, 2022 |
| CVE-2018-2628 | UNKNOWN | — | Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server. | Sep 8, 2022 |
| CVE-2022-3075 | UNKNOWN | — | Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | Sep 8, 2022 |
| CVE-2021-39226 | UNKNOWN | — | Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss. | Aug 25, 2022 |
| CVE-2021-38406 | UNKNOWN | — | Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution. | Aug 25, 2022 |
| CVE-2021-31010 | UNKNOWN | — | In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions. | Aug 25, 2022 |
| CVE-2020-36193 | UNKNOWN | — | PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux. | Aug 25, 2022 |
| CVE-2022-26352 | UNKNOWN | — | dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution. | Aug 25, 2022 |
| CVE-2022-24706 | UNKNOWN | — | Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges. | Aug 25, 2022 |