The KEV catalog lists vulnerabilities that are known to be actively exploited in the wild. Federal agencies are required to remediate these on defined deadlines.
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2022-24112 | UNKNOWN | — | Apache APISIX contains an authentication bypass vulnerability that allows for remote code execution. | Aug 25, 2022 |
| CVE-2022-22963 | UNKNOWN | — | When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources. | Aug 25, 2022 |
| CVE-2020-28949 | UNKNOWN | — | PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux. | Aug 25, 2022 |
| CVE-2022-0028 | UNKNOWN | — | A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. | Aug 22, 2022 |
| CVE-2022-32893 | UNKNOWN | — | Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content. | Aug 18, 2022 |
| CVE-2022-21971 | UNKNOWN | — | Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution. | Aug 18, 2022 |
| CVE-2022-32894 | UNKNOWN | — | Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges. | Aug 18, 2022 |
| CVE-2022-22536 | UNKNOWN | — | SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches. | Aug 18, 2022 |
| CVE-2022-26923 | UNKNOWN | — | An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM. | Aug 18, 2022 |
| CVE-2017-15944 | UNKNOWN | — | Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained. | Aug 18, 2022 |
| CVE-2022-2856 | UNKNOWN | — | Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | Aug 18, 2022 |
| CVE-2022-34713 | UNKNOWN | — | A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application. | Aug 9, 2022 |
| CVE-2022-26138 | UNKNOWN | — | Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group. | Jul 29, 2022 |
| CVE-2022-22047 | UNKNOWN | — | Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges. | Jul 12, 2022 |
| CVE-2022-26925 | UNKNOWN | — | Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM. | Jul 1, 2022 |
| CVE-2022-29499 | UNKNOWN | — | The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation. | Jun 27, 2022 |
| CVE-2020-9907 | UNKNOWN | — | Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges. | Jun 27, 2022 |
| CVE-2020-3837 | UNKNOWN | — | Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges. | Jun 27, 2022 |
| CVE-2021-30533 | UNKNOWN | — | Google Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation restrictions via a crafted iframe. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. | Jun 27, 2022 |
| CVE-2019-8605 | UNKNOWN | — | A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges. | Jun 27, 2022 |
| CVE-2021-30983 | UNKNOWN | — | Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges. | Jun 27, 2022 |
| CVE-2018-4344 | UNKNOWN | — | Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution. | Jun 27, 2022 |
| CVE-2016-2386 | UNKNOWN | — | SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | Jun 9, 2022 |
| CVE-2021-38163 | UNKNOWN | — | SAP NetWeaver contains a vulnerability that allows unrestricted file upload. | Jun 9, 2022 |
| CVE-2016-2388 | UNKNOWN | — | The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request. | Jun 9, 2022 |