CISA Known Exploited Vulnerabilities
KEV additions — February 2022
14 CVEs entered the KEV catalog in February 2022.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added February 25, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-24682ransomware | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability | 6.1 | 30.9 % | Mar 11, 2022 |
Added February 22, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-23131 | Zabbix Frontend Authentication Bypass Vulnerability | 9.8 | 95.7 % | Mar 8, 2022 |
| CVE-2022-23134 | Zabbix Frontend Improper Access Control Vulnerability | 5.3 | 95.3 % | Mar 8, 2022 |
Added February 15, 20226
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-15982ransomware | Adobe Flash Player Use-After-Free Vulnerability | 7.8 | 89.6 % | Aug 15, 2022 |
| CVE-2018-20250ransomware | WinRAR Absolute Path Traversal Vulnerability | 7.8 | 96.0 % | Aug 15, 2022 |
| CVE-2018-8174ransomware | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability | 7.5 | 88.2 % | Aug 15, 2022 |
| CVE-2019-0752ransomware | Microsoft Internet Explorer Type Confusion Vulnerability | 7.5 | 81.7 % | Aug 15, 2022 |
| CVE-2022-0609 | Google Chromium Animation Use-After-Free Vulnerability | 8.8 | 22.4 % | Mar 1, 2022 |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | 9.8 | 99.2 % | Mar 1, 2022 |
Added February 11, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability | 8.8 | 16.3 % | Feb 25, 2022 |
Added February 10, 20223
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-1000861 | Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability | 9.8 | 98.3 % | Aug 10, 2022 |
| CVE-2020-0796ransomware | Microsoft SMBv3 Remote Code Execution Vulnerability | 10 | 99.8 % | Aug 10, 2022 |
| CVE-2021-36934 | Microsoft Windows SAM Local Privilege Escalation Vulnerability | 7.8 | 67.3 % | Feb 24, 2022 |
Added February 4, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-21882 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 59.2 % | Feb 18, 2022 |