CISA Known Exploited Vulnerabilities
KEV additions — February 2022
14 CVEs entered the KEV catalog in February 2022.
Added February 25, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-24682ransomware | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability | 6.1 | 88.0 % | March 11, 2022 |
Added February 22, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-23131 | Zabbix Frontend Authentication Bypass Vulnerability | 9.8 | 94.3 % | March 8, 2022 |
| CVE-2022-23134 | Zabbix Frontend Improper Access Control Vulnerability | 5.3 | 93.1 % | March 8, 2022 |
Added February 15, 20226
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-15982ransomware | Adobe Flash Player Use-After-Free Vulnerability | 7.8 | 93.8 % | August 15, 2022 |
| CVE-2018-20250ransomware | WinRAR Absolute Path Traversal Vulnerability | 7.8 | 93.5 % | August 15, 2022 |
| CVE-2018-8174ransomware | Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability | 7.5 | 94.3 % | August 15, 2022 |
| CVE-2019-0752ransomware | Microsoft Internet Explorer Type Confusion Vulnerability | 7.5 | 92.0 % | August 15, 2022 |
| CVE-2022-0609 | Google Chromium Animation Use-After-Free Vulnerability | 8.8 | 41.8 % | March 1, 2022 |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | 9.8 | 93.8 % | March 1, 2022 |
Added February 11, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability | 8.8 | 4.0 % | February 25, 2022 |
Added February 10, 20223
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-1000861 | Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability | 9.8 | 94.5 % | August 10, 2022 |
| CVE-2020-0796ransomware | Microsoft SMBv3 Remote Code Execution Vulnerability | 10 | 94.4 % | August 10, 2022 |
| CVE-2021-36934 | Microsoft Windows SAM Local Privilege Escalation Vulnerability | 7.8 | 90.8 % | February 24, 2022 |
Added February 4, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-21882 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 89.4 % | February 18, 2022 |