CISA Known Exploited Vulnerabilities
KEV additions — April 2022
33 CVEs entered the KEV catalog in April 2022.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added April 25, 20227
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-1003029 | Jenkins Script Security Plugin Sandbox Bypass Vulnerability | 9.9 | 74.4 % | May 16, 2022 |
| CVE-2021-40450 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 1.6 % | May 16, 2022 |
| CVE-2021-41357 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 1.6 % | May 16, 2022 |
| CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability | 7.8 | 92.8 % | May 16, 2022 |
| CVE-2022-21919 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 7 | 2.4 % | May 16, 2022 |
| CVE-2022-26904 | Microsoft Windows User Profile Service Privilege Escalation Vulnerability | 7 | 16.9 % | May 16, 2022 |
| CVE-2022-29464ransomware | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | 9.8 | 100.0 % | May 16, 2022 |
Added April 19, 20223
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-6882ransomware | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 6.1 | 29.8 % | May 10, 2022 |
| CVE-2019-3568 | WhatsApp VOIP Stack Buffer Overflow Vulnerability | 9.8 | 30.1 % | May 10, 2022 |
| CVE-2022-22718 | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 7.8 | 18.5 % | May 10, 2022 |
Added April 15, 20226
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2010-5330 | Ubiquiti AirOS Command Injection Vulnerability | 9.8 | 40.2 % | May 6, 2022 |
| CVE-2018-7841 | Schneider Electric U.motion Builder SQL Injection Vulnerability | 9.8 | 72.7 % | May 6, 2022 |
| CVE-2019-16057ransomware | D-Link DNS-320 Remote Code Execution Vulnerability | 9.8 | 86.5 % | May 6, 2022 |
| CVE-2019-3929 | Crestron Multiple Products Command Injection Vulnerability | 9.8 | 99.0 % | May 6, 2022 |
| CVE-2022-1364 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 13.9 % | May 6, 2022 |
| CVE-2022-22960 | VMware Multiple Products Privilege Escalation Vulnerability | 7.8 | 35.5 % | May 6, 2022 |
Added April 14, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-22954ransomware | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | 9.8 | 100.0 % | May 5, 2022 |
Added April 13, 20223
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-20753ransomware | Kaseya VSA Remote Code Execution Vulnerability | 9.8 | 29.6 % | May 4, 2022 |
| CVE-2018-7602ransomware | Drupal Core Remote Code Execution Vulnerability | 8.1 | 99.2 % | May 4, 2022 |
| CVE-2022-24521ransomware | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability | 7.8 | 7.1 % | May 4, 2022 |
Added April 11, 20227
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-2509 | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability | 9.8 | 34.0 % | May 2, 2022 |
| CVE-2021-22600 | Linux Kernel Privilege Escalation Vulnerability | 7 | 6.6 % | May 2, 2022 |
| CVE-2021-27852 | Checkbox Survey Deserialization of Untrusted Data Vulnerability | 9.8 | 30.3 % | May 2, 2022 |
| CVE-2021-39793 | Google Pixel Out-of-Bounds Write Vulnerability | 7.8 | 0.7 % | May 2, 2022 |
| CVE-2021-42278ransomware | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 7.5 | 73.3 % | May 2, 2022 |
| CVE-2021-42287ransomware | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 7.5 | 77.2 % | May 2, 2022 |
| CVE-2022-23176 | WatchGuard Firebox and XTM Privilege Escalation Vulnerability | 8.8 | 10.8 % | May 2, 2022 |
Added April 6, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-31166 | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability | 9.8 | 99.9 % | Apr 27, 2022 |
| CVE-2021-3156 | Sudo Heap-Based Buffer Overflow Vulnerability | 7.8 | 100.0 % | Apr 27, 2022 |
Added April 4, 20224
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability | 9.8 | 97.8 % | Apr 25, 2022 |
| CVE-2022-22674 | Apple macOS Out-of-Bounds Read Vulnerability | 5.5 | 1.1 % | Apr 25, 2022 |
| CVE-2022-22675 | Apple macOS Out-of-Bounds Write Vulnerability | 7.8 | 12.5 % | Apr 25, 2022 |
| CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability | 9.8 | 99.6 % | Apr 25, 2022 |