CISA Known Exploited Vulnerabilities
KEV additions — May 2022
32 CVEs entered the KEV catalog in May 2022.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added May 25, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-3010 | Oracle Solaris Privilege Escalation Vulnerability | 8.8 | 13.4 % | Jun 15, 2022 |
Added May 24, 20225
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2017-18362ransomware | Kaseya VSA SQL Injection Vulnerability | 9.8 | 86.8 % | Jun 14, 2022 |
| CVE-2018-19943ransomware | QNAP NAS File Station Cross-Site Scripting Vulnerability | 5.4 | 21.5 % | Jun 14, 2022 |
| CVE-2018-19949ransomware | QNAP NAS File Station Command Injection Vulnerability | 9.8 | 28.6 % | Jun 14, 2022 |
| CVE-2018-19953ransomware | QNAP NAS File Station Cross-Site Scripting Vulnerability | 6.1 | 29.0 % | Jun 14, 2022 |
| CVE-2018-8611 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 4.2 % | Jun 14, 2022 |
Added May 23, 202221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-5002 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | 7.8 | 25.1 % | Jun 13, 2022 |
| CVE-2018-8589 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 3.0 % | Jun 13, 2022 |
| CVE-2019-0676 | Microsoft Internet Explorer Information Disclosure Vulnerability | 6.5 | 8.1 % | Jun 13, 2022 |
| CVE-2019-0703 | Microsoft Windows SMB Information Disclosure Vulnerability | 6.5 | 9.6 % | Jun 13, 2022 |
| CVE-2019-0880 | Microsoft Windows Privilege Escalation Vulnerability | 7.8 | 2.3 % | Jun 13, 2022 |
| CVE-2019-1130ransomware | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability | 7.8 | 1.7 % | Jun 13, 2022 |
| CVE-2019-11707 | Mozilla Firefox and Thunderbird Type Confusion Vulnerability | 8.8 | 37.7 % | Jun 13, 2022 |
| CVE-2019-11708 | Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability | 10 | 55.9 % | Jun 13, 2022 |
| CVE-2019-13720 | Google Chrome WebAudio Use-After-Free Vulnerability | 8.8 | 49.4 % | Jun 13, 2022 |
| CVE-2019-1385ransomware | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability | 7.8 | 3.6 % | Jun 13, 2022 |
| CVE-2019-18426 | WhatsApp Cross-Site Scripting Vulnerability | 8.2 | 67.9 % | Jun 13, 2022 |
| CVE-2019-5786 | Google Chrome Blink Use-After-Free Vulnerability | 6.5 | 61.1 % | Jun 13, 2022 |
| CVE-2019-7286 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 15.9 % | Jun 13, 2022 |
| CVE-2019-7287 | Apple iOS Memory Corruption Vulnerability | 7.8 | 4.6 % | Jun 13, 2022 |
| CVE-2019-8720 | WebKitGTK Memory Corruption Vulnerability | 8.8 | 1.6 % | Jun 13, 2022 |
| CVE-2020-0638ransomware | Microsoft Update Notification Manager Privilege Escalation Vulnerability | 7.8 | 2.4 % | Jun 13, 2022 |
| CVE-2020-1027 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 4.5 % | Jun 13, 2022 |
| CVE-2021-0920 | Android Kernel Race Condition Vulnerability | 6.4 | 0.9 % | Jun 13, 2022 |
| CVE-2021-1048 | Android Kernel Use-After-Free Vulnerability | 7.8 | 1.1 % | Jun 13, 2022 |
| CVE-2021-30883 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 14.7 % | Jun 13, 2022 |
| CVE-2022-20821 | Cisco IOS XR Open Port Vulnerability | 6.5 | 11.5 % | Jun 13, 2022 |
Added May 16, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-22947 | VMware Spring Cloud Gateway Code Injection Vulnerability | 10 | 98.3 % | Jun 6, 2022 |
| CVE-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | 9.8 | 99.9 % | Jun 6, 2022 |
Added May 10, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-1388ransomware | F5 BIG-IP Missing Authentication Vulnerability | 9.8 | 100.0 % | May 31, 2022 |
Added May 4, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-8506 | Apple Multiple Products Type Confusion Vulnerability | 8.8 | 16.2 % | May 25, 2022 |
| CVE-2021-1789 | Apple Multiple Products Type Confusion Vulnerability | 8.8 | 14.0 % | May 25, 2022 |