CISA Known Exploited Vulnerabilities
KEV additions — June 2022
21 CVEs entered the KEV catalog in June 2022.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added June 27, 20228
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-4344 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 2.4 % | Jul 18, 2022 |
| CVE-2019-8605 | Apple Multiple Products Use-After-Free Vulnerability | 7.8 | 17.6 % | Jul 18, 2022 |
| CVE-2020-3837 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 14.8 % | Jul 18, 2022 |
| CVE-2020-9907 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 3.2 % | Jul 18, 2022 |
| CVE-2021-30533 | Google Chromium PopupBlocker Security Bypass Vulnerability | 6.5 | 16.7 % | Jul 18, 2022 |
| CVE-2021-30983 | Apple iOS and iPadOS Buffer Overflow Vulnerability | 7.8 | 2.9 % | Jul 18, 2022 |
| CVE-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | 7.8 | 94.9 % | Jul 18, 2022 |
| CVE-2022-29499ransomware | Mitel MiVoice Connect Data Validation Vulnerability | 9.8 | 55.2 % | Jul 18, 2022 |
Added June 14, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-30190ransomware | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 7.8 | 99.2 % | Jul 5, 2022 |
Added June 9, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-38163 | SAP NetWeaver Unrestricted File Upload Vulnerability | 8.8 | 36.9 % | Jun 30, 2022 |
Added June 8, 202210
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-17463 | Google Chromium V8 Remote Code Execution Vulnerability | 8.8 | 84.6 % | Jun 22, 2022 |
| CVE-2018-17480 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 8.8 | 35.6 % | Jun 22, 2022 |
| CVE-2018-4990 | Adobe Acrobat and Reader Double Free Vulnerability | 8.8 | 36.2 % | Jun 22, 2022 |
| CVE-2018-6065 | Google Chromium V8 Integer Overflow Vulnerability | 8.8 | 60.3 % | Jun 22, 2022 |
| CVE-2019-15271 | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | 8.8 | 5.5 % | Jun 22, 2022 |
| CVE-2019-5825 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 6.5 | 55.9 % | Jun 22, 2022 |
| CVE-2019-7192ransomware | QNAP Photo Station Improper Access Control Vulnerability | 9.8 | 88.1 % | Jun 22, 2022 |
| CVE-2019-7193ransomware | QNAP QTS Improper Input Validation Vulnerability | 9.8 | 14.4 % | Jun 22, 2022 |
| CVE-2019-7194ransomware | QNAP Photo Station Path Traversal Vulnerability | 9.8 | 82.7 % | Jun 22, 2022 |
| CVE-2019-7195ransomware | QNAP Photo Station Path Traversal Vulnerability | 9.8 | 89.7 % | Jun 22, 2022 |
Added June 2, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-26134ransomware | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | 9.8 | 100.0 % | Jun 6, 2022 |