CISA Known Exploited Vulnerabilities
KEV additions — August 2022
22 CVEs entered the KEV catalog in August 2022.
Added August 25, 202210
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-28949 | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | 7.8 | 93.0 % | September 15, 2022 |
| CVE-2020-36193 | PEAR Archive_Tar Improper Link Resolution Vulnerability | 7.5 | 71.1 % | September 15, 2022 |
| CVE-2021-31010 | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | 7.5 | 1.0 % | September 15, 2022 |
| CVE-2021-38406 | Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | 7.8 | 70.4 % | September 15, 2022 |
| CVE-2021-39226 | Grafana Authentication Bypass Vulnerability | 7.3 | 94.3 % | September 15, 2022 |
| CVE-2022-2294ransomware | WebRTC Heap Buffer Overflow Vulnerability | 8.8 | 1.2 % | September 15, 2022 |
| CVE-2022-22963 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | 9.8 | 94.5 % | September 15, 2022 |
| CVE-2022-24112 | Apache APISIX Authentication Bypass Vulnerability | 9.8 | 94.4 % | September 15, 2022 |
| CVE-2022-24706 | Apache CouchDB Insecure Default Initialization of Resource Vulnerability | 9.8 | 94.4 % | September 15, 2022 |
| CVE-2022-26352ransomware | dotCMS Unrestricted Upload of File Vulnerability | 9.8 | 94.3 % | September 15, 2022 |
Added August 22, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-0028 | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | 8.6 | 4.7 % | September 12, 2022 |
Added August 18, 20226
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-21971 | Microsoft Windows Runtime Remote Code Execution Vulnerability | 7.8 | 87.1 % | September 8, 2022 |
| CVE-2022-22536 | SAP Multiple Products HTTP Request Smuggling Vulnerability | 10 | 93.8 % | September 8, 2022 |
| CVE-2022-26923 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 8.8 | 91.7 % | September 8, 2022 |
| CVE-2022-2856 | Google Chromium Intents Insufficient Input Validation Vulnerability | 6.5 | 3.3 % | September 8, 2022 |
| CVE-2022-32893 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 8.8 | 0.2 % | September 8, 2022 |
| CVE-2022-32894 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 7.8 | 0.3 % | September 8, 2022 |
Added August 11, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-27925ransomware | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 7.2 | 94.3 % | September 1, 2022 |
| CVE-2022-37042ransomware | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | 9.8 | 94.3 % | September 1, 2022 |
Added August 9, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-30333ransomware | RARLAB UnRAR Directory Traversal Vulnerability | 7.5 | 92.8 % | August 30, 2022 |
| CVE-2022-34713 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 7.8 | 4.6 % | August 30, 2022 |
Added August 4, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-27924ransomware | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability | 7.5 | 90.4 % | August 25, 2022 |