CISA Known Exploited Vulnerabilities
KEV additions — August 2022
22 CVEs entered the KEV catalog in August 2022.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added August 25, 202210
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-28949 | PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | 7.8 | 84.6 % | Sep 15, 2022 |
| CVE-2020-36193 | PEAR Archive_Tar Improper Link Resolution Vulnerability | 7.5 | 70.6 % | Sep 15, 2022 |
| CVE-2021-31010 | Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | 7.5 | 3.7 % | Sep 15, 2022 |
| CVE-2021-38406 | Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | 7.8 | 76.4 % | Sep 15, 2022 |
| CVE-2021-39226 | Grafana Authentication Bypass Vulnerability | 7.3 | 99.9 % | Sep 15, 2022 |
| CVE-2022-2294ransomware | WebRTC Heap Buffer Overflow Vulnerability | 8.8 | 70.8 % | Sep 15, 2022 |
| CVE-2022-22963 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | 9.8 | 99.9 % | Sep 15, 2022 |
| CVE-2022-24112 | Apache APISIX Authentication Bypass Vulnerability | 9.8 | 96.1 % | Sep 15, 2022 |
| CVE-2022-24706 | Apache CouchDB Insecure Default Initialization of Resource Vulnerability | 9.8 | 92.5 % | Sep 15, 2022 |
| CVE-2022-26352ransomware | dotCMS Unrestricted Upload of File Vulnerability | 9.8 | 91.2 % | Sep 15, 2022 |
Added August 22, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-0028 | Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | 8.6 | 2.5 % | Sep 12, 2022 |
Added August 18, 20226
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-21971 | Microsoft Windows Runtime Remote Code Execution Vulnerability | 7.8 | 53.9 % | Sep 8, 2022 |
| CVE-2022-22536 | SAP Multiple Products HTTP Request Smuggling Vulnerability | 10 | 97.9 % | Sep 8, 2022 |
| CVE-2022-26923 | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 8.8 | 83.5 % | Sep 8, 2022 |
| CVE-2022-2856 | Google Chromium Intents Insufficient Input Validation Vulnerability | 6.5 | 4.6 % | Sep 8, 2022 |
| CVE-2022-32893 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 8.8 | 9.9 % | Sep 8, 2022 |
| CVE-2022-32894 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | 7.8 | 3.3 % | Sep 8, 2022 |
Added August 11, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-27925ransomware | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 7.2 | 98.7 % | Sep 1, 2022 |
| CVE-2022-37042ransomware | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | 9.8 | 91.9 % | Sep 1, 2022 |
Added August 9, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-30333ransomware | RARLAB UnRAR Directory Traversal Vulnerability | 9.8 | 99.2 % | Aug 30, 2022 |
| CVE-2022-34713 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 7.8 | 67.8 % | Aug 30, 2022 |
Added August 4, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-27924ransomware | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability | 7.5 | 93.9 % | Aug 25, 2022 |