CISA Known Exploited Vulnerabilities
KEV additions — November 2022
10 CVEs entered the KEV catalog in November 2022.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added November 28, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-35587 | Oracle Fusion Middleware Unspecified Vulnerability | 9.8 | 96.3 % | Dec 19, 2022 |
| CVE-2022-4135 | Google Chromium GPU Heap Buffer Overflow Vulnerability | 9.6 | 31.9 % | Dec 19, 2022 |
Added November 14, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-41049 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 5.4 | 2.6 % | Dec 9, 2022 |
Added November 8, 20227
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-25337 | Samsung Mobile Devices Improper Access Control Vulnerability | 7.1 | 2.8 % | Nov 29, 2022 |
| CVE-2021-25369 | Samsung Mobile Devices Improper Access Control Vulnerability | 5.5 | 1.1 % | Nov 29, 2022 |
| CVE-2021-25370 | Samsung Mobile Devices Memory Corruption Vulnerability | 4.4 | 0.9 % | Nov 29, 2022 |
| CVE-2022-41073ransomware | Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 7.8 | 2.4 % | Dec 9, 2022 |
| CVE-2022-41091ransomware | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 5.4 | 1.9 % | Dec 9, 2022 |
| CVE-2022-41125 | Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 7.8 | 3.0 % | Dec 9, 2022 |
| CVE-2022-41128 | Microsoft Windows Scripting Languages Remote Code Execution Vulnerability | 8.8 | 24.6 % | Dec 9, 2022 |