CISA Known Exploited Vulnerabilities
KEV additions — December 2022
9 CVEs entered the KEV catalog in December 2022.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added December 29, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-18809 | TIBCO JasperReports Library Directory Traversal Vulnerability | 6.5 | 79.1 % | Jan 19, 2023 |
| CVE-2018-5430 | TIBCO JasperReports Server Information Disclosure Vulnerability | 8.8 | 48.1 % | Jan 19, 2023 |
Added December 14, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-42856 | Apple iOS Type Confusion Vulnerability | 8.8 | 8.5 % | Jan 4, 2023 |
Added December 13, 20225
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-26500ransomware | Veeam Backup & Replication Remote Code Execution Vulnerability | — | 5.8 % | Jan 3, 2023 |
| CVE-2022-26501ransomware | Veeam Backup & Replication Remote Code Execution Vulnerability | — | 4.1 % | Jan 3, 2023 |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | 9.8 | 6.9 % | Jan 3, 2023 |
| CVE-2022-42475ransomware | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 9.8 | 99.5 % | Jan 3, 2023 |
| CVE-2022-44698ransomware | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | 5.4 | 76.3 % | Jan 3, 2023 |
Added December 5, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-4262 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 23.5 % | Dec 26, 2022 |