CISA Known Exploited Vulnerabilities
KEV additions — February 2023
13 CVEs entered the KEV catalog in February 2023.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added February 27, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-36537ransomware | ZK Framework AuUploader Unspecified Vulnerability | 7.5 | 95.4 % | Mar 20, 2023 |
Added February 21, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-40765ransomware | Mitel MiVoice Connect Command Injection Vulnerability | 6.8 | 10.6 % | Mar 14, 2023 |
| CVE-2022-41223ransomware | Mitel MiVoice Connect Code Injection Vulnerability | 6.8 | 10.7 % | Mar 14, 2023 |
| CVE-2022-47986ransomware | IBM Aspera Faspex Code Execution Vulnerability | 9.8 | 100.0 % | Mar 14, 2023 |
Added February 16, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-46169 | Cacti Command Injection Vulnerability | 9.8 | 99.8 % | Mar 9, 2023 |
Added February 14, 20234
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-21715 | Microsoft Office Publisher Security Feature Bypass Vulnerability | 7.3 | 12.0 % | Mar 7, 2023 |
| CVE-2023-21823 | Microsoft Windows Graphic Component Privilege Escalation Vulnerability | 7.8 | 5.6 % | Mar 7, 2023 |
| CVE-2023-23376ransomware | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 7.8 | 10.9 % | Mar 7, 2023 |
| CVE-2023-23529 | Apple Multiple Products WebKit Type Confusion Vulnerability | 8.8 | 9.4 % | Mar 7, 2023 |
Added February 10, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-24990ransomware | TerraMaster OS Remote Command Execution Vulnerability | 7.5 | 83.2 % | Mar 3, 2023 |
| CVE-2023-0669ransomware | Fortra GoAnywhere MFT Remote Code Execution Vulnerability | 7.2 | 100.0 % | Mar 3, 2023 |
Added February 2, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-21587ransomware | Oracle E-Business Suite Unspecified Vulnerability | 9.8 | 98.3 % | Feb 23, 2023 |
| CVE-2023-22952 | Multiple SugarCRM Products Remote Code Execution Vulnerability | 8.8 | 80.1 % | Feb 23, 2023 |