CISA Known Exploited Vulnerabilities
KEV additions — March 2023
16 CVEs entered the KEV catalog in March 2023.
Added March 30, 20237
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-30900 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 7.8 | 1.2 % | April 20, 2023 |
| CVE-2022-22706 | Arm Mali GPU Kernel Driver Unspecified Vulnerability | 7.8 | 0.1 % | April 20, 2023 |
| CVE-2022-3038 | Google Chromium Network Service Use-After-Free Vulnerability | 8.8 | 36.0 % | April 20, 2023 |
| CVE-2022-38181 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 8.8 | 25.0 % | April 20, 2023 |
| CVE-2022-39197 | Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | 6.1 | 20.2 % | April 20, 2023 |
| CVE-2022-42948 | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | 9.8 | 19.5 % | April 20, 2023 |
| CVE-2023-0266 | Linux Kernel Use-After-Free Vulnerability | 7 | 0.1 % | April 20, 2023 |
Added March 15, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-26360 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 8.6 | 94.3 % | April 5, 2023 |
Added March 14, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-41328 | Fortinet FortiOS Path Traversal Vulnerability | 7.1 | 0.2 % | April 4, 2023 |
| CVE-2023-23397 | Microsoft Office Outlook Privilege Escalation Vulnerability | 9.8 | 93.7 % | April 4, 2023 |
| CVE-2023-24880ransomware | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 4.4 | 77.3 % | April 4, 2023 |
Added March 10, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-5741 | Plex Media Server Remote Code Execution Vulnerability | 7.2 | 53.0 % | March 31, 2023 |
| CVE-2021-39144 | XStream Remote Code Execution Vulnerability | 8.5 | 94.4 % | March 31, 2023 |
Added March 7, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-28810 | Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability | 6.8 | 91.9 % | March 28, 2023 |
| CVE-2022-33891 | Apache Spark Command Injection Vulnerability | 8.8 | 93.5 % | March 28, 2023 |
| CVE-2022-35914 | Teclib GLPI Remote Code Execution Vulnerability | 9.8 | 94.4 % | March 28, 2023 |