CISA Known Exploited Vulnerabilities
KEV additions — March 2023
16 CVEs entered the KEV catalog in March 2023.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added March 30, 20237
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-30900 | Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability | 7.8 | 5.2 % | Apr 20, 2023 |
| CVE-2022-22706 | Arm Mali GPU Kernel Driver Unspecified Vulnerability | 7.8 | 1.1 % | Apr 20, 2023 |
| CVE-2022-3038 | Google Chromium Network Service Use-After-Free Vulnerability | 8.8 | 24.9 % | Apr 20, 2023 |
| CVE-2022-38181 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 8.8 | 14.1 % | Apr 20, 2023 |
| CVE-2022-39197 | Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | 6.1 | 46.4 % | Apr 20, 2023 |
| CVE-2022-42948 | Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | 9.8 | 2.7 % | Apr 20, 2023 |
| CVE-2023-0266 | Linux Kernel Use-After-Free Vulnerability | 7 | 3.7 % | Apr 20, 2023 |
Added March 15, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-26360 | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 8.6 | 97.3 % | Apr 5, 2023 |
Added March 14, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-41328 | Fortinet FortiOS Path Traversal Vulnerability | 7.1 | 10.7 % | Apr 4, 2023 |
| CVE-2023-23397 | Microsoft Office Outlook Privilege Escalation Vulnerability | 9.8 | 97.2 % | Apr 4, 2023 |
| CVE-2023-24880ransomware | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 4.4 | 78.0 % | Apr 4, 2023 |
Added March 10, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-5741 | Plex Media Server Remote Code Execution Vulnerability | 7.2 | 72.9 % | Mar 31, 2023 |
| CVE-2021-39144 | XStream Remote Code Execution Vulnerability | 8.5 | 98.1 % | Mar 31, 2023 |
Added March 7, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-28810 | Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability | 6.8 | 71.0 % | Mar 28, 2023 |
| CVE-2022-33891 | Apache Spark Command Injection Vulnerability | 8.8 | 93.2 % | Mar 28, 2023 |
| CVE-2022-35914 | Teclib GLPI Remote Code Execution Vulnerability | 9.8 | 99.9 % | Mar 28, 2023 |