CISA Known Exploited Vulnerabilities
KEV additions — April 2023
16 CVEs entered the KEV catalog in April 2023.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added April 21, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-2136 | Google Chrome Skia Integer Overflow Vulnerability | 9.6 | 5.7 % | May 12, 2023 |
| CVE-2023-27350ransomware | PaperCut MF/NG Improper Access Control Vulnerability | 9.8 | 100.0 % | May 12, 2023 |
| CVE-2023-28432 | MinIO Information Disclosure Vulnerability | 7.5 | 84.0 % | May 12, 2023 |
Added April 17, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-8526 | Apple macOS Use-After-Free Vulnerability | 7.8 | 0.7 % | May 8, 2023 |
| CVE-2023-2033 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 40.8 % | May 8, 2023 |
Added April 13, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-20963 | Android Framework Privilege Escalation Vulnerability | 7.8 | 1.5 % | May 4, 2023 |
| CVE-2023-29492 | Novi Survey Insecure Deserialization Vulnerability | 9.8 | 2.7 % | May 4, 2023 |
Added April 11, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-28252ransomware | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 7.8 | 49.0 % | May 2, 2023 |
Added April 10, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-28205 | Apple Multiple Products WebKit Use-After-Free Vulnerability | 8.8 | 27.1 % | May 1, 2023 |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | 8.6 | 23.2 % | May 1, 2023 |
Added April 7, 20235
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-1388ransomware | Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability | 7.8 | 8.6 % | Apr 28, 2023 |
| CVE-2021-27876ransomware | Veritas Backup Exec Agent File Access Vulnerability | 8.1 | 13.5 % | Apr 28, 2023 |
| CVE-2021-27877ransomware | Veritas Backup Exec Agent Improper Authentication Vulnerability | 9.8 | 64.9 % | Apr 28, 2023 |
| CVE-2021-27878ransomware | Veritas Backup Exec Agent Command Execution Vulnerability | 8.8 | 24.0 % | Apr 28, 2023 |
| CVE-2023-26083 | Arm Mali GPU Kernel Driver Information Disclosure Vulnerability | 3.3 | 1.2 % | Apr 28, 2023 |
Added April 3, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 6.1 | 17.6 % | Apr 24, 2023 |