CISA Known Exploited Vulnerabilities
KEV additions — May 2023
13 CVEs entered the KEV catalog in May 2023.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added May 31, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-28771 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | 9.8 | 99.3 % | Jun 21, 2023 |
Added May 26, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-2868 | Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | 9.8 | 86.8 % | Jun 16, 2023 |
Added May 22, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-28204 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 6.5 | 14.3 % | Jun 12, 2023 |
| CVE-2023-32373 | Apple Multiple Products WebKit Use-After-Free Vulnerability | 8.8 | 12.2 % | Jun 12, 2023 |
| CVE-2023-32409 | Apple Multiple Products WebKit Sandbox Escape Vulnerability | 8.6 | 16.5 % | Jun 12, 2023 |
Added May 19, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-21492 | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | 4.4 | 2.6 % | Jun 9, 2023 |
Added May 12, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2016-8735 | Apache Tomcat Remote Code Execution Vulnerability | 9.8 | 90.3 % | Jun 2, 2023 |
| CVE-2021-3560 | Red Hat Polkit Incorrect Authorization Vulnerability | 7.8 | 23.7 % | Jun 2, 2023 |
| CVE-2023-25717 | Multiple Ruckus Wireless Products CSRF and RCE Vulnerability | 9.8 | 98.1 % | Jun 2, 2023 |
Added May 9, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-29336 | Microsoft Win32K Privilege Escalation Vulnerability | 7.8 | 41.2 % | May 30, 2023 |
Added May 1, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-45046ransomware | Apache Log4j2 Deserialization of Untrusted Data Vulnerability | 9 | 100.0 % | May 22, 2023 |
| CVE-2023-1389 | TP-Link Archer AX-21 Command Injection Vulnerability | 8.8 | 100.0 % | May 22, 2023 |
| CVE-2023-21839 | Oracle WebLogic Server Unspecified Vulnerability | 7.5 | 99.9 % | May 22, 2023 |