CISA Known Exploited Vulnerabilities
KEV additions — June 2023
23 CVEs entered the KEV catalog in June 2023.
Added June 29, 20238
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-17621 | D-Link DIR-859 Router Command Execution Vulnerability | 9.8 | 93.0 % | July 20, 2023 |
| CVE-2019-20500 | D-Link DWL-2600AP Access Point Command Injection Vulnerability | 7.8 | 92.2 % | July 20, 2023 |
| CVE-2021-25371 | Samsung Mobile Devices Unspecified Vulnerability | 6.7 | 0.9 % | July 20, 2023 |
| CVE-2021-25372 | Samsung Mobile Devices Improper Boundary Check Vulnerability | 6.7 | 1.0 % | July 20, 2023 |
| CVE-2021-25394 | Samsung Mobile Devices Race Condition Vulnerability | 6.4 | 0.6 % | July 20, 2023 |
| CVE-2021-25395 | Samsung Mobile Devices Race Condition Vulnerability | 6.4 | 0.2 % | July 20, 2023 |
| CVE-2021-25487 | Samsung Mobile Devices Out-of-Bounds Read Vulnerability | 7.8 | 2.4 % | July 20, 2023 |
| CVE-2021-25489 | Samsung Mobile Devices Improper Input Validation Vulnerability | 5.5 | 0.4 % | July 20, 2023 |
Added June 23, 20235
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-20867 | VMware Tools Authentication Bypass Vulnerability | 3.9 | 3.1 % | July 14, 2023 |
| CVE-2023-27992 | Zyxel Multiple NAS Devices Command Injection Vulnerability | 9.8 | 86.5 % | July 14, 2023 |
| CVE-2023-32434 | Apple Multiple Products Integer Overflow Vulnerability | 7.8 | 68.3 % | July 14, 2023 |
| CVE-2023-32435 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 8.8 | 0.4 % | July 14, 2023 |
| CVE-2023-32439 | Apple Multiple Products WebKit Type Confusion Vulnerability | 8.8 | 1.0 % | July 14, 2023 |
Added June 22, 20235
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2016-9079 | Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability | 7.5 | 84.8 % | July 13, 2023 |
| CVE-2020-12641 | Roundcube Webmail Remote Code Execution Vulnerability | 9.8 | 93.1 % | July 13, 2023 |
| CVE-2020-35730 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 6.1 | 64.8 % | July 13, 2023 |
| CVE-2021-44026 | Roundcube Webmail SQL Injection Vulnerability | 9.8 | 64.0 % | July 13, 2023 |
| CVE-2023-20887 | Vmware Aria Operations for Networks Command Injection Vulnerability | 9.8 | 94.4 % | July 13, 2023 |
Added June 13, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-27997ransomware | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | 9.8 | 90.3 % | July 4, 2023 |
Added June 7, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-3079 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 1.6 % | June 28, 2023 |
Added June 5, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-33009 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 9.8 | 6.2 % | June 26, 2023 |
| CVE-2023-33010 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 9.8 | 5.9 % | June 26, 2023 |
Added June 2, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-34362ransomware | Progress MOVEit Transfer SQL Injection Vulnerability | 9.8 | 94.3 % | June 23, 2023 |