CISA Known Exploited Vulnerabilities
KEV additions — June 2023
23 CVEs entered the KEV catalog in June 2023.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added June 29, 20238
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-17621 | D-Link DIR-859 Router Command Execution Vulnerability | 9.8 | 89.6 % | Jul 20, 2023 |
| CVE-2019-20500 | D-Link DWL-2600AP Access Point Command Injection Vulnerability | 7.8 | 96.7 % | Jul 20, 2023 |
| CVE-2021-25371 | Samsung Mobile Devices Unspecified Vulnerability | 6.7 | 0.8 % | Jul 20, 2023 |
| CVE-2021-25372 | Samsung Mobile Devices Improper Boundary Check Vulnerability | 6.7 | 0.8 % | Jul 20, 2023 |
| CVE-2021-25394 | Samsung Mobile Devices Race Condition Vulnerability | 6.4 | 0.4 % | Jul 20, 2023 |
| CVE-2021-25395 | Samsung Mobile Devices Race Condition Vulnerability | 6.4 | 0.4 % | Jul 20, 2023 |
| CVE-2021-25487 | Samsung Mobile Devices Out-of-Bounds Read Vulnerability | 7.8 | 0.6 % | Jul 20, 2023 |
| CVE-2021-25489 | Samsung Mobile Devices Improper Input Validation Vulnerability | 5.5 | 0.5 % | Jul 20, 2023 |
Added June 23, 20235
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-20867 | VMware Tools Authentication Bypass Vulnerability | 3.9 | 13.5 % | Jul 14, 2023 |
| CVE-2023-27992 | Zyxel Multiple NAS Devices Command Injection Vulnerability | 9.8 | 82.8 % | Jul 14, 2023 |
| CVE-2023-32434 | Apple Multiple Products Integer Overflow Vulnerability | 7.8 | 51.5 % | Jul 14, 2023 |
| CVE-2023-32435 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 8.8 | 23.0 % | Jul 14, 2023 |
| CVE-2023-32439 | Apple Multiple Products WebKit Type Confusion Vulnerability | 8.8 | 24.0 % | Jul 14, 2023 |
Added June 22, 20235
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2016-9079 | Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability | 7.5 | 87.4 % | Jul 13, 2023 |
| CVE-2020-12641 | Roundcube Webmail Remote Code Execution Vulnerability | 9.8 | 84.5 % | Jul 13, 2023 |
| CVE-2020-35730 | Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 6.1 | 32.9 % | Jul 13, 2023 |
| CVE-2021-44026 | Roundcube Webmail SQL Injection Vulnerability | 9.8 | 69.9 % | Jul 13, 2023 |
| CVE-2023-20887 | Vmware Aria Operations for Networks Command Injection Vulnerability | 9.8 | 98.3 % | Jul 13, 2023 |
Added June 13, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-27997ransomware | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | 9.8 | 85.7 % | Jul 4, 2023 |
Added June 7, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-3079 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 37.9 % | Jun 28, 2023 |
Added June 5, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-33009 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 9.8 | 28.1 % | Jun 26, 2023 |
| CVE-2023-33010 | Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 9.8 | 29.0 % | Jun 26, 2023 |
Added June 2, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-34362ransomware | Progress MOVEit Transfer SQL Injection Vulnerability | 9.8 | 99.9 % | Jun 23, 2023 |