CISA Known Exploited Vulnerabilities
KEV additions — July 2023
16 CVEs entered the KEV catalog in July 2023.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added July 31, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 7.2 | 63.6 % | Aug 21, 2023 |
Added July 27, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 6.1 | 49.1 % | Aug 17, 2023 |
Added July 26, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-38606 | Apple Multiple Products Kernel Unspecified Vulnerability | 5.5 | 2.9 % | Aug 16, 2023 |
Added July 25, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-35078ransomware | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 9.8 | 100.0 % | Aug 15, 2023 |
Added July 20, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-29298 | Adobe ColdFusion Improper Access Control Vulnerability | 7.5 | 99.8 % | Aug 10, 2023 |
| CVE-2023-38205 | Adobe ColdFusion Improper Access Control Vulnerability | 7.5 | 99.8 % | Aug 10, 2023 |
Added July 19, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-3519ransomware | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 9.8 | 99.7 % | Aug 9, 2023 |
Added July 17, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-36884ransomware | Microsoft Windows Search Remote Code Execution Vulnerability | 7.5 | 98.9 % | Aug 29, 2023 |
Added July 13, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-29303 | SolarView Compact Command Injection Vulnerability | 9.8 | 98.0 % | Aug 3, 2023 |
| CVE-2023-37450 | Apple Multiple Products WebKit Code Execution Vulnerability | 8.8 | 18.9 % | Aug 3, 2023 |
Added July 11, 20235
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-31199ransomware | Netwrix Auditor Insecure Object Deserialization Vulnerability | 9.8 | 36.0 % | Aug 1, 2023 |
| CVE-2023-32046 | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | 7.8 | 10.0 % | Aug 1, 2023 |
| CVE-2023-32049 | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | 8.8 | 4.2 % | Aug 1, 2023 |
| CVE-2023-35311 | Microsoft Outlook Security Feature Bypass Vulnerability | 8.8 | 15.5 % | Aug 1, 2023 |
| CVE-2023-36874 | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | 7.8 | 42.6 % | Aug 1, 2023 |
Added July 7, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-29256 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 8.8 | 3.0 % | Jul 28, 2023 |