CISA Known Exploited Vulnerabilities
KEV additions — May 2022
32 CVEs entered the KEV catalog in May 2022.
Added May 25, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-3010 | Oracle Solaris Privilege Escalation Vulnerability | 8.8 | 48.2 % | June 15, 2022 |
Added May 24, 20225
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2017-18362ransomware | Kaseya VSA SQL Injection Vulnerability | 9.8 | 81.1 % | June 14, 2022 |
| CVE-2018-19943ransomware | QNAP NAS File Station Cross-Site Scripting Vulnerability | 5.4 | 5.5 % | June 14, 2022 |
| CVE-2018-19949ransomware | QNAP NAS File Station Command Injection Vulnerability | 9.8 | 44.2 % | June 14, 2022 |
| CVE-2018-19953ransomware | QNAP NAS File Station Cross-Site Scripting Vulnerability | 6.1 | 31.5 % | June 14, 2022 |
| CVE-2018-8611 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 16.4 % | June 14, 2022 |
Added May 23, 202221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-5002 | Adobe Flash Player Stack-based Buffer Overflow Vulnerability | 7.8 | 45.0 % | June 13, 2022 |
| CVE-2018-8589 | Microsoft Win32k Privilege Escalation Vulnerability | 7.8 | 46.3 % | June 13, 2022 |
| CVE-2019-0676 | Microsoft Internet Explorer Information Disclosure Vulnerability | 6.5 | 23.8 % | June 13, 2022 |
| CVE-2019-0703 | Microsoft Windows SMB Information Disclosure Vulnerability | 6.5 | 20.0 % | June 13, 2022 |
| CVE-2019-0880 | Microsoft Windows Privilege Escalation Vulnerability | 7.8 | 4.1 % | June 13, 2022 |
| CVE-2019-1130ransomware | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability | 7.8 | 1.9 % | June 13, 2022 |
| CVE-2019-11707 | Mozilla Firefox and Thunderbird Type Confusion Vulnerability | 8.8 | 83.3 % | June 13, 2022 |
| CVE-2019-11708 | Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability | 10 | 68.9 % | June 13, 2022 |
| CVE-2019-13720 | Google Chrome WebAudio Use-After-Free Vulnerability | 8.8 | 88.2 % | June 13, 2022 |
| CVE-2019-1385ransomware | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability | 7.8 | 0.4 % | June 13, 2022 |
| CVE-2019-18426 | WhatsApp Cross-Site Scripting Vulnerability | 8.2 | 55.3 % | June 13, 2022 |
| CVE-2019-5786 | Google Chrome Blink Use-After-Free Vulnerability | 6.5 | 89.5 % | June 13, 2022 |
| CVE-2019-7286 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 2.1 % | June 13, 2022 |
| CVE-2019-7287 | Apple iOS Memory Corruption Vulnerability | 7.8 | 5.3 % | June 13, 2022 |
| CVE-2019-8720 | WebKitGTK Memory Corruption Vulnerability | 8.8 | 8.0 % | June 13, 2022 |
| CVE-2020-0638ransomware | Microsoft Update Notification Manager Privilege Escalation Vulnerability | 7.8 | 1.7 % | June 13, 2022 |
| CVE-2020-1027 | Microsoft Windows Kernel Privilege Escalation Vulnerability | 7.8 | 9.5 % | June 13, 2022 |
| CVE-2021-0920 | Android Kernel Race Condition Vulnerability | 6.4 | 0.9 % | June 13, 2022 |
| CVE-2021-1048 | Android Kernel Use-After-Free Vulnerability | 7.8 | 1.7 % | June 13, 2022 |
| CVE-2021-30883 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 0.6 % | June 13, 2022 |
| CVE-2022-20821 | Cisco IOS XR Open Port Vulnerability | 6.5 | 19.1 % | June 13, 2022 |
Added May 16, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-22947 | VMware Spring Cloud Gateway Code Injection Vulnerability | 10 | 94.5 % | June 6, 2022 |
| CVE-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | 9.8 | 94.4 % | June 6, 2022 |
Added May 10, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-1388ransomware | F5 BIG-IP Missing Authentication Vulnerability | 9.8 | 94.5 % | May 31, 2022 |
Added May 4, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-8506 | Apple Multiple Products Type Confusion Vulnerability | 8.8 | 7.7 % | May 25, 2022 |
| CVE-2021-1789 | Apple Multiple Products Type Confusion Vulnerability | 8.8 | 0.2 % | May 25, 2022 |