CISA Known Exploited Vulnerabilities
KEV additions — June 2022
21 CVEs entered the KEV catalog in June 2022.
Added June 27, 20228
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-4344 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 0.2 % | July 18, 2022 |
| CVE-2019-8605 | Apple Multiple Products Use-After-Free Vulnerability | 7.8 | 14.4 % | July 18, 2022 |
| CVE-2020-3837 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 6.4 % | July 18, 2022 |
| CVE-2020-9907 | Apple Multiple Products Memory Corruption Vulnerability | 7.8 | 0.6 % | July 18, 2022 |
| CVE-2021-30533 | Google Chromium PopupBlocker Security Bypass Vulnerability | 6.5 | 10.5 % | July 18, 2022 |
| CVE-2021-30983 | Apple iOS and iPadOS Buffer Overflow Vulnerability | 7.8 | 0.7 % | July 18, 2022 |
| CVE-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | 7.8 | 87.3 % | July 18, 2022 |
| CVE-2022-29499ransomware | Mitel MiVoice Connect Data Validation Vulnerability | 9.8 | 88.6 % | July 18, 2022 |
Added June 14, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-30190ransomware | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | 7.8 | 93.4 % | July 5, 2022 |
Added June 9, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-38163 | SAP NetWeaver Unrestricted File Upload Vulnerability | 8.8 | 84.8 % | June 30, 2022 |
Added June 8, 202210
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-17463 | Google Chromium V8 Remote Code Execution Vulnerability | 8.8 | 92.2 % | June 22, 2022 |
| CVE-2018-17480 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 8.8 | 27.0 % | June 22, 2022 |
| CVE-2018-4990 | Adobe Acrobat and Reader Double Free Vulnerability | 8.8 | 62.0 % | June 22, 2022 |
| CVE-2018-6065 | Google Chromium V8 Integer Overflow Vulnerability | 8.8 | 88.8 % | June 22, 2022 |
| CVE-2019-15271 | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | 8.8 | 5.9 % | June 22, 2022 |
| CVE-2019-5825 | Google Chromium V8 Out-of-Bounds Write Vulnerability | 6.5 | 73.7 % | June 22, 2022 |
| CVE-2019-7192ransomware | QNAP Photo Station Improper Access Control Vulnerability | 9.8 | 94.3 % | June 22, 2022 |
| CVE-2019-7193ransomware | QNAP QTS Improper Input Validation Vulnerability | 9.8 | 25.8 % | June 22, 2022 |
| CVE-2019-7194ransomware | QNAP Photo Station Path Traversal Vulnerability | 9.8 | 93.9 % | June 22, 2022 |
| CVE-2019-7195ransomware | QNAP Photo Station Path Traversal Vulnerability | 9.8 | 94.1 % | June 22, 2022 |
Added June 2, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-26134ransomware | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | 9.8 | 94.4 % | June 6, 2022 |