CISA Known Exploited Vulnerabilities
KEV additions — April 2023
16 CVEs entered the KEV catalog in April 2023.
Added April 21, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-2136 | Google Chrome Skia Integer Overflow Vulnerability | 9.6 | 0.4 % | May 12, 2023 |
| CVE-2023-27350ransomware | PaperCut MF/NG Improper Access Control Vulnerability | 9.8 | 94.3 % | May 12, 2023 |
| CVE-2023-28432 | MinIO Information Disclosure Vulnerability | 7.5 | 93.9 % | May 12, 2023 |
Added April 17, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-8526 | Apple macOS Use-After-Free Vulnerability | 7.8 | 0.5 % | May 8, 2023 |
| CVE-2023-2033 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 24.3 % | May 8, 2023 |
Added April 13, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-20963 | Android Framework Privilege Escalation Vulnerability | 7.8 | 2.2 % | May 4, 2023 |
| CVE-2023-29492 | Novi Survey Insecure Deserialization Vulnerability | 9.8 | 17.2 % | May 4, 2023 |
Added April 11, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-28252ransomware | Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability | 7.8 | 56.5 % | May 2, 2023 |
Added April 10, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-28205 | Apple Multiple Products WebKit Use-After-Free Vulnerability | 8.8 | 0.1 % | May 1, 2023 |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability | 8.6 | 14.6 % | May 1, 2023 |
Added April 7, 20235
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2019-1388ransomware | Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability | 7.8 | 7.5 % | April 28, 2023 |
| CVE-2021-27876ransomware | Veritas Backup Exec Agent File Access Vulnerability | 8.1 | 1.0 % | April 28, 2023 |
| CVE-2021-27877ransomware | Veritas Backup Exec Agent Improper Authentication Vulnerability | 9.8 | 29.4 % | April 28, 2023 |
| CVE-2021-27878ransomware | Veritas Backup Exec Agent Command Execution Vulnerability | 8.8 | 6.9 % | April 28, 2023 |
| CVE-2023-26083 | Arm Mali GPU Kernel Driver Information Disclosure Vulnerability | 3.3 | 7.1 % | April 28, 2023 |
Added April 3, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 6.1 | 94.2 % | April 24, 2023 |