CISA Known Exploited Vulnerabilities
KEV additions — July 2023
16 CVEs entered the KEV catalog in July 2023.
Added July 31, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 7.2 | 91.1 % | August 21, 2023 |
Added July 27, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | 6.1 | 93.9 % | August 17, 2023 |
Added July 26, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-38606 | Apple Multiple Products Kernel Unspecified Vulnerability | 5.5 | 0.1 % | August 16, 2023 |
Added July 25, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-35078ransomware | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 9.8 | 94.5 % | August 15, 2023 |
Added July 20, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-29298 | Adobe ColdFusion Improper Access Control Vulnerability | 7.5 | 94.3 % | August 10, 2023 |
| CVE-2023-38205 | Adobe ColdFusion Improper Access Control Vulnerability | 7.5 | 94.3 % | August 10, 2023 |
Added July 19, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-3519ransomware | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 9.8 | 93.7 % | August 9, 2023 |
Added July 17, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-36884ransomware | Microsoft Windows Search Remote Code Execution Vulnerability | 7.5 | 93.2 % | August 29, 2023 |
Added July 13, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-29303 | SolarView Compact Command Injection Vulnerability | 9.8 | 94.4 % | August 3, 2023 |
| CVE-2023-37450 | Apple Multiple Products WebKit Code Execution Vulnerability | 8.8 | 0.1 % | August 3, 2023 |
Added July 11, 20235
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-31199ransomware | Netwrix Auditor Insecure Object Deserialization Vulnerability | 9.8 | 5.9 % | August 1, 2023 |
| CVE-2023-32046 | Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability | 7.8 | 42.7 % | August 1, 2023 |
| CVE-2023-32049 | Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability | 8.8 | 9.1 % | August 1, 2023 |
| CVE-2023-35311 | Microsoft Outlook Security Feature Bypass Vulnerability | 8.8 | 0.5 % | August 1, 2023 |
| CVE-2023-36874 | Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability | 7.8 | 71.2 % | August 1, 2023 |
Added July 7, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-29256 | Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | 8.8 | 0.6 % | July 28, 2023 |