| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2024-38080
Microsoft Windows Hyper-V Privilege Escalation Vulnerability |
Microsoft · Windows | Jul 9, 2024 | Jul 30, 2024 | 7.1% | — |
| CVE-2024-38112
Microsoft Windows MSHTML Platform Spoofing Vulnerability |
Microsoft · Windows | Jul 9, 2024 | Jul 30, 2024 | 84.2% | — |
| CVE-2024-20399
Cisco NX-OS Command Injection Vulnerability |
Cisco · NX-OS | Jul 2, 2024 | Jul 23, 2024 | 4.3% | — |
| CVE-2020-13965
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability |
Roundcube · Webmail | Jun 26, 2024 | Jul 17, 2024 | 76.6% | — |
| CVE-2022-24816
OSGeo GeoServer JAI-EXT Code Injection Vulnerability |
OSGeo · JAI-EXT | Jun 26, 2024 | Jul 17, 2024 | 99.9% | — |
| CVE-2022-2586
Linux Kernel Use-After-Free Vulnerability |
Linux · Kernel | Jun 26, 2024 | Jul 17, 2024 | 10.2% | — |
| CVE-2024-26169 Ransomware
Microsoft Windows Error Reporting Service Improper Privilege Management Vulnera… |
Microsoft · Windows | Jun 13, 2024 | Jul 4, 2024 | 4.0% | — |
| CVE-2024-32896
Android Pixel Privilege Escalation Vulnerability |
Android · Pixel | Jun 13, 2024 | Jul 4, 2024 | 3.0% | — |
| CVE-2024-4358
Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability |
Progress · Telerik Report Server | Jun 13, 2024 | Jul 4, 2024 | 97.5% | — |
| CVE-2024-4577 Ransomware
PHP-CGI OS Command Injection Vulnerability |
PHP Group · PHP | Jun 12, 2024 | Jul 3, 2024 | 100.0% | — |
| CVE-2024-4610
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability |
Arm · Mali GPU Kernel Driver | Jun 12, 2024 | Jul 3, 2024 | 0.8% | — |
| CVE-2017-3506
Oracle WebLogic Server OS Command Injection Vulnerability |
Oracle · WebLogic Server | Jun 3, 2024 | Jun 24, 2024 | 96.0% | — |
| CVE-2024-1086 Ransomware
Linux Kernel Use-After-Free Vulnerability |
Linux · Kernel | May 30, 2024 | Jun 20, 2024 | 28.1% | — |
| CVE-2024-24919 Ransomware
Check Point Quantum Security Gateways Information Disclosure Vulnerability |
Check Point · Quantum Security Gateways | May 30, 2024 | Jun 20, 2024 | 100.0% | — |
| CVE-2024-4978
Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerabil… |
Justice AV Solutions · Viewer | May 29, 2024 | Jun 19, 2024 | 26.9% | — |
| CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | May 28, 2024 | Jun 18, 2024 | 7.7% | — |
| CVE-2020-17519
Apache Flink Improper Access Control Vulnerability |
Apache · Flink | May 23, 2024 | Jun 13, 2024 | 98.0% | — |
| CVE-2023-43208 Ransomware
NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability |
NextGen Healthcare · Mirth Connect | May 20, 2024 | Jun 10, 2024 | 85.9% | — |
| CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | May 20, 2024 | Jun 10, 2024 | 15.2% | — |
| CVE-2014-100005
D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability |
D-Link · DIR-600 Router | May 16, 2024 | Jun 6, 2024 | 43.5% | — |
| CVE-2021-40655
D-Link DIR-605 Router Information Disclosure Vulnerability |
D-Link · DIR-605 Router | May 16, 2024 | Jun 6, 2024 | 87.0% | — |
| CVE-2024-4761
Google Chromium V8 Out-of-Bounds Memory Write Vulnerability |
Google · Chromium V8 | May 16, 2024 | Jun 6, 2024 | 11.0% | — |
| CVE-2024-30040
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability |
Microsoft · Windows | May 14, 2024 | Jun 4, 2024 | 3.9% | — |
| CVE-2024-30051 Ransomware
Microsoft DWM Core Library Privilege Escalation Vulnerability |
Microsoft · DWM Core Library | May 14, 2024 | Jun 4, 2024 | 6.2% | — |
| CVE-2024-4671
Google Chromium Visuals Use-After-Free Vulnerability |
Google · Chromium | May 13, 2024 | Jun 3, 2024 | 8.3% | — |
| CVE-2023-7028
GitLab Community and Enterprise Editions Improper Access Control Vulnerability |
GitLab · GitLab CE/EE | May 1, 2024 | May 22, 2024 | 94.5% | — |
| CVE-2024-29988
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability |
Microsoft · SmartScreen Prompt | Apr 30, 2024 | May 21, 2024 | 45.2% | — |
| CVE-2024-20353
Cisco ASA and FTD Denial of Service Vulnerability |
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Apr 24, 2024 | May 1, 2024 | 69.8% | — |
| CVE-2024-20359
Cisco ASA and FTD Privilege Escalation Vulnerability |
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Apr 24, 2024 | May 1, 2024 | 18.8% | — |
| CVE-2024-4040
CrushFTP VFS Sandbox Escape Vulnerability |
CrushFTP · CrushFTP | Apr 24, 2024 | May 1, 2024 | 99.5% | — |
| CVE-2022-38028
Microsoft Windows Print Spooler Privilege Escalation Vulnerability |
Microsoft · Windows | Apr 23, 2024 | May 14, 2024 | 14.9% | — |
| CVE-2024-3400 Ransomware
Palo Alto Networks PAN-OS Command Injection Vulnerability |
Palo Alto Networks · PAN-OS | Apr 12, 2024 | Apr 19, 2024 | 100.0% | — |
| CVE-2024-3272
D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability |
D-Link · Multiple NAS Devices | Apr 11, 2024 | May 2, 2024 | 98.1% | — |
| CVE-2024-3273
D-Link Multiple NAS Devices Command Injection Vulnerability |
D-Link · Multiple NAS Devices | Apr 11, 2024 | May 2, 2024 | 100.0% | — |
| CVE-2024-29745
Android Pixel Information Disclosure Vulnerability |
Android · Pixel | Apr 4, 2024 | Apr 25, 2024 | 0.5% | — |
| CVE-2024-29748
Android Pixel Privilege Escalation Vulnerability |
Android · Pixel | Apr 4, 2024 | Apr 25, 2024 | 0.7% | — |
| CVE-2023-24955 Ransomware
Microsoft SharePoint Server Code Injection Vulnerability |
Microsoft · SharePoint Server | Mar 26, 2024 | Apr 16, 2024 | 85.0% | — |
| CVE-2019-7256
Nice Linear eMerge E3-Series OS Command Injection Vulnerability |
Nice · Linear eMerge E3-Series | Mar 25, 2024 | Apr 15, 2024 | 97.1% | — |
| CVE-2021-44529 Ransomware
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulner… |
Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA) | Mar 25, 2024 | Apr 15, 2024 | 99.1% | — |
| CVE-2023-48788 Ransomware
Fortinet FortiClient EMS SQL Injection Vulnerability |
Fortinet · FortiClient EMS | Mar 25, 2024 | Apr 15, 2024 | 98.4% | — |
| CVE-2024-27198 Ransomware
JetBrains TeamCity Authentication Bypass Vulnerability |
JetBrains · TeamCity | Mar 7, 2024 | Mar 28, 2024 | 99.9% | — |
| CVE-2024-23225
Apple Multiple Products Memory Corruption Vulnerability |
Apple · Multiple Products | Mar 6, 2024 | Mar 27, 2024 | 1.5% | — |
| CVE-2024-23296
Apple Multiple Products Memory Corruption Vulnerability |
Apple · Multiple Products | Mar 6, 2024 | Mar 27, 2024 | 1.4% | — |
| CVE-2021-36380
Sunhillo SureLine OS Command Injection Vulnerablity |
Sunhillo · SureLine | Mar 5, 2024 | Mar 26, 2024 | 97.8% | — |
| CVE-2023-21237
Android Pixel Information Disclosure Vulnerability |
Android · Pixel | Mar 5, 2024 | Mar 26, 2024 | 0.3% | — |
| CVE-2024-21338 Ransomware
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnera… |
Microsoft · Windows | Mar 4, 2024 | Mar 25, 2024 | 62.2% | — |
| CVE-2023-29360
Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability |
Microsoft · Streaming Service | Feb 29, 2024 | Mar 21, 2024 | 21.6% | — |
| CVE-2024-1709 Ransomware
ConnectWise ScreenConnect Authentication Bypass Vulnerability |
ConnectWise · ScreenConnect | Feb 22, 2024 | Feb 29, 2024 | 100.0% | — |
| CVE-2020-3259 Ransomware
Cisco ASA and FTD Information Disclosure Vulnerability |
Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) | Feb 15, 2024 | Mar 7, 2024 | 71.5% | — |
| CVE-2024-21410
Microsoft Exchange Server Privilege Escalation Vulnerability |
Microsoft · Exchange Server | Feb 15, 2024 | Mar 7, 2024 | 12.7% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.