| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2024-21351
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability |
Microsoft · Windows | Feb 13, 2024 | Mar 5, 2024 | 27.8% | — |
| CVE-2024-21412 Ransomware
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability |
Microsoft · Windows | Feb 13, 2024 | Mar 5, 2024 | 99.4% | — |
| CVE-2023-43770
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability |
Roundcube · Webmail | Feb 12, 2024 | Mar 4, 2024 | 63.7% | — |
| CVE-2024-21762 Ransomware
Fortinet FortiOS Out-of-Bound Write Vulnerability |
Fortinet · FortiOS | Feb 9, 2024 | Feb 16, 2024 | 84.6% | — |
| CVE-2023-4762
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Feb 6, 2024 | Feb 27, 2024 | 41.4% | — |
| CVE-2022-48618
Apple Multiple Products Memory Corruption Vulnerability |
Apple · Multiple Products | Jan 31, 2024 | Feb 21, 2024 | 0.5% | — |
| CVE-2024-21893 Ransomware
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (… |
Ivanti · Connect Secure, Policy Secure, and Neurons | Jan 31, 2024 | Feb 2, 2024 | 100.0% | — |
| CVE-2023-22527 Ransomware
Atlassian Confluence Data Center and Server Template Injection Vulnerability |
Atlassian · Confluence Data Center and Server | Jan 24, 2024 | Feb 14, 2024 | 100.0% | — |
| CVE-2024-23222
Apple Multiple Products WebKit Type Confusion Vulnerability |
Apple · Multiple Products | Jan 23, 2024 | Feb 13, 2024 | 10.6% | — |
| CVE-2023-34048
VMware vCenter Server Out-of-Bounds Write Vulnerability |
VMware · vCenter Server | Jan 22, 2024 | Feb 12, 2024 | 99.2% | — |
| CVE-2023-35082 Ransomware
Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass… |
Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Core | Jan 18, 2024 | Feb 8, 2024 | 100.0% | — |
| CVE-2023-6548
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability |
Citrix · NetScaler ADC and NetScaler Gateway | Jan 17, 2024 | Jan 24, 2024 | 3.2% | — |
| CVE-2023-6549
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability |
Citrix · NetScaler ADC and NetScaler Gateway | Jan 17, 2024 | Feb 7, 2024 | 57.6% | — |
| CVE-2024-0519
Google Chromium V8 Out-of-Bounds Memory Access Vulnerability |
Google · Chromium V8 | Jan 17, 2024 | Feb 7, 2024 | 3.8% | — |
| CVE-2018-15133
Laravel Deserialization of Untrusted Data Vulnerability |
Laravel · Laravel Framework | Jan 16, 2024 | Feb 6, 2024 | 76.6% | — |
| CVE-2023-29357 Ransomware
Microsoft SharePoint Server Privilege Escalation Vulnerability |
Microsoft · SharePoint Server | Jan 10, 2024 | Jan 31, 2024 | 100.0% | — |
| CVE-2023-46805 Ransomware
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability |
Ivanti · Connect Secure and Policy Secure | Jan 10, 2024 | Jan 22, 2024 | 100.0% | 1 last Oct 15 |
| CVE-2024-21887 Ransomware
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability |
Ivanti · Connect Secure and Policy Secure | Jan 10, 2024 | Jan 22, 2024 | 100.0% | 1 last Oct 15 |
| CVE-2016-20017
D-Link DSL-2750B Devices Command Injection Vulnerability |
D-Link · DSL-2750B Devices | Jan 8, 2024 | Jan 29, 2024 | 65.8% | — |
| CVE-2023-23752
Joomla! Improper Access Control Vulnerability |
Joomla! · Joomla! | Jan 8, 2024 | Jan 29, 2024 | 99.8% | — |
| CVE-2023-27524
Apache Superset Insecure Default Initialization of Resource Vulnerability |
Apache · Superset | Jan 8, 2024 | Jan 29, 2024 | 98.1% | — |
| CVE-2023-29300 Ransomware
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
Adobe · ColdFusion | Jan 8, 2024 | Jan 29, 2024 | 100.0% | — |
| CVE-2023-38203 Ransomware
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
Adobe · ColdFusion | Jan 8, 2024 | Jan 29, 2024 | 97.1% | — |
| CVE-2023-41990
Apple Multiple Products Code Execution Vulnerability |
Apple · Multiple Products | Jan 8, 2024 | Jan 29, 2024 | 1.4% | — |
| CVE-2023-7024
Google Chromium WebRTC Heap Buffer Overflow Vulnerability |
Google · Chromium WebRTC | Jan 2, 2024 | Jan 23, 2024 | 6.7% | — |
| CVE-2023-7101
Spreadsheet::ParseExcel Remote Code Execution Vulnerability |
Spreadsheet::ParseExcel · Spreadsheet::ParseExcel | Jan 2, 2024 | Jan 23, 2024 | 19.0% | — |
| CVE-2023-47565
QNAP VioStor NVR OS Command Injection Vulnerability |
QNAP · VioStor NVR | Dec 21, 2023 | Jan 11, 2024 | 73.3% | — |
| CVE-2023-49897
FXC AE1021, AE1021PE OS Command Injection Vulnerability |
FXC · AE1021, AE1021PE | Dec 21, 2023 | Jan 11, 2024 | 50.4% | — |
| CVE-2023-6448
Unitronics Vision PLC and HMI Insecure Default Password Vulnerability |
Unitronics · Vision PLC and HMI | Dec 11, 2023 | Dec 18, 2023 | 2.1% | — |
| CVE-2023-41265 Ransomware
Qlik Sense HTTP Tunneling Vulnerability |
Qlik · Sense | Dec 7, 2023 | Dec 28, 2023 | 88.2% | — |
| CVE-2023-41266 Ransomware
Qlik Sense Path Traversal Vulnerability |
Qlik · Sense | Dec 7, 2023 | Dec 28, 2023 | 84.8% | — |
| CVE-2022-22071
Qualcomm Multiple Chipsets Use-After-Free Vulnerability |
Qualcomm · Multiple Chipsets | Dec 5, 2023 | Dec 26, 2023 | 0.4% | — |
| CVE-2023-33063
Qualcomm Multiple Chipsets Use-After-Free Vulnerability |
Qualcomm · Multiple Chipsets | Dec 5, 2023 | Dec 26, 2023 | 0.7% | — |
| CVE-2023-33106
Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability |
Qualcomm · Multiple Chipsets | Dec 5, 2023 | Dec 26, 2023 | 0.8% | — |
| CVE-2023-33107
Qualcomm Multiple Chipsets Integer Overflow Vulnerability |
Qualcomm · Multiple Chipsets | Dec 5, 2023 | Dec 26, 2023 | 1.0% | — |
| CVE-2023-42916
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability |
Apple · Multiple Products | Dec 4, 2023 | Dec 25, 2023 | 17.8% | — |
| CVE-2023-42917
Apple Multiple Products WebKit Memory Corruption Vulnerability |
Apple · Multiple Products | Dec 4, 2023 | Dec 25, 2023 | 9.3% | — |
| CVE-2023-49103
ownCloud graphapi Information Disclosure Vulnerability |
ownCloud · ownCloud graphapi | Nov 30, 2023 | Dec 21, 2023 | 77.8% | — |
| CVE-2023-6345
Google Skia Integer Overflow Vulnerability |
Google · Chromium Skia | Nov 30, 2023 | Dec 21, 2023 | 16.5% | — |
| CVE-2023-4911
GNU C Library Buffer Overflow Vulnerability |
GNU · GNU C Library | Nov 21, 2023 | Dec 12, 2023 | 63.8% | — |
| CVE-2020-2551
Oracle Fusion Middleware Unspecified Vulnerability |
Oracle · Fusion Middleware | Nov 16, 2023 | Dec 7, 2023 | 92.8% | — |
| CVE-2023-1671
Sophos Web Appliance Command Injection Vulnerability |
Sophos · Web Appliance | Nov 16, 2023 | Dec 7, 2023 | 100.0% | — |
| CVE-2023-36584
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability |
Microsoft · Windows | Nov 16, 2023 | Dec 7, 2023 | 3.3% | — |
| CVE-2023-36025
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability |
Microsoft · Windows | Nov 14, 2023 | Dec 5, 2023 | 88.2% | — |
| CVE-2023-36033
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalatio… |
Microsoft · Windows | Nov 14, 2023 | Dec 5, 2023 | 10.9% | — |
| CVE-2023-36036
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerabi… |
Microsoft · Windows | Nov 14, 2023 | Dec 5, 2023 | 16.7% | — |
| CVE-2023-36844
Juniper Junos OS EX Series PHP External Variable Modification Vulnerability |
Juniper · Junos OS | Nov 13, 2023 | Nov 17, 2023 | 90.0% | — |
| CVE-2023-36845
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vu… |
Juniper · Junos OS | Nov 13, 2023 | Nov 17, 2023 | 95.1% | — |
| CVE-2023-36846
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulner… |
Juniper · Junos OS | Nov 13, 2023 | Nov 17, 2023 | 93.5% | — |
| CVE-2023-36847
Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnera… |
Juniper · Junos OS | Nov 13, 2023 | Nov 17, 2023 | 83.5% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.