| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2023-36851
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulner… |
Juniper · Junos OS | Nov 13, 2023 | Nov 17, 2023 | 1.1% | — |
| CVE-2023-47246 Ransomware
SysAid Server Path Traversal Vulnerability |
SysAid · SysAid Server | Nov 13, 2023 | Dec 4, 2023 | 98.9% | — |
| CVE-2023-29552
Service Location Protocol (SLP) Denial-of-Service Vulnerability |
IETF · Service Location Protocol (SLP) | Nov 8, 2023 | Nov 29, 2023 | 64.0% | — |
| CVE-2023-22518 Ransomware
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability |
Atlassian · Confluence Data Center and Server | Nov 7, 2023 | Nov 28, 2023 | 100.0% | — |
| CVE-2023-46604 Ransomware
Apache ActiveMQ Deserialization of Untrusted Data Vulnerability |
Apache · ActiveMQ | Nov 2, 2023 | Nov 23, 2023 | 100.0% | — |
| CVE-2023-46747 Ransomware
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability |
F5 · BIG-IP Configuration Utility | Oct 31, 2023 | Nov 21, 2023 | 96.7% | — |
| CVE-2023-46748
F5 BIG-IP Configuration Utility SQL Injection Vulnerability |
F5 · BIG-IP Configuration Utility | Oct 31, 2023 | Nov 21, 2023 | 4.3% | — |
| CVE-2023-5631
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability |
Roundcube · Webmail | Oct 26, 2023 | Nov 16, 2023 | 76.3% | — |
| CVE-2023-20273
Cisco IOS XE Web UI Command Injection Vulnerability |
Cisco · Cisco IOS XE Web UI | Oct 23, 2023 | Oct 27, 2023 | 92.9% | — |
| CVE-2023-4966 Ransomware
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability |
Citrix · NetScaler ADC and NetScaler Gateway | Oct 18, 2023 | Nov 8, 2023 | 100.0% | — |
| CVE-2023-20198
Cisco IOS XE Web UI Privilege Escalation Vulnerability |
Cisco · IOS XE Web UI | Oct 16, 2023 | Oct 20, 2023 | 99.8% | — |
| CVE-2023-20109
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerab… |
Cisco · IOS and IOS XE | Oct 10, 2023 | Oct 31, 2023 | 2.5% | — |
| CVE-2023-21608
Adobe Acrobat and Reader Use-After-Free Vulnerability |
Adobe · Acrobat and Reader | Oct 10, 2023 | Oct 31, 2023 | 59.4% | — |
| CVE-2023-36563
Microsoft WordPad Information Disclosure Vulnerability |
Microsoft · WordPad | Oct 10, 2023 | Oct 31, 2023 | 20.3% | — |
| CVE-2023-41763
Microsoft Skype for Business Privilege Escalation Vulnerability |
Microsoft · Skype for Business | Oct 10, 2023 | Oct 31, 2023 | 90.3% | — |
| CVE-2023-44487
HTTP/2 Rapid Reset Attack Vulnerability |
IETF · HTTP/2 | Oct 10, 2023 | Oct 31, 2023 | 100.0% | — |
| CVE-2023-22515 Ransomware
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability |
Atlassian · Confluence Data Center and Server | Oct 5, 2023 | Oct 13, 2023 | 99.2% | — |
| CVE-2023-40044 Ransomware
Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability |
Progress · WS_FTP Server | Oct 5, 2023 | Oct 26, 2023 | 90.4% | — |
| CVE-2023-42824
Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability |
Apple · iOS and iPadOS | Oct 5, 2023 | Oct 26, 2023 | 1.0% | — |
| CVE-2023-28229
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability |
Microsoft · Windows CNG Key Isolation Service | Oct 4, 2023 | Oct 25, 2023 | 1.7% | — |
| CVE-2023-42793 Ransomware
JetBrains TeamCity Authentication Bypass Vulnerability |
JetBrains · TeamCity | Oct 4, 2023 | Oct 25, 2023 | 100.0% | — |
| CVE-2023-4211
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability |
Arm · Mali GPU Kernel Driver | Oct 3, 2023 | Oct 24, 2023 | 1.0% | — |
| CVE-2023-5217
Google Chromium libvpx Heap Buffer Overflow Vulnerability |
Google · Chromium libvpx | Oct 2, 2023 | Oct 23, 2023 | 49.0% | — |
| CVE-2018-14667
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability |
Red Hat · JBoss RichFaces Framework | Sep 28, 2023 | Oct 19, 2023 | 74.2% | — |
| CVE-2023-41991
Apple Multiple Products Improper Certificate Validation Vulnerability |
Apple · Multiple Products | Sep 25, 2023 | Oct 16, 2023 | 13.4% | — |
| CVE-2023-41992
Apple Multiple Products Kernel Privilege Escalation Vulnerability |
Apple · Multiple Products | Sep 25, 2023 | Oct 16, 2023 | 11.6% | — |
| CVE-2023-41993
Apple Multiple Products WebKit Code Execution Vulnerability |
Apple · Multiple Products | Sep 25, 2023 | Oct 16, 2023 | 23.7% | — |
| CVE-2023-41179
Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vul… |
Trend Micro · Apex One and Worry-Free Business Security | Sep 21, 2023 | Oct 12, 2023 | 4.2% | — |
| CVE-2023-28434
MinIO Security Feature Bypass Vulnerability |
MinIO · MinIO | Sep 19, 2023 | Oct 10, 2023 | 7.9% | — |
| CVE-2014-8361
Realtek SDK Improper Input Validation Vulnerability |
Realtek · SDK | Sep 18, 2023 | Oct 9, 2023 | 100.0% | — |
| CVE-2017-6884 Ransomware
Zyxel EMG2926 Routers Command Injection Vulnerability |
Zyxel · EMG2926 Routers | Sep 18, 2023 | Oct 9, 2023 | 33.0% | — |
| CVE-2021-3129 Ransomware
Laravel Ignition File Upload Vulnerability |
Laravel · Ignition | Sep 18, 2023 | Oct 9, 2023 | 99.9% | — |
| CVE-2022-22265
Samsung Mobile Devices Use-After-Free Vulnerability |
Samsung · Mobile Devices | Sep 18, 2023 | Oct 9, 2023 | 0.4% | — |
| CVE-2023-26369
Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability |
Adobe · Acrobat and Reader | Sep 14, 2023 | Oct 5, 2023 | 7.5% | — |
| CVE-2023-20269 Ransomware
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Acc… |
Cisco · Adaptive Security Appliance and Firepower Threat Defense | Sep 13, 2023 | Oct 4, 2023 | 26.6% | — |
| CVE-2023-35674
Android Framework Privilege Escalation Vulnerability |
Android · Framework | Sep 13, 2023 | Oct 4, 2023 | 2.6% | — |
| CVE-2023-4863
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability |
Google · Chromium WebP | Sep 13, 2023 | Oct 4, 2023 | 100.0% | — |
| CVE-2023-36761
Microsoft Word Information Disclosure Vulnerability |
Microsoft · Word | Sep 12, 2023 | Oct 3, 2023 | 19.6% | — |
| CVE-2023-36802
Microsoft Streaming Service Proxy Privilege Escalation Vulnerability |
Microsoft · Streaming Service Proxy | Sep 12, 2023 | Oct 3, 2023 | 27.9% | — |
| CVE-2023-41061
Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability |
Apple · iOS, iPadOS, and watchOS | Sep 11, 2023 | Oct 2, 2023 | 4.4% | — |
| CVE-2023-41064
Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability |
Apple · iOS, iPadOS, and macOS | Sep 11, 2023 | Oct 2, 2023 | 53.4% | — |
| CVE-2023-33246
Apache RocketMQ Command Execution Vulnerability |
Apache · RocketMQ | Sep 6, 2023 | Sep 27, 2023 | 96.6% | — |
| CVE-2023-32315
Ignite Realtime Openfire Path Traversal Vulnerability |
Ignite Realtime · Openfire | Aug 24, 2023 | Sep 14, 2023 | 100.0% | — |
| CVE-2023-38831 Ransomware
RARLAB WinRAR Code Execution Vulnerability |
RARLAB · WinRAR | Aug 24, 2023 | Sep 14, 2023 | 99.8% | — |
| CVE-2023-27532 Ransomware
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Fu… |
Veeam · Backup & Replication | Aug 22, 2023 | Sep 12, 2023 | 80.6% | — |
| CVE-2023-38035 Ransomware
Ivanti Sentry Authentication Bypass Vulnerability |
Ivanti · Sentry | Aug 22, 2023 | Sep 12, 2023 | 100.0% | — |
| CVE-2023-26359
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability |
Adobe · ColdFusion | Aug 21, 2023 | Sep 11, 2023 | 17.0% | — |
| CVE-2023-24489
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability |
Citrix · Content Collaboration | Aug 16, 2023 | Sep 6, 2023 | 97.3% | — |
| CVE-2023-38180
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability |
Microsoft · .NET Core and Visual Studio | Aug 9, 2023 | Aug 30, 2023 | 14.1% | — |
| CVE-2017-18368
Zyxel P660HN-T1A Routers Command Injection Vulnerability |
Zyxel · P660HN-T1A Routers | Aug 7, 2023 | Aug 28, 2023 | 94.5% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.