| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2023-21823
Microsoft Windows Graphic Component Privilege Escalation Vulnerability |
Microsoft · Windows | Feb 14, 2023 | Mar 7, 2023 | 5.6% | — |
| CVE-2023-23376 Ransomware
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vul… |
Microsoft · Windows | Feb 14, 2023 | Mar 7, 2023 | 10.8% | — |
| CVE-2023-23529
Apple Multiple Products WebKit Type Confusion Vulnerability |
Apple · Multiple Products | Feb 14, 2023 | Mar 7, 2023 | 9.5% | — |
| CVE-2015-2291 Ransomware
Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability |
Intel · Ethernet Diagnostics Driver for Windows | Feb 10, 2023 | Mar 3, 2023 | 15.7% | — |
| CVE-2022-24990 Ransomware
TerraMaster OS Remote Command Execution Vulnerability |
TerraMaster · TerraMaster OS | Feb 10, 2023 | Mar 3, 2023 | 83.2% | — |
| CVE-2023-0669 Ransomware
Fortra GoAnywhere MFT Remote Code Execution Vulnerability |
Fortra · GoAnywhere MFT | Feb 10, 2023 | Mar 3, 2023 | 100.0% | — |
| CVE-2022-21587 Ransomware
Oracle E-Business Suite Unspecified Vulnerability |
Oracle · E-Business Suite | Feb 2, 2023 | Feb 23, 2023 | 98.3% | — |
| CVE-2023-22952
Multiple SugarCRM Products Remote Code Execution Vulnerability |
SugarCRM · Multiple Products | Feb 2, 2023 | Feb 23, 2023 | 80.1% | — |
| CVE-2017-11357 Ransomware
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability |
Telerik · User Interface (UI) for ASP.NET AJAX | Jan 26, 2023 | Feb 16, 2023 | 77.7% | — |
| CVE-2022-47966 Ransomware
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability |
Zoho · ManageEngine | Jan 23, 2023 | Feb 13, 2023 | 99.8% | — |
| CVE-2022-44877
CWP Control Web Panel OS Command Injection Vulnerability |
CWP · Control Web Panel | Jan 17, 2023 | Feb 7, 2023 | 100.0% | — |
| CVE-2022-41080 Ransomware
Microsoft Exchange Server Privilege Escalation Vulnerability |
Microsoft · Exchange Server | Jan 10, 2023 | Jan 31, 2023 | 77.3% | — |
| CVE-2023-21674
Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vul… |
Microsoft · Windows | Jan 10, 2023 | Jan 31, 2023 | 34.2% | — |
| CVE-2018-18809
TIBCO JasperReports Library Directory Traversal Vulnerability |
TIBCO · JasperReports | Dec 29, 2022 | Jan 19, 2023 | 79.1% | — |
| CVE-2018-5430
TIBCO JasperReports Server Information Disclosure Vulnerability |
TIBCO · JasperReports | Dec 29, 2022 | Jan 19, 2023 | 48.1% | — |
| CVE-2022-42856
Apple iOS Type Confusion Vulnerability |
Apple · iOS | Dec 14, 2022 | Jan 4, 2023 | 8.5% | — |
| CVE-2022-26500 Ransomware
Veeam Backup & Replication Remote Code Execution Vulnerability |
Veeam · Backup & Replication | Dec 13, 2022 | Jan 3, 2023 | 5.8% | — |
| CVE-2022-26501 Ransomware
Veeam Backup & Replication Remote Code Execution Vulnerability |
Veeam · Backup & Replication | Dec 13, 2022 | Jan 3, 2023 | 4.1% | — |
| CVE-2022-27518
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass … |
Citrix · Application Delivery Controller (ADC) and Gateway | Dec 13, 2022 | Jan 3, 2023 | 6.9% | — |
| CVE-2022-42475 Ransomware
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability |
Fortinet · FortiOS | Dec 13, 2022 | Jan 3, 2023 | 99.5% | — |
| CVE-2022-44698 Ransomware
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability |
Microsoft · Defender | Dec 13, 2022 | Jan 3, 2023 | 75.0% | — |
| CVE-2022-4262
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Dec 5, 2022 | Dec 26, 2022 | 23.5% | — |
| CVE-2021-35587
Oracle Fusion Middleware Unspecified Vulnerability |
Oracle · Fusion Middleware | Nov 28, 2022 | Dec 19, 2022 | 96.3% | — |
| CVE-2022-4135
Google Chromium GPU Heap Buffer Overflow Vulnerability |
Google · Chromium GPU | Nov 28, 2022 | Dec 19, 2022 | 31.9% | — |
| CVE-2022-41049
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability |
Microsoft · Windows | Nov 14, 2022 | Dec 9, 2022 | 3.3% | — |
| CVE-2021-25337
Samsung Mobile Devices Improper Access Control Vulnerability |
Samsung · Mobile Devices | Nov 8, 2022 | Nov 29, 2022 | 2.8% | — |
| CVE-2021-25369
Samsung Mobile Devices Improper Access Control Vulnerability |
Samsung · Mobile Devices | Nov 8, 2022 | Nov 29, 2022 | 1.1% | — |
| CVE-2021-25370
Samsung Mobile Devices Memory Corruption Vulnerability |
Samsung · Mobile Devices | Nov 8, 2022 | Nov 29, 2022 | 0.9% | — |
| CVE-2022-41073 Ransomware
Microsoft Windows Print Spooler Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 8, 2022 | Dec 9, 2022 | 2.6% | — |
| CVE-2022-41091 Ransomware
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability |
Microsoft · Windows | Nov 8, 2022 | Dec 9, 2022 | 2.3% | — |
| CVE-2022-41125
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability |
Microsoft · Windows | Nov 8, 2022 | Dec 9, 2022 | 3.0% | — |
| CVE-2022-41128
Microsoft Windows Scripting Languages Remote Code Execution Vulnerability |
Microsoft · Windows | Nov 8, 2022 | Dec 9, 2022 | 24.6% | — |
| CVE-2022-3723
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Oct 28, 2022 | Nov 18, 2022 | 7.9% | — |
| CVE-2022-42827
Apple iOS and iPadOS Out-of-Bounds Write Vulnerability |
Apple · iOS and iPadOS | Oct 25, 2022 | Nov 15, 2022 | 1.1% | — |
| CVE-2018-19320 Ransomware
GIGABYTE Multiple Products Unspecified Vulnerability |
GIGABYTE · Multiple Products | Oct 24, 2022 | Nov 14, 2022 | 4.6% | — |
| CVE-2018-19321 Ransomware
GIGABYTE Multiple Products Privilege Escalation Vulnerability |
GIGABYTE · Multiple Products | Oct 24, 2022 | Nov 14, 2022 | 3.7% | — |
| CVE-2018-19322 Ransomware
GIGABYTE Multiple Products Code Execution Vulnerability |
GIGABYTE · Multiple Products | Oct 24, 2022 | Nov 14, 2022 | 1.8% | — |
| CVE-2018-19323 Ransomware
GIGABYTE Multiple Products Privilege Escalation Vulnerability |
GIGABYTE · Multiple Products | Oct 24, 2022 | Nov 14, 2022 | 8.4% | — |
| CVE-2020-3153 Ransomware
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vu… |
Cisco · AnyConnect Secure | Oct 24, 2022 | Nov 14, 2022 | 28.5% | — |
| CVE-2020-3433 Ransomware
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability |
Cisco · AnyConnect Secure | Oct 24, 2022 | Nov 14, 2022 | 10.0% | — |
| CVE-2021-3493
Linux Kernel Privilege Escalation Vulnerability |
Linux · Kernel | Oct 20, 2022 | Nov 10, 2022 | 49.2% | — |
| CVE-2022-41352 Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability |
Synacor · Zimbra Collaboration Suite (ZCS) | Oct 20, 2022 | Nov 10, 2022 | 95.5% | — |
| CVE-2022-40684 Ransomware
Fortinet Multiple Products Authentication Bypass Vulnerability |
Fortinet · Multiple Products | Oct 11, 2022 | Nov 1, 2022 | 100.0% | — |
| CVE-2022-41033
Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability |
Microsoft · Windows COM+ Event System Service | Oct 11, 2022 | Nov 1, 2022 | 1.9% | — |
| CVE-2022-36804
Atlassian Bitbucket Server and Data Center Command Injection Vulnerability |
Atlassian · Bitbucket Server and Data Center | Sep 30, 2022 | Oct 21, 2022 | 99.0% | — |
| CVE-2022-41040 Ransomware
Microsoft Exchange Server Server-Side Request Forgery Vulnerability |
Microsoft · Exchange Server | Sep 30, 2022 | Oct 21, 2022 | 100.0% | — |
| CVE-2022-41082 Ransomware
Microsoft Exchange Server Remote Code Execution Vulnerability |
Microsoft · Exchange Server | Sep 30, 2022 | Oct 21, 2022 | 100.0% | — |
| CVE-2022-3236
Sophos Firewall Code Injection Vulnerability |
Sophos · Firewall | Sep 23, 2022 | Oct 14, 2022 | 98.9% | — |
| CVE-2022-35405
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability |
Zoho · ManageEngine | Sep 22, 2022 | Oct 13, 2022 | 99.9% | — |
| CVE-2010-2568
Microsoft Windows Remote Code Execution Vulnerability |
Microsoft · Windows | Sep 15, 2022 | Oct 6, 2022 | 89.6% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.