Exploited Vulnerabilities

What to patch first · CISA Known Exploited Vulnerabilities with FIRST EPSS scores (Nov 12) and mentions in Asia-Pacific coverage
1779
Known exploited
38
Added · 30d
361
Used by ransomware
70
In APAC news · 90d
2165 CVEs
CVEVendor · productAdded to KEVDue EPSSAPAC news
CVE-2013-3896
Microsoft Silverlight Information Disclosure Vulnerability
Microsoft · Silverlight May 25, 2022 Jun 15, 2022 67.1% —
CVE-2013-3993 Ransomware
IBM InfoSphere BigInsights Invalid Input Vulnerability
IBM · InfoSphere BigInsights May 25, 2022 Jun 15, 2022 4.8% —
CVE-2013-7331
Microsoft Internet Explorer Information Disclosure Vulnerability
Microsoft · Internet Explorer May 25, 2022 Jun 15, 2022 50.2% —
CVE-2014-0546
Adobe Reader and Acrobat Sandbox Bypass Vulnerability
Adobe · Reader and Acrobat May 25, 2022 Jun 15, 2022 22.3% —
CVE-2014-2817
Microsoft Internet Explorer Privilege Escalation Vulnerability
Microsoft · Internet Explorer May 25, 2022 Jun 15, 2022 26.3% —
CVE-2014-3153
Linux Kernel Privilege Escalation Vulnerability
Linux · Kernel May 25, 2022 Jun 15, 2022 37.2% —
CVE-2014-4077
Microsoft IME Japanese Privilege Escalation Vulnerability
Microsoft · Input Method Editor (IME) Japanese May 25, 2022 Jun 15, 2022 54.6% —
CVE-2014-4123
Microsoft Internet Explorer Privilege Escalation Vulnerability
Microsoft · Internet Explorer May 25, 2022 Jun 15, 2022 47.1% —
CVE-2014-4148
Microsoft Windows Remote Code Execution Vulnerability
Microsoft · Windows May 25, 2022 Jun 15, 2022 59.9% —
CVE-2014-8439
Adobe Flash Player Dereferenced Pointer Vulnerability
Adobe · Flash Player May 25, 2022 Jun 15, 2022 20.4% —
CVE-2015-0016
Microsoft Windows TS WebProxy Directory Traversal Vulnerability
Microsoft · Windows May 25, 2022 Jun 15, 2022 75.8% —
CVE-2015-0071
Microsoft Internet Explorer ASLR Bypass Vulnerability
Microsoft · Internet Explorer May 25, 2022 Jun 15, 2022 33.6% —
CVE-2015-0310
Adobe Flash Player ASLR Bypass Vulnerability
Adobe · Flash Player May 25, 2022 Jun 15, 2022 15.1% —
CVE-2015-1671
Microsoft Windows Remote Code Execution Vulnerability
Microsoft · Windows May 25, 2022 Jun 15, 2022 48.8% —
CVE-2015-1769
Microsoft Windows Mount Manager Privilege Escalation Vulnerability
Microsoft · Windows May 25, 2022 Jun 15, 2022 4.1% —
CVE-2015-2360
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k May 25, 2022 Jun 15, 2022 14.8% —
CVE-2015-2425
Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft · Internet Explorer May 25, 2022 Jun 15, 2022 44.7% —
CVE-2015-4495
Mozilla Firefox Security Feature Bypass Vulnerability
Mozilla · Firefox May 25, 2022 Jun 15, 2022 68.6% —
CVE-2015-6175
Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft · Windows May 25, 2022 Jun 15, 2022 5.3% —
CVE-2015-8651
Adobe Flash Player Integer Overflow Vulnerability
Adobe · Flash Player May 25, 2022 Jun 15, 2022 67.7% —
CVE-2016-0034 Ransomware
Microsoft Silverlight Runtime Remote Code Execution Vulnerability
Microsoft · Silverlight May 25, 2022 Jun 15, 2022 69.4% —
CVE-2016-0984
Adobe Flash Player and AIR Use-After-Free Vulnerability
Adobe · Flash Player and AIR May 25, 2022 Jun 15, 2022 54.5% —
CVE-2016-1010
Adobe Flash Player and AIR Integer Overflow Vulnerability
Adobe · Flash Player and AIR May 25, 2022 Jun 15, 2022 19.3% —
CVE-2016-3393
Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnera…
Microsoft · Windows May 25, 2022 Jun 15, 2022 68.5% —
CVE-2016-7256
Microsoft Windows Open Type Font Remote Code Execution Vulnerability
Microsoft · Windows May 25, 2022 Jun 15, 2022 64.6% —
CVE-2019-3010
Oracle Solaris Privilege Escalation Vulnerability
Oracle · Solaris May 25, 2022 Jun 15, 2022 13.5% —
CVE-2016-0162
Microsoft Internet Explorer Information Disclosure Vulnerability
Microsoft · Internet Explorer May 24, 2022 Jun 14, 2022 21.9% —
CVE-2016-3298
Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability
Microsoft · Internet Explorer May 24, 2022 Jun 14, 2022 33.3% —
CVE-2016-3351 Ransomware
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability
Microsoft · Internet Explorer and Edge May 24, 2022 Jun 14, 2022 26.5% —
CVE-2016-4655
Apple iOS Information Disclosure Vulnerability
Apple · iOS May 24, 2022 Jun 14, 2022 33.4% —
CVE-2016-4656
Apple iOS Memory Corruption Vulnerability
Apple · iOS May 24, 2022 Jun 14, 2022 23.6% —
CVE-2016-4657
Apple iOS Webkit Memory Corruption Vulnerability
Apple · iOS May 24, 2022 Jun 14, 2022 66.8% —
CVE-2016-6366
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
Cisco · Adaptive Security Appliance (ASA) May 24, 2022 Jun 14, 2022 87.6% —
CVE-2016-6367
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
Cisco · Adaptive Security Appliance (ASA) May 24, 2022 Jun 14, 2022 22.6% —
CVE-2017-0005
Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerab…
Microsoft · Windows May 24, 2022 Jun 14, 2022 11.0% —
CVE-2017-0022
Microsoft XML Core Services Information Disclosure Vulnerability
Microsoft · XML Core Services May 24, 2022 Jun 14, 2022 18.1% —
CVE-2017-0147 Ransomware
Microsoft Windows SMBv1 Information Disclosure Vulnerability
Microsoft · SMBv1 server May 24, 2022 Jun 14, 2022 99.7% —
CVE-2017-0149
Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft · Internet Explorer May 24, 2022 Jun 14, 2022 28.5% —
CVE-2017-0210
Microsoft Internet Explorer Privilege Escalation Vulnerability
Microsoft · Internet Explorer May 24, 2022 Jun 14, 2022 22.3% —
CVE-2017-18362 Ransomware
Kaseya VSA SQL Injection Vulnerability
Kaseya · Virtual System/Server Administrator (VSA) May 24, 2022 Jun 14, 2022 86.8% —
CVE-2017-8291
Artifex Ghostscript Type Confusion Vulnerability
Artifex · Ghostscript May 24, 2022 Jun 14, 2022 97.0% —
CVE-2017-8543
Microsoft Windows Search Remote Code Execution Vulnerability
Microsoft · Windows May 24, 2022 Jun 14, 2022 74.2% —
CVE-2018-19943 Ransomware
QNAP NAS File Station Cross-Site Scripting Vulnerability
QNAP · Network Attached Storage (NAS) May 24, 2022 Jun 14, 2022 22.7% —
CVE-2018-19949 Ransomware
QNAP NAS File Station Command Injection Vulnerability
QNAP · Network Attached Storage (NAS) May 24, 2022 Jun 14, 2022 30.2% —
CVE-2018-19953 Ransomware
QNAP NAS File Station Cross-Site Scripting Vulnerability
QNAP · Network Attached Storage (NAS) May 24, 2022 Jun 14, 2022 30.5% —
CVE-2018-8611
Microsoft Windows Kernel Privilege Escalation Vulnerability
Microsoft · Windows May 24, 2022 Jun 14, 2022 4.2% —
CVE-2018-5002
Adobe Flash Player Stack-based Buffer Overflow Vulnerability
Adobe · Flash Player May 23, 2022 Jun 13, 2022 24.4% —
CVE-2018-8589
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k May 23, 2022 Jun 13, 2022 3.0% —
CVE-2019-0676
Microsoft Internet Explorer Information Disclosure Vulnerability
Microsoft · Internet Explorer May 23, 2022 Jun 13, 2022 8.1% —
CVE-2019-0703
Microsoft Windows SMB Information Disclosure Vulnerability
Microsoft · Windows May 23, 2022 Jun 13, 2022 9.4% —
← Prev 22 / 44 Next →

Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.