| CVE | Vendor · product | Added to KEV | Due | EPSS | APAC news |
|---|---|---|---|---|---|
| CVE-2019-0880
Microsoft Windows Privilege Escalation Vulnerability |
Microsoft · Windows | May 23, 2022 | Jun 13, 2022 | 2.3% | — |
| CVE-2019-1130 Ransomware
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability |
Microsoft · Windows | May 23, 2022 | Jun 13, 2022 | 1.7% | — |
| CVE-2019-11707
Mozilla Firefox and Thunderbird Type Confusion Vulnerability |
Mozilla · Firefox and Thunderbird | May 23, 2022 | Jun 13, 2022 | 38.0% | — |
| CVE-2019-11708
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability |
Mozilla · Firefox and Thunderbird | May 23, 2022 | Jun 13, 2022 | 55.9% | — |
| CVE-2019-13720
Google Chrome WebAudio Use-After-Free Vulnerability |
Google · Chrome WebAudio | May 23, 2022 | Jun 13, 2022 | 49.4% | — |
| CVE-2019-1385 Ransomware
Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability |
Microsoft · Windows | May 23, 2022 | Jun 13, 2022 | 3.6% | — |
| CVE-2019-18426
WhatsApp Cross-Site Scripting Vulnerability |
Meta Platforms · WhatsApp | May 23, 2022 | Jun 13, 2022 | 68.1% | — |
| CVE-2019-5786
Google Chrome Blink Use-After-Free Vulnerability |
Google · Chrome Blink | May 23, 2022 | Jun 13, 2022 | 61.1% | — |
| CVE-2019-7286
Apple Multiple Products Memory Corruption Vulnerability |
Apple · Multiple Products | May 23, 2022 | Jun 13, 2022 | 15.9% | — |
| CVE-2019-7287
Apple iOS Memory Corruption Vulnerability |
Apple · iOS | May 23, 2022 | Jun 13, 2022 | 4.6% | — |
| CVE-2019-8720
WebKitGTK Memory Corruption Vulnerability |
WebKitGTK · WebKitGTK | May 23, 2022 | Jun 13, 2022 | 1.6% | — |
| CVE-2020-0638 Ransomware
Microsoft Update Notification Manager Privilege Escalation Vulnerability |
Microsoft · Update Notification Manager | May 23, 2022 | Jun 13, 2022 | 2.5% | — |
| CVE-2020-1027
Microsoft Windows Kernel Privilege Escalation Vulnerability |
Microsoft · Windows | May 23, 2022 | Jun 13, 2022 | 4.7% | — |
| CVE-2021-0920
Android Kernel Race Condition Vulnerability |
Android · Kernel | May 23, 2022 | Jun 13, 2022 | 0.9% | — |
| CVE-2021-1048
Android Kernel Use-After-Free Vulnerability |
Android · Kernel | May 23, 2022 | Jun 13, 2022 | 1.1% | — |
| CVE-2021-30883
Apple Multiple Products Memory Corruption Vulnerability |
Apple · Multiple Products | May 23, 2022 | Jun 13, 2022 | 14.7% | — |
| CVE-2022-20821
Cisco IOS XR Open Port Vulnerability |
Cisco · IOS XR | May 23, 2022 | Jun 13, 2022 | 11.5% | — |
| CVE-2022-22947
VMware Spring Cloud Gateway Code Injection Vulnerability |
VMware · Spring Cloud Gateway | May 16, 2022 | Jun 6, 2022 | 98.3% | — |
| CVE-2022-30525
Zyxel Multiple Firewalls OS Command Injection Vulnerability |
Zyxel · Multiple Firewalls | May 16, 2022 | Jun 6, 2022 | 99.9% | — |
| CVE-2022-1388 Ransomware
F5 BIG-IP Missing Authentication Vulnerability |
F5 · BIG-IP | May 10, 2022 | May 31, 2022 | 100.0% | — |
| CVE-2014-0160
OpenSSL Information Disclosure Vulnerability |
OpenSSL · OpenSSL | May 4, 2022 | May 25, 2022 | 100.0% | — |
| CVE-2014-0322
Microsoft Internet Explorer Use-After-Free Vulnerability |
Microsoft · Internet Explorer | May 4, 2022 | May 25, 2022 | 85.1% | — |
| CVE-2014-4113
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | May 4, 2022 | May 25, 2022 | 86.6% | — |
| CVE-2019-8506
Apple Multiple Products Type Confusion Vulnerability |
Apple · Multiple Products | May 4, 2022 | May 25, 2022 | 16.2% | — |
| CVE-2021-1789
Apple Multiple Products Type Confusion Vulnerability |
Apple · Multiple Products | May 4, 2022 | May 25, 2022 | 14.0% | — |
| CVE-2019-1003029
Jenkins Script Security Plugin Sandbox Bypass Vulnerability |
Jenkins · Script Security Plugin | Apr 25, 2022 | May 16, 2022 | 74.4% | — |
| CVE-2021-40450
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Apr 25, 2022 | May 16, 2022 | 1.5% | — |
| CVE-2021-41357
Microsoft Win32k Privilege Escalation Vulnerability |
Microsoft · Win32k | Apr 25, 2022 | May 16, 2022 | 1.5% | — |
| CVE-2022-0847
Linux Kernel Privilege Escalation Vulnerability |
Linux · Kernel | Apr 25, 2022 | May 16, 2022 | 92.8% | — |
| CVE-2022-21919
Microsoft Windows User Profile Service Privilege Escalation Vulnerability |
Microsoft · Windows | Apr 25, 2022 | May 16, 2022 | 2.6% | — |
| CVE-2022-26904
Microsoft Windows User Profile Service Privilege Escalation Vulnerability |
Microsoft · Windows | Apr 25, 2022 | May 16, 2022 | 16.9% | — |
| CVE-2022-29464 Ransomware
WSO2 Multiple Products Unrestrictive Upload of File Vulnerability |
WSO2 · Multiple Products | Apr 25, 2022 | May 16, 2022 | 100.0% | — |
| CVE-2018-6882 Ransomware
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerabili… |
Synacor · Zimbra Collaboration Suite (ZCS) | Apr 19, 2022 | May 10, 2022 | 29.8% | — |
| CVE-2019-3568
WhatsApp VOIP Stack Buffer Overflow Vulnerability |
Meta Platforms · WhatsApp | Apr 19, 2022 | May 10, 2022 | 30.1% | — |
| CVE-2022-22718
Microsoft Windows Print Spooler Privilege Escalation Vulnerability |
Microsoft · Windows | Apr 19, 2022 | May 10, 2022 | 18.5% | — |
| CVE-2007-3010
Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability |
Alcatel · OmniPCX Enterprise | Apr 15, 2022 | May 6, 2022 | 97.4% | — |
| CVE-2010-5330
Ubiquiti AirOS Command Injection Vulnerability |
Ubiquiti · AirOS | Apr 15, 2022 | May 6, 2022 | 40.2% | — |
| CVE-2014-0780
InduSoft Web Studio NTWebServer Directory Traversal Vulnerability |
InduSoft · Web Studio | Apr 15, 2022 | May 6, 2022 | 74.7% | — |
| CVE-2016-4523
Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability |
Trihedral · VTScada (formerly VTS) | Apr 15, 2022 | May 6, 2022 | 31.2% | — |
| CVE-2018-7841
Schneider Electric U.motion Builder SQL Injection Vulnerability |
Schneider Electric · U.motion Builder | Apr 15, 2022 | May 6, 2022 | 72.5% | — |
| CVE-2019-16057 Ransomware
D-Link DNS-320 Remote Code Execution Vulnerability |
D-Link · DNS-320 Storage Device | Apr 15, 2022 | May 6, 2022 | 86.5% | — |
| CVE-2019-3929
Crestron Multiple Products Command Injection Vulnerability |
Crestron · Multiple Products | Apr 15, 2022 | May 6, 2022 | 99.0% | — |
| CVE-2022-1364
Google Chromium V8 Type Confusion Vulnerability |
Google · Chromium V8 | Apr 15, 2022 | May 6, 2022 | 13.9% | — |
| CVE-2022-22960
VMware Multiple Products Privilege Escalation Vulnerability |
VMware · Multiple Products | Apr 15, 2022 | May 6, 2022 | 35.5% | — |
| CVE-2022-22954 Ransomware
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection… |
VMware · Workspace ONE Access and Identity Manager | Apr 14, 2022 | May 5, 2022 | 100.0% | — |
| CVE-2014-9163
Adobe Flash Player Stack-Based Buffer Overflow Vulnerability |
Adobe · Flash Player | Apr 13, 2022 | May 4, 2022 | 44.9% | — |
| CVE-2015-0311
Adobe Flash Player Remote Code Execution Vulnerability |
Adobe · Flash Player | Apr 13, 2022 | May 4, 2022 | 85.6% | — |
| CVE-2015-0313
Adobe Flash Player Use-After-Free Vulnerability |
Adobe · Flash Player | Apr 13, 2022 | May 4, 2022 | 95.3% | — |
| CVE-2015-2502
Microsoft Internet Explorer Memory Corruption Vulnerability |
Microsoft · Internet Explorer | Apr 13, 2022 | May 4, 2022 | 51.0% | — |
| CVE-2015-3113
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability |
Adobe · Flash Player | Apr 13, 2022 | May 4, 2022 | 99.8% | — |
Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.