Exploited Vulnerabilities

What to patch first · CISA Known Exploited Vulnerabilities with FIRST EPSS scores (Nov 12) and mentions in Asia-Pacific coverage
1779
Known exploited
38
Added · 30d
361
Used by ransomware
70
In APAC news · 90d
2165 CVEs
CVEVendor · productAdded to KEVDue EPSSAPAC news
CVE-2017-12231
Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
Cisco · IOS software Mar 3, 2022 Mar 24, 2022 7.1% —
CVE-2017-12232
Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vuln…
Cisco · IOS software Mar 3, 2022 Mar 24, 2022 2.2% —
CVE-2017-12233
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnera…
Cisco · IOS software Mar 3, 2022 Mar 24, 2022 7.1% —
CVE-2017-12234
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnera…
Cisco · IOS software Mar 3, 2022 Mar 24, 2022 7.1% —
CVE-2017-12235
Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Se…
Cisco · IOS software Mar 3, 2022 Mar 24, 2022 7.1% —
CVE-2017-12237
Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerabi…
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 24, 2022 7.1% —
CVE-2017-12238
Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability
Cisco · Catalyst 6800 Series Switches Mar 3, 2022 Mar 24, 2022 2.0% —
CVE-2017-12240
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 24, 2022 13.8% —
CVE-2017-12319
Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol …
Cisco · IOS XE Software Mar 3, 2022 Mar 24, 2022 5.2% —
CVE-2017-6627
Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Se…
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 24, 2022 6.2% —
CVE-2017-6663
Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 24, 2022 2.1% —
CVE-2017-6736
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 24, 2022 70.4% —
CVE-2017-6737
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 24, 2022 45.0% —
CVE-2017-6738
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 24, 2022 10.9% —
CVE-2017-6739
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 24, 2022 10.9% —
CVE-2017-6740
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 24, 2022 11.1% —
CVE-2017-6743
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 24, 2022 10.9% —
CVE-2017-6744
Cisco IOS Software SNMP Remote Code Execution Vulnerability
Cisco · IOS software Mar 3, 2022 Mar 24, 2022 7.3% —
CVE-2017-8540
Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerab…
Microsoft · Malware Protection Engine Mar 3, 2022 Mar 24, 2022 71.9% —
CVE-2018-0151
Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Exe…
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 17, 2022 14.2% —
CVE-2018-0154
Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnera…
Cisco · IOS Software Mar 3, 2022 Mar 17, 2022 7.1% —
CVE-2018-0155
Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerabili…
Cisco · Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches Mar 3, 2022 Mar 17, 2022 7.7% —
CVE-2018-0156
Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vu…
Cisco · IOS Software and Cisco IOS XE Software Mar 3, 2022 Mar 17, 2022 9.4% —
CVE-2018-0158
Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
Cisco · IOS Software and Cisco IOS XE Software Mar 3, 2022 Mar 17, 2022 7.2% —
CVE-2018-0159
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vul…
Cisco · IOS Software and Cisco IOS XE Software Mar 3, 2022 Mar 17, 2022 6.9% —
CVE-2018-0161
Cisco IOS Software Resource Management Errors Vulnerability
Cisco · IOS Software Mar 3, 2022 Mar 17, 2022 4.1% —
CVE-2018-0167
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Cisco · IOS, XR, and XE Software Mar 3, 2022 Mar 17, 2022 3.4% —
CVE-2018-0172
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 17, 2022 7.8% —
CVE-2018-0173
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Cisco · IOS and IOS XE Software Mar 3, 2022 Mar 17, 2022 7.6% —
CVE-2018-0174
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerab…
Cisco · IOS XE Software Mar 3, 2022 Mar 17, 2022 7.6% —
CVE-2018-0175
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Cisco · IOS, XR, and XE Software Mar 3, 2022 Mar 17, 2022 3.5% —
CVE-2018-0179
Cisco IOS Software Denial-of-Service Vulnerability
Cisco · IOS Software Mar 3, 2022 Mar 17, 2022 4.9% —
CVE-2018-0180
Cisco IOS Software Denial-of-Service Vulnerability
Cisco · IOS Software Mar 3, 2022 Mar 17, 2022 4.9% —
CVE-2018-8298
ChakraCore Scripting Engine Type Confusion Vulnerability
ChakraCore · ChakraCore scripting engine Mar 3, 2022 Mar 17, 2022 74.7% —
CVE-2018-8581 Ransomware
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft · Exchange Server Mar 3, 2022 Mar 17, 2022 27.6% —
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability
Microsoft · Excel Mar 3, 2022 Mar 17, 2022 21.8% —
CVE-2019-1652
Cisco Small Business Routers Improper Input Validation Vulnerability
Cisco · Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Mar 3, 2022 Mar 17, 2022 95.9% —
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
Exim · Exim Internet Mailer Mar 3, 2022 Mar 17, 2022 41.6% —
CVE-2020-11899
Treck TCP/IP stack Out-of-Bounds Read Vulnerability
Treck TCP/IP stack · IPv6 Mar 3, 2022 Mar 17, 2022 18.4% —
CVE-2020-1938
Apache Tomcat Improper Privilege Management Vulnerability
Apache · Tomcat Mar 3, 2022 Mar 17, 2022 99.3% —
CVE-2021-41379 Ransomware
Microsoft Windows Installer Privilege Escalation Vulnerability
Microsoft · Windows Mar 3, 2022 Mar 17, 2022 19.5% —
CVE-2022-20699
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers Mar 3, 2022 Mar 17, 2022 72.5% —
CVE-2022-20700
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers Mar 3, 2022 Mar 17, 2022 5.7% —
CVE-2022-20701
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers Mar 3, 2022 Mar 17, 2022 9.7% —
CVE-2022-20703
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers Mar 3, 2022 Mar 17, 2022 9.2% —
CVE-2022-20708
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers Mar 3, 2022 Mar 17, 2022 14.9% —
CVE-2014-6352
Microsoft Windows Code Injection Vulnerability
Microsoft · Windows Feb 25, 2022 Aug 25, 2022 77.5% —
CVE-2017-0222
Microsoft Internet Explorer Remote Code Execution Vulnerability
Microsoft · Internet Explorer Feb 25, 2022 Aug 25, 2022 29.6% —
CVE-2017-8570
Microsoft Office Remote Code Execution Vulnerability
Microsoft · Office Feb 25, 2022 Aug 25, 2022 89.9% —
CVE-2022-24682 Ransomware
Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor · Zimbra Collaborate Suite (ZCS) Feb 25, 2022 Mar 11, 2022 30.9% —
← Prev 28 / 44 Next →

Sources: CISA KEV and FIRST EPSS, refreshed daily. EPSS estimates the probability that a CVE is exploited in the next 30 days. CVEs named in the news but absent from KEV are listed under "In Asia-Pacific news" as well.