Exploited vulnerabilities
CVEs published in the last 120 days, plus everything on CISA’s known-exploited list. Scores, exploit likelihood and exploitation status in one place.
| Score | CVE | Affected | EPSS | Published |
|---|---|---|---|---|
| 7.8 high | CVE-2022-22706 KEV | arm bifrost gpu kernel driver Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0. | 1.1% | 3 Mar 2022 |
| 8.8 high | CVE-2022-23176 KEV | watchguard fireware WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3. | 11% | 24 Feb 2022 |
| 10.0 critical | CVE-2022-0543 KEV | Debian redis It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution. | 99% | 18 Feb 2022 |
| 9.8 critical | CVE-2021-45382 KEV | dlink dir-820l firmware A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched. | 98% | 17 Feb 2022 |
| 7.8 high | CVE-2021-3560 KEV | polkit It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. | 24% | 16 Feb 2022 |
| 9.8 critical | CVE-2022-24086 KEV | Adobe Magento Commerce Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution. | 99% | 16 Feb 2022 |
| 8.8 high | CVE-2021-4102 KEV | Google Chrome Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 7.8% | 11 Feb 2022 |
| 8.4 high | CVE-2022-0185 KEV | kernel A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system. | 25% | 11 Feb 2022 |
| 9.8 critical | CVE-2022-24112 KEV | Apache Software Foundation Apache APISIX An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of Admin API was changed to a port different from the data panel, the impact is lower. But there is still a risk to bypass the IP restriction of Apache APISIX's data panel. There is a check in the batch-requests plugin which overrides the client IP with its real remote IP. But due to a bug in the code, this check can be bypassed. | 96% | 11 Feb 2022 |
| 8.0 high | CVE-2022-20708 KEV | Cisco Small Business RV Series Router Firmware Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory. | 15% | 10 Feb 2022 |
| 8.0 high | CVE-2022-20703 KEV | Cisco Small Business RV Series Router Firmware Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory. | 9.2% | 10 Feb 2022 |
| 7.8 high | CVE-2022-20701 KEV | Cisco Small Business RV Series Router Firmware Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory. | 9.7% | 10 Feb 2022 |
| 9.8 critical | CVE-2022-20700 KEV | Cisco Small Business RV Series Router Firmware Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory. | 5.7% | 10 Feb 2022 |
| 9.8 critical | CVE-2022-20699 KEV | Cisco Small Business RV Series Router Firmware Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory. | 72% | 10 Feb 2022 |
| 10.0 critical | CVE-2022-22536 KEV | SAP SE SAP NetWeaver and ABAP Platform SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system. | 98% | 9 Feb 2022 |
| 7.8 high | CVE-2022-22718 KEV | Microsoft Windows 10 Version 1809 Windows Print Spooler Elevation of Privilege Vulnerability | 18% | 9 Feb 2022 |
| 7.8 high | CVE-2022-21999 KEV | Microsoft Windows 10 Version 1809 Windows Print Spooler Elevation of Privilege Vulnerability | 41% | 9 Feb 2022 |
| 7.8 high | CVE-2022-21971 KEV | Microsoft Windows 10 Version 1809 Windows Runtime Remote Code Execution Vulnerability | 54% | 9 Feb 2022 |
| 6.1 medium | CVE-2022-24682 KEV | synacor zimbra collaboration suite An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to be injected into the document. | 31% | 9 Feb 2022 |
| 7.8 high | CVE-2021-4034 KEV | polkit A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine. | 94% | 28 Jan 2022 |