CVE Intelligence
Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

Severity
Clear

8 result(s)

Export this search: RSS · CSV · STIX
CVE-2022-38181 High · 8.8 KEV High · 62 Public exploit CWE-416 Oct 25, 2022
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0p0 through r38p1, and r39p0; Valhall r19p0 through r38p1, and r39p0; and Midgard r4p0 through r32p0.
CVE-2016-20017 Critical · 9.8 KEV Urgent · 75 Public exploit CWE-77 Oct 19, 2022
D-Link DSL-2750B Devices Command Injection Vulnerability
D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022.
CVE-2022-21587 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-306 Oct 18, 2022
Oracle E-Business Suite Unspecified Vulnerability
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2022-40684 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-287 Oct 18, 2022
Fortinet Multiple Products Authentication Bypass Vulnerability
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
CVE-2022-41033 High · 7.8 KEV High · 53 CWE-843 Oct 11, 2022
Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2022-38028 High · 7.8 KEV High · 66 Oct 11, 2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41040 High · 8.8 KEV Urgent · 94 Public exploit Ransomware CWE-918 Oct 2, 2022
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41082 High · 8.0 KEV Urgent · 94 Public exploit Ransomware CWE-502 Oct 2, 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability