Exploited vulnerabilities (CISA KEV)

CVE-2023-23397 Critical · 9.8 KEV High · 66 Public exploit CWE-294 Mar 14, 2023

Microsoft Office Outlook Privilege Escalation Vulnerability

Microsoft Outlook Elevation of Privilege Vulnerability

CVE-2023-27532 High · 7.5 KEV Urgent · 75 Public exploit Ransomware CWE-306 Mar 10, 2023

Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.

CVE-2022-41328 High · 7.1 KEV High · 65 CWE-22 Mar 7, 2023

Fortinet FortiOS Path Traversal Vulnerability

A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.

CVE-2019-8720 High · 8.8 KEV High · 52 CWE-119 Mar 6, 2023

WebKitGTK Memory Corruption Vulnerability

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

CVE-2023-23529 High · 8.8 KEV High · 55 CWE-843 Feb 27, 2023

Apple Multiple Products WebKit Type Confusion Vulnerability

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

CVE-2022-47986 Critical · 9.8 KEV Urgent · 91 Public exploit Ransomware CWE-502 Feb 17, 2023

IBM Aspera Faspex Code Execution Vulnerability

IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system. The obsolete API call was removed in Faspex 4.4.2 PL2. IBM X-Force ID: 243512.

CVE-2023-23752 Medium · 5.3 KEV Urgent · 76 Public exploit CWE-284 Feb 16, 2023

Joomla! Improper Access Control Vulnerability

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

CVE-2023-21823 High · 7.8 KEV High · 61 Public exploit CWE-190 Feb 14, 2023

Microsoft Windows Graphic Component Privilege Escalation Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2023-23376 High · 7.8 KEV High · 65 Ransomware CWE-787 Feb 14, 2023

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-21715 High · 7.3 KEV High · 55 CWE-863 Feb 14, 2023

Microsoft Office Publisher Security Feature Bypass Vulnerability

Microsoft Publisher Security Feature Bypass Vulnerability

CVE-2023-21529 High · 8.8 KEV High · 66 Ransomware CWE-502 Feb 14, 2023

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2023-25717 Critical · 9.8 KEV High · 67 Public exploit CWE-94 Feb 13, 2023

Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.

CVE-2022-24990 High · 7.5 KEV Urgent · 89 Public exploit Ransomware CWE-306 Feb 7, 2023

TerraMaster OS Remote Command Execution Vulnerability

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response.

CVE-2023-0669 High · 7.2 KEV Urgent · 86 Public exploit Ransomware CWE-502 Feb 6, 2023

Fortra GoAnywhere MFT Remote Code Execution Vulnerability

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

CVE-2023-0266 High · 7.0 KEV High · 60 Public exploit CWE-416 Jan 30, 2023

Linux Kernel Use-After-Free Vulnerability

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e

CVE-2023-21608 High · 7.8 KEV High · 62 Public exploit CWE-416 Jan 18, 2023

Adobe Acrobat and Reader Use-After-Free Vulnerability

Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2022-47966 Critical · 9.8 KEV Urgent · 100 Public exploit Ransomware CWE-20 Jan 18, 2023

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections. This affects Access Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelfService Plus before 6211, Analytics Plus before 5150, Application Control Plus before 10.1.2220.18, Asset Explorer before 6983, Browser Security Plus before 11.1.2238.6, Device Control Plus before 10.1.2220.18, Endpoint Central before 10.1.2228.11, Endpoint Central MSP before 10.1.2228.11, Endpoint DLP before 10.1.2137.6, Key Manager Plus before 6401, OS Deployer before 1.1.2243.1, PAM 360 before 5713, Password Manager Pro before 12124, Patch Manager Plus before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. ServiceDesk Plus before 14004, ServiceDesk Plus MSP before 13001, SupportCenter Plus before 11026, and Vulnerability Manager Plus before 10.1.2220.18. Exploitation is only possible if SAML SSO has ever been configured for a product (for some products, exploitation requires that SAML SSO is currently active).

CVE-2023-21839 High · 7.5 KEV Urgent · 79 Public exploit CWE-502 Jan 17, 2023

Oracle WebLogic Server Unspecified Vulnerability

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

CVE-2023-22952 High · 8.8 KEV Urgent · 72 Public exploit CWE-20 Jan 11, 2023

Multiple SugarCRM Products Remote Code Execution Vulnerability

In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation.

CVE-2023-21674 High · 8.8 KEV High · 62 Public exploit CWE-416 Jan 10, 2023

Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2022-44877 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-78 Jan 5, 2023

CWP Control Web Panel OS Command Injection Vulnerability

login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter.

CVE-2022-42475 Critical · 9.8 KEV Urgent · 89 Public exploit Ransomware CWE-787 Jan 2, 2023

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier and FortiProxy SSL-VPN 7.2.0 through 7.2.1, 7.0.7 and earlier may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

CVE-2022-26485 High · 8.8 KEV High · 61 Public exploit CWE-416 Dec 22, 2022

Mozilla Firefox Use-After-Free Vulnerability

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.

CVE-2022-26486 Critical · 9.6 KEV High · 58 CWE-416 Dec 22, 2022

Mozilla Firefox Use-After-Free Vulnerability

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0.

CVE-2022-42856 High · 8.8 KEV High · 55 CWE-843 Dec 15, 2022

Apple iOS Type Confusion Vulnerability

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..