Exploited Vulnerabilities DailyVulnerabilities added to KEV in February 2022
Added32
Ransomware-linked10
Vendors12
By vendor
16
3
2
2
2
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) | 2022-02-25 | 30.9% | Known |
| CVE-2017-8570 | Microsoft Office | 2022-02-25 | 89.8% | Unknown |
| CVE-2017-0222 | Microsoft Internet Explorer | 2022-02-25 | 29.6% | Unknown |
| CVE-2014-6352 | Microsoft Windows | 2022-02-25 | 77.4% | Unknown |
| CVE-2022-23134 | Zabbix Frontend | 2022-02-22 | 95.2% | Unknown |
| CVE-2022-23131 | Zabbix Frontend | 2022-02-22 | 95.6% | Unknown |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source | 2022-02-15 | 99.1% | Unknown |
| CVE-2022-0609 | Google Chromium Animation | 2022-02-15 | 22.9% | Unknown |
| CVE-2019-0752 | Microsoft Internet Explorer | 2022-02-15 | 81.6% | Known |
| CVE-2018-8174 | Microsoft Windows | 2022-02-15 | 88.3% | Known |
| CVE-2018-20250 | RARLAB WinRAR | 2022-02-15 | 96.0% | Known |
| CVE-2018-15982 | Adobe Flash Player | 2022-02-15 | 89.5% | Known |
| CVE-2017-9841 | PHPUnit PHPUnit | 2022-02-15 | 99.9% | Unknown |
| CVE-2014-1761 | Microsoft Word | 2022-02-15 | 77.4% | Unknown |
| CVE-2013-3906 | Microsoft Graphics Component | 2022-02-15 | 84.8% | Unknown |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS | 2022-02-11 | 16.3% | Unknown |
| CVE-2021-36934 | Microsoft Windows | 2022-02-10 | 67.2% | Unknown |
| CVE-2020-0796 | Microsoft SMBv3 | 2022-02-10 | 99.8% | Known |
| CVE-2018-1000861 | Jenkins Jenkins Stapler Web Framework | 2022-02-10 | 98.3% | Unknown |
| CVE-2017-9791 | Apache Struts 1 | 2022-02-10 | 98.9% | Unknown |
| CVE-2017-8464 | Microsoft Windows | 2022-02-10 | 90.0% | Unknown |
| CVE-2017-10271 | Oracle WebLogic Server | 2022-02-10 | 99.9% | Known |
| CVE-2017-0263 | Microsoft Win32k | 2022-02-10 | 10.0% | Unknown |
| CVE-2017-0262 | Microsoft Office | 2022-02-10 | 81.0% | Unknown |
| CVE-2017-0145 | Microsoft SMBv1 | 2022-02-10 | 89.8% | Known |
| CVE-2017-0144 | Microsoft SMBv1 | 2022-02-10 | 99.2% | Known |
| CVE-2016-3088 | Apache ActiveMQ | 2022-02-10 | 98.5% | Unknown |
| CVE-2015-2051 | D-Link DIR-645 Router | 2022-02-10 | 97.1% | Unknown |
| CVE-2015-1635 | Microsoft HTTP.sys | 2022-02-10 | 99.9% | Unknown |
| CVE-2015-1130 | Apple OS X | 2022-02-10 | 9.8% | Unknown |
| CVE-2014-4404 | Apple OS X | 2022-02-10 | 48.9% | Unknown |
| CVE-2022-21882 | Microsoft Win32k | 2022-02-04 | 59.2% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.