Exploited Vulnerabilities DailyVulnerabilities added to KEV in April 2022
Added45
Ransomware-linked10
Vendors24
By vendor
11
6
3
2
2
2
2
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2022-29464 | WSO2 Multiple Products | 2022-04-25 | 99.9% | Known |
| CVE-2022-26904 | Microsoft Windows | 2022-04-25 | 16.9% | Unknown |
| CVE-2022-21919 | Microsoft Windows | 2022-04-25 | 2.4% | Unknown |
| CVE-2022-0847 | Linux Kernel | 2022-04-25 | 92.7% | Unknown |
| CVE-2021-41357 | Microsoft Win32k | 2022-04-25 | 1.5% | Unknown |
| CVE-2021-40450 | Microsoft Win32k | 2022-04-25 | 1.5% | Unknown |
| CVE-2019-1003029 | Jenkins Script Security Plugin | 2022-04-25 | 74.4% | Unknown |
| CVE-2022-22718 | Microsoft Windows | 2022-04-19 | 18.4% | Unknown |
| CVE-2019-3568 | Meta Platforms WhatsApp | 2022-04-19 | 30.0% | Unknown |
| CVE-2018-6882 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-04-19 | 29.7% | Known |
| CVE-2022-22960 | VMware Multiple Products | 2022-04-15 | 35.5% | Unknown |
| CVE-2022-1364 | Google Chromium V8 | 2022-04-15 | 13.7% | Unknown |
| CVE-2019-3929 | Crestron Multiple Products | 2022-04-15 | 98.9% | Unknown |
| CVE-2019-16057 | D-Link DNS-320 Storage Device | 2022-04-15 | 86.4% | Known |
| CVE-2018-7841 | Schneider Electric U.motion Builder | 2022-04-15 | 72.6% | Unknown |
| CVE-2016-4523 | Trihedral VTScada (formerly VTS) | 2022-04-15 | 31.1% | Unknown |
| CVE-2014-0780 | InduSoft Web Studio | 2022-04-15 | 74.6% | Unknown |
| CVE-2010-5330 | Ubiquiti AirOS | 2022-04-15 | 39.3% | Unknown |
| CVE-2007-3010 | Alcatel OmniPCX Enterprise | 2022-04-15 | 97.3% | Unknown |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager | 2022-04-14 | 99.9% | Known |
| CVE-2022-24521 | Microsoft Windows | 2022-04-13 | 7.0% | Known |
| CVE-2018-7602 | Drupal Core | 2022-04-13 | 99.1% | Known |
| CVE-2018-20753 | Kaseya Virtual System/Server Administrator (VSA) | 2022-04-13 | 29.5% | Known |
| CVE-2015-5123 | Adobe Flash Player | 2022-04-13 | 18.8% | Unknown |
| CVE-2015-5122 | Adobe Flash Player | 2022-04-13 | 93.9% | Unknown |
| CVE-2015-3113 | Adobe Flash Player | 2022-04-13 | 99.8% | Unknown |
| CVE-2015-2502 | Microsoft Internet Explorer | 2022-04-13 | 51.0% | Unknown |
| CVE-2015-0313 | Adobe Flash Player | 2022-04-13 | 95.2% | Unknown |
| CVE-2015-0311 | Adobe Flash Player | 2022-04-13 | 85.5% | Unknown |
| CVE-2014-9163 | Adobe Flash Player | 2022-04-13 | 20.7% | Unknown |
| CVE-2022-23176 | WatchGuard Firebox and XTM | 2022-04-11 | 10.8% | Unknown |
| CVE-2021-42287 | Microsoft Active Directory | 2022-04-11 | 77.1% | Known |
| CVE-2021-42278 | Microsoft Active Directory | 2022-04-11 | 73.2% | Known |
| CVE-2021-39793 | Google Pixel | 2022-04-11 | 0.6% | Unknown |
| CVE-2021-27852 | Checkbox Checkbox Survey | 2022-04-11 | 30.2% | Unknown |
| CVE-2021-22600 | Linux Kernel | 2022-04-11 | 6.5% | Unknown |
| CVE-2020-2509 | QNAP QNAP Network-Attached Storage (NAS) | 2022-04-11 | 33.9% | Unknown |
| CVE-2017-11317 | Telerik User Interface (UI) for ASP.NET AJAX | 2022-04-11 | 84.1% | Unknown |
| CVE-2021-3156 | Sudo Sudo | 2022-04-06 | 99.9% | Unknown |
| CVE-2021-31166 | Microsoft HTTP Protocol Stack | 2022-04-06 | 99.8% | Unknown |
| CVE-2017-0148 | Microsoft SMBv1 server | 2022-04-06 | 99.3% | Known |
| CVE-2022-22965 | VMware Spring Framework | 2022-04-04 | 99.6% | Unknown |
| CVE-2022-22675 | Apple macOS | 2022-04-04 | 12.4% | Unknown |
| CVE-2022-22674 | Apple macOS | 2022-04-04 | 1.1% | Unknown |
| CVE-2021-45382 | D-Link Multiple Routers | 2022-04-04 | 97.8% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.