Vulnerabilities added to KEV in May 2022
Added83
Ransomware-linked18
Vendors20
By vendor
37
8
7
6
3
3
3
2
2
2
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2019-3010 | Oracle Solaris | 2022-05-25 | 13.3% | Unknown |
| CVE-2016-7256 | Microsoft Windows | 2022-05-25 | 64.5% | Unknown |
| CVE-2016-3393 | Microsoft Windows | 2022-05-25 | 68.4% | Unknown |
| CVE-2016-1010 | Adobe Flash Player and AIR | 2022-05-25 | 19.3% | Unknown |
| CVE-2016-0984 | Adobe Flash Player and AIR | 2022-05-25 | 54.5% | Unknown |
| CVE-2016-0034 | Microsoft Silverlight | 2022-05-25 | 69.3% | Known |
| CVE-2015-8651 | Adobe Flash Player | 2022-05-25 | 67.6% | Unknown |
| CVE-2015-6175 | Microsoft Windows | 2022-05-25 | 5.1% | Unknown |
| CVE-2015-4495 | Mozilla Firefox | 2022-05-25 | 68.5% | Unknown |
| CVE-2015-2425 | Microsoft Internet Explorer | 2022-05-25 | 44.7% | Unknown |
| CVE-2015-2360 | Microsoft Win32k | 2022-05-25 | 14.8% | Unknown |
| CVE-2015-1769 | Microsoft Windows | 2022-05-25 | 4.0% | Unknown |
| CVE-2015-1671 | Microsoft Windows | 2022-05-25 | 48.9% | Unknown |
| CVE-2015-0310 | Adobe Flash Player | 2022-05-25 | 15.0% | Unknown |
| CVE-2015-0071 | Microsoft Internet Explorer | 2022-05-25 | 33.5% | Unknown |
| CVE-2015-0016 | Microsoft Windows | 2022-05-25 | 75.7% | Unknown |
| CVE-2014-8439 | Adobe Flash Player | 2022-05-25 | 20.3% | Unknown |
| CVE-2014-4148 | Microsoft Windows | 2022-05-25 | 59.8% | Unknown |
| CVE-2014-4123 | Microsoft Internet Explorer | 2022-05-25 | 47.1% | Unknown |
| CVE-2014-4077 | Microsoft Input Method Editor (IME) Japanese | 2022-05-25 | 54.5% | Unknown |
| CVE-2014-3153 | Linux Kernel | 2022-05-25 | 37.2% | Unknown |
| CVE-2014-2817 | Microsoft Internet Explorer | 2022-05-25 | 26.3% | Unknown |
| CVE-2014-0546 | Adobe Reader and Acrobat | 2022-05-25 | 22.3% | Unknown |
| CVE-2013-7331 | Microsoft Internet Explorer | 2022-05-25 | 50.2% | Unknown |
| CVE-2013-3993 | IBM InfoSphere BigInsights | 2022-05-25 | 4.7% | Known |
| CVE-2013-3896 | Microsoft Silverlight | 2022-05-25 | 67.9% | Unknown |
| CVE-2013-2423 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 85.2% | Unknown |
| CVE-2013-0431 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 90.1% | Known |
| CVE-2013-0422 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 97.0% | Known |
| CVE-2013-0074 | Microsoft Silverlight | 2022-05-25 | 78.8% | Known |
| CVE-2012-1710 | Oracle Fusion Middleware | 2022-05-25 | 7.8% | Known |
| CVE-2010-1428 | Red Hat JBoss | 2022-05-25 | 61.4% | Known |
| CVE-2010-0840 | Oracle Java Runtime Environment (JRE) | 2022-05-25 | 96.3% | Unknown |
| CVE-2010-0738 | Red Hat JBoss | 2022-05-25 | 79.5% | Known |
| CVE-2018-8611 | Microsoft Windows | 2022-05-24 | 4.1% | Unknown |
| CVE-2018-19953 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 28.9% | Known |
| CVE-2018-19949 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 28.6% | Known |
| CVE-2018-19943 | QNAP Network Attached Storage (NAS) | 2022-05-24 | 21.4% | Known |
| CVE-2017-8543 | Microsoft Windows | 2022-05-24 | 74.1% | Unknown |
| CVE-2017-8291 | Artifex Ghostscript | 2022-05-24 | 96.9% | Unknown |
| CVE-2017-18362 | Kaseya Virtual System/Server Administrator (VSA) | 2022-05-24 | 86.8% | Known |
| CVE-2017-0210 | Microsoft Internet Explorer | 2022-05-24 | 22.3% | Unknown |
| CVE-2017-0149 | Microsoft Internet Explorer | 2022-05-24 | 29.1% | Unknown |
| CVE-2017-0147 | Microsoft SMBv1 server | 2022-05-24 | 99.6% | Known |
| CVE-2017-0022 | Microsoft XML Core Services | 2022-05-24 | 18.0% | Unknown |
| CVE-2017-0005 | Microsoft Windows | 2022-05-24 | 11.0% | Unknown |
| CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) | 2022-05-24 | 22.5% | Unknown |
| CVE-2016-6366 | Cisco Adaptive Security Appliance (ASA) | 2022-05-24 | 87.5% | Unknown |
| CVE-2016-4657 | Apple iOS | 2022-05-24 | 66.7% | Unknown |
| CVE-2016-4656 | Apple iOS | 2022-05-24 | 23.6% | Unknown |
| CVE-2016-4655 | Apple iOS | 2022-05-24 | 33.3% | Unknown |
| CVE-2016-3351 | Microsoft Internet Explorer and Edge | 2022-05-24 | 26.4% | Known |
| CVE-2016-3298 | Microsoft Internet Explorer | 2022-05-24 | 33.3% | Unknown |
| CVE-2016-0162 | Microsoft Internet Explorer | 2022-05-24 | 22.0% | Unknown |
| CVE-2022-20821 | Cisco IOS XR | 2022-05-23 | 11.4% | Unknown |
| CVE-2021-30883 | Apple Multiple Products | 2022-05-23 | 14.7% | Unknown |
| CVE-2021-1048 | Android Kernel | 2022-05-23 | 1.0% | Unknown |
| CVE-2021-0920 | Android Kernel | 2022-05-23 | 0.8% | Unknown |
| CVE-2020-1027 | Microsoft Windows | 2022-05-23 | 4.5% | Unknown |
| CVE-2020-0638 | Microsoft Update Notification Manager | 2022-05-23 | 2.3% | Known |
| CVE-2019-8720 | WebKitGTK WebKitGTK | 2022-05-23 | 1.5% | Unknown |
| CVE-2019-7287 | Apple iOS | 2022-05-23 | 4.5% | Unknown |
| CVE-2019-7286 | Apple Multiple Products | 2022-05-23 | 15.9% | Unknown |
| CVE-2019-5786 | Google Chrome Blink | 2022-05-23 | 61.0% | Unknown |
| CVE-2019-18426 | Meta Platforms WhatsApp | 2022-05-23 | 67.8% | Unknown |
| CVE-2019-1385 | Microsoft Windows | 2022-05-23 | 3.6% | Known |
| CVE-2019-13720 | Google Chrome WebAudio | 2022-05-23 | 49.1% | Unknown |
| CVE-2019-11708 | Mozilla Firefox and Thunderbird | 2022-05-23 | 55.8% | Unknown |
| CVE-2019-11707 | Mozilla Firefox and Thunderbird | 2022-05-23 | 37.6% | Unknown |
| CVE-2019-1130 | Microsoft Windows | 2022-05-23 | 1.7% | Known |
| CVE-2019-0880 | Microsoft Windows | 2022-05-23 | 2.3% | Unknown |
| CVE-2019-0703 | Microsoft Windows | 2022-05-23 | 9.6% | Unknown |
| CVE-2019-0676 | Microsoft Internet Explorer | 2022-05-23 | 8.1% | Unknown |
| CVE-2018-8589 | Microsoft Win32k | 2022-05-23 | 3.0% | Unknown |
| CVE-2018-5002 | Adobe Flash Player | 2022-05-23 | 25.0% | Unknown |
| CVE-2022-30525 | Zyxel Multiple Firewalls | 2022-05-16 | 99.9% | Unknown |
| CVE-2022-22947 | VMware Spring Cloud Gateway | 2022-05-16 | 98.2% | Unknown |
| CVE-2022-1388 | F5 BIG-IP | 2022-05-10 | 99.9% | Known |
| CVE-2021-1789 | Apple Multiple Products | 2022-05-04 | 13.9% | Unknown |
| CVE-2019-8506 | Apple Multiple Products | 2022-05-04 | 16.1% | Unknown |
| CVE-2014-4113 | Microsoft Win32k | 2022-05-04 | 86.9% | Unknown |
| CVE-2014-0322 | Microsoft Internet Explorer | 2022-05-04 | 85.1% | Unknown |
| CVE-2014-0160 | OpenSSL OpenSSL | 2022-05-04 | 99.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.