Vulnerabilities added to KEV in August 2022
Added23
Ransomware-linked6
Vendors14
By vendor
3
3
3
2
2
2
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2022-26352 | dotCMS dotCMS | 2022-08-25 | 91.2% | Known |
| CVE-2022-24706 | Apache CouchDB | 2022-08-25 | 92.5% | Unknown |
| CVE-2022-24112 | Apache APISIX | 2022-08-25 | 96.0% | Unknown |
| CVE-2022-22963 | VMware Tanzu Spring Cloud | 2022-08-25 | 99.9% | Unknown |
| CVE-2022-2294 | WebRTC WebRTC | 2022-08-25 | 70.4% | Known |
| CVE-2021-39226 | Grafana Labs Grafana | 2022-08-25 | 99.9% | Unknown |
| CVE-2021-38406 | Delta Electronics DOPSoft 2 | 2022-08-25 | 76.4% | Unknown |
| CVE-2021-31010 | Apple iOS, macOS, watchOS | 2022-08-25 | 3.6% | Unknown |
| CVE-2020-36193 | PEAR Archive_Tar | 2022-08-25 | 70.5% | Unknown |
| CVE-2020-28949 | PEAR Archive_Tar | 2022-08-25 | 84.5% | Unknown |
| CVE-2022-0028 | Palo Alto Networks PAN-OS | 2022-08-22 | 2.5% | Unknown |
| CVE-2022-32894 | Apple iOS and macOS | 2022-08-18 | 3.2% | Unknown |
| CVE-2022-32893 | Apple iOS and macOS | 2022-08-18 | 9.9% | Unknown |
| CVE-2022-2856 | Google Chromium Intents | 2022-08-18 | 4.5% | Unknown |
| CVE-2022-26923 | Microsoft Active Directory | 2022-08-18 | 83.5% | Unknown |
| CVE-2022-22536 | SAP Multiple Products | 2022-08-18 | 97.9% | Unknown |
| CVE-2022-21971 | Microsoft Windows | 2022-08-18 | 53.9% | Unknown |
| CVE-2017-15944 | Palo Alto Networks PAN-OS | 2022-08-18 | 98.3% | Unknown |
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 91.8% | Known |
| CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-11 | 98.6% | Known |
| CVE-2022-34713 | Microsoft Windows | 2022-08-09 | 67.7% | Unknown |
| CVE-2022-30333 | RARLAB UnRAR | 2022-08-09 | 99.2% | Known |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) | 2022-08-04 | 93.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.