Vulnerabilities added to KEV in September 2022
Added24
Ransomware-linked6
Vendors16
By vendor
4
3
3
2
1
1
1
1
1
1
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2022-41082 | Microsoft Exchange Server | 2022-09-30 | 99.9% | Known |
| CVE-2022-41040 | Microsoft Exchange Server | 2022-09-30 | 99.9% | Known |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center | 2022-09-30 | 99.1% | Unknown |
| CVE-2022-3236 | Sophos Firewall | 2022-09-23 | 98.9% | Unknown |
| CVE-2022-35405 | Zoho ManageEngine | 2022-09-22 | 99.9% | Unknown |
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service | 2022-09-15 | 3.2% | Unknown |
| CVE-2013-6282 | Linux Kernel | 2022-09-15 | 39.7% | Unknown |
| CVE-2013-2597 | Code Aurora ACDB Audio Driver | 2022-09-15 | 1.5% | Unknown |
| CVE-2013-2596 | Linux Kernel | 2022-09-15 | 3.2% | Unknown |
| CVE-2013-2094 | Linux Kernel | 2022-09-15 | 47.7% | Unknown |
| CVE-2010-2568 | Microsoft Windows | 2022-09-15 | 91.3% | Unknown |
| CVE-2022-37969 | Microsoft Windows | 2022-09-14 | 28.2% | Known |
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS | 2022-09-14 | 5.6% | Unknown |
| CVE-2022-3075 | Google Chromium Mojo | 2022-09-08 | 5.8% | Unknown |
| CVE-2022-27593 | QNAP Photo Station | 2022-09-08 | 87.9% | Known |
| CVE-2022-26258 | D-Link DIR-820L | 2022-09-08 | 91.9% | Unknown |
| CVE-2020-9934 | Apple iOS, iPadOS, and macOS | 2022-09-08 | 3.2% | Unknown |
| CVE-2018-7445 | MikroTik RouterOS | 2022-09-08 | 60.8% | Unknown |
| CVE-2018-6530 | D-Link Multiple Routers | 2022-09-08 | 96.6% | Known |
| CVE-2018-2628 | Oracle WebLogic Server | 2022-09-08 | 99.9% | Unknown |
| CVE-2018-13374 | Fortinet FortiOS and FortiADC | 2022-09-08 | 38.0% | Known |
| CVE-2017-5521 | NETGEAR Multiple Devices | 2022-09-08 | 89.2% | Unknown |
| CVE-2011-4723 | D-Link DIR-300 Router | 2022-09-08 | 3.0% | Unknown |
| CVE-2011-1823 | Android Android OS | 2022-09-08 | 41.3% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.