Added to KEV in 2022-01

CVE-2022-22587 – Apple iOS and macOS (added 2022-01-28)
CVE-2021-20038 – SonicWall SMA 100 Appliances (added 2022-01-28)
CVE-2020-5722 – Grandstream UCM6200 (added 2022-01-28)
CVE-2020-0787 – Microsoft Windows (added 2022-01-28)
CVE-2017-5689 – Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability (added 2022-01-28)
CVE-2014-7169 – GNU Bourne-Again Shell (Bash) (added 2022-01-28)
CVE-2014-6271 – GNU Bourne-Again Shell (Bash) (added 2022-01-28)
CVE-2014-1776 – Microsoft Internet Explorer (added 2022-01-28)
CVE-2021-35247 – SolarWinds Serv-U (added 2022-01-21)
CVE-2018-8453 – Microsoft Win32k (added 2022-01-21)
CVE-2012-0391 – Apache Struts 2 (added 2022-01-21)
CVE-2006-1547 – Apache Struts 1 (added 2022-01-21)
CVE-2021-40870 – Aviatrix Aviatrix Controller (added 2022-01-18)
CVE-2021-33766 – Microsoft Exchange Server (added 2022-01-18)
CVE-2021-32648 – October CMS October CMS (added 2022-01-18)
CVE-2021-25298 – Nagios Nagios XI (added 2022-01-18)
CVE-2021-25297 – Nagios Nagios XI (added 2022-01-18)
CVE-2021-25296 – Nagios Nagios XI (added 2022-01-18)
CVE-2021-22991 – F5 BIG-IP Traffic Management Microkernel (added 2022-01-18)
CVE-2021-21975 – VMware vRealize Operations Manager API (added 2022-01-18)
CVE-2021-21315 – Npm package System Information Library for Node.JS (added 2022-01-18)
CVE-2020-14864 – Oracle Intelligence Enterprise Edition (added 2022-01-18)
CVE-2020-13927 – Apache Airflow's Experimental API (added 2022-01-18)
CVE-2020-13671 – Drupal Drupal core (added 2022-01-18)
CVE-2020-11978 – Apache Airflow (added 2022-01-18)
CVE-2021-36260 – Hikvision Security cameras web server (added 2022-01-10)
CVE-2021-27860 – FatPipe WARP, IPVPN, and MPVPN software (added 2022-01-10)
CVE-2021-22017 – VMware vCenter Server (added 2022-01-10)
CVE-2020-6572 – Google Chrome Media (added 2022-01-10)
CVE-2019-9670 – Synacor Zimbra Collaboration Suite (ZCS) (added 2022-01-10)
CVE-2019-7609 – Elastic Kibana (added 2022-01-10)
CVE-2019-2725 – Oracle WebLogic Server (added 2022-01-10)
CVE-2019-1579 – Palo Alto Networks PAN-OS (added 2022-01-10)
CVE-2019-1458 – Microsoft Win32k (added 2022-01-10)
CVE-2019-10149 – Exim Mail Transfer Agent (MTA) (added 2022-01-10)
CVE-2018-13383 – Fortinet FortiOS and FortiProxy (added 2022-01-10)
CVE-2018-13382 – Fortinet FortiOS and FortiProxy (added 2022-01-10)
CVE-2017-1000486 – Primetek Primefaces Application (added 2022-01-10)
CVE-2015-7450 – IBM WebSphere Application Server and Server Hypervisor Edition (added 2022-01-10)
CVE-2013-3900 – Microsoft WinVerifyTrust function (added 2022-01-10)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).