Added to KEV in 2022-03

CVE-2022-26871 – Trend Micro Apex Central (added 2022-03-31)
CVE-2022-1040 – Sophos Firewall (added 2022-03-31)
CVE-2021-34484 – Microsoft Windows (added 2022-03-31)
CVE-2021-28799 – QNAP Network Attached Storage (NAS) (added 2022-03-31)
CVE-2021-21551 – Dell dbutil Driver (added 2022-03-31)
CVE-2018-10562 – Dasan Gigabit Passive Optical Network (GPON) Routers (added 2022-03-31)
CVE-2018-10561 – Dasan Gigabit Passive Optical Network (GPON) Routers (added 2022-03-31)
CVE-2022-1096 – Google Chromium V8 (added 2022-03-28)
CVE-2022-0543 – Redis Debian-specific Redis Servers (added 2022-03-28)
CVE-2021-38646 – Microsoft Office (added 2022-03-28)
CVE-2021-34486 – Microsoft Windows (added 2022-03-28)
CVE-2021-26085 – Atlassian Confluence Server (added 2022-03-28)
CVE-2021-20028 – SonicWall Secure Remote Access (SRA) (added 2022-03-28)
CVE-2019-7483 – SonicWall SMA100 (added 2022-03-28)
CVE-2018-8440 – Microsoft Windows (added 2022-03-28)
CVE-2018-8406 – Microsoft DirectX Graphics Kernel (DXGKRNL) (added 2022-03-28)
CVE-2018-8405 – Microsoft DirectX Graphics Kernel (DXGKRNL) (added 2022-03-28)
CVE-2017-0213 – Microsoft Windows (added 2022-03-28)
CVE-2017-0059 – Microsoft Internet Explorer (added 2022-03-28)
CVE-2017-0037 – Microsoft Edge and Internet Explorer (added 2022-03-28)
CVE-2016-7201 – Microsoft Edge (added 2022-03-28)
CVE-2016-7200 – Microsoft Edge (added 2022-03-28)
CVE-2016-0189 – Microsoft Internet Explorer (added 2022-03-28)
CVE-2016-0151 – Microsoft Client-Server Run-time Subsystem (CSRSS) (added 2022-03-28)
CVE-2016-0040 – Microsoft Windows (added 2022-03-28)
CVE-2015-2426 – Microsoft Windows (added 2022-03-28)
CVE-2015-2419 – Microsoft Internet Explorer (added 2022-03-28)
CVE-2015-1770 – Microsoft Office (added 2022-03-28)
CVE-2013-3660 – Microsoft Win32k (added 2022-03-28)
CVE-2013-2729 – Adobe Reader and Acrobat (added 2022-03-28)
CVE-2013-2551 – Microsoft Internet Explorer (added 2022-03-28)
CVE-2013-2465 – Oracle Java SE (added 2022-03-28)
CVE-2013-1690 – Mozilla Firefox and Thunderbird (added 2022-03-28)
CVE-2012-5076 – Oracle Java SE (added 2022-03-28)
CVE-2012-2539 – Microsoft Word (added 2022-03-28)
CVE-2012-2034 – Adobe Flash Player (added 2022-03-28)
CVE-2012-0518 – Oracle Fusion Middleware (added 2022-03-28)
CVE-2011-2005 – Microsoft Ancillary Function Driver (afd.sys) (added 2022-03-28)
CVE-2010-4398 – Microsoft Windows (added 2022-03-28)
CVE-2022-26318 – WatchGuard Firebox and XTM Appliances (added 2022-03-25)
CVE-2022-26143 – Mitel MiCollab, MiVoice Business Express (added 2022-03-25)
CVE-2022-21999 – Microsoft Windows (added 2022-03-25)
CVE-2021-42237 – Sitecore XP (added 2022-03-25)
CVE-2021-22941 – Citrix ShareFile (added 2022-03-25)
CVE-2020-9377 – D-Link DIR-610 Devices (added 2022-03-25)
CVE-2020-9054 – Zyxel Multiple Network-Attached Storage (NAS) Devices (added 2022-03-25)
CVE-2020-7247 – OpenBSD OpenSMTPD (added 2022-03-25)
CVE-2020-5410 – VMware Tanzu Spring Cloud Configuration (Config) Server (added 2022-03-25)
CVE-2020-25223 – Sophos SG UTM (added 2022-03-25)
CVE-2020-2506 – QNAP Systems Helpdesk (added 2022-03-25)
CVE-2020-2021 – Palo Alto Networks PAN-OS (added 2022-03-25)
CVE-2020-1956 – Apache Kylin (added 2022-03-25)
CVE-2020-1631 – Juniper Junos OS (added 2022-03-25)
CVE-2019-6340 – Drupal Core (added 2022-03-25)
CVE-2019-2616 – Oracle BI Publisher (Formerly XML Publisher) (added 2022-03-25)
CVE-2019-16920 – D-Link Multiple Routers (added 2022-03-25)
CVE-2019-15107 – Webmin Webmin (added 2022-03-25)
CVE-2019-12991 – Citrix SD-WAN and NetScaler (added 2022-03-25)
CVE-2019-12989 – Citrix SD-WAN and NetScaler (added 2022-03-25)
CVE-2019-11043 – PHP FastCGI Process Manager (FPM) (added 2022-03-25)
CVE-2019-10068 – Kentico Xperience (added 2022-03-25)
CVE-2019-1003030 – Jenkins Matrix Project Plugin (added 2022-03-25)
CVE-2019-0903 – Microsoft Graphics Device Interface (GDI) (added 2022-03-25)
CVE-2018-8414 – Microsoft Windows (added 2022-03-25)
CVE-2018-8373 – Microsoft Internet Explorer Scripting Engine (added 2022-03-25)
CVE-2018-6961 – VMware SD-WAN Edge (added 2022-03-25)
CVE-2018-14839 – LG N1A1 NAS (added 2022-03-25)
CVE-2018-1273 – VMware Tanzu Spring Data Commons (added 2022-03-25)
CVE-2018-11138 – Quest KACE System Management Appliance (added 2022-03-25)
CVE-2018-0147 – Cisco Secure Access Control System (ACS) (added 2022-03-25)
CVE-2018-0125 – Cisco VPN Routers (added 2022-03-25)
CVE-2017-6334 – NETGEAR DGN2200 Devices (added 2022-03-25)
CVE-2017-6316 – Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server (added 2022-03-25)
CVE-2017-3881 – Cisco IOS and IOS XE (added 2022-03-25)
CVE-2017-12617 – Apache Tomcat (added 2022-03-25)
CVE-2017-12615 – Apache Tomcat (added 2022-03-25)
CVE-2017-0146 – Microsoft Windows (added 2022-03-25)
CVE-2016-7892 – Adobe Flash Player (added 2022-03-25)
CVE-2016-4171 – Adobe Flash Player (added 2022-03-25)
CVE-2016-1555 – NETGEAR Wireless Access Point (WAP) Devices (added 2022-03-25)
CVE-2016-11021 – D-Link DCS-930L Devices (added 2022-03-25)
CVE-2016-10174 – NETGEAR WNR2000v5 Router (added 2022-03-25)
CVE-2016-0752 – Rails Ruby on Rails (added 2022-03-25)
CVE-2015-4068 – Arcserve Unified Data Protection (UDP) (added 2022-03-25)
CVE-2015-3035 – TP-Link Multiple Archer Devices (added 2022-03-25)
CVE-2015-1427 – Elastic Elasticsearch (added 2022-03-25)
CVE-2015-1187 – D-Link and TRENDnet Multiple Devices (added 2022-03-25)
CVE-2015-0666 – Cisco Prime Data Center Network Manager (DCNM) (added 2022-03-25)
CVE-2014-6332 – Microsoft Windows (added 2022-03-25)
CVE-2014-6324 – Microsoft Kerberos Key Distribution Center (KDC) (added 2022-03-25)
CVE-2014-6287 – Rejetto HTTP File Server (HFS) (added 2022-03-25)
CVE-2014-3120 – Elastic Elasticsearch (added 2022-03-25)
CVE-2014-0130 – Rails Ruby on Rails (added 2022-03-25)
CVE-2013-5223 – D-Link DSL-2760U (added 2022-03-25)
CVE-2013-4810 – Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management (added 2022-03-25)
CVE-2013-2251 – Apache Struts (added 2022-03-25)
CVE-2012-1823 – PHP PHP (added 2022-03-25)
CVE-2010-4345 – Exim Exim (added 2022-03-25)
CVE-2010-4344 – Exim Exim (added 2022-03-25)
CVE-2010-3035 – Cisco IOS XR (added 2022-03-25)
CVE-2010-2861 – Adobe ColdFusion (added 2022-03-25)
CVE-2009-2055 – Cisco IOS XR (added 2022-03-25)
CVE-2009-1151 – phpMyAdmin phpMyAdmin (added 2022-03-25)
CVE-2009-0927 – Adobe Reader and Acrobat (added 2022-03-25)
CVE-2005-2773 – Hewlett Packard (HP) OpenView Network Node Manager (added 2022-03-25)
CVE-2020-5135 – SonicWall SonicOS (added 2022-03-15)
CVE-2019-1405 – Microsoft Windows (added 2022-03-15)
CVE-2019-1322 – Microsoft Windows (added 2022-03-15)
CVE-2019-1315 – Microsoft Windows (added 2022-03-15)
CVE-2019-1253 – Microsoft Windows (added 2022-03-15)
CVE-2019-1132 – Microsoft Win32k (added 2022-03-15)
CVE-2019-1129 – Microsoft Windows (added 2022-03-15)
CVE-2019-1069 – Microsoft Task Scheduler (added 2022-03-15)
CVE-2019-1064 – Microsoft Windows (added 2022-03-15)
CVE-2019-0841 – Microsoft Windows (added 2022-03-15)
CVE-2019-0543 – Microsoft Windows (added 2022-03-15)
CVE-2018-8120 – Microsoft Win32k (added 2022-03-15)
CVE-2017-0101 – Microsoft Windows (added 2022-03-15)
CVE-2016-3309 – Microsoft Windows (added 2022-03-15)
CVE-2015-2546 – Microsoft Win32k (added 2022-03-15)
CVE-2022-26486 – Mozilla Firefox (added 2022-03-07)
CVE-2022-26485 – Mozilla Firefox (added 2022-03-07)
CVE-2021-21973 – VMware vCenter Server and Cloud Foundation (added 2022-03-07)
CVE-2020-8218 – Pulse Secure Pulse Connect Secure (added 2022-03-07)
CVE-2019-11581 – Atlassian Jira Server and Data Center (added 2022-03-07)
CVE-2017-6077 – NETGEAR Wireless Router DGN2200 (added 2022-03-07)
CVE-2016-6277 – NETGEAR Multiple Routers (added 2022-03-07)
CVE-2013-0631 – Adobe ColdFusion (added 2022-03-07)
CVE-2013-0629 – Adobe ColdFusion (added 2022-03-07)
CVE-2013-0625 – Adobe ColdFusion (added 2022-03-07)
CVE-2009-3960 – Adobe BlazeDS (added 2022-03-07)
CVE-2022-20708 – Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers (added 2022-03-03)
CVE-2022-20703 – Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers (added 2022-03-03)
CVE-2022-20701 – Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers (added 2022-03-03)
CVE-2022-20700 – Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers (added 2022-03-03)
CVE-2022-20699 – Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers (added 2022-03-03)
CVE-2021-41379 – Microsoft Windows (added 2022-03-03)
CVE-2020-1938 – Apache Tomcat (added 2022-03-03)
CVE-2020-11899 – Treck TCP/IP stack IPv6 (added 2022-03-03)
CVE-2019-16928 – Exim Exim Internet Mailer (added 2022-03-03)
CVE-2019-1652 – Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers (added 2022-03-03)
CVE-2019-1297 – Microsoft Excel (added 2022-03-03)
CVE-2018-8581 – Microsoft Exchange Server (added 2022-03-03)
CVE-2018-8298 – ChakraCore ChakraCore scripting engine (added 2022-03-03)
CVE-2018-0180 – Cisco IOS Software (added 2022-03-03)
CVE-2018-0179 – Cisco IOS Software (added 2022-03-03)
CVE-2018-0175 – Cisco IOS, XR, and XE Software (added 2022-03-03)
CVE-2018-0174 – Cisco IOS XE Software (added 2022-03-03)
CVE-2018-0173 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2018-0172 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2018-0167 – Cisco IOS, XR, and XE Software (added 2022-03-03)
CVE-2018-0161 – Cisco IOS Software (added 2022-03-03)
CVE-2018-0159 – Cisco IOS Software and Cisco IOS XE Software (added 2022-03-03)
CVE-2018-0158 – Cisco IOS Software and Cisco IOS XE Software (added 2022-03-03)
CVE-2018-0156 – Cisco IOS Software and Cisco IOS XE Software (added 2022-03-03)
CVE-2018-0155 – Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches (added 2022-03-03)
CVE-2018-0154 – Cisco IOS Software (added 2022-03-03)
CVE-2018-0151 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2017-8540 – Microsoft Malware Protection Engine (added 2022-03-03)
CVE-2017-6744 – Cisco IOS software (added 2022-03-03)
CVE-2017-6743 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2017-6740 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2017-6739 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2017-6738 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2017-6737 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2017-6736 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2017-6663 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2017-6627 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2017-12319 – Cisco IOS XE Software (added 2022-03-03)
CVE-2017-12240 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2017-12238 – Cisco Catalyst 6800 Series Switches (added 2022-03-03)
CVE-2017-12237 – Cisco IOS and IOS XE Software (added 2022-03-03)
CVE-2017-12235 – Cisco IOS software (added 2022-03-03)
CVE-2017-12234 – Cisco IOS software (added 2022-03-03)
CVE-2017-12233 – Cisco IOS software (added 2022-03-03)
CVE-2017-12232 – Cisco IOS software (added 2022-03-03)
CVE-2017-12231 – Cisco IOS software (added 2022-03-03)
CVE-2017-11826 – Microsoft Office (added 2022-03-03)
CVE-2017-11292 – Adobe Flash Player (added 2022-03-03)
CVE-2017-0261 – Microsoft Office (added 2022-03-03)
CVE-2017-0001 – Microsoft Graphics Device Interface (GDI) (added 2022-03-03)
CVE-2016-8562 – Siemens SIMATIC CP (added 2022-03-03)
CVE-2016-7855 – Adobe Flash Player (added 2022-03-03)
CVE-2016-7262 – Microsoft Excel (added 2022-03-03)
CVE-2016-7193 – Microsoft Office (added 2022-03-03)
CVE-2016-5195 – Linux Kernel (added 2022-03-03)
CVE-2016-4117 – Adobe Flash Player (added 2022-03-03)
CVE-2016-1019 – Adobe Flash Player (added 2022-03-03)
CVE-2016-0099 – Microsoft Windows (added 2022-03-03)
CVE-2015-7645 – Adobe Flash Player (added 2022-03-03)
CVE-2015-5119 – Adobe Flash Player (added 2022-03-03)
CVE-2015-4902 – Oracle Java SE (added 2022-03-03)
CVE-2015-3043 – Adobe Flash Player (added 2022-03-03)
CVE-2015-2590 – Oracle Java SE (added 2022-03-03)
CVE-2015-2545 – Microsoft Office (added 2022-03-03)
CVE-2015-2424 – Microsoft PowerPoint (added 2022-03-03)
CVE-2015-2387 – Microsoft ATM Font Driver (added 2022-03-03)
CVE-2015-1701 – Microsoft Win32k (added 2022-03-03)
CVE-2015-1642 – Microsoft Office (added 2022-03-03)
CVE-2014-4114 – Microsoft Windows (added 2022-03-03)
CVE-2014-0496 – Adobe Reader and Acrobat (added 2022-03-03)
CVE-2013-5065 – Microsoft Windows (added 2022-03-03)
CVE-2013-3897 – Microsoft Internet Explorer (added 2022-03-03)
CVE-2013-3346 – Adobe Reader and Acrobat (added 2022-03-03)
CVE-2013-1675 – Mozilla Firefox (added 2022-03-03)
CVE-2013-1347 – Microsoft Internet Explorer (added 2022-03-03)
CVE-2013-0641 – Adobe Reader (added 2022-03-03)
CVE-2013-0640 – Adobe Reader and Acrobat (added 2022-03-03)
CVE-2013-0632 – Adobe ColdFusion (added 2022-03-03)
CVE-2012-4681 – Oracle Java SE (added 2022-03-03)
CVE-2012-1856 – Microsoft Office (added 2022-03-03)
CVE-2012-1723 – Oracle Java SE (added 2022-03-03)
CVE-2012-1535 – Adobe Flash Player (added 2022-03-03)
CVE-2012-0507 – Oracle Java SE (added 2022-03-03)
CVE-2011-3544 – Oracle Java SE JDK and JRE (added 2022-03-03)
CVE-2011-1889 – Microsoft Forefront Threat Management Gateway (TMG) (added 2022-03-03)
CVE-2011-0611 – Adobe Flash Player (added 2022-03-03)
CVE-2010-3333 – Microsoft Office (added 2022-03-03)
CVE-2010-0232 – Microsoft Windows (added 2022-03-03)
CVE-2010-0188 – Adobe Reader and Acrobat (added 2022-03-03)
CVE-2009-3129 – Microsoft Excel (added 2022-03-03)
CVE-2009-1123 – Microsoft Windows (added 2022-03-03)
CVE-2008-3431 – Oracle VirtualBox (added 2022-03-03)
CVE-2008-2992 – Adobe Acrobat and Reader (added 2022-03-03)
CVE-2004-0210 – Microsoft Windows (added 2022-03-03)
CVE-2002-0367 – Microsoft Windows (added 2022-03-03)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).