Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).
35exploited in the last 30 days
13critical (CVSS ≥ 9)
0used in ransomware
1769in the KEV catalog
CVE-2022-27518Severity under analysisadded on 12/13/2022
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
Citrix · Application Delivery Controller (ADC) and Gateway · CWE-664
Citrix Application Delivery Controller (ADC) and Gateway, when configured with SAML SP or IdP configuration, contain an authentication bypass vulnerability that allows an attacker to execute code as administrator.
CVE-2022-26501Severity under analysisRansomwareadded on 12/13/2022
The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.
CVE-2022-26500Severity under analysisRansomwareadded on 12/13/2022
The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.
CVE-2022-4262Severity under analysisadded on 12/05/2022
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8 · CWE-122, CWE-843
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
CVE-2022-4135Severity under analysisadded on 11/28/2022
Google Chromium GPU Heap Buffer Overflow Vulnerability
Google · Chromium GPU · CWE-787
Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
CVE-2021-35587Severity under analysisadded on 11/28/2022
Oracle Fusion Middleware Access Manager allows an unauthenticated attacker with network access via HTTP to takeover the Access Manager product.
CVE-2022-41049Severity under analysisadded on 11/14/2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Microsoft · Windows · CWE-274
Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.
CVE-2022-41128Severity under analysisadded on 11/08/2022
Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
Microsoft · Windows · CWE-787
Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution.
CVE-2022-41125Severity under analysisadded on 11/08/2022
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability
Microsoft · Windows · CWE-787
Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.
CVE-2022-41091Severity under analysisRansomwareadded on 11/08/2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Microsoft · Windows · CWE-863
Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.
CVE-2022-41073Severity under analysisRansomwareadded on 11/08/2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft · Windows · CWE-787
Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.
CVE-2022-3723Severity under analysisadded on 10/28/2022
Google Chromium V8 Type Confusion Vulnerability
Google · Chromium V8 · CWE-122, CWE-843
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
CVE-2020-3433Severity under analysisRansomwareadded on 10/24/2022
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
Cisco · AnyConnect Secure · CWE-427
Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.
CVE-2020-3153Severity under analysisRansomwareadded on 10/24/2022
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
Cisco · AnyConnect Secure · CWE-427
Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.
CVE-2021-3493Severity under analysisadded on 10/20/2022
Linux Kernel Privilege Escalation Vulnerability
Linux · Kernel · CWE-862
The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.
CVE-2022-41033Severity under analysisadded on 10/11/2022
Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability
Microsoft · Windows COM+ Event System Service · CWE-843
Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation.
CVE-2022-40684Severity under analysisRansomwareadded on 10/11/2022
Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.
CVE-2022-41082Severity under analysisRansomwareadded on 09/30/2022
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft · Exchange Server · CWE-502
Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.
CVE-2022-41040Severity under analysisRansomwareadded on 09/30/2022
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
Microsoft · Exchange Server · CWE-918
Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.
CVE-2022-36804Severity under analysisadded on 09/30/2022
Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
Atlassian · Bitbucket Server and Data Center · CWE-78, CWE-88, CWE-158
Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request.
CVE-2013-6282Severity under analysisadded on 09/15/2022
Linux Kernel Improper Input Validation Vulnerability
Linux · Kernel · CWE-20
The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.
CVE-2013-2596Severity under analysisadded on 09/15/2022
Linux Kernel Integer Overflow Vulnerability
Linux · Kernel · CWE-189
Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation.
CVE-2013-2094Severity under analysisadded on 09/15/2022
Linux Kernel Privilege Escalation Vulnerability
Linux · Kernel · CWE-189
Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.
CVE-2010-2568Severity under analysisadded on 09/15/2022
Microsoft Windows Remote Code Execution Vulnerability
Microsoft · Windows · CWE-20
Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user.
Want to know if your environment is exposed?
We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.
Bit is an AI and can make mistakes. Do not share passwords or personal data. Conversations are not stored. Learn more
Your privacy matters
We use essential cookies to make the site work and, with your permission, Google cookies to measure traffic and show ads — including personalized ones — that keep the tools free. You can change your choice at any time under “Cookie preferences” in the footer. Learn more.
