Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2022-22960 — VMware Multiple Products Privilege Escalation Vulnerability
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
|
VMware | Multiple Products | Apr 15, 2022 | May 6, 2022 | |
|
CVE-2022-22954 — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
|
VMware | Workspace ONE Access and Identity Manager | Apr 14, 2022 | May 5, 2022 | Ransomware |
|
CVE-2014-9163 — Adobe Flash Player Stack-Based Buffer Overflow Vulnerability
Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.
|
Adobe | Flash Player | Apr 13, 2022 | May 4, 2022 | |
|
CVE-2015-0311 — Adobe Flash Player Remote Code Execution Vulnerability
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.
|
Adobe | Flash Player | Apr 13, 2022 | May 4, 2022 | |
|
CVE-2015-0313 — Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.
|
Adobe | Flash Player | Apr 13, 2022 | May 4, 2022 | |
|
CVE-2015-2502 — Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).
|
Microsoft | Internet Explorer | Apr 13, 2022 | May 4, 2022 | |
|
CVE-2015-3113 — Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
|
Adobe | Flash Player | Apr 13, 2022 | May 4, 2022 | |
|
CVE-2015-5122 — Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
|
Adobe | Flash Player | Apr 13, 2022 | May 4, 2022 | |
|
CVE-2015-5123 — Adobe Flash Player Use-After-Free Vulnerability
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
|
Adobe | Flash Player | Apr 13, 2022 | May 4, 2022 | |
|
CVE-2018-20753 — Kaseya VSA Remote Code Execution Vulnerability
Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.
|
Kaseya | Virtual System/Server Administrator (VSA) | Apr 13, 2022 | May 4, 2022 | Ransomware |
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.
Multiple Products · Apr 15, 2022
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.
Workspace ONE Access and Identity Manager · Apr 14, 2022
Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.
Flash Player · Apr 13, 2022
Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.
Flash Player · Apr 13, 2022
Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.
Flash Player · Apr 13, 2022
Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).
Internet Explorer · Apr 13, 2022
Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.
Flash Player · Apr 13, 2022
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
Flash Player · Apr 13, 2022
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).
Flash Player · Apr 13, 2022
Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.
Virtual System/Server Administrator (VSA) · Apr 13, 2022