Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2017-0148 — Microsoft SMBv1 Server Remote Code Execution Vulnerability
The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.
|
Microsoft | SMBv1 server | Apr 6, 2022 | Apr 27, 2022 | Ransomware |
|
CVE-2021-31166 — Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.
|
Microsoft | HTTP Protocol Stack | Apr 6, 2022 | Apr 27, 2022 | |
|
CVE-2021-3156 — Sudo Heap-Based Buffer Overflow Vulnerability
Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.
|
Sudo | Sudo | Apr 6, 2022 | Apr 27, 2022 | |
|
CVE-2021-45382 — D-Link Multiple Routers Remote Code Execution Vulnerability
A remote code execution vulnerability exists in all series H/W revisions routers via the DDNS function in ncc2 binary file.
|
D-Link | Multiple Routers | Apr 4, 2022 | Apr 25, 2022 | |
|
CVE-2022-22674 — Apple macOS Out-of-Bounds Read Vulnerability
macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.
|
Apple | macOS | Apr 4, 2022 | Apr 25, 2022 | |
|
CVE-2022-22675 — Apple macOS Out-of-Bounds Write Vulnerability
macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.
|
Apple | macOS | Apr 4, 2022 | Apr 25, 2022 | |
|
CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
|
VMware | Spring Framework | Apr 4, 2022 | Apr 25, 2022 | |
|
CVE-2018-10561 — Dasan GPON Routers Authentication Bypass Vulnerability
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution.
|
Dasan | Gigabit Passive Optical Network (GPON) Routers | Mar 31, 2022 | Apr 21, 2022 | |
|
CVE-2018-10562 — Dasan GPON Routers Command Injection Vulnerability
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.
|
Dasan | Gigabit Passive Optical Network (GPON) Routers | Mar 31, 2022 | Apr 21, 2022 | Ransomware |
|
CVE-2021-21551 — Dell dbutil Driver Insufficient Access Control Vulnerability
Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure.
|
Dell | dbutil Driver | Mar 31, 2022 | Apr 21, 2022 |
The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.
SMBv1 server · Apr 6, 2022
Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.
HTTP Protocol Stack · Apr 6, 2022
Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.
Sudo · Apr 6, 2022
A remote code execution vulnerability exists in all series H/W revisions routers via the DDNS function in ncc2 binary file.
Multiple Routers · Apr 4, 2022
macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.
macOS · Apr 4, 2022
macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.
macOS · Apr 4, 2022
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
Spring Framework · Apr 4, 2022
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10562, exploitation can allow an attacker to perform remote code execution.
Gigabit Passive Optical Network (GPON) Routers · Mar 31, 2022
Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution.
Gigabit Passive Optical Network (GPON) Routers · Mar 31, 2022
Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure.
dbutil Driver · Mar 31, 2022