Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2022-26143 — MiCollab, MiVoice Business Express Access Control Vulnerability
A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.
|
Mitel | MiCollab, MiVoice Business Express | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2022-26318 — WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code.
|
WatchGuard | Firebox and XTM Appliances | Mar 25, 2022 | Apr 15, 2022 | |
|
CVE-2015-2546 — Microsoft Win32k Memory Corruption Vulnerability
The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.
|
Microsoft | Win32k | Mar 15, 2022 | Apr 5, 2022 | Ransomware |
|
CVE-2016-3309 — Microsoft Windows Kernel Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
|
Microsoft | Windows | Mar 15, 2022 | Apr 5, 2022 | Ransomware |
|
CVE-2017-0101 — Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.
|
Microsoft | Windows | Mar 15, 2022 | Apr 5, 2022 | Ransomware |
|
CVE-2018-8120 — Microsoft Win32k Privilege Escalation Vulnerability
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
|
Microsoft | Win32k | Mar 15, 2022 | Apr 5, 2022 | Ransomware |
|
CVE-2019-0543 — Microsoft Windows Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
|
Microsoft | Windows | Mar 15, 2022 | Apr 5, 2022 | Ransomware |
|
CVE-2019-0841 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
|
Microsoft | Windows | Mar 15, 2022 | Apr 5, 2022 | Ransomware |
|
CVE-2019-1064 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
|
Microsoft | Windows | Mar 15, 2022 | Apr 5, 2022 | Ransomware |
|
CVE-2019-1069 — Microsoft Task Scheduler Privilege Escalation Vulnerability
A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.
|
Microsoft | Task Scheduler | Mar 15, 2022 | Apr 5, 2022 | Ransomware |
A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.
MiCollab, MiVoice Business Express · Mar 25, 2022
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code.
Firebox and XTM Appliances · Mar 25, 2022
The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.
Win32k · Mar 15, 2022
A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.
Windows · Mar 15, 2022
A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.
Windows · Mar 15, 2022
A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.
Win32k · Mar 15, 2022
A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Windows · Mar 15, 2022
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Windows · Mar 15, 2022
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Windows · Mar 15, 2022
A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.
Task Scheduler · Mar 15, 2022