Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2017-5689 — Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
Intel products contain a vulnerability which can allow attackers to perform privilege escalation.
|
Intel | Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability | Jan 28, 2022 | Jul 28, 2022 | |
|
CVE-2020-0787 — Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.
|
Microsoft | Windows | Jan 28, 2022 | Jul 28, 2022 | Ransomware |
|
CVE-2020-5722 — Grandstream Networks UCM6200 Series SQL Injection Vulnerability
Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.
|
Grandstream | UCM6200 | Jan 28, 2022 | Jul 28, 2022 | |
|
CVE-2021-20038 — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution.
|
SonicWall | SMA 100 Appliances | Jan 28, 2022 | Feb 11, 2022 | Ransomware |
|
CVE-2022-22587 — Apple Memory Corruption Vulnerability
Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges.
|
Apple | iOS and macOS | Jan 28, 2022 | Feb 11, 2022 | |
|
CVE-2006-1547 — Apache Struts 1 ActionForm Denial-of-Service Vulnerability
ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS).
|
Apache | Struts 1 | Jan 21, 2022 | Jul 21, 2022 | |
|
CVE-2012-0391 — Apache Struts 2 Improper Input Validation Vulnerability
The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution.
|
Apache | Struts 2 | Jan 21, 2022 | Jul 21, 2022 | |
|
CVE-2018-8453 — Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.
|
Microsoft | Win32k | Jan 21, 2022 | Jul 21, 2022 | Ransomware |
|
CVE-2021-35247 — SolarWinds Serv-U Improper Input Validation Vulnerability
SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization.
|
SolarWinds | Serv-U | Jan 21, 2022 | Feb 4, 2022 | |
|
CVE-2020-11978 — Apache Airflow Command Injection
A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow.
|
Apache | Airflow | Jan 18, 2022 | Jul 18, 2022 |
Intel products contain a vulnerability which can allow attackers to perform privilege escalation.
Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability · Jan 28, 2022
Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.
Windows · Jan 28, 2022
Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. Exploitation can allow for code execution as root.
UCM6200 · Jan 28, 2022
SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution.
SMA 100 Appliances · Jan 28, 2022
Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges.
iOS and macOS · Jan 28, 2022
ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS).
Struts 1 · Jan 21, 2022
The ExceptionDelegator component in Apache Struts 2 before 2.2.3.1 contains an improper input validation vulnerability that allows for remote code execution.
Struts 2 · Jan 21, 2022
Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.
Win32k · Jan 21, 2022
SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization.
Serv-U · Jan 21, 2022
A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow.
Airflow · Jan 18, 2022