--- title: "CISA KEV catalog, page 11 | CubePath" description: "The CISA Known Exploited Vulnerabilities catalog: CVEs with evidence of exploitation in the wild, newest first, with the date added and the federal due date." language: en source: https://cubepath.com/security/cve/kev?page=11 --- # CISA KEV catalog, page 11 | CubePath | CVE | Vulnerability | Added | Federal due date | Ransomware | | ------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------- | ------------ | ---------------- | ---------- | | [CVE-2021-4034](https://cubepath.com/security/cve/CVE-2021-4034) | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Red Hat / Polkit | Jun 27, 2022 | Jul 18, 2022 | Known | | [CVE-2022-29499](https://cubepath.com/security/cve/CVE-2022-29499) | Mitel MiVoice Connect Data Validation Vulnerability Mitel / MiVoice Connect | Jun 27, 2022 | Jul 18, 2022 | Known | | [CVE-2022-30190](https://cubepath.com/security/cve/CVE-2022-30190) | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Microsoft / Windows | Jun 14, 2022 | Jul 5, 2022 | Known | | [CVE-2016-2386](https://cubepath.com/security/cve/CVE-2016-2386) | SAP NetWeaver SQL Injection Vulnerability SAP / NetWeaver | Jun 9, 2022 | Jun 30, 2022 | | | [CVE-2016-2388](https://cubepath.com/security/cve/CVE-2016-2388) | SAP NetWeaver Information Disclosure Vulnerability SAP / NetWeaver | Jun 9, 2022 | Jun 30, 2022 | | | [CVE-2021-38163](https://cubepath.com/security/cve/CVE-2021-38163) | SAP NetWeaver Unrestricted File Upload Vulnerability SAP / NetWeaver | Jun 9, 2022 | Jun 30, 2022 | | | [CVE-2006-2492](https://cubepath.com/security/cve/CVE-2006-2492) | Microsoft Word Malformed Object Pointer Vulnerability Microsoft / Word | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2007-5659](https://cubepath.com/security/cve/CVE-2007-5659) | Adobe Acrobat and Reader Buffer Overflow Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2008-0655](https://cubepath.com/security/cve/CVE-2008-0655) | Adobe Acrobat and Reader Unspecified Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2009-0557](https://cubepath.com/security/cve/CVE-2009-0557) | Microsoft Office Object Record Corruption Vulnerability Microsoft / Office | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2009-0563](https://cubepath.com/security/cve/CVE-2009-0563) | Microsoft Office Buffer Overflow Vulnerability Microsoft / Office | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2009-1862](https://cubepath.com/security/cve/CVE-2009-1862) | Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability Adobe / Acrobat and Reader, Flash Player | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2009-3953](https://cubepath.com/security/cve/CVE-2009-3953) | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2009-4324](https://cubepath.com/security/cve/CVE-2009-4324) | Adobe Acrobat and Reader Use-After-Free Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2010-1297](https://cubepath.com/security/cve/CVE-2010-1297) | Adobe Flash Player Memory Corruption Vulnerability Adobe / Flash Player | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2010-2572](https://cubepath.com/security/cve/CVE-2010-2572) | Microsoft PowerPoint Buffer Overflow Vulnerability Microsoft / PowerPoint | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2010-2883](https://cubepath.com/security/cve/CVE-2010-2883) | Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2011-0609](https://cubepath.com/security/cve/CVE-2011-0609) | Adobe Flash Player Unspecified Vulnerability Adobe / Flash Player | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2011-2462](https://cubepath.com/security/cve/CVE-2011-2462) | Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability Adobe / Reader and Acrobat | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2012-0151](https://cubepath.com/security/cve/CVE-2012-0151) | Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability Microsoft / Windows | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2012-0754](https://cubepath.com/security/cve/CVE-2012-0754) | Adobe Flash Player Memory Corruption Vulnerability Adobe / Flash Player | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2012-0767](https://cubepath.com/security/cve/CVE-2012-0767) | Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability Adobe / Flash Player | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2012-1889](https://cubepath.com/security/cve/CVE-2012-1889) | Microsoft XML Core Services Memory Corruption Vulnerability Microsoft / XML Core Services | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2012-4969](https://cubepath.com/security/cve/CVE-2012-4969) | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2012-5054](https://cubepath.com/security/cve/CVE-2012-5054) | Adobe Flash Player Integer Overflow Vulnerability Adobe / Flash Player | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2013-1331](https://cubepath.com/security/cve/CVE-2013-1331) | Microsoft Office Buffer Overflow Vulnerability Microsoft / Office | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2016-1646](https://cubepath.com/security/cve/CVE-2016-1646) | Google Chromium V8 Out-of-Bounds Read Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2016-5198](https://cubepath.com/security/cve/CVE-2016-5198) | Google Chromium V8 Out-of-Bounds Memory Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2017-5030](https://cubepath.com/security/cve/CVE-2017-5030) | Google Chromium V8 Memory Corruption Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2017-5070](https://cubepath.com/security/cve/CVE-2017-5070) | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2017-6862](https://cubepath.com/security/cve/CVE-2017-6862) | NETGEAR Multiple Devices Buffer Overflow Vulnerability NETGEAR / Multiple Devices | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2018-17463](https://cubepath.com/security/cve/CVE-2018-17463) | Google Chromium V8 Remote Code Execution Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2018-17480](https://cubepath.com/security/cve/CVE-2018-17480) | Google Chromium V8 Out-of-Bounds Write Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2018-4990](https://cubepath.com/security/cve/CVE-2018-4990) | Adobe Acrobat and Reader Double Free Vulnerability Adobe / Acrobat and Reader | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2018-6065](https://cubepath.com/security/cve/CVE-2018-6065) | Google Chromium V8 Integer Overflow Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2019-15271](https://cubepath.com/security/cve/CVE-2019-15271) | Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability Cisco / RV Series Routers | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2019-5825](https://cubepath.com/security/cve/CVE-2019-5825) | Google Chromium V8 Out-of-Bounds Write Vulnerability Google / Chromium V8 | Jun 8, 2022 | Jun 22, 2022 | | | [CVE-2019-7192](https://cubepath.com/security/cve/CVE-2019-7192) | QNAP Photo Station Improper Access Control Vulnerability QNAP / Photo Station | Jun 8, 2022 | Jun 22, 2022 | Known | | [CVE-2019-7193](https://cubepath.com/security/cve/CVE-2019-7193) | QNAP QTS Improper Input Validation Vulnerability QNAP / QTS | Jun 8, 2022 | Jun 22, 2022 | Known | | [CVE-2019-7194](https://cubepath.com/security/cve/CVE-2019-7194) | QNAP Photo Station Path Traversal Vulnerability QNAP / Photo Station | Jun 8, 2022 | Jun 22, 2022 | Known | | [CVE-2019-7195](https://cubepath.com/security/cve/CVE-2019-7195) | QNAP Photo Station Path Traversal Vulnerability QNAP / Photo Station | Jun 8, 2022 | Jun 22, 2022 | Known | | [CVE-2022-26134](https://cubepath.com/security/cve/CVE-2022-26134) | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability Atlassian / Confluence Server/Data Center | Jun 2, 2022 | Jun 6, 2022 | Known | | [CVE-2010-0738](https://cubepath.com/security/cve/CVE-2010-0738) | Red Hat JBoss Authentication Bypass Vulnerability Red Hat / JBoss | May 25, 2022 | Jun 15, 2022 | Known | | [CVE-2010-0840](https://cubepath.com/security/cve/CVE-2010-0840) | Oracle JRE Unspecified Vulnerability Oracle / Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | | | [CVE-2010-1428](https://cubepath.com/security/cve/CVE-2010-1428) | Red Hat JBoss Information Disclosure Vulnerability Red Hat / JBoss | May 25, 2022 | Jun 15, 2022 | Known | | [CVE-2012-1710](https://cubepath.com/security/cve/CVE-2012-1710) | Oracle Fusion Middleware Unspecified Vulnerability Oracle / Fusion Middleware | May 25, 2022 | Jun 15, 2022 | Known | | [CVE-2013-0074](https://cubepath.com/security/cve/CVE-2013-0074) | Microsoft Silverlight Double Dereference Vulnerability Microsoft / Silverlight | May 25, 2022 | Jun 15, 2022 | Known | | [CVE-2013-0422](https://cubepath.com/security/cve/CVE-2013-0422) | Oracle JRE Remote Code Execution Vulnerability Oracle / Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | Known | | [CVE-2013-0431](https://cubepath.com/security/cve/CVE-2013-0431) | Oracle JRE Sandbox Bypass Vulnerability Oracle / Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | Known | | [CVE-2013-2423](https://cubepath.com/security/cve/CVE-2013-2423) | Oracle JRE Unspecified Vulnerability Oracle / Java Runtime Environment (JRE) | May 25, 2022 | Jun 15, 2022 | | | [CVE-2013-3896](https://cubepath.com/security/cve/CVE-2013-3896) | Microsoft Silverlight Information Disclosure Vulnerability Microsoft / Silverlight | May 25, 2022 | Jun 15, 2022 | | | [CVE-2013-3993](https://cubepath.com/security/cve/CVE-2013-3993) | IBM InfoSphere BigInsights Invalid Input Vulnerability IBM / InfoSphere BigInsights | May 25, 2022 | Jun 15, 2022 | Known | | [CVE-2013-7331](https://cubepath.com/security/cve/CVE-2013-7331) | Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft / Internet Explorer | May 25, 2022 | Jun 15, 2022 | | | [CVE-2014-0546](https://cubepath.com/security/cve/CVE-2014-0546) | Adobe Reader and Acrobat Sandbox Bypass Vulnerability Adobe / Reader and Acrobat | May 25, 2022 | Jun 15, 2022 | | | [CVE-2014-2817](https://cubepath.com/security/cve/CVE-2014-2817) | Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft / Internet Explorer | May 25, 2022 | Jun 15, 2022 | | | [CVE-2014-3153](https://cubepath.com/security/cve/CVE-2014-3153) | Linux Kernel Privilege Escalation Vulnerability Linux / Kernel | May 25, 2022 | Jun 15, 2022 | | | [CVE-2014-4077](https://cubepath.com/security/cve/CVE-2014-4077) | Microsoft IME Japanese Privilege Escalation Vulnerability Microsoft / Input Method Editor (IME) Japanese | May 25, 2022 | Jun 15, 2022 | | | [CVE-2014-4123](https://cubepath.com/security/cve/CVE-2014-4123) | Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft / Internet Explorer | May 25, 2022 | Jun 15, 2022 | | | [CVE-2014-4148](https://cubepath.com/security/cve/CVE-2014-4148) | Microsoft Windows Remote Code Execution Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | | | [CVE-2014-8439](https://cubepath.com/security/cve/CVE-2014-8439) | Adobe Flash Player Dereferenced Pointer Vulnerability Adobe / Flash Player | May 25, 2022 | Jun 15, 2022 | | | [CVE-2015-0016](https://cubepath.com/security/cve/CVE-2015-0016) | Microsoft Windows TS WebProxy Directory Traversal Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | | | [CVE-2015-0071](https://cubepath.com/security/cve/CVE-2015-0071) | Microsoft Internet Explorer ASLR Bypass Vulnerability Microsoft / Internet Explorer | May 25, 2022 | Jun 15, 2022 | | | [CVE-2015-0310](https://cubepath.com/security/cve/CVE-2015-0310) | Adobe Flash Player ASLR Bypass Vulnerability Adobe / Flash Player | May 25, 2022 | Jun 15, 2022 | | | [CVE-2015-1671](https://cubepath.com/security/cve/CVE-2015-1671) | Microsoft Windows Remote Code Execution Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | | | [CVE-2015-1769](https://cubepath.com/security/cve/CVE-2015-1769) | Microsoft Windows Mount Manager Privilege Escalation Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | | | [CVE-2015-2360](https://cubepath.com/security/cve/CVE-2015-2360) | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | May 25, 2022 | Jun 15, 2022 | | | [CVE-2015-2425](https://cubepath.com/security/cve/CVE-2015-2425) | Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft / Internet Explorer | May 25, 2022 | Jun 15, 2022 | | | [CVE-2015-4495](https://cubepath.com/security/cve/CVE-2015-4495) | Mozilla Firefox Security Feature Bypass Vulnerability Mozilla / Firefox | May 25, 2022 | Jun 15, 2022 | | | [CVE-2015-6175](https://cubepath.com/security/cve/CVE-2015-6175) | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | | | [CVE-2015-8651](https://cubepath.com/security/cve/CVE-2015-8651) | Adobe Flash Player Integer Overflow Vulnerability Adobe / Flash Player | May 25, 2022 | Jun 15, 2022 | | | [CVE-2016-0034](https://cubepath.com/security/cve/CVE-2016-0034) | Microsoft Silverlight Runtime Remote Code Execution Vulnerability Microsoft / Silverlight | May 25, 2022 | Jun 15, 2022 | Known | | [CVE-2016-0984](https://cubepath.com/security/cve/CVE-2016-0984) | Adobe Flash Player and AIR Use-After-Free Vulnerability Adobe / Flash Player and AIR | May 25, 2022 | Jun 15, 2022 | | | [CVE-2016-1010](https://cubepath.com/security/cve/CVE-2016-1010) | Adobe Flash Player and AIR Integer Overflow Vulnerability Adobe / Flash Player and AIR | May 25, 2022 | Jun 15, 2022 | | | [CVE-2016-3393](https://cubepath.com/security/cve/CVE-2016-3393) | Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | | | [CVE-2016-7256](https://cubepath.com/security/cve/CVE-2016-7256) | Microsoft Windows Open Type Font Remote Code Execution Vulnerability Microsoft / Windows | May 25, 2022 | Jun 15, 2022 | | | [CVE-2019-3010](https://cubepath.com/security/cve/CVE-2019-3010) | Oracle Solaris Privilege Escalation Vulnerability Oracle / Solaris | May 25, 2022 | Jun 15, 2022 | | | [CVE-2016-0162](https://cubepath.com/security/cve/CVE-2016-0162) | Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft / Internet Explorer | May 24, 2022 | Jun 14, 2022 | | | [CVE-2016-3298](https://cubepath.com/security/cve/CVE-2016-3298) | Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability Microsoft / Internet Explorer | May 24, 2022 | Jun 14, 2022 | | | [CVE-2016-3351](https://cubepath.com/security/cve/CVE-2016-3351) | Microsoft Internet Explorer and Edge Information Disclosure Vulnerability Microsoft / Internet Explorer and Edge | May 24, 2022 | Jun 14, 2022 | Known | | [CVE-2016-4655](https://cubepath.com/security/cve/CVE-2016-4655) | Apple iOS Information Disclosure Vulnerability Apple / iOS | May 24, 2022 | Jun 14, 2022 | | | [CVE-2016-4656](https://cubepath.com/security/cve/CVE-2016-4656) | Apple iOS Memory Corruption Vulnerability Apple / iOS | May 24, 2022 | Jun 14, 2022 | | | [CVE-2016-4657](https://cubepath.com/security/cve/CVE-2016-4657) | Apple iOS Webkit Memory Corruption Vulnerability Apple / iOS | May 24, 2022 | Jun 14, 2022 | | | [CVE-2016-6366](https://cubepath.com/security/cve/CVE-2016-6366) | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability Cisco / Adaptive Security Appliance (ASA) | May 24, 2022 | Jun 14, 2022 | | | [CVE-2016-6367](https://cubepath.com/security/cve/CVE-2016-6367) | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability Cisco / Adaptive Security Appliance (ASA) | May 24, 2022 | Jun 14, 2022 | | | [CVE-2017-0005](https://cubepath.com/security/cve/CVE-2017-0005) | Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability Microsoft / Windows | May 24, 2022 | Jun 14, 2022 | | | [CVE-2017-0022](https://cubepath.com/security/cve/CVE-2017-0022) | Microsoft XML Core Services Information Disclosure Vulnerability Microsoft / XML Core Services | May 24, 2022 | Jun 14, 2022 | | | [CVE-2017-0147](https://cubepath.com/security/cve/CVE-2017-0147) | Microsoft Windows SMBv1 Information Disclosure Vulnerability Microsoft / SMBv1 server | May 24, 2022 | Jun 14, 2022 | Known | | [CVE-2017-0149](https://cubepath.com/security/cve/CVE-2017-0149) | Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft / Internet Explorer | May 24, 2022 | Jun 14, 2022 | | | [CVE-2017-0210](https://cubepath.com/security/cve/CVE-2017-0210) | Microsoft Internet Explorer Privilege Escalation Vulnerability Microsoft / Internet Explorer | May 24, 2022 | Jun 14, 2022 | | | [CVE-2017-18362](https://cubepath.com/security/cve/CVE-2017-18362) | Kaseya VSA SQL Injection Vulnerability Kaseya / Virtual System/Server Administrator (VSA) | May 24, 2022 | Jun 14, 2022 | Known | | [CVE-2017-8291](https://cubepath.com/security/cve/CVE-2017-8291) | Artifex Ghostscript Type Confusion Vulnerability Artifex / Ghostscript | May 24, 2022 | Jun 14, 2022 | | | [CVE-2017-8543](https://cubepath.com/security/cve/CVE-2017-8543) | Microsoft Windows Search Remote Code Execution Vulnerability Microsoft / Windows | May 24, 2022 | Jun 14, 2022 | | | [CVE-2018-19943](https://cubepath.com/security/cve/CVE-2018-19943) | QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP / Network Attached Storage (NAS) | May 24, 2022 | Jun 14, 2022 | Known | | [CVE-2018-19949](https://cubepath.com/security/cve/CVE-2018-19949) | QNAP NAS File Station Command Injection Vulnerability QNAP / Network Attached Storage (NAS) | May 24, 2022 | Jun 14, 2022 | Known | | [CVE-2018-19953](https://cubepath.com/security/cve/CVE-2018-19953) | QNAP NAS File Station Cross-Site Scripting Vulnerability QNAP / Network Attached Storage (NAS) | May 24, 2022 | Jun 14, 2022 | Known | | [CVE-2018-8611](https://cubepath.com/security/cve/CVE-2018-8611) | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | May 24, 2022 | Jun 14, 2022 | | | [CVE-2018-5002](https://cubepath.com/security/cve/CVE-2018-5002) | Adobe Flash Player Stack-based Buffer Overflow Vulnerability Adobe / Flash Player | May 23, 2022 | Jun 13, 2022 | | | [CVE-2018-8589](https://cubepath.com/security/cve/CVE-2018-8589) | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | May 23, 2022 | Jun 13, 2022 | | | [CVE-2019-0676](https://cubepath.com/security/cve/CVE-2019-0676) | Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft / Internet Explorer | May 23, 2022 | Jun 13, 2022 | | | [CVE-2019-0703](https://cubepath.com/security/cve/CVE-2019-0703) | Microsoft Windows SMB Information Disclosure Vulnerability Microsoft / Windows | May 23, 2022 | Jun 13, 2022 | | [Newer](https://cubepath.com/security/cve/kev?page=10) Page 11 of 18 [Older](https://cubepath.com/security/cve/kev?page=12) Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. [Sources and licenses](https://cubepath.com/security/cve/legal)