--- title: "CISA KEV catalog, page 12 | CubePath" description: "The CISA Known Exploited Vulnerabilities catalog: CVEs with evidence of exploitation in the wild, newest first, with the date added and the federal due date." language: en source: https://cubepath.com/security/cve/kev?page=12 --- # CISA KEV catalog, page 12 | CubePath | CVE | Vulnerability | Added | Federal due date | Ransomware | | ---------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ | ------------ | ---------------- | ---------- | | [CVE-2019-0880](https://cubepath.com/security/cve/CVE-2019-0880) | Microsoft Windows Privilege Escalation Vulnerability Microsoft / Windows | May 23, 2022 | Jun 13, 2022 | | | [CVE-2019-1130](https://cubepath.com/security/cve/CVE-2019-1130) | Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability Microsoft / Windows | May 23, 2022 | Jun 13, 2022 | Known | | [CVE-2019-11707](https://cubepath.com/security/cve/CVE-2019-11707) | Mozilla Firefox and Thunderbird Type Confusion Vulnerability Mozilla / Firefox and Thunderbird | May 23, 2022 | Jun 13, 2022 | | | [CVE-2019-11708](https://cubepath.com/security/cve/CVE-2019-11708) | Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability Mozilla / Firefox and Thunderbird | May 23, 2022 | Jun 13, 2022 | | | [CVE-2019-13720](https://cubepath.com/security/cve/CVE-2019-13720) | Google Chrome WebAudio Use-After-Free Vulnerability Google / Chrome WebAudio | May 23, 2022 | Jun 13, 2022 | | | [CVE-2019-1385](https://cubepath.com/security/cve/CVE-2019-1385) | Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability Microsoft / Windows | May 23, 2022 | Jun 13, 2022 | Known | | [CVE-2019-18426](https://cubepath.com/security/cve/CVE-2019-18426) | WhatsApp Cross-Site Scripting Vulnerability Meta Platforms / WhatsApp | May 23, 2022 | Jun 13, 2022 | | | [CVE-2019-5786](https://cubepath.com/security/cve/CVE-2019-5786) | Google Chrome Blink Use-After-Free Vulnerability Google / Chrome Blink | May 23, 2022 | Jun 13, 2022 | | | [CVE-2019-7286](https://cubepath.com/security/cve/CVE-2019-7286) | Apple Multiple Products Memory Corruption Vulnerability Apple / Multiple Products | May 23, 2022 | Jun 13, 2022 | | | [CVE-2019-7287](https://cubepath.com/security/cve/CVE-2019-7287) | Apple iOS Memory Corruption Vulnerability Apple / iOS | May 23, 2022 | Jun 13, 2022 | | | [CVE-2019-8720](https://cubepath.com/security/cve/CVE-2019-8720) | WebKitGTK Memory Corruption Vulnerability WebKitGTK / WebKitGTK | May 23, 2022 | Jun 13, 2022 | | | [CVE-2020-0638](https://cubepath.com/security/cve/CVE-2020-0638) | Microsoft Update Notification Manager Privilege Escalation Vulnerability Microsoft / Update Notification Manager | May 23, 2022 | Jun 13, 2022 | Known | | [CVE-2020-1027](https://cubepath.com/security/cve/CVE-2020-1027) | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | May 23, 2022 | Jun 13, 2022 | | | [CVE-2021-0920](https://cubepath.com/security/cve/CVE-2021-0920) | Android Kernel Race Condition Vulnerability Android / Kernel | May 23, 2022 | Jun 13, 2022 | | | [CVE-2021-1048](https://cubepath.com/security/cve/CVE-2021-1048) | Android Kernel Use-After-Free Vulnerability Android / Kernel | May 23, 2022 | Jun 13, 2022 | | | [CVE-2021-30883](https://cubepath.com/security/cve/CVE-2021-30883) | Apple Multiple Products Memory Corruption Vulnerability Apple / Multiple Products | May 23, 2022 | Jun 13, 2022 | | | [CVE-2022-20821](https://cubepath.com/security/cve/CVE-2022-20821) | Cisco IOS XR Open Port Vulnerability Cisco / IOS XR | May 23, 2022 | Jun 13, 2022 | | | [CVE-2022-22947](https://cubepath.com/security/cve/CVE-2022-22947) | VMware Spring Cloud Gateway Code Injection Vulnerability VMware / Spring Cloud Gateway | May 16, 2022 | Jun 6, 2022 | | | [CVE-2022-30525](https://cubepath.com/security/cve/CVE-2022-30525) | Zyxel Multiple Firewalls OS Command Injection Vulnerability Zyxel / Multiple Firewalls | May 16, 2022 | Jun 6, 2022 | | | [CVE-2022-1388](https://cubepath.com/security/cve/CVE-2022-1388) | F5 BIG-IP Missing Authentication Vulnerability F5 / BIG-IP | May 10, 2022 | May 31, 2022 | Known | | [CVE-2014-0160](https://cubepath.com/security/cve/CVE-2014-0160) | OpenSSL Information Disclosure Vulnerability OpenSSL / OpenSSL | May 4, 2022 | May 25, 2022 | | | [CVE-2014-0322](https://cubepath.com/security/cve/CVE-2014-0322) | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | May 4, 2022 | May 25, 2022 | | | [CVE-2014-4113](https://cubepath.com/security/cve/CVE-2014-4113) | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | May 4, 2022 | May 25, 2022 | | | [CVE-2019-8506](https://cubepath.com/security/cve/CVE-2019-8506) | Apple Multiple Products Type Confusion Vulnerability Apple / Multiple Products | May 4, 2022 | May 25, 2022 | | | [CVE-2021-1789](https://cubepath.com/security/cve/CVE-2021-1789) | Apple Multiple Products Type Confusion Vulnerability Apple / Multiple Products | May 4, 2022 | May 25, 2022 | | | [CVE-2019-1003029](https://cubepath.com/security/cve/CVE-2019-1003029) | Jenkins Script Security Plugin Sandbox Bypass Vulnerability Jenkins / Script Security Plugin | Apr 25, 2022 | May 16, 2022 | | | [CVE-2021-40450](https://cubepath.com/security/cve/CVE-2021-40450) | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Apr 25, 2022 | May 16, 2022 | | | [CVE-2021-41357](https://cubepath.com/security/cve/CVE-2021-41357) | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Apr 25, 2022 | May 16, 2022 | | | [CVE-2022-0847](https://cubepath.com/security/cve/CVE-2022-0847) | Linux Kernel Privilege Escalation Vulnerability Linux / Kernel | Apr 25, 2022 | May 16, 2022 | | | [CVE-2022-21919](https://cubepath.com/security/cve/CVE-2022-21919) | Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft / Windows | Apr 25, 2022 | May 16, 2022 | | | [CVE-2022-26904](https://cubepath.com/security/cve/CVE-2022-26904) | Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft / Windows | Apr 25, 2022 | May 16, 2022 | | | [CVE-2022-29464](https://cubepath.com/security/cve/CVE-2022-29464) | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability WSO2 / Multiple Products | Apr 25, 2022 | May 16, 2022 | Known | | [CVE-2018-6882](https://cubepath.com/security/cve/CVE-2018-6882) | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability Synacor / Zimbra Collaboration Suite (ZCS) | Apr 19, 2022 | May 10, 2022 | Known | | [CVE-2019-3568](https://cubepath.com/security/cve/CVE-2019-3568) | WhatsApp VOIP Stack Buffer Overflow Vulnerability Meta Platforms / WhatsApp | Apr 19, 2022 | May 10, 2022 | | | [CVE-2022-22718](https://cubepath.com/security/cve/CVE-2022-22718) | Microsoft Windows Print Spooler Privilege Escalation Vulnerability Microsoft / Windows | Apr 19, 2022 | May 10, 2022 | | | [CVE-2007-3010](https://cubepath.com/security/cve/CVE-2007-3010) | Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability Alcatel / OmniPCX Enterprise | Apr 15, 2022 | May 6, 2022 | | | [CVE-2010-5330](https://cubepath.com/security/cve/CVE-2010-5330) | Ubiquiti AirOS Command Injection Vulnerability Ubiquiti / AirOS | Apr 15, 2022 | May 6, 2022 | | | [CVE-2014-0780](https://cubepath.com/security/cve/CVE-2014-0780) | InduSoft Web Studio NTWebServer Directory Traversal Vulnerability InduSoft / Web Studio | Apr 15, 2022 | May 6, 2022 | | | [CVE-2016-4523](https://cubepath.com/security/cve/CVE-2016-4523) | Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability Trihedral / VTScada (formerly VTS) | Apr 15, 2022 | May 6, 2022 | | | [CVE-2018-7841](https://cubepath.com/security/cve/CVE-2018-7841) | Schneider Electric U.motion Builder SQL Injection Vulnerability Schneider Electric / U.motion Builder | Apr 15, 2022 | May 6, 2022 | | | [CVE-2019-16057](https://cubepath.com/security/cve/CVE-2019-16057) | D-Link DNS-320 Remote Code Execution Vulnerability D-Link / DNS-320 Storage Device | Apr 15, 2022 | May 6, 2022 | Known | | [CVE-2019-3929](https://cubepath.com/security/cve/CVE-2019-3929) | Crestron Multiple Products Command Injection Vulnerability Crestron / Multiple Products | Apr 15, 2022 | May 6, 2022 | | | [CVE-2022-1364](https://cubepath.com/security/cve/CVE-2022-1364) | Google Chromium V8 Type Confusion Vulnerability Google / Chromium V8 | Apr 15, 2022 | May 6, 2022 | | | [CVE-2022-22960](https://cubepath.com/security/cve/CVE-2022-22960) | VMware Multiple Products Privilege Escalation Vulnerability VMware / Multiple Products | Apr 15, 2022 | May 6, 2022 | | | [CVE-2022-22954](https://cubepath.com/security/cve/CVE-2022-22954) | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability VMware / Workspace ONE Access and Identity Manager | Apr 14, 2022 | May 5, 2022 | Known | | [CVE-2014-9163](https://cubepath.com/security/cve/CVE-2014-9163) | Adobe Flash Player Stack-Based Buffer Overflow Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | | | [CVE-2015-0311](https://cubepath.com/security/cve/CVE-2015-0311) | Adobe Flash Player Remote Code Execution Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | | | [CVE-2015-0313](https://cubepath.com/security/cve/CVE-2015-0313) | Adobe Flash Player Use-After-Free Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | | | [CVE-2015-2502](https://cubepath.com/security/cve/CVE-2015-2502) | Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft / Internet Explorer | Apr 13, 2022 | May 4, 2022 | | | [CVE-2015-3113](https://cubepath.com/security/cve/CVE-2015-3113) | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | | | [CVE-2015-5122](https://cubepath.com/security/cve/CVE-2015-5122) | Adobe Flash Player Use-After-Free Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | | | [CVE-2015-5123](https://cubepath.com/security/cve/CVE-2015-5123) | Adobe Flash Player Use-After-Free Vulnerability Adobe / Flash Player | Apr 13, 2022 | May 4, 2022 | | | [CVE-2018-20753](https://cubepath.com/security/cve/CVE-2018-20753) | Kaseya VSA Remote Code Execution Vulnerability Kaseya / Virtual System/Server Administrator (VSA) | Apr 13, 2022 | May 4, 2022 | Known | | [CVE-2018-7602](https://cubepath.com/security/cve/CVE-2018-7602) | Drupal Core Remote Code Execution Vulnerability Drupal / Core | Apr 13, 2022 | May 4, 2022 | Known | | [CVE-2022-24521](https://cubepath.com/security/cve/CVE-2022-24521) | Microsoft Windows CLFS Driver Privilege Escalation Vulnerability Microsoft / Windows | Apr 13, 2022 | May 4, 2022 | Known | | [CVE-2017-11317](https://cubepath.com/security/cve/CVE-2017-11317) | Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability Telerik / User Interface (UI) for ASP.NET AJAX | Apr 11, 2022 | May 2, 2022 | | | [CVE-2020-2509](https://cubepath.com/security/cve/CVE-2020-2509) | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability QNAP / QNAP Network-Attached Storage (NAS) | Apr 11, 2022 | May 2, 2022 | | | [CVE-2021-22600](https://cubepath.com/security/cve/CVE-2021-22600) | Linux Kernel Privilege Escalation Vulnerability Linux / Kernel | Apr 11, 2022 | May 2, 2022 | | | [CVE-2021-27852](https://cubepath.com/security/cve/CVE-2021-27852) | Checkbox Survey Deserialization of Untrusted Data Vulnerability Checkbox / Checkbox Survey | Apr 11, 2022 | May 2, 2022 | | | [CVE-2021-39793](https://cubepath.com/security/cve/CVE-2021-39793) | Google Pixel Out-of-Bounds Write Vulnerability Google / Pixel | Apr 11, 2022 | May 2, 2022 | | | [CVE-2021-42278](https://cubepath.com/security/cve/CVE-2021-42278) | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft / Active Directory | Apr 11, 2022 | May 2, 2022 | Known | | [CVE-2021-42287](https://cubepath.com/security/cve/CVE-2021-42287) | Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Microsoft / Active Directory | Apr 11, 2022 | May 2, 2022 | Known | | [CVE-2022-23176](https://cubepath.com/security/cve/CVE-2022-23176) | WatchGuard Firebox and XTM Privilege Escalation Vulnerability WatchGuard / Firebox and XTM | Apr 11, 2022 | May 2, 2022 | | | [CVE-2017-0148](https://cubepath.com/security/cve/CVE-2017-0148) | Microsoft SMBv1 Server Remote Code Execution Vulnerability Microsoft / SMBv1 server | Apr 6, 2022 | Apr 27, 2022 | Known | | [CVE-2021-31166](https://cubepath.com/security/cve/CVE-2021-31166) | Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability Microsoft / HTTP Protocol Stack | Apr 6, 2022 | Apr 27, 2022 | | | [CVE-2021-3156](https://cubepath.com/security/cve/CVE-2021-3156) | Sudo Heap-Based Buffer Overflow Vulnerability Sudo / Sudo | Apr 6, 2022 | Apr 27, 2022 | | | [CVE-2021-45382](https://cubepath.com/security/cve/CVE-2021-45382) | D-Link Multiple Routers Remote Code Execution Vulnerability D-Link / Multiple Routers | Apr 4, 2022 | Apr 25, 2022 | | | [CVE-2022-22674](https://cubepath.com/security/cve/CVE-2022-22674) | Apple macOS Out-of-Bounds Read Vulnerability Apple / macOS | Apr 4, 2022 | Apr 25, 2022 | | | [CVE-2022-22675](https://cubepath.com/security/cve/CVE-2022-22675) | Apple macOS Out-of-Bounds Write Vulnerability Apple / macOS | Apr 4, 2022 | Apr 25, 2022 | | | [CVE-2022-22965](https://cubepath.com/security/cve/CVE-2022-22965) | Spring Framework JDK 9+ Remote Code Execution Vulnerability VMware / Spring Framework | Apr 4, 2022 | Apr 25, 2022 | | | [CVE-2018-10561](https://cubepath.com/security/cve/CVE-2018-10561) | Dasan GPON Routers Authentication Bypass Vulnerability Dasan / Gigabit Passive Optical Network (GPON) Routers | Mar 31, 2022 | Apr 21, 2022 | | | [CVE-2018-10562](https://cubepath.com/security/cve/CVE-2018-10562) | Dasan GPON Routers Command Injection Vulnerability Dasan / Gigabit Passive Optical Network (GPON) Routers | Mar 31, 2022 | Apr 21, 2022 | Known | | [CVE-2021-21551](https://cubepath.com/security/cve/CVE-2021-21551) | Dell dbutil Driver Insufficient Access Control Vulnerability Dell / dbutil Driver | Mar 31, 2022 | Apr 21, 2022 | | | [CVE-2021-28799](https://cubepath.com/security/cve/CVE-2021-28799) | QNAP NAS Improper Authorization Vulnerability QNAP / Network Attached Storage (NAS) | Mar 31, 2022 | Apr 21, 2022 | Known | | [CVE-2021-34484](https://cubepath.com/security/cve/CVE-2021-34484) | Microsoft Windows User Profile Service Privilege Escalation Vulnerability Microsoft / Windows | Mar 31, 2022 | Apr 21, 2022 | | | [CVE-2022-1040](https://cubepath.com/security/cve/CVE-2022-1040) | Sophos Firewall Authentication Bypass Vulnerability Sophos / Firewall | Mar 31, 2022 | Apr 21, 2022 | | | [CVE-2022-26871](https://cubepath.com/security/cve/CVE-2022-26871) | Trend Micro Apex Central Arbitrary File Upload Vulnerability Trend Micro / Apex Central | Mar 31, 2022 | Apr 21, 2022 | | | [CVE-2010-4398](https://cubepath.com/security/cve/CVE-2010-4398) | Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability Microsoft / Windows | Mar 28, 2022 | Apr 21, 2022 | | | [CVE-2011-2005](https://cubepath.com/security/cve/CVE-2011-2005) | Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability Microsoft / Ancillary Function Driver (afd.sys) | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2012-0518](https://cubepath.com/security/cve/CVE-2012-0518) | Oracle Fusion Middleware Unspecified Vulnerability Oracle / Fusion Middleware | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2012-2034](https://cubepath.com/security/cve/CVE-2012-2034) | Adobe Flash Player Memory Corruption Vulnerability Adobe / Flash Player | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2012-2539](https://cubepath.com/security/cve/CVE-2012-2539) | Microsoft Word Remote Code Execution Vulnerability Microsoft / Word | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2012-5076](https://cubepath.com/security/cve/CVE-2012-5076) | Oracle Java SE Sandbox Bypass Vulnerability Oracle / Java SE | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2013-1690](https://cubepath.com/security/cve/CVE-2013-1690) | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability Mozilla / Firefox and Thunderbird | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2013-2465](https://cubepath.com/security/cve/CVE-2013-2465) | Oracle Java SE Unspecified Vulnerability Oracle / Java SE | Mar 28, 2022 | Apr 18, 2022 | Known | | [CVE-2013-2551](https://cubepath.com/security/cve/CVE-2013-2551) | Microsoft Internet Explorer Use-After-Free Vulnerability Microsoft / Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | Known | | [CVE-2013-2729](https://cubepath.com/security/cve/CVE-2013-2729) | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability Adobe / Reader and Acrobat | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2013-3660](https://cubepath.com/security/cve/CVE-2013-3660) | Microsoft Win32k Privilege Escalation Vulnerability Microsoft / Win32k | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2015-1770](https://cubepath.com/security/cve/CVE-2015-1770) | Microsoft Office Uninitialized Memory Use Vulnerability Microsoft / Office | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2015-2419](https://cubepath.com/security/cve/CVE-2015-2419) | Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft / Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2015-2426](https://cubepath.com/security/cve/CVE-2015-2426) | Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability Microsoft / Windows | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2016-0040](https://cubepath.com/security/cve/CVE-2016-0040) | Microsoft Windows Kernel Privilege Escalation Vulnerability Microsoft / Windows | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2016-0151](https://cubepath.com/security/cve/CVE-2016-0151) | Microsoft Windows CSRSS Security Feature Bypass Vulnerability Microsoft / Client-Server Run-time Subsystem (CSRSS) | Mar 28, 2022 | Apr 18, 2022 | Known | | [CVE-2016-0189](https://cubepath.com/security/cve/CVE-2016-0189) | Microsoft Internet Explorer Memory Corruption Vulnerability Microsoft / Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | Known | | [CVE-2016-7200](https://cubepath.com/security/cve/CVE-2016-7200) | Microsoft Edge Memory Corruption Vulnerability Microsoft / Edge | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2016-7201](https://cubepath.com/security/cve/CVE-2016-7201) | Microsoft Edge Memory Corruption Vulnerability Microsoft / Edge | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2017-0037](https://cubepath.com/security/cve/CVE-2017-0037) | Microsoft Edge and Internet Explorer Type Confusion Vulnerability Microsoft / Edge and Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2017-0059](https://cubepath.com/security/cve/CVE-2017-0059) | Microsoft Internet Explorer Information Disclosure Vulnerability Microsoft / Internet Explorer | Mar 28, 2022 | Apr 18, 2022 | | | [CVE-2017-0213](https://cubepath.com/security/cve/CVE-2017-0213) | Microsoft Windows Privilege Escalation Vulnerability Microsoft / Windows | Mar 28, 2022 | Apr 18, 2022 | Known | | [CVE-2018-8405](https://cubepath.com/security/cve/CVE-2018-8405) | Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability Microsoft / DirectX Graphics Kernel (DXGKRNL) | Mar 28, 2022 | Apr 18, 2022 | Known | [Newer](https://cubepath.com/security/cve/kev?page=11) Page 12 of 18 [Older](https://cubepath.com/security/cve/kev?page=13) Data from the CVE Program (MITRE), CISA KEV and FIRST EPSS. CVSS is owned by FIRST and used by permission. Not affiliated with or endorsed by MITRE, CISA or FIRST. [Sources and licenses](https://cubepath.com/security/cve/legal)