CVEs published January 24 to January 30, 2022
498 CVEs were published Jan 24 to Jan 30, 2022, 17 of them critical. CISA added 8 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 498
- Critical
- 17
- Added to CISA KEV
- 8
- Busiest day
- Fri, Jan 28 (166)
- Quietest day
- Sat, Jan 29 (7)
- January 24, 202278 CVEs · 1 critical
- January 25, 2022102 CVEs · 2 critical
- January 26, 202251 CVEs · 1 critical
- January 27, 202287 CVEs · 2 critical
- January 28, 2022166 CVEs · 11 critical
- January 29, 20227 CVEs
- January 30, 20227 CVEs
Added to CISA KEV 8
- CVE-2014-1776Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial
- CVE-2014-6271GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac
- CVE-2014-7169GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variabl
- CVE-2017-5689An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology…Intel Active Mangement Technology, Intel Small Business Tec…
- CVE-2020-0787An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic lMicrosoft Windows
- CVE-2020-5722The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request.Grandstream UCM6200 Series
- CVE-2021-20038A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticSonicWall SMA100
- CVE-2022-22587A memory corruption issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS