CVEs published February 7 to February 13, 2022
603 CVEs were published Feb 7 to Feb 13, 2022, 25 of them critical. CISA added 16 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 603
- Critical
- 25
- Added to CISA KEV
- 16
- Busiest day
- Wed, Feb 9 (269)
- Quietest day
- Sun, Feb 13 (9)
- February 7, 202250 CVEs · 2 critical
- February 8, 202241 CVEs
- February 9, 2022269 CVEs · 3 critical
- February 10, 202247 CVEs · 17 critical
- February 11, 2022163 CVEs · 3 critical
- February 12, 202224 CVEs
- February 13, 20229 CVEs
Added to CISA KEV 16
- CVE-2014-4404Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privil
- CVE-2015-1130The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileg
- CVE-2015-1635HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote a
- CVE-2015-2051The D-Link DIR-645 Wired/Wireless Router Rev.
- CVE-2016-3088The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTorg.apache.activemq:activemq-client
- CVE-2017-0144The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anMicrosoft Windows SMB
- CVE-2017-0145The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anMicrosoft Windows SMB
- CVE-2017-0262Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly Microsoft Office
- CVE-2017-0263The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, WindowMicrosoft Windows
- CVE-2017-10271Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security).Oracle WebLogic Server
- CVE-2017-8464Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, WindoMicrosoft Windows Shell
- CVE-2017-9791The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message tApache Software Foundation Apache Struts · org.apache.strut…
- CVE-2018-1000861A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/cororg.jenkins-ci.main:jenkins-core
- CVE-2020-0796A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requeMicrosoft Windows
- CVE-2021-36934Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-22620A use after free issue was addressed with improved memory management.Apple Safari · Apple macOS