CVEs published April 4 to April 10, 2022
435 CVEs were published Apr 4 to Apr 10, 2022, 15 of them critical. CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 435
- Critical
- 15
- Added to CISA KEV
- 7
- Busiest day
- Tue, Apr 5 (120)
- Quietest day
- Sat, Apr 9 (7)
- April 4, 2022106 CVEs · 6 critical
- April 5, 2022120 CVEs · 1 critical
- April 6, 202259 CVEs · 5 critical
- April 7, 202246 CVEs · 1 critical
- April 8, 202258 CVEs · 1 critical
- April 9, 20227 CVEs
- April 10, 202239 CVEs · 1 critical
Added to CISA KEV 7
- CVE-2021-45382A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-
- CVE-2022-22674An out-of-bounds read issue existed that led to the disclosure of kernel memory.Apple macOS
- CVE-2022-22675An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +1
- CVE-2022-22965A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.Spring Framework · org.springframework:spring-beans +4
- CVE-2017-0148The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anMicrosoft Windows SMB
- CVE-2021-31166HTTP Protocol Stack Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2021-3156Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root