CVEs published May 23 to May 29, 2022
405 CVEs were published May 23 to May 29, 2022, 17 of them critical. CISA added 75 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 405
- Critical
- 17
- Added to CISA KEV
- 75
- Busiest day
- Thu, May 26 (157)
- Quietest day
- Sat, May 28 (0)
- May 23, 202247 CVEs · 3 critical
- May 24, 202280 CVEs · 2 critical
- May 25, 202256 CVEs · 5 critical
- May 26, 2022157 CVEs · 6 critical
- May 27, 202260 CVEs · 1 critical
- May 28, 20220 CVEs
- May 29, 20225 CVEs
Added to CISA KEV 75
- CVE-2018-5002Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability.Adobe Flash Player 29.0.0.171 and earlier versions
- CVE-2018-8589An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of PrivileMicrosoft Windows Server · Microsoft Windows
- CVE-2019-0676An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.An attacker who successfully explMicrosoft Internet Explorer
- CVE-2019-0703An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB InformationMicrosoft Windows
- CVE-2019-0880A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of PrivilegMicrosoft Windows Server · Microsoft Windows
- CVE-2019-1130An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows ElMicrosoft Windows Server · Microsoft Windows
- CVE-2019-11707A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2019-11708Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxeMozilla Firefox ESR · Mozilla Firefox +1
- CVE-2019-13720Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2019-1385An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resultiMicrosoft Windows
- CVE-2019-18426A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-sFacebook WhatsApp Desktop
- CVE-2019-5786Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memoryGoogle Chrome · puppeteer
- CVE-2019-7286A memory corruption issue was addressed with improved input validation.Apple iOS · Apple macOS
- CVE-2019-7287A memory corruption issue was addressed with improved input validation.Apple iOS
- CVE-2019-8720A vulnerability was found in WebKit.webkitgtk
- CVE-2020-0638An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an atMicrosoft Windows
- CVE-2020-1027An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation oMicrosoft Windows
- CVE-2021-0920In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition.Android
- CVE-2021-1048In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free.Android
- CVE-2021-30883A memory corruption issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2022-20821Cisco IOS XR Software Health Check Open Port VulnerabilityCisco IOS XR Software
- CVE-2016-0162Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Inter
- CVE-2016-3298Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Window
- CVE-2016-3351Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, a
- CVE-2016-4655The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
- CVE-2016-4656The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory
- CVE-2016-4657WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cr
- CVE-2016-6366Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V,
- CVE-2016-6367Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain pri
- CVE-2017-0005The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Microsoft Windows GDI
Showing the first 30. Browse the whole KEV catalog.