KEV 2022

Cisco SD-WAN CLI — Relative Path Traversal to Root, Re-Weaponised by UAT-8616 via Deliberate Firmware Downgrade in 2026 Campaign

Apple Multiple Products — Apple Multiple Products Unspecified Vulnerability

D-Link DNR-322L — D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

Hitachi Vantara Pentaho Business Analytics (BA) Server — Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

Hitachi Vantara Pentaho Business Analytics (BA) Server — Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

Audinate Dante Discovery — Dante Discovery Process Control Vulnerability

Linux Kernel — fsconfig Integer Underflow Allows Heap Overflow and Privilege Escalation via User Namespaces

Microsoft Windows — Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Apple Multiple Products — Apple Multiple Products Memory Corruption Vulnerability

Qualcomm Multiple Chipsets — Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Google Chromium Network Service — Google Chromium Network Service Use-After-Free Vulnerability

Arm Mali Graphics Processing Unit (GPU) — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

Apache Spark — Apache Spark Command Injection Vulnerability

Arm Mali Graphics Processing Unit (GPU) — Arm Mali GPU Kernel Driver Unspecified Vulnerability

ZK Framework AuUploader — ZK Framework AuUploader Unspecified Vulnerability

TerraMaster TerraMaster OS — TerraMaster OS Remote Command Execution Vulnerability

Microsoft Exchange Server — Microsoft Exchange Server Privilege Escalation Vulnerability

Apple iOS — Apple iOS Type Confusion Vulnerability

Veeam Backup & Replication — Veeam Backup & Replication Remote Code Execution Vulnerability

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

Microsoft Windows — Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

Apple iOS and iPadOS — Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

Microsoft Windows COM+ Event System Service — Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

Atlassian Bitbucket Server and Data Center — Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

Microsoft Exchange Server — Microsoft Exchange Server Server-Side Request Forgery Vulnerability

Microsoft Exchange Server — Microsoft Exchange Server Remote Code Execution Vulnerability

Apple iOS, iPadOS, and macOS — Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

Microsoft Windows — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Trend Micro Apex One and Apex One as a Service — Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

WebRTC WebRTC — WebRTC Heap Buffer Overflow Vulnerability

Microsoft Active Directory — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Apple iOS and macOS — Apple iOS and macOS Out-of-Bounds Write Vulnerability

Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

Microsoft Windows — Microsoft Windows Runtime Remote Code Execution Vulnerability

Apple iOS and macOS — Apple iOS and macOS Out-of-Bounds Write Vulnerability

Microsoft Windows — Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

RARLAB UnRAR — RARLAB UnRAR Directory Traversal Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Microsoft Windows — Microsoft Windows LSA Spoofing Vulnerability

Microsoft Windows — Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

Microsoft Windows 'Follina' — MSDT URL Handler Invoked by Office Documents Allows Code Execution Without Macros

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

WatchGuard Firebox and XTM — WatchGuard Firebox and XTM Privilege Escalation Vulnerability

Linux Kernel 'Dirty Pipe' — Uninitialized Pipe Buffer Flag Permits Page Cache Overwrite for Local Privilege Escalation

Microsoft Windows — Microsoft Windows Print Spooler Privilege Escalation Vulnerability

VMware Multiple Products — VMware Multiple Products Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

Apple macOS — Apple macOS Out-of-Bounds Write Vulnerability

Microsoft Windows — Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft Windows — Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Google Chromium V8 — Google Chromium V8 Type Confusion Vulnerability

Mozilla Firefox — Mozilla Firefox Use-After-Free Vulnerability

Microsoft Windows — Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Google Chromium Animation — Google Chromium Animation Use-After-Free Vulnerability

Apple iOS, iPadOS, and macOS — Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

Microsoft Win32k — Microsoft Win32k Privilege Escalation Vulnerability