Exploit / PoCcriticalExploited in the wild

CISA adds Chrome, Redis bugs to Known Exploited Vulnerabilities Catalog

Security Affairsby @securityaffairsMar 29, 2022 · 07:56 UTC (Mar 29, 2022)2 min read1

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-1096 CVE-2022-0543 CVE-2022-21999 CVE-2022-26318

Tags: cve-2022-1096 cve-2022-0543 cve-2022-21999 cve-2022-26318 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-0543	Lua Sandbox Escape in Debian-packaged Redis Enables Unauthenticated RCE	10.0	99%	KEVPoC	Feb 18, 2022 KEV Mar 28, 2022
CVE-2022-1096	Actively Exploited Type Confusion in Chromium V8 Engine (Chrome, Edge, Opera)	8.8	25%	KEV	Jul 23, 2022 KEV Mar 28, 2022
CVE-2022-21999	Local Privilege Escalation in Microsoft Windows Print Spooler (CISA KEV)	7.8	41%	KEVRansomware	Feb 9, 2022 KEV Mar 25, 2022
CVE-2022-26318	Unauthenticated RCE in WatchGuard Firebox and XTM Fireware OS	9.8	78%	KEV	Mar 4, 2022 KEV Mar 25, 2022

From the original article

2 min read at securityaffairs.com

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has added Chrome and Redis flaws to its Known Exploited Vulnerabilities Catalog .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.