Vulnerabilitycritical
CISA adds Google, Microsoft and QNAP bugs to exploited vulnerabilities list
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-11317 | Unrestricted File Upload / RCE in Progress Telerik UI for ASP.NET AJAX | 9.8 | 84% | KEVPoC ×2 | KEV |
| CVE-2020-2509 | Command Injection RCE in QNAP Network-Attached Storage (NAS) | 9.8 | 34% | KEV | KEV |
| CVE-2021-22600 | Double-Free Privilege Escalation in Linux Kernel af_packet (CVE-2021-22600) | 7.0 | 7% | KEV | KEV |
| CVE-2021-27852 | Unauthenticated Deserialization RCE in Checkbox Survey 6 and Earlier | 9.8 | 30% | KEV | KEV |
| CVE-2021-39793 | Out-of-Bounds Write in Google Pixel Kernel Driver Enables Local Privilege Escalation | 7.8 | <1% | KEV | KEV |
CVE-2021-42287+1 related CVE | Privilege Escalation in Microsoft Active Directory Domain Services | 7.5 | 77% | KEVRansomware | KEV |
| CVE-2022-23176 | Privilege Escalation in WatchGuard Firebox/XTM Fireware OS | 8.8 | 11% | KEV | KEV |
From the original article
2 min read at therecord.media
CISA added eight vulnerabilities to its catalog of exploited bugs on Monday, with each given a remediation date of May 2. All of the issues have patches or updates available except for CVE-2021-27852 – a deserialization of untrusted data vulnerability affecting Checkbox, a digital survey tool.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.