Exploit / PoCcriticalExploited in the wild

CISA added 7 new flaws to its Known Exploited Vulnerabilities Catalog

Security Affairsby @securityaffairsAug 20, 2022 · 16:56 UTC (Aug 20, 2022)2 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-22536 CVE-2022-32893 CVE-2022-32894 CVE-2022-2856 CVE-2022-21971 CVE-2022-26923 CVE-2017-15944

Tags: cve-2022-22536 cve-2022-32893 cve-2022-32894 cve-2022-2856 cve-2022-21971 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-15944	Unauthenticated Remote Code Execution in Palo Alto Networks PAN-OS	9.8	98%	KEVPoC ×2	Dec 11, 2017 KEV Aug 18, 2022
CVE-2022-21971	Uninitialized Pointer RCE in Windows Runtime on Windows 10/11 and Windows Server	7.8	54%	KEV	Feb 9, 2022 KEV Aug 18, 2022
CVE-2022-22536	HTTP Request Smuggling in SAP NetWeaver, Web Dispatcher and Content Server	10.0	98%	KEV	Feb 9, 2022 KEV Aug 18, 2022
CVE-2022-26923	Authenticated Privilege Escalation in Microsoft Active Directory Domain Services	8.8	84%	KEV	May 10, 2022 KEV Aug 18, 2022
CVE-2022-2856	Intents Input Validation Flaw in Google Chrome for Android (CVE-2022-2856)	6.5	5%	KEVPoC	Sep 26, 2022 KEV Aug 18, 2022
CVE-2022-32893 +1 related CVE CVE-2022-32894	Out-of-Bounds Write in Apple WebKit (iOS/macOS/Safari) Enables RCE	8.8 group max	10%	KEV	Aug 24, 2022 KEV Aug 18, 2022

From the original article

2 min read at securityaffairs.com

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) added 7 new flaws to its Known Exploited Vulnerabilities Catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.