CISA's list that day
25 February 2022
On CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Windows, Microsoft Internet Explorer, Microsoft Office and 1 other product. The US federal deadlines run from to .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2014-6352Code Injection | Microsoft Windows | Patch this weekMetasploit module; EPSS 0.77; verified Exploit-DB entry | 0.77 | ||
| CVE-2017-8570Remote Code Execution | Microsoft Office | Patch this weekEPSS 0.90 | 0.90 | ||
| CVE-2022-24682Cross-Site Scripting | Synacor Zimbra Collaborate Suite (ZCS) | Patch this weekRansomware use | 0.31 | ||
| CVE-2017-0222Remote Code Execution | Microsoft Internet Explorer | Patch soon | 0.30 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.