CISA's list that day
15 March 2022
On CISA added 15 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Win32k, Microsoft Windows, Microsoft Task Scheduler and 1 other product. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2018-8120Privilege Escalation | Microsoft Win32k | Patch this weekRansomware use; Metasploit module; EPSS 0.73; verified Exploit-DB entry | 0.73 | ||
| CVE-2019-0841AppX Deployment Service (AppXSVC) Privilege Escalation | Microsoft Windows | Patch this weekRansomware use; Metasploit module; verified Exploit-DB entry | 0.41 | ||
| CVE-2019-1405Universal Plug and Play (UPnP) Service Privilege Escalation | Microsoft Windows | Patch this weekRansomware use; Metasploit module; verified Exploit-DB entry | 0.30 | ||
| CVE-2019-1322Privilege Escalation | Microsoft Windows | Patch this weekRansomware use; Metasploit module; verified Exploit-DB entry | 0.19 | ||
| CVE-2019-0543Privilege Escalation | Microsoft Windows | Patch this weekRansomware use; verified Exploit-DB entry | 0.05 | ||
| CVE-2017-0101Transaction Manager Privilege Escalation | Microsoft Windows | Patch this weekRansomware use; EPSS 0.57 | 0.57 | ||
| CVE-2016-3309Kernel Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.20 | ||
| CVE-2020-5135Buffer Overflow | SonicWall SonicOS | Patch this weekRansomware use | 0.27 | ||
| CVE-2015-2546Memory Corruption | Microsoft Win32k | Patch this weekRansomware use | 0.10 | ||
| CVE-2019-1253AppX Deployment Server Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.12 | ||
| CVE-2019-1064AppX Deployment Service (AppXSVC) Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.07 | ||
| CVE-2019-1069Privilege Escalation | Microsoft Task Scheduler | Patch this weekRansomware use | 0.06 | ||
| CVE-2019-1315Error Reporting Manager Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.03 | ||
| CVE-2019-1129AppX Deployment Service (AppXSVC) Privilege Escalation | Microsoft Windows | Patch this weekRansomware use | 0.02 | ||
| CVE-2019-1132Privilege Escalation | Microsoft Win32k | Patch soon | 0.10 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.