CISA's list that day
4 April 2022
On CISA added 4 vulnerabilities to its list of exploited vulnerabilities, in D-Link Multiple Routers, Apple macOS and VMware Spring Framework. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2022-22965JDK 9+ Remote Code Execution | VMware Spring Framework | Patch this weekMetasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2021-45382Remote Code Execution | D-Link Multiple Routers | Patch this weekEPSS 0.98 | 0.98 | ||
| CVE-2022-22675Out-of-Bounds Write | Apple macOS | Patch soon | 0.12 | ||
| CVE-2022-22674Out-of-Bounds Read | Apple macOS | Patch soon | 0.01 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.