CISA's list that day
6 April 2022
On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in Microsoft SMBv1 server, Sudo and Microsoft HTTP Protocol Stack. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2017-0148Remote Code Execution | Microsoft SMBv1 server | Patch this weekRansomware use; Metasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| CVE-2021-3156Heap-Based Buffer Overflow | Sudo Sudo | Patch this weekMetasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2021-31166Remote Code Execution | Microsoft HTTP Protocol Stack | Patch this weekMetasploit module; EPSS 0.99 | 0.99 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.