CISA's list that day
25 April 2022
On CISA added 7 vulnerabilities to its list of exploited vulnerabilities, in Jenkins Script Security Plugin, Microsoft Win32k, Linux Kernel and 2 other products. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2019-1003029Sandbox Bypass | Jenkins Script Security Plugin | Patch this weekMetasploit module; EPSS 0.74 | 0.74 | ||
| CVE-2022-0847Privilege Escalation | Linux Kernel | Patch this weekMetasploit module; EPSS 0.93 | 0.93 | ||
| CVE-2022-29464Unrestrictive Upload of File | WSO2 Multiple Products | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2022-26904User Profile Service Privilege Escalation | Microsoft Windows | Patch this weekMetasploit module | 0.17 | ||
| CVE-2022-21919User Profile Service Privilege Escalation | Microsoft Windows | Patch soon | 0.02 | ||
| CVE-2021-40450Privilege Escalation | Microsoft Win32k | Patch soon | 0.02 | ||
| CVE-2021-41357Privilege Escalation | Microsoft Win32k | Patch soon | 0.02 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.