CISA's list that day
4 May 2022
On CISA added 5 vulnerabilities to its list of exploited vulnerabilities, in OpenSSL, Microsoft Internet Explorer, Microsoft Win32k and 1 other product. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2014-0160Information Disclosure | OpenSSL OpenSSL | Patch this weekMetasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| CVE-2014-0322Use-After-Free | Microsoft Internet Explorer | Patch this weekMetasploit module; EPSS 0.85; verified Exploit-DB entry | 0.85 | ||
| CVE-2014-4113Privilege Escalation | Microsoft Win32k | Patch this weekMetasploit module; EPSS 0.87; verified Exploit-DB entry | 0.87 | ||
| CVE-2019-8506Type Confusion | Apple Multiple Products | Patch soonVerified Exploit-DB entry | 0.16 | ||
| CVE-2021-1789Type Confusion | Apple Multiple Products | Patch soon | 0.14 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.