CISA's list that day
18 August 2022
On CISA added 7 vulnerabilities to its list of exploited vulnerabilities, in Palo Alto Networks PAN-OS, Google Chromium Intents, Microsoft Windows and 3 other products. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2017-15944Remote Code Execution | Palo Alto Networks PAN-OS | Patch this weekMetasploit module; EPSS 0.98; verified Exploit-DB entry | 0.98 | ||
| CVE-2022-26923Domain Services Privilege Escalation | Microsoft Active Directory | Patch this weekMetasploit module; EPSS 0.84 | 0.84 | ||
| CVE-2022-22536HTTP Request Smuggling | SAP Multiple Products | Patch this weekEPSS 0.98 | 0.98 | ||
| CVE-2022-21971Runtime Remote Code Execution | Microsoft Windows | Patch this weekEPSS 0.54 | 0.54 | ||
| CVE-2022-32893Out-of-Bounds Write | Apple iOS and macOS | Patch soon | 0.10 | ||
| CVE-2022-2856Insufficient Input Validation | Google Chromium Intents | Patch soon | 0.05 | ||
| CVE-2022-32894Out-of-Bounds Write | Apple iOS and macOS | Patch soon | 0.03 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.