CISA's list that day

8 November 2022

On CISA added 7 vulnerabilities to its list of exploited vulnerabilities, in Samsung Mobile Devices and Microsoft Windows. The US federal deadlines run from to .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2022-41073Print Spooler Privilege EscalationMicrosoft WindowsPatch this weekRansomware use0.02
CVE-2022-41091Mark of the Web (MOTW) Security Feature BypassMicrosoft WindowsPatch this weekRansomware use0.02
CVE-2022-41128Scripting Languages Remote Code ExecutionMicrosoft WindowsPatch soon0.25
CVE-2022-41125CNG Key Isolation Service Privilege EscalationMicrosoft WindowsPatch soon0.03
CVE-2021-25337Improper Access ControlSamsung Mobile DevicesPatch soon0.03
CVE-2021-25369Improper Access ControlSamsung Mobile DevicesPatch soon0.01
CVE-2021-25370Memory CorruptionSamsung Mobile DevicesPatch soon0.01

Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.