CISA's list that day
30 March 2023
On CISA added 9 vulnerabilities to its list of exploited vulnerabilities, in Microsoft Internet Explorer, Samba, Apple iOS, iPadOS, and macOS and 4 other products. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2013-3163Memory Corruption | Microsoft Internet Explorer | Patch this weekMetasploit module; EPSS 0.71; verified Exploit-DB entry | 0.71 | ||
| CVE-2017-7494Remote Code Execution | Samba Samba | Patch this weekRansomware use; Metasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| CVE-2022-39197Teamserver Cross-Site Scripting (XSS) | Fortra Cobalt Strike | Patch soon | 0.46 | ||
| CVE-2022-3038Use-After-Free | Google Chromium Network Service | Patch soon | 0.25 | ||
| CVE-2022-38181Mali GPU Kernel Driver Use-After-Free | Arm Mali Graphics Processing Unit (GPU) | Patch soon | 0.14 | ||
| CVE-2021-30900Out-of-Bounds Write | Apple iOS, iPadOS, and macOS | Patch soon | 0.05 | ||
| CVE-2023-0266Use-After-Free | Linux Kernel | Patch soon | 0.04 | ||
| CVE-2022-42948User Interface Remote Code Execution | Fortra Cobalt Strike | Patch soon | 0.03 | ||
| CVE-2022-22706Mali GPU Kernel Driver Unspecified | Arm Mali Graphics Processing Unit (GPU) | Patch soon | 0.01 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.