Weekly briefing

Week 21 · 23 May – 29 May 2022 UTC · assess the changes, then plan the next dates.

All dated changes in this period

58 source records · 34 groups

23 May 2022

SecurityAndroid2 source records

Android · exploited, added to CISA KEV · 2 entries

Android Kernel Race Condition Vulnerability
Android · exploited, added to CISA KEV
CVE-2021-0920
Assessment context
CISA lists it as exploited
Android Kernel Use-After-Free Vulnerability
Android · exploited, added to CISA KEV
CVE-2021-1048
Assessment context
CISA lists it as exploited

23 May 2022

SecurityCisco

Cisco IOS XR Open Port Vulnerability

Cisco · exploited, added to CISA KEV

CVE-2022-20821

Assessment context

CISA lists it as exploited

23 May 2022

SecurityGoogle Chrome2 source records

Google · exploited, added to CISA KEV · 2 entries

Google Chrome Blink Use-After-Free Vulnerability
Google · exploited, added to CISA KEV
CVE-2019-5786
Assessment context
CISA lists it as exploited
Google Chrome WebAudio Use-After-Free Vulnerability
Google · exploited, added to CISA KEV
CVE-2019-13720
Assessment context
CISA lists it as exploited

23 May 2022

SecurityMozilla Firefox2 source records

Mozilla · exploited, added to CISA KEV · 2 entries

Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
Mozilla · exploited, added to CISA KEV
CVE-2019-11708
Assessment context
CISA lists it as exploited
Mozilla Firefox and Thunderbird Type Confusion Vulnerability
Mozilla · exploited, added to CISA KEV
CVE-2019-11707
Assessment context
CISA lists it as exploited

23 May 2022

SecurityiOS and iPadOS / macOS2 source records

Apple · exploited, added to CISA KEV · 2 entries

Apple Multiple Products Memory Corruption Vulnerability
Apple · exploited, added to CISA KEV
CVE-2019-7286
Assessment context
CISA lists it as exploited
Apple Multiple Products Memory Corruption Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-30883
Assessment context
CISA lists it as exploited

23 May 2022

SecurityiOS and iPadOS

Apple iOS Memory Corruption Vulnerability

Apple · exploited, added to CISA KEV

CVE-2019-7287

Assessment context

CISA lists it as exploited

23 May 2022

SecurityMicrosoft Internet Explorer Information Disclosure Vulnerability

Microsoft Internet Explorer Information Disclosure Vulnerability

Added to CISA KEV

CVE-2019-0676

Assessment context

CISA lists it as exploited

23 May 2022

SecurityMicrosoft Update Notification Manager Privilege Escalation Vulnerability

Microsoft Update Notification Manager Privilege Escalation Vulnerability

Added to CISA KEV

CVE-2020-0638

Assessment context

CISA lists it as exploited

23 May 2022

SecurityMicrosoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k Privilege Escalation Vulnerability

Added to CISA KEV

CVE-2018-8589

Assessment context

CISA lists it as exploited

23 May 2022

SecurityWindows5 source records

Added to CISA KEV · 5 entries

Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2019-1385
Assessment context
CISA lists it as exploited
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2019-1130
Assessment context
CISA lists it as exploited
Microsoft Windows Kernel Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2020-1027
Assessment context
CISA lists it as exploited

Show the other 2 entries

Microsoft Windows Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2019-0880
Assessment context
CISA lists it as exploited
Microsoft Windows SMB Information Disclosure Vulnerability
Added to CISA KEV
CVE-2019-0703
Assessment context
CISA lists it as exploited

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.