The CISA KEV Catalogue, Searchable
Every flaw attackers are known to be using: what it is, how bad, and what fixes it.
- Flaws on the list
- 1,779
- Added in 30 days
- 40
- Used in ransomware
- 361
- In web & server software
- 181
13 Feb 2024 Microsoft Windows Security flaw
Internet Shortcut Files Security Feature Bypass Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 23h2 10.0.25398.709, microsoft windows server 2022 10.0.20348.2322, microsoft windows server 2019 10.0.17763.5458, microsoft windows 11 23h2 10.0.22631.3155, microsoft windows 11 22h2 10.0.22621.3155 and 4 older
- CISA due date
- 5 Mar 2024
- Weakness
- CWE-693
13 Feb 2024 Microsoft Windows Remote code execution
Windows SmartScreen Security Feature Bypass Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 23h2 10.0.25398.709, microsoft windows server 2022 10.0.20348.2322, microsoft windows server 2019 10.0.17763.5458, microsoft windows 11 23h2 10.0.22631.3155, microsoft windows 11 22h2 10.0.22621.3155 and 6 older
- CISA due date
- 5 Mar 2024
- Weakness
- CWE-94
12 Feb 2024 Roundcube Webmail Cross-site scripting
Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- roundcube webmail 1.6.3, roundcube webmail 1.5.4, roundcube webmail 1.4.14
- CISA due date
- 4 Mar 2024
- Weakness
- CWE-79
9 Feb 2024 Fortinet FortiOS Memory corruption
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- fortinet fortiproxy 7.4.3, fortinet fortios 7.4.3, fortinet fortiproxy 7.2.9, fortinet fortios 7.2.7, fortinet fortiproxy 7.0.15 and 5 older
- CISA due date
- 16 Feb 2024
- Weakness
- CWE-787
6 Feb 2024 Google Chromium V8 Memory corruption
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- google chrome 116.0.5845.179, microsoft edge chromium 116.0.1938.76
- CISA due date
- 27 Feb 2024
- Weakness
- CWE-843
31 Jan 2024 Ivanti Connect Secure, Policy Secure, and Neurons Server-side request forgery
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 2 Feb 2024
- Weakness
- CWE-918
31 Jan 2024 Apple Multiple Products Race condition
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- apple ipados 16.2, apple iphone os 16.2, apple tvos 16.2, apple macos 13.1, apple watchos 9.2
- CISA due date
- 21 Feb 2024
- Weakness
- CWE-367
24 Jan 2024 Atlassian Confluence Data Center and Server Input validation flaw
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action. Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates. However, Atlassian recommends that customers take care to install the latest version to protect their instances from non-critical vulnerabilities outlined in Atlassian’s January Security Bulletin.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- atlassian confluence data center 8.5.4, atlassian confluence server 8.5.4
- CISA due date
- 14 Feb 2024
- Weakness
- CWE-74
23 Jan 2024 Apple Multiple Products Memory corruption
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was shipped in iOS 17.3 on January 22, 2024. This update brings that fix to devices that cannot update to the latest iOS version.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- apple safari 17.3, apple ipados 17.3, apple iphone os 17.3, apple tvos 17.3, apple ipados 16.7.5 and 7 older
- CISA due date
- 13 Feb 2024
- Weakness
- CWE-843
22 Jan 2024 VMware vCenter Server Memory corruption
vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds write potentially leading to remote code execution.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 12 Feb 2024
- Weakness
- CWE-787
18 Jan 2024 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication bypass
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- ivanti endpoint manager mobile 11.11.0
- CISA due date
- 8 Feb 2024
- Weakness
- CWE-287
17 Jan 2024 Google Chromium V8 Memory corruption
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- google chrome 120.0.6099.224, couchbase server 7.2.5
- CISA due date
- 7 Feb 2024
- Weakness
- CWE-787
17 Jan 2024 Citrix NetScaler ADC and NetScaler Gateway Memory corruption
Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- citrix netscaler application delivery controller 14.1-12.35, citrix netscaler gateway 14.1-12.35, citrix netscaler application delivery controller 13.1-51.15, citrix netscaler gateway 13.1-51.15, citrix netscaler application delivery controller 13.1-37.176 and 3 older
- CISA due date
- 7 Feb 2024
- Weakness
- CWE-119
17 Jan 2024 Citrix NetScaler ADC and NetScaler Gateway Remote code execution
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- citrix netscaler application delivery controller 14.1-12.35, citrix netscaler gateway 14.1-12.35, citrix netscaler application delivery controller 13.1-51.15, citrix netscaler gateway 13.1-51.15, citrix netscaler application delivery controller 13.1-37.176 and 3 older
- CISA due date
- 24 Jan 2024
- Weakness
- CWE-94
16 Jan 2024 Laravel Framework Remote code execution
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in gadgetchains/Laravel/RCE/3/chain.php in phpggc. The attacker must know the application key, which normally would never occur, but could happen if the attacker previously had privileged access or successfully accomplished a previous attack.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 6 Feb 2024
- Weakness
- CWE-502
10 Jan 2024 Ivanti Connect Secure and Policy Secure Command injection
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 22 Jan 2024
- Weakness
- CWE-77
10 Jan 2024 Ivanti Connect Secure and Policy Secure Authentication bypass
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 22 Jan 2024
- Weakness
- CWE-287
10 Jan 2024 Microsoft SharePoint Server Security flaw
Microsoft SharePoint Server Elevation of Privilege Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 31 Jan 2024
- Weakness
- CWE-303
8 Jan 2024 Apple Multiple Products Security flaw
The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- apple ipados 16.3, apple iphone os 16.3, apple tvos 16.3, apple ipados 15.7.8, apple iphone os 15.7.8 and 4 older
- CISA due date
- 29 Jan 2024
8 Jan 2024 Adobe ColdFusion Remote code execution
Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 29 Jan 2024
- Weakness
- CWE-502
8 Jan 2024 Adobe ColdFusion Remote code execution
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 29 Jan 2024
- Weakness
- CWE-502
8 Jan 2024 Apache Superset Security flaw
Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config. All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database. Add a strong SECRET_KEY to your `superset_config.py` file like: SECRET_KEY = <YOUR_OWN_RANDOM_GENERATED_SECRET_KEY> Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 29 Jan 2024
- Weakness
- CWE-1188
8 Jan 2024 Joomla! Access control flaw
An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- joomla! 4.2.8
- CISA due date
- 29 Jan 2024
- Weakness
- CWE-284
On Hacker News
Joomla CVE-2023-23752 to Code Execution8 Jan 2024 D-Link DSL-2750B Devices Command injection
D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- dlink dsl-2750b firmware 1.05
- CISA due date
- 29 Jan 2024
- Weakness
- CWE-77
2 Jan 2024 Spreadsheet::ParseExcel Remote code execution
Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 23 Jan 2024
- Weakness
- CWE-95
2 Jan 2024 Google Chromium WebRTC Memory corruption
Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- google chrome 120.0.6099.129
- CISA due date
- 23 Jan 2024
- Weakness
- CWE-787
21 Dec 2023 FXC AE1021, AE1021PE Command injection
An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- fxc ae1021pe firmware 2.0.10, fxc ae1021 firmware 2.0.10
- CISA due date
- 11 Jan 2024
- Weakness
- CWE-78
21 Dec 2023 QNAP VioStor NVR Command injection
An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QVR Firmware 5.0.0 and later
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- qnap qvr firmware 5.0.0
- CISA due date
- 11 Jan 2024
- Weakness
- CWE-78
11 Dec 2023 Unitronics Vision PLC and HMI Authentication bypass
Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- unitronics vision1210 firmware 12.38, unitronics vision1040 firmware 12.38, unitronics vision700 firmware 12.38, unitronics vision570 firmware 12.38, unitronics vision560 firmware 12.38 and 7 older
- CISA due date
- 18 Dec 2023
- Weakness
- CWE-1188
7 Dec 2023 Qlik Sense Path traversal
A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous session. This allows them to transmit HTTP requests to unauthorized endpoints. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.
- What to do
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- CISA due date
- 28 Dec 2023
- Weakness
- CWE-20
7 Dec 2023 Qlik Sense Input validation flaw
An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunneling HTTP requests in the raw HTTP request. This allows them to send requests that get executed by the backend server hosting the repository application. This is fixed in August 2023 IR, May 2023 Patch 4, February 2023 Patch 8, November 2022 Patch 11, and August 2022 Patch 13.
- What to do
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- CISA due date
- 28 Dec 2023
- Weakness
- CWE-444
5 Dec 2023 Qualcomm Multiple Chipsets Memory corruption
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
- What to do
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- CISA due date
- 26 Dec 2023
- Weakness
- CWE-190
5 Dec 2023 Qualcomm Multiple Chipsets Memory corruption
Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
- What to do
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- CISA due date
- 26 Dec 2023
- Weakness
- CWE-823
5 Dec 2023 Qualcomm Multiple Chipsets Memory corruption
Memory corruption in DSP Services during a remote call from HLOS to DSP.
- What to do
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- CISA due date
- 26 Dec 2023
- Weakness
- CWE-416
5 Dec 2023 Qualcomm Multiple Chipsets Memory corruption
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
- What to do
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- CISA due date
- 26 Dec 2023
- Weakness
- CWE-416
4 Dec 2023 Apple Multiple Products Memory corruption
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.
- What to do
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- Fixed in (NVD)
- apple safari 17.1.2, apple ipados 17.1.2, apple iphone os 17.1.2, apple ipados 16.7.3, apple iphone os 16.7.3 and 4 older
- CISA due date
- 25 Dec 2023
- Weakness
- CWE-787
4 Dec 2023 Apple Multiple Products Memory corruption
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.
- What to do
- Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
- Fixed in (NVD)
- apple safari 17.1.2, apple ipados 17.1.2, apple iphone os 17.1.2, apple ipados 16.7.3, apple iphone os 16.7.3 and 4 older
- CISA due date
- 25 Dec 2023
- Weakness
- CWE-125
30 Nov 2023 Google Chromium Skia Memory corruption
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- google chrome 119.0.6045.199, microsoft edge chromium 119.0.2151.97
- CISA due date
- 21 Dec 2023
- Weakness
- CWE-190
30 Nov 2023 ownCloud graphapi Information disclosure
An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key. Simply disabling the graphapi app does not eliminate the vulnerability. Additionally, phpinfo exposes various other potentially sensitive configuration details that could be exploited by an attacker to gather information about the system. Therefore, even if ownCloud is not running in a containerized environment, this vulnerability should still be a cause for concern. Note that Docker containers from before February 2023 are not vulnerable to the credential disclosure.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 21 Dec 2023
- Weakness
- CWE-200
21 Nov 2023 GNU C Library Memory corruption
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- siemens simatic s7-1500 tm mfp firmware 1.1, gnu glibc 2.39
- CISA due date
- 12 Dec 2023
- Weakness
- CWE-122
16 Nov 2023 Microsoft Windows Security flaw
Windows Mark of the Web Security Feature Bypass Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.2031, microsoft windows server 2019 10.0.17763.4974, microsoft windows server 2016 10.0.14393.6351, microsoft windows 11 22h2 10.0.22621.2428, microsoft windows 11 21h2 10.0.22000.2538 and 4 older
- CISA due date
- 7 Dec 2023
16 Nov 2023 Sophos Web Appliance Command injection
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- sophos web appliance 4.3.10.4
- CISA due date
- 7 Dec 2023
- Weakness
- CWE-77
16 Nov 2023 Oracle Fusion Middleware Security flaw
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 7 Dec 2023
14 Nov 2023 Microsoft Windows Memory corruption
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.2113, microsoft windows server 2019 10.0.17763.5122, microsoft windows server 2016 10.0.14393.6452, microsoft windows 11 23h2 10.0.22621.2715, microsoft windows 11 22h2 10.0.22621.2715 and 6 older
- CISA due date
- 5 Dec 2023
- Weakness
- CWE-122
14 Nov 2023 Microsoft Windows Memory corruption
Windows DWM Core Library Elevation of Privilege Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 23h2 10.0.25398.531, microsoft windows server 2022 10.0.20348.2113, microsoft windows server 2019 10.0.17763.5122, microsoft windows 11 23h2 10.0.22621.2715, microsoft windows 11 22h2 10.0.22621.2715 and 4 older
- CISA due date
- 5 Dec 2023
- Weakness
- CWE-822
14 Nov 2023 Microsoft Windows Security flaw
Windows SmartScreen Security Feature Bypass Vulnerability
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- microsoft windows server 2022 10.0.20348.2113, microsoft windows server 2019 10.0.17763.5122, microsoft windows server 2016 10.0.14393.6452
- CISA due date
- 5 Dec 2023
13 Nov 2023 SysAid Server Path traversal
In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- sysaid 23.3.36
- CISA due date
- 4 Dec 2023
- Weakness
- CWE-22
13 Nov 2023 Juniper Junos OS Authentication bypass
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to upload and download arbitrary files via J-Web, leading to a loss of integrity or confidentiality, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on SRX Series: * 21.2 versions prior to 21.2R3-S8; * 21.4 versions prior to 21.4R3-S6; * 22.1 versions prior to 22.1R3-S5; * 22.2 versions prior to 22.2R3-S3; * 22.3 versions prior to 22.3R3-S2; * 22.4 versions prior to 22,4R2-S2, 22.4R3; * 23.2 versions prior to 23.2R1-S2, 23.2R2.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA due date
- 17 Nov 2023
- Weakness
- CWE-306
13 Nov 2023 Juniper Junos OS Authentication bypass
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on EX Series: * All versions prior to 20.4R3-S8; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S4; * 22.1 versions prior to 22.1R3-S3; * 22.2 versions prior to 22.2R3-S1; * 22.3 versions prior to 22.3R2-S2, 22.3R3; * 22.4 versions prior to 22.4R2-S1, 22.4R3.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- juniper junos 20.4
- CISA due date
- 17 Nov 2023
- Weakness
- CWE-306
13 Nov 2023 Juniper Junos OS Authentication bypass
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on SRX Series: * All versions prior to 20.4R3-S8; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S6; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S3; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3; * 22.4 versions prior to 22.4R2-S1, 22.4R3.
- What to do
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Fixed in (NVD)
- juniper junos 20.4
- CISA due date
- 17 Nov 2023
- Weakness
- CWE-306
Know when it's your software
Get an email within half an hour when a flaw in your software is added. Free.
About the KEV Catalogue
What is the CISA KEV catalogue?
CISA's list of flaws attackers are known to be using. A flaw is added only with reliable evidence of attacks and a known fix.
Why does it matter more than the CVSS score?
Few CVEs are ever used in attacks. These are, so fix them first, whatever their score.
What is the due date?
The deadline for US federal agencies to fix it (BOD 26-04, which replaced BOD 22-01): as little as three days for recent entries. A sensible deadline for anyone.
Does it apply outside the US?
The deadlines don't, but the flaws are in software used everywhere. If you run it, it applies to you.
What does "used in ransomware" mean?
CISA knows ransomware groups have used the flaw.
How often is it updated?
CISA adds flaws several times a week. CVE Hawk checks hourly and alerts you within half an hour if it's your software.