CISA Known Exploited Vulnerabilities
KEV additions — September 2023
17 CVEs entered the KEV catalog in September 2023.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added September 28, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-14667 | Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | 9.8 | 74.2 % | Oct 19, 2023 |
Added September 25, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-41991 | Apple Multiple Products Improper Certificate Validation Vulnerability | 5.5 | 13.4 % | Oct 16, 2023 |
| CVE-2023-41992 | Apple Multiple Products Kernel Privilege Escalation Vulnerability | 7.8 | 9.5 % | Oct 16, 2023 |
| CVE-2023-41993 | Apple Multiple Products WebKit Code Execution Vulnerability | 8.8 | 24.3 % | Oct 16, 2023 |
Added September 21, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | 7.2 | 4.3 % | Oct 12, 2023 |
Added September 19, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-28434 | MinIO Security Feature Bypass Vulnerability | 8.8 | 7.9 % | Oct 10, 2023 |
Added September 18, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-3129ransomware | Laravel Ignition File Upload Vulnerability | 9.8 | 99.9 % | Oct 9, 2023 |
| CVE-2022-22265 | Samsung Mobile Devices Use-After-Free Vulnerability | 7.8 | 0.4 % | Oct 9, 2023 |
Added September 14, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-26369 | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | 7.8 | 6.7 % | Oct 5, 2023 |
Added September 13, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-20269ransomware | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | 9.1 | 25.5 % | Oct 4, 2023 |
| CVE-2023-35674 | Android Framework Privilege Escalation Vulnerability | 7.8 | 2.6 % | Oct 4, 2023 |
| CVE-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | 8.8 | 100.0 % | Oct 4, 2023 |
Added September 12, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-36761 | Microsoft Word Information Disclosure Vulnerability | 6.5 | 19.6 % | Oct 3, 2023 |
| CVE-2023-36802 | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | 7.8 | 27.9 % | Oct 3, 2023 |
Added September 11, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-41061 | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | 7.8 | 4.4 % | Oct 2, 2023 |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | 7.8 | 53.4 % | Oct 2, 2023 |
Added September 6, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-33246 | Apache RocketMQ Command Execution Vulnerability | 9.8 | 96.6 % | Sep 27, 2023 |