CISA Known Exploited Vulnerabilities
KEV additions — September 2023
17 CVEs entered the KEV catalog in September 2023.
Added September 28, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-14667 | Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | 9.8 | 89.4 % | October 19, 2023 |
Added September 25, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-41991 | Apple Multiple Products Improper Certificate Validation Vulnerability | 5.5 | 3.2 % | October 16, 2023 |
| CVE-2023-41992 | Apple Multiple Products Kernel Privilege Escalation Vulnerability | 7.8 | 1.3 % | October 16, 2023 |
| CVE-2023-41993 | Apple Multiple Products WebKit Code Execution Vulnerability | 8.8 | 21.7 % | October 16, 2023 |
Added September 21, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability | 7.2 | 2.3 % | October 12, 2023 |
Added September 19, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-28434 | MinIO Security Feature Bypass Vulnerability | 8.8 | 39.0 % | October 10, 2023 |
Added September 18, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2021-3129ransomware | Laravel Ignition File Upload Vulnerability | 9.8 | 94.3 % | October 9, 2023 |
| CVE-2022-22265 | Samsung Mobile Devices Use-After-Free Vulnerability | 7.8 | 0.2 % | October 9, 2023 |
Added September 14, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-26369 | Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability | 7.8 | 0.6 % | October 5, 2023 |
Added September 13, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-20269ransomware | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | 9.1 | 0.9 % | October 4, 2023 |
| CVE-2023-35674 | Android Framework Privilege Escalation Vulnerability | 7.8 | 0.1 % | October 4, 2023 |
| CVE-2023-4863 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | 8.8 | 93.6 % | October 4, 2023 |
Added September 12, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-36761 | Microsoft Word Information Disclosure Vulnerability | 6.5 | 7.3 % | October 3, 2023 |
| CVE-2023-36802 | Microsoft Streaming Service Proxy Privilege Escalation Vulnerability | 7.8 | 75.4 % | October 3, 2023 |
Added September 11, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-41061 | Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability | 7.8 | 1.0 % | October 2, 2023 |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability | 7.8 | 85.4 % | October 2, 2023 |
Added September 6, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-33246 | Apache RocketMQ Command Execution Vulnerability | 9.8 | 94.4 % | September 27, 2023 |