CISA Known Exploited Vulnerabilities
KEV additions — November 2023
18 CVEs entered the KEV catalog in November 2023.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added November 30, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-49103 | ownCloud graphapi Information Disclosure Vulnerability | 7.5 | 78.4 % | Dec 21, 2023 |
| CVE-2023-6345 | Google Skia Integer Overflow Vulnerability | 9.6 | 16.5 % | Dec 21, 2023 |
Added November 21, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-4911 | GNU C Library Buffer Overflow Vulnerability | 7.8 | 63.8 % | Dec 12, 2023 |
Added November 16, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2020-2551 | Oracle Fusion Middleware Unspecified Vulnerability | 9.8 | 92.8 % | Dec 7, 2023 |
| CVE-2023-1671 | Sophos Web Appliance Command Injection Vulnerability | 9.8 | 100.0 % | Dec 7, 2023 |
| CVE-2023-36584 | Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 5.4 | 3.3 % | Dec 7, 2023 |
Added November 14, 20233
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-36025 | Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 8.8 | 88.1 % | Dec 5, 2023 |
| CVE-2023-36033 | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 7.8 | 10.9 % | Dec 5, 2023 |
| CVE-2023-36036 | Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 7.8 | 16.7 % | Dec 5, 2023 |
Added November 13, 20236
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-36844 | Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | 5.3 | 90.0 % | Nov 17, 2023 |
| CVE-2023-36845 | Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | 9.8 | 95.1 % | Nov 17, 2023 |
| CVE-2023-36846 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 5.3 | 93.5 % | Nov 17, 2023 |
| CVE-2023-36847 | Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | 5.3 | 83.5 % | Nov 17, 2023 |
| CVE-2023-36851 | Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 5.3 | 1.1 % | Nov 17, 2023 |
| CVE-2023-47246ransomware | SysAid Server Path Traversal Vulnerability | 9.8 | 98.9 % | Dec 4, 2023 |
Added November 8, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-29552 | Service Location Protocol (SLP) Denial-of-Service Vulnerability | 7.5 | 64.0 % | Nov 29, 2023 |
Added November 7, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-22518ransomware | Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | 9.8 | 100.0 % | Nov 28, 2023 |
Added November 2, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-46604ransomware | Apache ActiveMQ Deserialization of Untrusted Data Vulnerability | 9.8 | 99.9 % | Nov 23, 2023 |