CISA Known Exploited Vulnerabilities
KEV additions — December 2023
11 CVEs entered the KEV catalog in December 2023.
Added December 21, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-47565 | QNAP VioStor NVR OS Command Injection Vulnerability | 8.8 | 86.0 % | January 11, 2024 |
| CVE-2023-49897 | FXC AE1021, AE1021PE OS Command Injection Vulnerability | 8.8 | 33.6 % | January 11, 2024 |
Added December 11, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-6448 | Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | 9.8 | 13.3 % | December 18, 2023 |
Added December 7, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-41265ransomware | Qlik Sense HTTP Tunneling Vulnerability | 9.9 | 92.5 % | December 28, 2023 |
| CVE-2023-41266ransomware | Qlik Sense Path Traversal Vulnerability | 6.5 | 94.3 % | December 28, 2023 |
Added December 5, 20234
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-22071 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 7.8 | 0.6 % | December 26, 2023 |
| CVE-2023-33063 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 7.8 | 0.4 % | December 26, 2023 |
| CVE-2023-33106 | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | 7.8 | 0.2 % | December 26, 2023 |
| CVE-2023-33107 | Qualcomm Multiple Chipsets Integer Overflow Vulnerability | 7.8 | 0.3 % | December 26, 2023 |
Added December 4, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-42916 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 6.5 | 0.0 % | December 25, 2023 |
| CVE-2023-42917 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 8.8 | 0.1 % | December 25, 2023 |