CISA Known Exploited Vulnerabilities
KEV additions — December 2023
11 CVEs entered the KEV catalog in December 2023.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added December 21, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-47565 | QNAP VioStor NVR OS Command Injection Vulnerability | 8.8 | 73.3 % | Jan 11, 2024 |
| CVE-2023-49897 | FXC AE1021, AE1021PE OS Command Injection Vulnerability | 8.8 | 50.4 % | Jan 11, 2024 |
Added December 11, 20231
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-6448 | Unitronics Vision PLC and HMI Insecure Default Password Vulnerability | 9.8 | 2.1 % | Dec 18, 2023 |
Added December 7, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-41265ransomware | Qlik Sense HTTP Tunneling Vulnerability | 9.9 | 88.2 % | Dec 28, 2023 |
| CVE-2023-41266ransomware | Qlik Sense Path Traversal Vulnerability | 6.5 | 84.8 % | Dec 28, 2023 |
Added December 5, 20234
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-22071 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 7.8 | 0.4 % | Dec 26, 2023 |
| CVE-2023-33063 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 7.8 | 0.7 % | Dec 26, 2023 |
| CVE-2023-33106 | Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability | 7.8 | 0.8 % | Dec 26, 2023 |
| CVE-2023-33107 | Qualcomm Multiple Chipsets Integer Overflow Vulnerability | 7.8 | 0.7 % | Dec 26, 2023 |
Added December 4, 20232
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-42916 | Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 6.5 | 17.8 % | Dec 25, 2023 |
| CVE-2023-42917 | Apple Multiple Products WebKit Memory Corruption Vulnerability | 8.8 | 9.3 % | Dec 25, 2023 |