CISA Known Exploited Vulnerabilities
KEV additions — January 2024
21 CVEs entered the KEV catalog in January 2024.
Added January 31, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-48618 | Apple Multiple Products Memory Corruption Vulnerability | 7 | 0.2 % | February 21, 2024 |
| CVE-2024-21893ransomware | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | 8.2 | 94.3 % | February 2, 2024 |
Added January 24, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-22527ransomware | Atlassian Confluence Data Center and Server Template Injection Vulnerability | 9.8 | 94.4 % | February 14, 2024 |
Added January 23, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-23222 | Apple Multiple Products WebKit Type Confusion Vulnerability | 8.8 | 0.2 % | February 13, 2024 |
Added January 22, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-34048 | VMware vCenter Server Out-of-Bounds Write Vulnerability | 9.8 | 93.1 % | February 12, 2024 |
Added January 18, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-35082ransomware | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | 9.8 | 94.4 % | February 8, 2024 |
Added January 17, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 8.8 | 8.6 % | January 24, 2024 |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 7.5 | 78.6 % | February 7, 2024 |
| CVE-2024-0519 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | 8.8 | 0.4 % | February 7, 2024 |
Added January 16, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-15133 | Laravel Deserialization of Untrusted Data Vulnerability | 8.1 | 86.0 % | February 6, 2024 |
Added January 10, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-29357ransomware | Microsoft SharePoint Server Privilege Escalation Vulnerability | 9.8 | 94.4 % | January 31, 2024 |
| CVE-2023-46805ransomware | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | 8.2 | 94.4 % | January 22, 2024 |
| CVE-2024-21887ransomware | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | 9.1 | 94.4 % | January 22, 2024 |
Added January 8, 20246
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2016-20017 | D-Link DSL-2750B Devices Command Injection Vulnerability | 9.8 | 93.4 % | January 29, 2024 |
| CVE-2023-23752 | Joomla! Improper Access Control Vulnerability | 5.3 | 94.5 % | January 29, 2024 |
| CVE-2023-27524 | Apache Superset Insecure Default Initialization of Resource Vulnerability | 9.8 | 84.1 % | January 29, 2024 |
| CVE-2023-29300ransomware | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 9.8 | 93.8 % | January 29, 2024 |
| CVE-2023-38203ransomware | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 9.8 | 94.3 % | January 29, 2024 |
| CVE-2023-41990 | Apple Multiple Products Code Execution Vulnerability | 7.8 | 2.7 % | January 29, 2024 |
Added January 2, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-7024 | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | 8.8 | 2.9 % | January 23, 2024 |
| CVE-2023-7101 | Spreadsheet::ParseExcel Remote Code Execution Vulnerability | 7.8 | 16.7 % | January 23, 2024 |