CISA Known Exploited Vulnerabilities
KEV additions — January 2024
21 CVEs entered the KEV catalog in January 2024.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added January 31, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-48618 | Apple Multiple Products Memory Corruption Vulnerability | 7 | 0.5 % | Feb 21, 2024 |
| CVE-2024-21893ransomware | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability | 8.2 | 100.0 % | Feb 2, 2024 |
Added January 24, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-22527ransomware | Atlassian Confluence Data Center and Server Template Injection Vulnerability | 9.8 | 100.0 % | Feb 14, 2024 |
Added January 23, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2024-23222 | Apple Multiple Products WebKit Type Confusion Vulnerability | 8.8 | 10.6 % | Feb 13, 2024 |
Added January 22, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-34048 | VMware vCenter Server Out-of-Bounds Write Vulnerability | 9.8 | 99.4 % | Feb 12, 2024 |
Added January 18, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-35082ransomware | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | 9.8 | 100.0 % | Feb 8, 2024 |
Added January 17, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 8.8 | 3.2 % | Jan 24, 2024 |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 7.5 | 57.6 % | Feb 7, 2024 |
| CVE-2024-0519 | Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | 8.8 | 3.8 % | Feb 7, 2024 |
Added January 16, 20241
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-15133 | Laravel Deserialization of Untrusted Data Vulnerability | 8.1 | 76.6 % | Feb 6, 2024 |
Added January 10, 20243
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-29357ransomware | Microsoft SharePoint Server Privilege Escalation Vulnerability | 9.8 | 100.0 % | Jan 31, 2024 |
| CVE-2023-46805ransomware | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability | 8.2 | 100.0 % | Jan 22, 2024 |
| CVE-2024-21887ransomware | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | 9.1 | 100.0 % | Jan 22, 2024 |
Added January 8, 20246
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2016-20017 | D-Link DSL-2750B Devices Command Injection Vulnerability | 9.8 | 66.6 % | Jan 29, 2024 |
| CVE-2023-23752 | Joomla! Improper Access Control Vulnerability | 5.3 | 99.8 % | Jan 29, 2024 |
| CVE-2023-27524 | Apache Superset Insecure Default Initialization of Resource Vulnerability | 9.8 | 97.4 % | Jan 29, 2024 |
| CVE-2023-29300ransomware | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 9.8 | 100.0 % | Jan 29, 2024 |
| CVE-2023-38203ransomware | Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 9.8 | 97.1 % | Jan 29, 2024 |
| CVE-2023-41990 | Apple Multiple Products Code Execution Vulnerability | 7.8 | 1.4 % | Jan 29, 2024 |
Added January 2, 20242
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2023-7024 | Google Chromium WebRTC Heap Buffer Overflow Vulnerability | 8.8 | 6.7 % | Jan 23, 2024 |
| CVE-2023-7101 | Spreadsheet::ParseExcel Remote Code Execution Vulnerability | 7.8 | 19.0 % | Jan 23, 2024 |